$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer File: AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer (raw, json) Hash identifier: C4Noqedf1qUvU3BvrlvYbjH61MZ3yDlMd9B/DcREMfg= Subject key identifier: AF:4C:B4:6F:A8:35:3C:B5:A3:B2:3E:F5:7F:23:18:D4:6C:27:E3:CE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 78CE92873E62392CE03C914FC975B24879883168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:41:31 +0000 Certificate not after: Sun 02 May 2027 00:46:31 +0000 Subordinate resources: IP: 103.156.96.0/24 IP: 2406:8440::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ce:92:87:3e:62:39:2c:e0:3c:91:4f:c9:75:b2:48:79:88:31:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:41:31 2026 GMT Not After : May 2 00:46:31 2027 GMT Subject: CN=AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3f:8a:67:9a:5e:95:39:79:c0:03:d0:b3:e0: 22:7b:c5:33:9a:a8:29:c5:47:40:3c:33:9a:a5:78: 26:52:7c:04:86:bf:b5:a0:29:8d:1a:b4:59:83:74: 26:d3:e9:a0:41:72:50:26:a8:08:73:69:1f:6a:a1: 81:6f:61:45:3d:8e:df:c0:bb:27:b5:e4:cb:21:ab: f8:f8:e9:7b:e4:b9:87:64:57:ce:16:6d:0d:30:96: 3e:16:87:29:3c:ea:14:05:e5:81:1d:37:b8:0c:05: 37:9a:6c:bf:b9:7b:11:02:48:bd:b1:f5:45:85:43: 29:58:1b:17:86:64:22:3f:6a:0e:67:8a:42:a8:dd: 42:9e:7a:2d:1d:ae:ca:0d:34:bd:70:bd:3f:54:52: ed:f4:19:b8:64:2b:a1:ab:e4:47:40:29:f9:30:5b: de:91:4f:ed:3b:b8:e8:d1:cd:02:0f:d2:3c:29:b1: ae:ab:63:ce:b8:45:8c:dc:f1:b6:fa:c8:d7:21:21: 4f:96:1f:68:6b:8c:e5:7b:b6:b0:ec:4f:3c:e7:c1: cd:65:7d:c1:db:17:f8:c4:da:c8:d9:99:72:4f:b4: b1:f6:ca:9c:64:79:56:13:71:ab:40:09:48:8c:3c: ff:e6:7b:5a:52:1f:75:eb:06:20:e0:b1:32:e6:fc: 1a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:4C:B4:6F:A8:35:3C:B5:A3:B2:3E:F5:7F:23:18:D4:6C:27:E3:CE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.96.0/24 IPv6: 2406:8440::/32 Signature Algorithm: sha256WithRSAEncryption 15:dd:9f:9c:9e:e5:77:93:70:d0:3e:b9:49:b2:d5:15:ba:f3: 06:98:d3:48:72:cb:bd:aa:5e:3d:95:2a:c7:b6:9a:63:d1:6d: f2:48:95:1a:f0:f5:69:90:bd:23:01:b8:94:23:28:d3:73:ad: ad:39:16:7d:b0:c7:b9:e1:a0:7e:6e:4c:38:76:84:69:69:e5: 37:3c:48:fe:c1:26:00:d3:76:58:15:c7:39:e1:e1:56:b4:e2: fd:a5:99:93:b7:6e:39:c2:d4:ed:ec:a6:f0:ec:44:6c:50:aa: bc:1d:ca:cd:a0:3c:3b:ff:a4:f9:6e:2f:de:d7:ab:af:71:82: 18:90:11:0b:43:cf:94:73:ef:16:e2:94:60:1a:05:b2:20:9f: ba:28:cb:3a:bb:87:ac:88:d1:f8:4f:3e:8a:90:8e:36:0b:2d: 37:c3:1c:61:75:b9:94:96:d7:b2:33:8f:c1:cc:a4:8c:f2:84: 42:b8:e7:51:e8:1f:44:bd:68:22:99:ac:c0:ca:d4:3e:dd:3d: 3b:14:98:f6:d4:8e:04:e4:1a:03:bc:98:31:09:54:74:dd:56: a4:20:2b:c0:1c:af:29:d0:2a:dd:a6:f7:d1:fc:d7:da:ff:5f: 39:c8:5c:49:af:2e:c4:fc:b9:44:56:9d:b5:7c:56:d9:44:e5: 4f:41:70:92 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUeM6Shz5iOSzgPJFPyXWySHmIMWgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDEzMVoX DTI3MDUwMjAwNDYzMVowMzExMC8GA1UEAxMoQUY0Q0I0NkZBODM1M0NCNUEzQjIz RUY1N0YyMzE4RDQ2QzI3RTNDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0/imeaXpU5ecAD0LPgInvFM5qoKcVHQDwzmqV4JlJ8BIa/taApjRq0WYN0 JtPpoEFyUCaoCHNpH2qhgW9hRT2O38C7J7XkyyGr+Pjpe+S5h2RXzhZtDTCWPhaH KTzqFAXlgR03uAwFN5psv7l7EQJIvbH1RYVDKVgbF4ZkIj9qDmeKQqjdQp56LR2u yg00vXC9P1RS7fQZuGQroavkR0Ap+TBb3pFP7Tu46NHNAg/SPCmxrqtjzrhFjNzx tvrI1yEhT5YfaGuM5Xu2sOxPPOfBzWV9wdsX+MTayNmZck+0sfbKnGR5VhNxq0AJ SIw8/+Z7WlIfdesGIOCxMub8Gg0CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK9MtG+oNTy1o7I+9X8jGNRsJ+POMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVjODk3YzRhLWUwZmYtNDY1Mi1hNTkxLWZmMmQ0OGU3MmM5MS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81Yzg5N2M0 YS1lMGZmLTQ2NTItYTU5MS1mZjJkNDhlNzJjOTEvMC9BRjRDQjQ2RkE4MzUzQ0I1 QTNCMjNFRjU3RjIzMThENDZDMjdFM0NFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQAZ5xgMA0EAgACMAcDBQAkBoRAMA0GCSqGSIb3DQEBCwUAA4IBAQAV3Z+cnuV3 k3DQPrlJstUVuvMGmNNIcsu9ql49lSrHtppj0W3ySJUa8PVpkL0jAbiUIyjTc62t ORZ9sMe54aB+bkw4doRpaeU3PEj+wSYA03ZYFcc54eFWtOL9pZmTt245wtTt7Kbw 7ERsUKq8HcrNoDw7/6T5bi/e16uvcYIYkBELQ8+Uc+8W4pRgGgWyIJ+6KMs6u4es iNH4Tz6KkI42Cy03wxxhdbmUlteyM4/BzKSM8oRCuOdR6B9EvWgimazAytQ+3T07 FJj21I4E5BoDvJgxCVR03VakICvAHK8p0CrdpvfR/Nfa/185yFxJry7E/LlEVp21 fFbZROVPQXCS -----END CERTIFICATE-----Generated at Tue May 12 22:03:19 2026 by rpki-client