$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.cer File: D41EF47F23FE51C0A38F09E4EB233083B300FAF6.cer (raw, json) Hash identifier: GgsATsSTLCo5Ob6io4o8SIm58NQv7+nhzLk7cLMvzW4= Subject key identifier: D4:1E:F4:7F:23:FE:51:C0:A3:8F:09:E4:EB:23:30:83:B3:00:FA:F6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 468CC37B9CA6117507C6149C98E749D5F84CDE29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:32:55 +0000 Certificate not after: Sun 02 May 2027 01:37:55 +0000 Subordinate resources: IP: 103.114.76.0/22 IP: 2001:df4:f700::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:8c:c3:7b:9c:a6:11:75:07:c6:14:9c:98:e7:49:d5:f8:4c:de:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:32:55 2026 GMT Not After : May 2 01:37:55 2027 GMT Subject: CN=D41EF47F23FE51C0A38F09E4EB233083B300FAF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a1:ac:97:dd:10:b6:1e:3e:40:f8:50:29:82: db:23:fd:3b:61:09:73:f6:70:e6:2c:93:12:e9:f6: 97:71:88:b7:b4:61:73:8a:61:95:e6:03:5d:5d:16: 4a:74:b2:4d:b4:8c:1b:b9:77:7a:a3:4c:82:f7:ca: 9f:38:68:83:98:b0:f1:ae:f7:19:a7:c3:1d:92:9f: 9a:46:08:0c:35:8e:b9:26:fa:38:bd:50:4e:ca:61: 8c:7a:5f:77:bc:bd:ea:fb:41:32:59:c7:0a:17:94: ff:1a:39:60:79:6b:20:db:0d:5c:38:2c:d2:b9:2c: a0:f7:b7:8c:72:5f:44:02:64:72:db:72:20:ff:18: 8f:85:51:ad:84:0c:3c:a6:9e:37:43:d3:dc:73:74: 80:e2:9d:a0:e4:11:e9:ce:e8:83:05:6d:14:65:a3: b1:dd:34:f7:0f:44:74:03:a6:7a:56:04:80:42:63: 62:09:cd:c4:76:b8:cc:6d:39:71:f7:67:ee:70:8a: 8a:20:07:37:80:05:29:e5:72:ee:ed:26:36:42:f1: 62:2f:ce:76:e5:72:5c:f8:26:b2:fc:c2:17:96:61: 3d:aa:f7:91:e7:b4:5e:2b:a2:7e:24:bc:7d:0f:23: 2c:ed:c2:95:dd:5b:65:d8:b7:96:1a:69:da:d5:2a: ba:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D4:1E:F4:7F:23:FE:51:C0:A3:8F:09:E4:EB:23:30:83:B3:00:FA:F6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/D41EF47F23FE51C0A38F09E4EB233083B300FAF6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.114.76.0/22 IPv6: 2001:df4:f700::/48 Signature Algorithm: sha256WithRSAEncryption 34:fc:dc:dd:42:d1:8f:28:b5:6f:56:a0:f3:17:77:1d:b1:ff: 8f:c9:3b:d3:23:05:f9:ba:44:1c:6e:0a:52:6c:a8:fc:99:cc: c2:54:d6:c8:da:44:5c:be:f2:d2:01:cf:3d:0e:e9:cb:ff:02: f6:aa:60:ee:95:f8:15:93:7f:aa:df:0e:75:2d:90:f4:d8:7d: 98:bb:85:e6:d7:32:12:dc:e5:50:1e:9c:e9:33:10:08:0d:2c: 38:15:e6:ce:b8:45:55:cf:b0:f1:0c:2c:d8:05:d5:a5:39:c7: f2:7e:b0:86:83:e6:aa:69:fd:5c:37:8e:46:81:2a:9e:21:db: ba:16:9d:f9:63:90:8b:fc:e5:e2:f4:5e:1d:9c:41:de:74:50: 19:9a:c1:7a:c9:e8:65:41:81:35:c7:4d:6f:f4:72:97:6f:74: 6f:ca:70:86:71:77:c8:09:22:59:b8:82:9c:33:e0:78:79:2c: f3:cc:7e:be:ee:3e:46:2a:a6:ca:10:b9:47:09:3b:77:17:3b: 6f:e6:07:e7:10:03:28:9b:ad:81:4b:29:8a:7f:da:04:06:3c: cd:e4:8a:ac:95:c2:76:8e:70:e0:85:c0:1c:ab:01:1f:77:eb: 4c:6b:ba:e4:83:33:b5:c1:62:bc:6a:ff:d7:1b:ca:c3:dd:82: 25:b1:e3:fd -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIURozDe5ymEXUHxhScmOdJ1fhM3ikwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzI1NVoX DTI3MDUwMjAxMzc1NVowMzExMC8GA1UEAxMoRDQxRUY0N0YyM0ZFNTFDMEEzOEYw OUU0RUIyMzMwODNCMzAwRkFGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL6hrJfdELYePkD4UCmC2yP9O2EJc/Zw5iyTEun2l3GIt7Rhc4phleYDXV0W SnSyTbSMG7l3eqNMgvfKnzhog5iw8a73GafDHZKfmkYIDDWOuSb6OL1QTsphjHpf d7y96vtBMlnHCheU/xo5YHlrINsNXDgs0rksoPe3jHJfRAJkcttyIP8Yj4VRrYQM PKaeN0PT3HN0gOKdoOQR6c7ogwVtFGWjsd009w9EdAOmelYEgEJjYgnNxHa4zG05 cfdn7nCKiiAHN4AFKeVy7u0mNkLxYi/OduVyXPgmsvzCF5ZhPar3kee0XiuifiS8 fQ8jLO3Cld1bZdi3lhpp2tUquksCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNQe9H8j/lHAo48J5OsjMIOzAPr2MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E4NTQ3N2NlLTA3MTctNDdjMC04NzY2LThiOWJlYzBjMDg2Yy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hODU0Nzdj ZS0wNzE3LTQ3YzAtODc2Ni04YjliZWMwYzA4NmMvMC9ENDFFRjQ3RjIzRkU1MUMw QTM4RjA5RTRFQjIzMzA4M0IzMDBGQUY2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZ3JMMA8EAgACMAkDBwAgAQ309wAwDQYJKoZIhvcNAQELBQADggEBADT83N1C 0Y8otW9WoPMXdx2x/4/JO9MjBfm6RBxuClJsqPyZzMJU1sjaRFy+8tIBzz0O6cv/ AvaqYO6V+BWTf6rfDnUtkPTYfZi7hebXMhLc5VAenOkzEAgNLDgV5s64RVXPsPEM LNgF1aU5x/J+sIaD5qpp/Vw3jkaBKp4h27oWnfljkIv85eL0Xh2cQd50UBmawXrJ 6GVBgTXHTW/0cpdvdG/KcIZxd8gJIlm4gpwz4Hh5LPPMfr7uPkYqpsoQuUcJO3cX O2/mB+cQAyibrYFLKYp/2gQGPM3kiqyVwnaOcOCFwByrAR9360xruuSDM7XBYrxq /9cbysPdgiWx4/0= -----END CERTIFICATE-----Generated at Tue May 12 22:03:25 2026 by rpki-client