$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer File: 0446D571B5FD57D22786B0872C74829904EAAB9F.cer (raw, json) Hash identifier: 6MQTWpMZuwaMprlRBsnEgNKu0LRvDNbilV2YGqd9dsw= Subject key identifier: 04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4EF3C31A55A0AE27662446741BBC510B79DDB540 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:58:31 +0000 Certificate not after: Sun 02 May 2027 00:03:31 +0000 Subordinate resources: IP: 103.123.96.0/22 IP: 202.43.248.0/21 IP: 2403:9f40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f3:c3:1a:55:a0:ae:27:66:24:46:74:1b:bc:51:0b:79:dd:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:58:31 2026 GMT Not After : May 2 00:03:31 2027 GMT Subject: CN=0446D571B5FD57D22786B0872C74829904EAAB9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4a:14:c7:71:86:f0:2a:07:58:6d:1d:9b:f6: 88:03:88:c1:6a:6f:83:02:63:7e:7d:1e:53:74:2b: 3f:78:d1:2c:e9:92:b9:04:f2:fa:1d:ef:ad:71:40: 71:88:b6:5e:f7:ef:e2:1d:5a:03:07:ef:6b:40:46: 44:9d:d0:83:50:d4:31:86:cc:aa:09:7c:3c:b7:29: d3:68:a1:f1:eb:9d:1d:d2:25:fe:14:ed:a5:5c:dc: d1:8b:54:75:92:80:67:3d:d1:c8:5e:84:04:51:47: 55:85:b1:73:ee:04:fe:39:0c:59:5f:3a:65:e9:2a: 9f:41:83:c1:89:a9:ed:de:69:8e:09:aa:4f:66:6b: c8:98:3c:b4:b4:17:5b:49:ec:e7:22:77:eb:ed:a4: e6:4b:1f:07:62:1d:f1:7f:32:6a:d6:95:1f:6e:4b: 4b:c8:a4:34:40:af:2c:53:27:1f:1e:b6:de:cc:73: 43:ca:70:10:62:d1:1d:be:05:3e:b5:26:25:84:53: 65:e0:05:ca:ce:a5:c5:ae:8b:7c:76:be:5a:3f:7b: 6c:80:95:37:8c:05:4f:86:f6:66:50:46:3f:da:8a: e7:82:8e:e9:74:63:e1:7e:19:88:f4:6d:1d:95:55: 76:d8:f7:d6:0e:a8:26:dd:e1:70:14:a6:52:49:47: b3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.123.96.0/22 202.43.248.0/21 IPv6: 2403:9f40::/32 Signature Algorithm: sha256WithRSAEncryption 3f:0b:74:ed:47:a6:90:fa:87:de:98:6d:b6:ca:33:3f:7d:d9: d0:88:87:02:cd:19:3e:84:e8:7d:87:f1:d2:ca:82:07:6e:6d: cb:de:24:1d:39:84:1c:80:8f:c1:9f:89:91:ea:2b:6e:ea:49: 22:98:b3:47:01:4c:5c:cd:9f:dd:75:65:0b:04:e6:61:e9:c5: 95:c3:60:bf:f7:80:86:69:d6:65:03:d5:3b:81:97:ac:b0:d6: 68:2a:c8:9d:e8:51:50:af:93:63:f8:b1:38:88:f8:0d:2e:d6: 02:e5:de:61:24:9f:11:df:1e:fb:d1:b8:c5:9f:42:d3:ab:e4: 72:8c:f1:aa:fc:c4:a8:10:5c:ff:91:74:ba:be:d7:d9:19:30: c1:22:0f:c8:ce:ba:8e:6b:ff:ee:d2:b5:0a:46:8f:f5:52:bd: 50:bd:63:0b:ad:2c:f9:81:27:0d:bb:02:15:16:fa:1a:ab:d7: 1b:fc:fe:9c:e9:9a:fa:ad:74:ce:36:88:75:23:7f:8a:8f:c4: 21:a9:84:fa:b5:4f:47:ca:ae:ac:d1:d4:00:13:f1:d0:6a:75: fe:6f:d1:ce:32:86:43:48:2e:c3:2c:3a:0e:a9:00:82:e6:6d: 6b:d3:93:de:89:c1:16:85:bc:72:1c:b7:2d:27:d5:f9:99:41: 49:af:86:48 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUTvPDGlWgridmJEZ0G7xRC3ndtUAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTgzMVoX DTI3MDUwMjAwMDMzMVowMzExMC8GA1UEAxMoMDQ0NkQ1NzFCNUZENTdEMjI3ODZC MDg3MkM3NDgyOTkwNEVBQUI5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALhKFMdxhvAqB1htHZv2iAOIwWpvgwJjfn0eU3QrP3jRLOmSuQTy+h3vrXFA cYi2Xvfv4h1aAwfva0BGRJ3Qg1DUMYbMqgl8PLcp02ih8eudHdIl/hTtpVzc0YtU dZKAZz3RyF6EBFFHVYWxc+4E/jkMWV86Zekqn0GDwYmp7d5pjgmqT2ZryJg8tLQX W0ns5yJ36+2k5ksfB2Id8X8yataVH25LS8ikNECvLFMnHx623sxzQ8pwEGLRHb4F PrUmJYRTZeAFys6lxa6LfHa+Wj97bICVN4wFT4b2ZlBGP9qK54KO6XRj4X4ZiPRt HZVVdtj31g6oJt3hcBSmUklHs2sCAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFARG1XG1/VfSJ4awhyx0gpkE6qufMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzFjMjg5NzA2LWE0ZjQtNGUxZi05YTZlLTAxYzljNTNjZDhmOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xYzI4OTcw Ni1hNGY0LTRlMWYtOWE2ZS0wMWM5YzUzY2Q4ZjkvMC8wNDQ2RDU3MUI1RkQ1N0Qy Mjc4NkIwODcyQzc0ODI5OTA0RUFBQjlGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQCZ3tgAwQDyiv4MA0EAgACMAcDBQAkA59AMA0GCSqGSIb3DQEBCwUAA4IBAQA/ C3TtR6aQ+ofemG22yjM/fdnQiIcCzRk+hOh9h/HSyoIHbm3L3iQdOYQcgI/Bn4mR 6itu6kkimLNHAUxczZ/ddWULBOZh6cWVw2C/94CGadZlA9U7gZessNZoKsid6FFQ r5Nj+LE4iPgNLtYC5d5hJJ8R3x770bjFn0LTq+RyjPGq/MSoEFz/kXS6vtfZGTDB Ig/IzrqOa//u0rUKRo/1Ur1QvWMLrSz5gScNuwIVFvoaq9cb/P6c6Zr6rXTONoh1 I3+Kj8QhqYT6tU9Hyq6s0dQAE/HQanX+b9HOMoZDSC7DLDoOqQCC5m1r05PeicEW hbxyHLctJ9X5mUFJr4ZI -----END CERTIFICATE-----Generated at Wed May 6 02:46:00 2026 by rpki-client