$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer File: AF66100C07C72416053F944B967509CE9CB5BD57.cer (raw, json) Hash identifier: yU8Zbu9afi7ZBb0ff/GAr2uNKNCYxc5iL+C7QyXyU9s= Subject key identifier: AF:66:10:0C:07:C7:24:16:05:3F:94:4B:96:75:09:CE:9C:B5:BD:57 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 04F72D10311F33CCF1B5F32F550FD366F9E6D8E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:57:02 +0000 Certificate not after: Sun 02 May 2027 00:02:02 +0000 Subordinate resources: IP: 103.171.244.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:f7:2d:10:31:1f:33:cc:f1:b5:f3:2f:55:0f:d3:66:f9:e6:d8:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:57:02 2026 GMT Not After : May 2 00:02:02 2027 GMT Subject: CN=AF66100C07C72416053F944B967509CE9CB5BD57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:43:05:ac:4a:a0:9c:81:72:0a:f3:1d:96:df: b5:3a:fa:97:07:58:03:db:58:5a:63:a4:de:88:b5: 26:24:07:e0:a6:03:7e:f1:c0:32:4e:eb:ba:b5:26: ce:89:7a:ca:36:1a:53:70:3f:cd:2d:64:d8:51:53: 4b:67:8f:72:6b:0a:0d:f9:8c:d3:4d:b9:c9:2f:d0: 2c:5d:57:d2:84:3c:1b:64:4b:fd:0d:e7:cd:35:74: 87:48:ca:66:60:fd:7c:09:53:5d:2e:19:ce:3f:bc: 6b:36:be:97:b2:15:d9:09:df:cf:05:9f:74:98:0c: 6d:0a:13:24:0f:6e:93:94:6b:7f:90:45:91:80:54: 38:29:06:57:3a:d9:51:b0:36:0a:4b:89:02:c3:18: af:18:c3:09:c6:d7:47:24:79:d6:00:f7:fa:29:c5: 85:4b:a2:c2:2c:7f:38:a7:5b:76:dc:3d:d4:8e:62: 3b:d9:ce:37:f1:b2:02:c5:b1:3b:86:16:f6:f2:3a: a6:79:6f:03:72:d2:d7:2a:e7:c0:65:06:d2:3c:ee: 58:a1:33:fd:4c:4c:74:f2:80:5e:f2:ed:ea:fb:7e: fe:8e:54:88:ad:87:f2:a2:17:9c:2d:86:db:37:31: 04:10:10:b5:37:96:47:a7:d4:95:b4:bb:c5:ac:4d: 22:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:66:10:0C:07:C7:24:16:05:3F:94:4B:96:75:09:CE:9C:B5:BD:57 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.171.244.0/23 Signature Algorithm: sha256WithRSAEncryption 19:db:1a:08:1a:52:ae:18:e3:e7:dc:3d:10:ac:96:28:08:13: 56:2a:2b:03:80:2c:14:83:8d:87:2d:19:80:58:46:56:aa:01: 6b:8c:c7:bf:30:b2:cc:ef:5a:0e:ad:ba:76:df:f7:44:30:11: f3:4f:b7:14:2c:07:1f:c9:48:39:28:35:2c:8a:fe:ac:97:8b: 2a:cb:ea:6d:00:2c:41:33:1b:0b:af:5b:97:5b:b6:b9:2e:06: e4:5c:06:18:7a:c2:d3:d3:ec:51:66:43:09:44:a5:02:ea:68: ff:71:68:bd:27:93:3b:9e:5a:14:51:55:1b:8b:73:4f:e6:12: 5f:03:a9:2d:6c:73:d6:da:46:5f:cb:8f:54:82:2c:9b:2e:da: 12:29:e5:1f:84:a8:15:08:0d:4b:17:c9:fa:20:b6:de:7e:87: d2:a7:96:41:3d:8a:7b:8c:1f:d9:32:07:ba:88:86:d0:04:0c: fb:79:c6:2a:3a:41:a1:77:e2:0f:68:8b:40:0c:b4:f9:e2:bb: ea:77:ea:4b:af:b6:bd:3a:6f:8d:53:d7:e1:db:78:3d:19:ff: a0:b5:3f:fb:ab:51:f7:e7:8b:42:41:62:e2:25:fd:07:c2:7a: 7f:9b:e9:51:6b:8d:08:94:c8:a4:13:d4:a8:b7:14:88:fd:e1: 74:2b:8c:80 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUBPctEDEfM8zxtfMvVQ/TZvnm2OcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTcwMloX DTI3MDUwMjAwMDIwMlowMzExMC8GA1UEAxMoQUY2NjEwMEMwN0M3MjQxNjA1M0Y5 NDRCOTY3NTA5Q0U5Q0I1QkQ1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI5DBaxKoJyBcgrzHZbftTr6lwdYA9tYWmOk3oi1JiQH4KYDfvHAMk7rurUm zol6yjYaU3A/zS1k2FFTS2ePcmsKDfmM0025yS/QLF1X0oQ8G2RL/Q3nzTV0h0jK ZmD9fAlTXS4Zzj+8aza+l7IV2QnfzwWfdJgMbQoTJA9uk5Rrf5BFkYBUOCkGVzrZ UbA2CkuJAsMYrxjDCcbXRyR51gD3+inFhUuiwix/OKdbdtw91I5iO9nON/GyAsWx O4YW9vI6pnlvA3LS1yrnwGUG0jzuWKEz/UxMdPKAXvLt6vt+/o5UiK2H8qIXnC2G 2zcxBBAQtTeWR6fUlbS7xaxNIh8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK9mEAwHxyQWBT+US5Z1Cc6ctb1XMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzFhYWMxYmI5LTQ1ZjYtNDY2Ny1iMTk0LTlhNjlhNGE0ZDc1NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xYWFjMWJi OS00NWY2LTQ2NjctYjE5NC05YTY5YTRhNGQ3NTUvMC9BRjY2MTAwQzA3QzcyNDE2 MDUzRjk0NEI5Njc1MDlDRTlDQjVCRDU3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6v0MA0GCSqGSIb3DQEBCwUAA4IBAQAZ2xoIGlKuGOPn3D0QrJYoCBNWKisD gCwUg42HLRmAWEZWqgFrjMe/MLLM71oOrbp23/dEMBHzT7cULAcfyUg5KDUsiv6s l4sqy+ptACxBMxsLr1uXW7a5LgbkXAYYesLT0+xRZkMJRKUC6mj/cWi9J5M7nloU UVUbi3NP5hJfA6ktbHPW2kZfy49UgiybLtoSKeUfhKgVCA1LF8n6ILbefofSp5ZB PYp7jB/ZMge6iIbQBAz7ecYqOkGhd+IPaItADLT54rvqd+pLr7a9Om+NU9fh23g9 Gf+gtT/7q1H354tCQWLiJf0Hwnp/m+lRa40IlMikE9SotxSI/eF0K4yA -----END CERTIFICATE-----Generated at Tue May 12 22:02:52 2026 by rpki-client