$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D448B410BA4C741968F8C5B34E3156EA5666874D.cer File: D448B410BA4C741968F8C5B34E3156EA5666874D.cer (raw, json) Hash identifier: W9JCGH3/I60v1dk66roFUEltfJovPHRvF/3ncEhYTbM= Subject key identifier: D4:48:B4:10:BA:4C:74:19:68:F8:C5:B3:4E:31:56:EA:56:66:87:4D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3BEE120425DDF6721669920DBD730A2BB2E004C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/D448B410BA4C741968F8C5B34E3156EA5666874D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:57:19 +0000 Certificate not after: Sun 02 May 2027 00:02:19 +0000 Subordinate resources: IP: 103.151.24.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ee:12:04:25:dd:f6:72:16:69:92:0d:bd:73:0a:2b:b2:e0:04:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:57:19 2026 GMT Not After : May 2 00:02:19 2027 GMT Subject: CN=D448B410BA4C741968F8C5B34E3156EA5666874D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6e:50:e1:2e:d8:7d:fe:75:4f:40:d4:6c:24: c3:ff:2b:17:86:ed:3e:c6:09:1c:39:95:56:5d:14: 04:ad:cb:14:3a:32:0f:96:b5:f0:d3:20:da:bb:8b: 8a:f1:e0:f0:d7:da:14:ac:19:73:c6:f9:1b:83:40: 68:70:87:f8:19:16:91:3c:87:f7:53:e3:a2:5e:80: 98:98:0a:15:5c:a1:a5:4d:a3:6d:df:83:b7:27:d7: d6:63:3d:71:6f:2c:19:45:d3:3b:a9:07:26:59:46: 2a:5e:64:67:99:66:5d:b5:5f:c2:7f:2a:ac:fd:0e: cf:97:d3:ad:36:43:47:c3:2d:ff:2a:be:31:f4:0c: 25:0c:fb:f8:83:24:ae:e8:76:30:c0:4a:0b:b8:84: b5:1b:bc:9a:39:9e:b2:81:96:0f:30:21:ab:9a:5c: b9:92:4e:f5:37:b4:e5:44:c0:5e:47:40:33:ab:37: e9:e3:e2:1e:8f:8c:14:15:0f:39:f2:b4:fa:93:73: 36:a8:ef:61:91:56:a8:a8:d9:0e:de:e8:16:66:43: bc:8f:46:21:a1:d7:6d:7a:53:e5:8f:66:81:da:3d: 6e:f9:3c:dd:64:f1:4f:0f:09:34:89:f0:13:b5:64: f3:5c:21:7f:76:62:1e:04:88:ad:df:b6:5e:10:98: 15:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D4:48:B4:10:BA:4C:74:19:68:F8:C5:B3:4E:31:56:EA:56:66:87:4D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/D448B410BA4C741968F8C5B34E3156EA5666874D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.24.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:33:b7:f0:94:6e:b7:13:f0:d3:4f:41:90:74:96:3f:91:a0: fc:37:31:bf:bf:c8:f7:b6:84:98:35:f6:e4:4e:7b:39:7d:ce: 51:e1:55:71:d2:85:d5:c8:64:8e:d4:9c:ce:e1:37:9b:06:a8: ce:30:c2:f3:16:c5:53:d8:14:7e:0d:32:3b:7a:4c:ed:a9:41: 4e:76:15:e6:2f:e4:6a:87:3e:5e:cf:be:2e:1d:7d:1a:4d:dc: e8:7c:db:3f:83:96:9a:6b:b9:db:45:a9:97:87:62:77:47:d1: 26:31:5f:36:dd:4e:09:0f:86:25:c4:fe:92:33:ac:14:45:d5: 34:72:10:3e:a9:e9:55:fb:31:cf:73:a5:74:6b:2c:e7:99:75: 06:66:69:13:28:55:02:c2:67:49:68:9b:a6:a5:87:a2:28:3f: 41:0a:e0:01:bc:5d:f7:69:6a:eb:6c:c9:fc:2e:cc:2d:2d:76: 5d:44:3f:61:71:34:7e:f9:5c:c5:c3:7d:72:f8:8a:e9:48:cd: 48:2f:34:f0:8d:3e:88:1e:7b:aa:64:d3:c4:0a:de:bb:59:b8: bb:bd:3d:fc:98:70:f9:25:e8:28:79:c6:eb:ea:8a:93:02:18: 0e:70:72:d6:66:d3:4f:3e:3f:09:9d:fb:5b:3c:97:ad:40:9d: 7b:b2:8d:01 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUO+4SBCXd9nIWaZINvXMKK7LgBMgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTcxOVoX DTI3MDUwMjAwMDIxOVowMzExMC8GA1UEAxMoRDQ0OEI0MTBCQTRDNzQxOTY4RjhD NUIzNEUzMTU2RUE1NjY2ODc0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMVuUOEu2H3+dU9A1Gwkw/8rF4btPsYJHDmVVl0UBK3LFDoyD5a18NMg2ruL ivHg8NfaFKwZc8b5G4NAaHCH+BkWkTyH91Pjol6AmJgKFVyhpU2jbd+DtyfX1mM9 cW8sGUXTO6kHJllGKl5kZ5lmXbVfwn8qrP0Oz5fTrTZDR8Mt/yq+MfQMJQz7+IMk ruh2MMBKC7iEtRu8mjmesoGWDzAhq5pcuZJO9Te05UTAXkdAM6s36ePiHo+MFBUP OfK0+pNzNqjvYZFWqKjZDt7oFmZDvI9GIaHXbXpT5Y9mgdo9bvk83WTxTw8JNInw E7Vk81whf3ZiHgSIrd+2XhCYFY8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNRItBC6THQZaPjFs04xVupWZodNMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzFiNWE0N2I2LTU1MTMtNDYxMC05NGNmLTFmZWVjNGVlZWNmMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xYjVhNDdi Ni01NTEzLTQ2MTAtOTRjZi0xZmVlYzRlZWVjZjMvMC9ENDQ4QjQxMEJBNEM3NDE5 NjhGOEM1QjM0RTMxNTZFQTU2NjY4NzRELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ5cYMA0GCSqGSIb3DQEBCwUAA4IBAQA8M7fwlG63E/DTT0GQdJY/kaD8NzG/ v8j3toSYNfbkTns5fc5R4VVx0oXVyGSO1JzO4TebBqjOMMLzFsVT2BR+DTI7ekzt qUFOdhXmL+Rqhz5ez74uHX0aTdzofNs/g5aaa7nbRamXh2J3R9EmMV823U4JD4Yl xP6SM6wURdU0chA+qelV+zHPc6V0ayznmXUGZmkTKFUCwmdJaJumpYeiKD9BCuAB vF33aWrrbMn8LswtLXZdRD9hcTR++VzFw31y+IrpSM1ILzTwjT6IHnuqZNPECt67 Wbi7vT38mHD5Jegoecbr6oqTAhgOcHLWZtNPPj8JnftbPJetQJ17so0B -----END CERTIFICATE-----Generated at Tue May 12 22:32:45 2026 by rpki-client