$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer File: B40CD5496E7464C3983177F65AD14F8974DC2A05.cer (raw, json) Hash identifier: qnWZjmB9+XrUsP8tXOFDEN5y6dH56I7vLhPmBz24X/A= Subject key identifier: B4:0C:D5:49:6E:74:64:C3:98:31:77:F6:5A:D1:4F:89:74:DC:2A:05 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5ED97A92F231F622D90A7D2C233F6133BCC5B562 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:22:21 +0000 Certificate not after: Sun 02 May 2027 00:27:21 +0000 Subordinate resources: IP: 103.126.28.0/22 IP: 2404:340::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:d9:7a:92:f2:31:f6:22:d9:0a:7d:2c:23:3f:61:33:bc:c5:b5:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:22:21 2026 GMT Not After : May 2 00:27:21 2027 GMT Subject: CN=B40CD5496E7464C3983177F65AD14F8974DC2A05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9a:99:e4:b7:b7:df:de:d5:6e:e6:56:f5:9c: d0:51:04:82:7a:4b:42:9b:d6:ec:e6:d0:0a:59:da: 21:78:11:4b:93:2f:0c:bc:62:69:84:d1:ea:91:25: b2:36:84:c8:9c:22:48:92:91:5f:f6:9f:c9:9e:c0: 9a:9b:0a:80:cc:1f:f9:6b:fb:14:5e:74:29:d6:b3: 47:50:74:44:2e:6f:be:88:92:59:18:d8:a4:e7:21: f7:4a:2b:f4:95:a8:2d:ef:e3:16:aa:8f:93:7d:0c: a7:23:c6:57:15:4b:f1:ce:1c:8d:d6:56:1f:41:6e: 93:9c:13:f4:c7:91:c1:8b:0c:9a:22:a6:3e:6f:49: 69:c9:d0:60:88:94:2a:9f:47:d0:64:bb:fd:71:f6: 00:85:f4:2e:cd:87:ad:76:bd:ff:ad:8b:ed:11:46: c1:b2:e5:f7:17:4d:0a:29:d2:99:2f:b9:e8:90:21: bc:b3:07:62:11:52:f8:47:96:5a:30:c9:01:28:8d: d8:c1:67:03:12:0e:e8:b8:07:db:b0:64:76:de:34: 75:e8:6e:47:1a:ae:8e:ca:08:d1:cc:f0:c4:02:3d: a2:4e:b6:79:4d:a5:5e:fe:6a:a5:d4:d0:30:06:02: e1:24:86:35:9f:5d:b3:32:aa:df:65:95:ac:e5:1f: c1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B4:0C:D5:49:6E:74:64:C3:98:31:77:F6:5A:D1:4F:89:74:DC:2A:05 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.126.28.0/22 IPv6: 2404:340::/32 Signature Algorithm: sha256WithRSAEncryption 36:b3:d5:bc:62:92:2c:de:3b:f3:20:80:ba:18:c3:42:10:19: 77:60:fe:09:c0:cc:3f:eb:91:6b:bf:89:aa:a0:4d:ad:ee:c9: 25:4b:13:c0:b3:a9:ea:81:d0:c4:b0:80:d5:84:8f:c3:e1:7d: 55:31:d1:a4:7e:2e:35:71:c5:61:44:41:5e:73:ee:d0:38:93: 87:d7:72:a8:6b:4f:98:26:5b:89:87:64:c6:71:c4:5a:37:ef: 2c:c4:b9:23:63:33:fb:c6:0a:26:50:53:b4:2e:2b:e8:53:b7: ee:61:af:b5:94:c0:8f:56:6e:14:a4:fc:1a:58:ca:da:3b:43: 3f:bf:42:5b:ae:50:27:04:f2:76:ac:a0:65:0a:88:e4:cf:63: bc:9e:d0:ec:21:a9:bd:1d:b5:42:64:8d:8f:be:ec:d8:91:1d: 8b:9d:5b:77:64:0e:03:dd:0d:92:b0:6d:5e:ee:6d:d6:8f:ec: f9:3e:6e:36:c4:55:02:a1:0d:c9:a7:d6:03:8b:19:37:1e:73: ba:79:a1:75:8e:a7:11:6d:83:73:89:a5:34:db:9a:68:6d:ba: e1:1d:1f:09:b8:df:68:60:ef:80:2f:c6:d4:70:8f:06:d7:67: ce:e9:ea:a5:fd:42:eb:32:ec:1c:4f:3c:ce:7c:d8:6f:b4:4e: 5d:d4:07:0a -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUXtl6kvIx9iLZCn0sIz9hM7zFtWIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjIyMVoX DTI3MDUwMjAwMjcyMVowMzExMC8GA1UEAxMoQjQwQ0Q1NDk2RTc0NjRDMzk4MzE3 N0Y2NUFEMTRGODk3NERDMkEwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMqameS3t9/e1W7mVvWc0FEEgnpLQpvW7ObQClnaIXgRS5MvDLxiaYTR6pEl sjaEyJwiSJKRX/afyZ7AmpsKgMwf+Wv7FF50KdazR1B0RC5vvoiSWRjYpOch90or 9JWoLe/jFqqPk30MpyPGVxVL8c4cjdZWH0Fuk5wT9MeRwYsMmiKmPm9JacnQYIiU Kp9H0GS7/XH2AIX0Ls2HrXa9/62L7RFGwbLl9xdNCinSmS+56JAhvLMHYhFS+EeW WjDJASiN2MFnAxIO6LgH27Bkdt40dehuRxqujsoI0czwxAI9ok62eU2lXv5qpdTQ MAYC4SSGNZ9dszKq32WVrOUfwYcCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLQM1UludGTDmDF39lrRT4l03CoFMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzNmNmVhMjIxLTc3YjctNDc5MS1hOGE4LWI1MTY0YjAwZjFjNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zZjZlYTIy MS03N2I3LTQ3OTEtYThhOC1iNTE2NGIwMGYxYzUvMC9CNDBDRDU0OTZFNzQ2NEMz OTgzMTc3RjY1QUQxNEY4OTc0REMyQTA1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ34cMA0EAgACMAcDBQAkBANAMA0GCSqGSIb3DQEBCwUAA4IBAQA2s9W8YpIs 3jvzIIC6GMNCEBl3YP4JwMw/65Frv4mqoE2t7sklSxPAs6nqgdDEsIDVhI/D4X1V MdGkfi41ccVhREFec+7QOJOH13Koa0+YJluJh2TGccRaN+8sxLkjYzP7xgomUFO0 LivoU7fuYa+1lMCPVm4UpPwaWMraO0M/v0JbrlAnBPJ2rKBlCojkz2O8ntDsIam9 HbVCZI2PvuzYkR2LnVt3ZA4D3Q2SsG1e7m3Wj+z5Pm42xFUCoQ3Jp9YDixk3HnO6 eaF1jqcRbYNziaU025pobbrhHR8JuN9oYO+AL8bUcI8G12fO6eql/ULrMuwcTzzO fNhvtE5d1AcK -----END CERTIFICATE-----Generated at Tue May 12 22:10:25 2026 by rpki-client