$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer File: AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer (raw, json) Hash identifier: utwXFrcNlHZLZFBrAWSTqCbUd9Qa/yOiT0M68QRKbxQ= Subject key identifier: AF:1A:DF:58:3A:C5:00:30:27:28:1A:4E:CA:BF:7D:DE:3A:A3:5E:6E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5B6014249BCAFDD571D3C6E9F4B34A809482A944 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:40:47 +0000 Certificate not after: Sun 02 May 2027 01:45:47 +0000 Subordinate resources: IP: 103.83.198.0/24 IP: 2001:df7:fe00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:60:14:24:9b:ca:fd:d5:71:d3:c6:e9:f4:b3:4a:80:94:82:a9:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:40:47 2026 GMT Not After : May 2 01:45:47 2027 GMT Subject: CN=AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ad:63:ec:5a:17:b8:cb:5c:5b:44:a4:ad:ac: 2c:7d:41:f7:39:d5:71:2e:44:69:a6:22:a2:8b:33: 82:b3:ec:ab:b2:e6:f1:34:37:e9:2a:42:25:16:14: 26:16:cc:6f:e8:fa:e2:04:6a:75:0a:07:e1:55:dd: bf:3d:02:ca:6f:4e:c4:73:17:e5:b8:bc:02:8f:4a: b3:32:a9:76:e4:f2:3f:69:a2:69:b3:81:da:c5:f8: 40:5b:e0:44:4b:4a:02:c7:01:6e:a7:6b:9d:fa:65: 1c:6e:6d:f7:89:0e:0c:50:e3:aa:67:9a:9d:76:b3: 01:3c:4b:ae:b1:87:9c:ca:a9:5d:8e:bd:6c:33:14: 25:d1:e4:8f:cc:0d:24:9f:59:5d:e8:fd:39:e2:a8: 18:a4:8a:87:1c:2c:f8:c3:94:a4:6b:b9:3f:74:31: d7:18:a4:32:06:11:b1:bf:62:4f:e0:07:5f:53:7c: f7:b7:42:4e:a9:2a:5c:50:5b:c4:b4:c1:6f:c3:28: 0b:90:c4:a1:6d:cc:d9:b9:c2:32:88:ff:d0:1b:50: 7e:92:33:0e:93:7f:26:fd:f0:a1:2a:fc:97:72:84: 37:e9:8a:23:65:5f:6f:e3:51:40:b6:7f:5c:ad:34: 82:02:52:ea:1a:8f:e4:60:74:06:d8:09:4f:0f:46: ee:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:1A:DF:58:3A:C5:00:30:27:28:1A:4E:CA:BF:7D:DE:3A:A3:5E:6E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.83.198.0/24 IPv6: 2001:df7:fe00::/48 Signature Algorithm: sha256WithRSAEncryption 1a:dc:47:37:13:8f:d5:ef:34:15:2f:45:d1:16:42:38:8e:61: 04:b6:c2:42:0e:f8:bb:ff:22:c6:d2:2a:ba:5b:f9:7d:17:ed: da:45:b1:67:7d:2b:99:ac:ff:5e:b4:62:86:e0:3c:c1:95:1a: 73:80:a1:8c:2e:54:39:91:f5:ab:64:da:5b:e9:fa:4c:9c:65: de:88:2b:d8:94:9d:80:23:c5:96:be:8d:d5:1b:e2:5c:c4:94: f0:aa:9b:f6:ec:69:05:78:0f:e1:d0:e4:66:af:1e:6f:da:4d: 48:33:7d:1d:b4:57:43:5a:ae:bc:b2:ce:26:21:d7:b7:5c:df: 04:db:09:c8:7b:18:81:67:9d:e5:c2:73:8e:77:71:be:e7:f4: e6:4b:66:e4:6d:0f:07:80:27:b8:13:b7:61:88:3c:2b:bb:bc: 38:ca:12:8a:e0:5c:c5:1a:7a:b2:44:ca:f0:0f:18:c9:dc:1a: 32:7f:39:eb:36:40:4a:29:a1:94:93:57:56:ee:f9:8c:38:70: 41:50:8c:42:5f:8d:a5:74:d3:44:0c:58:5e:db:ba:40:6a:8d: ce:e8:34:5c:bb:53:4b:af:16:7a:55:db:5a:2a:9d:69:6a:ae: 0d:81:fa:ab:80:3e:9d:45:80:94:3c:e2:5f:8b:d2:45:8f:b1: 27:0e:c4:9f -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUW2AUJJvK/dVx08bp9LNKgJSCqUQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDA0N1oX DTI3MDUwMjAxNDU0N1owMzExMC8GA1UEAxMoQUYxQURGNTgzQUM1MDAzMDI3Mjgx QTRFQ0FCRjdEREUzQUEzNUU2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+tY+xaF7jLXFtEpK2sLH1B9znVcS5EaaYiooszgrPsq7Lm8TQ36SpCJRYU JhbMb+j64gRqdQoH4VXdvz0Cym9OxHMX5bi8Ao9KszKpduTyP2miabOB2sX4QFvg REtKAscBbqdrnfplHG5t94kODFDjqmeanXazATxLrrGHnMqpXY69bDMUJdHkj8wN JJ9ZXej9OeKoGKSKhxws+MOUpGu5P3Qx1xikMgYRsb9iT+AHX1N897dCTqkqXFBb xLTBb8MoC5DEoW3M2bnCMoj/0BtQfpIzDpN/Jv3woSr8l3KEN+mKI2Vfb+NRQLZ/ XK00ggJS6hqP5GB0BtgJTw9G7tkCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK8a31g6xQAwJygaTsq/fd46o15uMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2I0YmY4NjQxLWJmNzAtNGUzZi05ODcxLWVlMjZhMzNkYjNhMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iNGJmODY0 MS1iZjcwLTRlM2YtOTg3MS1lZTI2YTMzZGIzYTIvMC9BRjFBREY1ODNBQzUwMDMw MjcyODFBNEVDQUJGN0RERTNBQTM1RTZFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ1PGMA8EAgACMAkDBwAgAQ33/gAwDQYJKoZIhvcNAQELBQADggEBABrcRzcT j9XvNBUvRdEWQjiOYQS2wkIO+Lv/IsbSKrpb+X0X7dpFsWd9K5ms/160YobgPMGV GnOAoYwuVDmR9atk2lvp+kycZd6IK9iUnYAjxZa+jdUb4lzElPCqm/bsaQV4D+HQ 5GavHm/aTUgzfR20V0NarryyziYh17dc3wTbCch7GIFnneXCc453cb7n9OZLZuRt DweAJ7gTt2GIPCu7vDjKEorgXMUaerJEyvAPGMncGjJ/Oes2QEopoZSTV1bu+Yw4 cEFQjEJfjaV000QMWF7bukBqjc7oNFy7U0uvFnpV21oqnWlqrg2B+quAPp1FgJQ8 4l+L0kWPsScOxJ8= -----END CERTIFICATE-----Generated at Tue May 12 22:52:57 2026 by rpki-client