$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer File: C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.cer (raw, json) Hash identifier: wM+X/4yacZi3tPkfTPRq9WAIzen3iDMdtAniV+jZUTE= Subject key identifier: C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5E9762215EA415F746D2AE9707461AF39FEF8A2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:23:03 +0000 Certificate not after: Sun 02 May 2027 01:28:03 +0000 Subordinate resources: IP: 103.147.246.0/23 IP: 2405:c440::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:97:62:21:5e:a4:15:f7:46:d2:ae:97:07:46:1a:f3:9f:ef:8a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:23:03 2026 GMT Not After : May 2 01:28:03 2027 GMT Subject: CN=C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0d:61:55:fb:61:55:56:f9:f0:b0:e2:c5:42: d6:eb:74:15:b2:ff:d8:24:ac:ff:91:a9:02:3d:86: c3:0a:60:7b:ae:09:e8:f5:52:b3:5c:e3:d9:12:28: dc:31:68:de:cb:c5:18:93:5b:90:b7:9f:6a:92:37: 42:c8:76:97:a4:24:a4:48:ce:53:a6:a5:85:5d:49: e6:ab:ed:69:1d:34:12:a5:b3:23:5f:d4:4e:fb:00: 62:39:39:6e:08:bc:21:80:cb:3f:b6:3f:33:f3:67: 05:01:35:8d:40:27:ee:75:6e:70:8b:3d:ba:89:f5: 5e:d1:8e:f3:38:d7:fc:94:33:ed:77:4d:f0:5f:72: bf:c7:d0:db:7a:b6:50:9b:96:69:99:5c:10:88:fb: 8b:09:47:02:22:ef:14:fe:92:24:a0:79:83:26:fa: 22:f5:43:9e:2b:76:22:7b:9f:af:8f:c1:6c:56:af: 6a:10:95:4d:37:db:a9:dc:88:04:9f:a8:4a:07:0e: c4:3a:3c:40:9f:e2:42:1f:e4:7b:37:b4:06:a5:25: d5:70:3a:e9:18:a9:6f:ba:95:3f:7a:88:4f:c6:bb: 0b:a7:7c:62:3f:2e:0b:b0:45:e5:66:31:80:08:f4: 5c:ef:dc:80:2a:ba:0d:95:0a:d5:77:e3:d5:32:cb: 9c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C1:A4:AB:40:72:6D:4C:ED:D6:63:D1:C3:4E:BB:E8:17:FA:44:C4:2C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/C1A4AB40726D4CEDD663D1C34EBBE817FA44C42C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.246.0/23 IPv6: 2405:c440::/32 Signature Algorithm: sha256WithRSAEncryption 74:af:84:0c:d0:bc:44:d0:f1:7d:36:f9:0f:6c:fd:ab:25:dd: 83:26:85:a6:f7:2c:9c:22:e6:83:91:d6:7f:b5:06:ce:23:c7: ee:43:4a:31:18:97:8d:7c:18:11:74:76:17:38:9f:c4:eb:a3: 00:9d:ef:9f:00:7b:49:0b:1f:d1:d9:46:f2:48:28:16:16:3b: 9e:87:3a:e0:80:af:96:fe:22:a2:5c:12:49:e1:85:71:9b:97: 04:9c:da:4c:28:ec:d3:3a:1d:dd:8d:d4:15:25:85:57:5c:0f: 1c:2b:54:52:1b:e0:f3:2b:a7:30:84:86:3a:2d:ee:db:d8:b3: 13:4d:13:a5:fe:94:07:dc:82:29:a0:6f:30:78:9f:60:27:a2: d9:47:e2:ec:0e:4e:7d:7c:21:09:fd:b4:26:c9:d5:24:e3:5f: a7:35:9d:3b:7a:4c:13:28:40:d3:61:40:cc:15:28:f6:c8:70: 9e:fe:8b:ce:1e:be:0e:3a:bb:50:43:8b:3e:1c:ed:c2:9e:2c: 8e:02:d0:c8:c6:20:b7:98:10:d2:49:0a:49:38:7c:be:8b:5f: 13:d0:e9:07:04:6c:8e:c4:10:4c:fc:2a:be:96:8e:a5:68:f6: 73:a0:a5:09:2a:19:a9:87:d7:78:a2:3e:14:8e:b2:30:0c:c7: 4a:d4:a2:6f -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUXpdiIV6kFfdG0q6XB0Ya85/vii0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjMwM1oX DTI3MDUwMjAxMjgwM1owMzExMC8GA1UEAxMoQzFBNEFCNDA3MjZENENFREQ2NjNE MUMzNEVCQkU4MTdGQTQ0QzQyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ8NYVX7YVVW+fCw4sVC1ut0FbL/2CSs/5GpAj2Gwwpge64J6PVSs1zj2RIo 3DFo3svFGJNbkLefapI3Qsh2l6QkpEjOU6alhV1J5qvtaR00EqWzI1/UTvsAYjk5 bgi8IYDLP7Y/M/NnBQE1jUAn7nVucIs9uon1XtGO8zjX/JQz7XdN8F9yv8fQ23q2 UJuWaZlcEIj7iwlHAiLvFP6SJKB5gyb6IvVDnit2Inufr4/BbFavahCVTTfbqdyI BJ+oSgcOxDo8QJ/iQh/keze0BqUl1XA66Ripb7qVP3qIT8a7C6d8Yj8uC7BF5WYx gAj0XO/cgCq6DZUK1Xfj1TLLnHsCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMGkq0BybUzt1mPRw0676Bf6RMQsMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzk5ZWViZjdjLWZlMzgtNDZhOS04MzExLWUwNTNmY2E1MGRmZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85OWVlYmY3 Yy1mZTM4LTQ2YTktODMxMS1lMDUzZmNhNTBkZmQvMC9DMUE0QUI0MDcyNkQ0Q0VE RDY2M0QxQzM0RUJCRTgxN0ZBNDRDNDJDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5P2MA0EAgACMAcDBQAkBcRAMA0GCSqGSIb3DQEBCwUAA4IBAQB0r4QM0LxE 0PF9NvkPbP2rJd2DJoWm9yycIuaDkdZ/tQbOI8fuQ0oxGJeNfBgRdHYXOJ/E66MA ne+fAHtJCx/R2UbySCgWFjuehzrggK+W/iKiXBJJ4YVxm5cEnNpMKOzTOh3djdQV JYVXXA8cK1RSG+DzK6cwhIY6Le7b2LMTTROl/pQH3IIpoG8weJ9gJ6LZR+LsDk59 fCEJ/bQmydUk41+nNZ07ekwTKEDTYUDMFSj2yHCe/ovOHr4OOrtQQ4s+HO3CniyO AtDIxiC3mBDSSQpJOHy+i18T0OkHBGyOxBBM/Cq+lo6laPZzoKUJKhmph9d4oj4U jrIwDMdK1KJv -----END CERTIFICATE-----Generated at Tue May 12 22:47:26 2026 by rpki-client