$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer File: 1661480FF274E46E5E74274531EDCB741CA1C734.cer (raw, json) Hash identifier: x7NVaKCknbHDNre2zZBVFaC+oBSkhqh8Jn7/e5mODsI= Subject key identifier: 16:61:48:0F:F2:74:E4:6E:5E:74:27:45:31:ED:CB:74:1C:A1:C7:34 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3FD06E91C2AA841598ECF6CAE754FFA490012A10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft caRepository: rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:55:57 +0000 Certificate not after: Sun 02 May 2027 00:00:57 +0000 Subordinate resources: IP: 43.225.184.0/22 IP: 103.206.252.0/22 IP: 103.246.0.0/22 IP: 106.0.48.0/22 IP: 202.43.228.0/22 IP: 202.154.184.0/21 IP: 223.130.20.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 May 2026 16:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d0:6e:91:c2:aa:84:15:98:ec:f6:ca:e7:54:ff:a4:90:01:2a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:55:57 2026 GMT Not After : May 2 00:00:57 2027 GMT Subject: CN=1661480FF274E46E5E74274531EDCB741CA1C734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4e:00:b6:9b:7e:b6:cd:30:de:3b:65:4f:31: 37:c6:49:4a:51:d4:2c:70:e7:10:c0:f8:0f:70:4f: e3:7e:c8:23:6f:1c:89:05:de:92:2f:e8:15:b1:40: 0d:63:be:a2:a7:85:24:4e:c2:ff:1a:12:b7:1f:39: 9d:d0:22:2c:4e:33:ec:f1:cd:ca:b2:7a:53:d5:55: d4:71:6b:6c:17:70:28:a4:6f:a4:0d:73:41:a5:42: 72:52:32:70:e6:ad:4a:a2:7e:dd:bd:1f:07:ea:03: 1d:97:29:e0:f2:d1:9f:b0:f7:72:3f:19:10:47:a9: 99:00:fc:cd:66:02:4a:13:a8:b8:d9:95:75:06:2c: 6a:53:72:78:34:e7:1e:3e:97:42:5d:8e:f7:75:f7: f1:6d:a6:0d:6f:34:ad:df:ae:8a:46:f5:b1:73:a4: af:72:19:64:7d:f4:04:a7:e4:9d:6a:40:fa:e3:6f: d0:54:7f:57:97:24:ca:1d:bb:1e:1a:c1:19:95:2d: fd:44:16:92:2b:a3:7f:48:ef:1f:be:d0:ea:1a:b6: 26:8c:93:a4:18:fd:46:6d:17:cd:59:74:ff:d1:34: 48:8b:d1:d4:e0:00:45:c2:57:ec:1f:dd:fb:06:2f: 3b:f0:3b:79:70:c2:bd:b7:33:e5:e7:b0:f7:fd:d6: cf:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 16:61:48:0F:F2:74:E4:6E:5E:74:27:45:31:ED:CB:74:1C:A1:C7:34 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.225.184.0/22 103.206.252.0/22 103.246.0.0/22 106.0.48.0/22 202.43.228.0/22 202.154.184.0/21 223.130.20.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:45:4d:13:27:2b:6e:c1:ce:44:47:44:fc:10:81:a5:56:04: 31:35:66:70:08:cf:68:a6:b2:e7:f3:ed:ac:a6:6b:ad:30:f3: 0a:8d:3a:0e:a9:07:e2:ae:ac:55:0f:06:f6:92:12:3a:1a:b7: 78:0f:23:7a:05:63:7c:a0:91:3a:12:ac:6a:ad:9e:a1:ba:96: f5:56:e4:a8:90:fb:5b:ea:4c:53:95:d5:f0:9d:50:6b:c7:6f: c0:bc:2e:80:8d:4c:3c:93:36:c6:be:31:c3:23:3d:36:a5:72: 20:1f:29:e5:20:45:57:f7:f9:ae:64:c1:d9:50:68:b3:ad:9e: 51:4d:7b:f2:c0:88:0b:2d:41:30:90:32:e7:a8:ae:75:b9:8e: 4b:8c:41:63:bf:9a:fc:a4:d4:65:9a:71:dd:ce:a1:1a:7c:f3: d0:bc:aa:94:51:4a:df:e4:7d:44:16:d0:ca:f6:d9:80:67:1c: 7c:3c:0b:02:09:18:ba:17:b0:be:34:37:43:6f:ef:b5:6d:d3: 23:20:01:b9:95:f9:a5:87:6f:07:b1:9f:c8:cf:b5:f2:83:dc: d7:be:e5:d6:ac:88:9d:c8:0d:4a:8f:33:3c:63:21:c9:2e:30: 34:02:ab:d4:c0:82:06:0b:cc:42:e7:0b:da:33:6e:10:58:29: 08:fc:8b:b3 -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUP9BukcKqhBWY7PbK51T/pJABKhAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTU1N1oX DTI3MDUwMjAwMDA1N1owMzExMC8GA1UEAxMoMTY2MTQ4MEZGMjc0RTQ2RTVFNzQy NzQ1MzFFRENCNzQxQ0ExQzczNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALpOALabfrbNMN47ZU8xN8ZJSlHULHDnEMD4D3BP437II28ciQXeki/oFbFA DWO+oqeFJE7C/xoStx85ndAiLE4z7PHNyrJ6U9VV1HFrbBdwKKRvpA1zQaVCclIy cOatSqJ+3b0fB+oDHZcp4PLRn7D3cj8ZEEepmQD8zWYCShOouNmVdQYsalNyeDTn Hj6XQl2O93X38W2mDW80rd+uikb1sXOkr3IZZH30BKfknWpA+uNv0FR/V5ckyh27 HhrBGZUt/UQWkiujf0jvH77Q6hq2JoyTpBj9Rm0XzVl0/9E0SIvR1OAARcJX7B/d +wYvO/A7eXDCvbcz5eew9/3Wz9UCAwEAAaOCAt0wggLZMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBZhSA/ydORuXnQnRTHty3Qcocc0MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE4N2Q3OWJhLWZiNTUtNDlhNS05NjdiLTFlZGM3NDlkMDEyOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xODdkNzli YS1mYjU1LTQ5YTUtOTY3Yi0xZWRjNzQ5ZDAxMjgvMC8xNjYxNDgwRkYyNzRFNDZF NUU3NDI3NDUzMUVEQ0I3NDFDQTFDNzM0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAq AwQCK+G4AwQCZ878AwQCZ/YAAwQCagAwAwQCyivkAwQDypq4AwQC34IUMA0GCSqG SIb3DQEBCwUAA4IBAQAaRU0TJytuwc5ER0T8EIGlVgQxNWZwCM9oprLn8+2spmut MPMKjToOqQfirqxVDwb2khI6Grd4DyN6BWN8oJE6EqxqrZ6hupb1VuSokPtb6kxT ldXwnVBrx2/AvC6AjUw8kzbGvjHDIz02pXIgHynlIEVX9/muZMHZUGizrZ5RTXvy wIgLLUEwkDLnqK51uY5LjEFjv5r8pNRlmnHdzqEafPPQvKqUUUrf5H1EFtDK9tmA Zxx8PAsCCRi6F7C+NDdDb++1bdMjIAG5lfmlh28HsZ/Iz7Xyg9zXvuXWrIidyA1K jzM8YyHJLjA0AqvUwIIGC8xC5wvaM24QWCkI/Iuz -----END CERTIFICATE-----Generated at Mon May 4 20:46:08 2026 by rpki-client