$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C36F2B2665674A939F067F495588261F7D4D6F8D.cer File: C36F2B2665674A939F067F495588261F7D4D6F8D.cer (raw, json) Hash identifier: sg8A+KYmR6XwD3gn6RPX+6fSMq9tcbgNROQHKePB7ew= Subject key identifier: C3:6F:2B:26:65:67:4A:93:9F:06:7F:49:55:88:26:1F:7D:4D:6F:8D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3A85C09ED2EB6CD2D37EF66647CC3DA54DEEC878 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:38:50 +0000 Certificate not after: Sun 02 May 2027 01:43:50 +0000 Subordinate resources: IP: 103.124.20.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:85:c0:9e:d2:eb:6c:d2:d3:7e:f6:66:47:cc:3d:a5:4d:ee:c8:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:38:50 2026 GMT Not After : May 2 01:43:50 2027 GMT Subject: CN=C36F2B2665674A939F067F495588261F7D4D6F8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:80:9d:b4:cf:70:2b:18:36:b0:08:c9:97:3f: 8d:c2:90:63:36:00:c3:21:dd:b5:56:cc:10:bd:7b: 2b:8d:4e:62:62:e7:a0:d2:68:6f:66:20:0b:21:b9: fa:df:69:54:a3:d7:26:1f:6f:cb:fe:cf:05:2d:7b: 1a:dd:ab:95:9b:82:10:c4:19:19:20:f9:f0:fb:67: cd:d0:37:dc:2e:51:ba:33:11:78:57:f9:cb:ff:35: 8d:b9:96:58:09:58:0d:a4:fc:9a:bc:30:9e:31:34: e1:e5:8a:f2:de:d3:15:5c:62:14:57:13:61:38:4f: ef:2c:fa:14:3c:e5:ff:ae:db:00:47:67:51:40:86: 0a:6d:44:2e:30:cb:9c:1c:3f:12:93:fa:b8:2f:fe: f7:14:1a:b0:63:61:82:32:5d:1a:b1:70:ee:bc:6b: 99:01:51:4a:96:60:57:48:3d:ef:8f:5d:f0:e4:dd: 04:63:4b:e2:fc:72:34:b6:33:2b:96:6d:ad:1c:8d: 5c:77:7d:51:15:c7:1f:fd:38:72:f7:6a:ec:45:f1: 8c:8c:d3:fa:4f:90:9a:ce:d7:d5:29:3a:59:2e:2a: ac:f1:04:ca:96:a5:7d:de:24:4c:5c:ae:df:77:6a: da:75:28:6b:42:5d:89:98:b4:39:d9:f4:8c:92:3a: 48:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C3:6F:2B:26:65:67:4A:93:9F:06:7F:49:55:88:26:1F:7D:4D:6F:8D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.124.20.0/23 Signature Algorithm: sha256WithRSAEncryption 10:05:63:f4:06:46:33:fd:ee:82:40:ce:59:c1:9b:26:f7:c0: 1e:27:97:5c:cd:d6:3b:15:6e:8e:0b:01:79:ff:a1:cd:26:99: e5:79:c1:60:74:20:1b:a3:3f:96:6d:f0:98:2e:7f:93:ae:23: 66:89:7f:46:b0:08:a5:0f:4a:43:15:7d:95:89:08:3f:42:5f: 98:53:38:db:c1:8f:5f:f6:19:5b:25:08:b0:54:ea:2f:2c:53: 55:31:4a:d1:7a:ea:01:4b:69:0a:b7:8e:d0:33:24:c6:1a:a2: 85:46:95:51:d0:0e:3c:0e:9e:4a:ca:d8:51:14:1c:89:32:7b: 20:3e:5c:64:71:f3:f5:90:c5:f2:a1:73:5b:33:e8:b6:09:da: 7b:c4:d0:d8:76:ff:0e:36:10:d4:21:92:d7:5e:05:dc:37:b0: d9:89:a1:08:81:1e:1d:ca:8b:b5:ac:d1:ba:52:a2:9e:19:e9: ca:2c:47:27:3b:53:06:f7:df:0b:d5:40:29:7f:42:be:2e:13: 2b:d1:5e:55:3f:c1:ad:ee:b6:8c:17:6e:6b:60:fa:97:87:62: 06:5b:d7:78:20:08:fe:fb:9d:58:06:f2:6f:71:0c:1c:46:7c: ef:2a:34:3c:3f:54:b5:46:2a:0e:dc:6f:7e:07:7c:fb:8a:b8: 1e:cd:3f:9c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUOoXAntLrbNLTfvZmR8w9pU3uyHgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzg1MFoX DTI3MDUwMjAxNDM1MFowMzExMC8GA1UEAxMoQzM2RjJCMjY2NTY3NEE5MzlGMDY3 RjQ5NTU4ODI2MUY3RDRENkY4RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKGAnbTPcCsYNrAIyZc/jcKQYzYAwyHdtVbMEL17K41OYmLnoNJob2YgCyG5 +t9pVKPXJh9vy/7PBS17Gt2rlZuCEMQZGSD58PtnzdA33C5RujMReFf5y/81jbmW WAlYDaT8mrwwnjE04eWK8t7TFVxiFFcTYThP7yz6FDzl/67bAEdnUUCGCm1ELjDL nBw/EpP6uC/+9xQasGNhgjJdGrFw7rxrmQFRSpZgV0g9749d8OTdBGNL4vxyNLYz K5ZtrRyNXHd9URXHH/04cvdq7EXxjIzT+k+Qms7X1Sk6WS4qrPEEypalfd4kTFyu 33dq2nUoa0JdiZi0Odn0jJI6SA8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMNvKyZlZ0qTnwZ/SVWIJh99TW+NMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2IxYzdlODMzLTZjNTQtNGUwYi04MzFjLTFjMWE3MTBjZThlMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iMWM3ZTgz My02YzU0LTRlMGItODMxYy0xYzFhNzEwY2U4ZTMvMC9DMzZGMkIyNjY1Njc0QTkz OUYwNjdGNDk1NTg4MjYxRjdENEQ2RjhELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ3wUMA0GCSqGSIb3DQEBCwUAA4IBAQAQBWP0BkYz/e6CQM5ZwZsm98AeJ5dc zdY7FW6OCwF5/6HNJpnlecFgdCAboz+WbfCYLn+TriNmiX9GsAilD0pDFX2ViQg/ Ql+YUzjbwY9f9hlbJQiwVOovLFNVMUrReuoBS2kKt47QMyTGGqKFRpVR0A48Dp5K ythRFByJMnsgPlxkcfP1kMXyoXNbM+i2Cdp7xNDYdv8ONhDUIZLXXgXcN7DZiaEI gR4dyou1rNG6UqKeGenKLEcnO1MG998L1UApf0K+LhMr0V5VP8Gt7raMF25rYPqX h2IGW9d4IAj++51YBvJvcQwcRnzvKjQ8P1S1RioO3G9+B3z7irgezT+c -----END CERTIFICATE-----Generated at Tue May 12 22:04:13 2026 by rpki-client