$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer File: AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer (raw, json) Hash identifier: m+h5YHJKPar7iXCwYfzOCi2LWyKBekWrx1G1PRzuBhc= Subject key identifier: AF:3C:82:08:58:C3:FE:5A:6E:6C:57:E8:43:E1:CF:D0:1A:45:F2:0A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1045C3EE791C01520BAF0A56BE8833897328BD1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:35:19 +0000 Certificate not after: Sun 02 May 2027 01:40:19 +0000 Subordinate resources: IP: 103.78.195.0/24 IP: 2001:df6:5600::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:45:c3:ee:79:1c:01:52:0b:af:0a:56:be:88:33:89:73:28:bd:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:35:19 2026 GMT Not After : May 2 01:40:19 2027 GMT Subject: CN=AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c3:66:f0:ec:aa:1a:64:49:30:42:9d:51:5d: 82:3b:f5:94:0f:bb:95:3f:a9:88:0f:12:b5:8f:1c: 72:17:01:32:84:88:03:2e:50:c1:dd:dd:1d:fd:92: 4f:7a:92:c9:9d:f0:d5:53:9d:45:d7:75:bc:83:63: 49:fe:f8:13:49:74:2b:be:95:fe:93:28:ba:26:6d: 70:22:6b:1d:2e:69:32:4e:14:72:b1:4f:85:4d:2d: ed:46:7e:30:de:93:5b:5f:e1:88:38:fd:96:cd:d7: e7:5b:ae:9f:dc:a3:07:24:d6:49:b1:1e:ef:51:8c: ff:53:ca:44:c3:79:0e:82:03:5d:31:19:53:b7:8d: 72:dc:99:73:11:75:ee:8a:70:a2:13:53:de:f0:a7: 3a:ab:68:74:f5:41:26:8d:1a:5a:ba:79:b7:1c:1c: fb:61:ef:6c:70:d5:71:49:20:35:5d:0b:64:fc:c2: e6:c7:e7:9e:61:37:13:88:b3:54:30:2d:8e:0e:6b: 5c:4d:0a:2c:94:17:66:21:4c:95:36:bf:b8:74:72: e5:28:39:7c:2c:ff:ef:7e:d0:31:63:80:00:4a:bc: 2e:26:8f:d3:35:c4:96:49:18:30:c6:4b:83:cc:e4: 5d:20:63:7b:d4:63:a8:31:44:47:85:ff:77:91:e8: aa:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:3C:82:08:58:C3:FE:5A:6E:6C:57:E8:43:E1:CF:D0:1A:45:F2:0A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.78.195.0/24 IPv6: 2001:df6:5600::/48 Signature Algorithm: sha256WithRSAEncryption 6e:ee:e1:07:d1:68:55:37:ae:4d:22:0e:b8:c0:b0:e3:81:e5: 46:aa:80:b5:55:a1:af:88:5d:d0:17:b8:a6:65:29:86:2b:fd: 04:39:49:6c:42:63:33:44:e6:19:3d:e2:5d:6a:db:e9:87:f6: d8:37:1d:7e:33:fd:cc:12:be:54:aa:7e:e4:bf:bb:d4:ee:24: 51:bd:15:e8:df:a0:72:9f:72:d6:3b:c5:99:9f:d1:47:cb:86: 65:ad:5f:35:d9:90:71:89:95:69:8a:8b:ff:41:18:0e:56:94: c6:2e:2f:32:58:36:37:47:49:2e:2b:da:82:59:87:bd:82:e9: c9:6c:73:20:87:4c:6e:f9:21:58:83:83:13:67:b4:e1:5f:7b: 3b:8f:d2:3b:93:54:24:a3:8a:97:4b:1f:fb:69:cd:e2:36:c9: af:91:b1:e5:d4:b7:85:dd:57:8e:81:06:2f:69:f6:f9:7c:9a: 11:57:48:b3:a2:d5:d7:61:dd:b8:6d:07:85:75:c2:c3:e2:f0: c2:11:a8:ba:b8:5b:cb:4b:e4:fe:c3:53:a1:f0:4a:fa:3b:f0: 72:17:36:09:08:5b:62:3a:fd:a6:bb:f8:3d:9d:53:d2:3e:a4: d5:9a:94:93:03:90:41:ca:67:5b:ae:8a:5e:7b:01:49:dc:c8: b9:11:dc:15 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUEEXD7nkcAVILrwpWvogziXMovRswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzUxOVoX DTI3MDUwMjAxNDAxOVowMzExMC8GA1UEAxMoQUYzQzgyMDg1OEMzRkU1QTZFNkM1 N0U4NDNFMUNGRDAxQTQ1RjIwQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK3DZvDsqhpkSTBCnVFdgjv1lA+7lT+piA8StY8cchcBMoSIAy5Qwd3dHf2S T3qSyZ3w1VOdRdd1vINjSf74E0l0K76V/pMouiZtcCJrHS5pMk4UcrFPhU0t7UZ+ MN6TW1/hiDj9ls3X51uun9yjByTWSbEe71GM/1PKRMN5DoIDXTEZU7eNctyZcxF1 7opwohNT3vCnOqtodPVBJo0aWrp5txwc+2HvbHDVcUkgNV0LZPzC5sfnnmE3E4iz VDAtjg5rXE0KLJQXZiFMlTa/uHRy5Sg5fCz/737QMWOAAEq8LiaP0zXElkkYMMZL g8zkXSBje9RjqDFER4X/d5HoqosCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK88gghYw/5abmxX6EPhz9AaRfIKMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FjNmI1YWJjLTJjNTQtNGM1Zi1iM2Y4LTMzNDZmMTllNmNjOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hYzZiNWFi Yy0yYzU0LTRjNWYtYjNmOC0zMzQ2ZjE5ZTZjYzgvMC9BRjNDODIwODU4QzNGRTVB NkU2QzU3RTg0M0UxQ0ZEMDFBNDVGMjBBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ07DMA8EAgACMAkDBwAgAQ32VgAwDQYJKoZIhvcNAQELBQADggEBAG7u4QfR aFU3rk0iDrjAsOOB5UaqgLVVoa+IXdAXuKZlKYYr/QQ5SWxCYzNE5hk94l1q2+mH 9tg3HX4z/cwSvlSqfuS/u9TuJFG9FejfoHKfctY7xZmf0UfLhmWtXzXZkHGJlWmK i/9BGA5WlMYuLzJYNjdHSS4r2oJZh72C6clscyCHTG75IViDgxNntOFfezuP0juT VCSjipdLH/tpzeI2ya+RseXUt4XdV46BBi9p9vl8mhFXSLOi1ddh3bhtB4V1wsPi 8MIRqLq4W8tL5P7DU6HwSvo78HIXNgkIW2I6/aa7+D2dU9I+pNWalJMDkEHKZ1uu il57AUncyLkR3BU= -----END CERTIFICATE-----Generated at Tue May 12 22:03:44 2026 by rpki-client