$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C1A495959252724BB02157535868476E3695F743.cer File: C1A495959252724BB02157535868476E3695F743.cer (raw, json) Hash identifier: 9vfM++DyK6vzIaaWR+nnLSE2ZXYvdJ9KSOC3t+SV6B8= Subject key identifier: C1:A4:95:95:92:52:72:4B:B0:21:57:53:58:68:47:6E:36:95:F7:43 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 422B37996C2399AD4FF4CE233C4F9673920EEA59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/C1A495959252724BB02157535868476E3695F743.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:36:36 +0000 Certificate not after: Sun 02 May 2027 02:41:36 +0000 Subordinate resources: IP: 103.183.56.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:2b:37:99:6c:23:99:ad:4f:f4:ce:23:3c:4f:96:73:92:0e:ea:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:36:36 2026 GMT Not After : May 2 02:41:36 2027 GMT Subject: CN=C1A495959252724BB02157535868476E3695F743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:29:82:a0:da:b7:19:86:39:c3:e5:a8:e1:9c: a6:19:41:4d:7b:bb:96:92:f3:8d:1f:52:49:0b:cb: c1:61:ba:e7:9c:ce:98:e1:cb:5a:f6:44:7a:a3:b0: 6a:00:59:37:54:c0:1f:ef:b7:47:07:b4:27:b6:4c: b4:a1:53:bf:05:27:80:d6:c3:c3:dc:9d:07:c4:a3: 3d:d2:52:8b:ee:37:9b:5b:cd:f4:c5:3a:c4:9c:35: 63:c2:87:dc:07:e1:d4:6a:35:4e:2c:49:95:31:40: 10:36:ed:27:26:99:21:b9:a8:79:f7:06:b7:99:a2: 77:d4:79:38:86:76:68:05:c2:64:7a:6c:cc:b6:30: 17:9f:7c:f9:e0:da:be:01:fa:4a:43:1d:fe:69:59: a4:30:7f:8d:27:7b:49:ef:2d:b5:10:df:e2:11:20: 96:5e:c7:75:90:7b:b6:90:7b:c8:13:33:cf:5f:57: 7c:cd:38:1e:9b:d8:af:90:5c:95:94:1f:e2:ee:5e: 85:f7:9e:e1:75:ad:1b:dc:c4:35:62:53:6b:8d:d6: 67:c3:54:ce:32:af:04:12:06:d4:a2:b3:80:40:c1: 96:47:66:70:82:5a:48:26:c5:b5:8e:ef:5c:bb:2b: 63:2a:8f:3b:ed:d1:8f:84:4f:4e:9c:ec:f8:fa:33: 7c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C1:A4:95:95:92:52:72:4B:B0:21:57:53:58:68:47:6E:36:95:F7:43 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/C1A495959252724BB02157535868476E3695F743.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.183.56.0/23 Signature Algorithm: sha256WithRSAEncryption a1:ec:b0:d1:fd:91:7a:a1:1d:96:6e:1b:34:28:78:fc:3e:7e: 2b:78:8e:3e:21:46:66:60:3f:94:1c:31:94:54:07:47:3b:91: 54:19:cd:b8:c8:27:ea:61:88:88:fa:78:97:c9:b9:74:d5:7f: 54:86:98:de:18:0d:81:3b:4d:5c:6e:61:b7:cc:a9:dd:49:ca: e0:69:24:ee:3c:85:c2:84:bd:b9:8c:4e:28:3d:08:2f:b2:41: ca:50:39:21:b6:5f:af:e5:8d:0b:25:a1:12:6c:81:24:94:5b: a4:0b:65:a6:f6:37:41:8b:57:36:7f:e0:80:a4:0a:f0:1f:35: 9d:d2:86:cf:a9:f4:b6:8e:b1:4d:7a:f0:ea:89:bc:5e:c1:d4: 8b:4e:e4:a5:25:6f:57:83:07:4e:ac:8f:97:ce:51:64:25:a7: fd:4b:d8:ea:37:aa:ce:14:f7:13:e7:4e:16:63:bc:24:18:80: 34:b8:da:15:3a:cf:bf:75:05:54:d1:01:65:55:01:08:6c:78: 8c:2d:9c:83:ad:7e:a2:6f:d5:f7:6b:a9:df:f7:31:a0:63:f0: 0b:98:89:f9:80:f1:c8:42:dc:e3:54:56:ff:f9:bd:2d:d4:53: 80:72:6b:13:a2:7f:71:96:c6:cb:45:78:5d:44:bc:11:b1:45: 7c:0d:36:04 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUQis3mWwjma1P9M4jPE+Wc5IO6lkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzYzNloX DTI3MDUwMjAyNDEzNlowMzExMC8GA1UEAxMoQzFBNDk1OTU5MjUyNzI0QkIwMjE1 NzUzNTg2ODQ3NkUzNjk1Rjc0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKEpgqDatxmGOcPlqOGcphlBTXu7lpLzjR9SSQvLwWG655zOmOHLWvZEeqOw agBZN1TAH++3Rwe0J7ZMtKFTvwUngNbDw9ydB8SjPdJSi+43m1vN9MU6xJw1Y8KH 3Afh1Go1TixJlTFAEDbtJyaZIbmoefcGt5mid9R5OIZ2aAXCZHpszLYwF598+eDa vgH6SkMd/mlZpDB/jSd7Se8ttRDf4hEgll7HdZB7tpB7yBMzz19XfM04HpvYr5Bc lZQf4u5ehfee4XWtG9zENWJTa43WZ8NUzjKvBBIG1KKzgEDBlkdmcIJaSCbFtY7v XLsrYyqPO+3Rj4RPTpzs+PozfA0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMGklZWSUnJLsCFXU1hoR242lfdDMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y1NGRkYzY1LTYxYzEtNDllMS1hODk1LTNjMDNmNTg3YTI3Yi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mNTRkZGM2 NS02MWMxLTQ5ZTEtYTg5NS0zYzAzZjU4N2EyN2IvMC9DMUE0OTU5NTkyNTI3MjRC QjAyMTU3NTM1ODY4NDc2RTM2OTVGNzQzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7c4MA0GCSqGSIb3DQEBCwUAA4IBAQCh7LDR/ZF6oR2Wbhs0KHj8Pn4reI4+ IUZmYD+UHDGUVAdHO5FUGc24yCfqYYiI+niXybl01X9UhpjeGA2BO01cbmG3zKnd ScrgaSTuPIXChL25jE4oPQgvskHKUDkhtl+v5Y0LJaESbIEklFukC2Wm9jdBi1c2 f+CApArwHzWd0obPqfS2jrFNevDqibxewdSLTuSlJW9XgwdOrI+XzlFkJaf9S9jq N6rOFPcT504WY7wkGIA0uNoVOs+/dQVU0QFlVQEIbHiMLZyDrX6ib9X3a6nf9zGg Y/ALmIn5gPHIQtzjVFb/+b0t1FOAcmsTon9xlsbLRXhdRLwRsUV8DTYE -----END CERTIFICATE-----Generated at Wed May 13 02:51:13 2026 by rpki-client