$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/380819CB34564C78D643A25A36874B03D1C8589A.cer File: 380819CB34564C78D643A25A36874B03D1C8589A.cer (raw, json) Hash identifier: O4UX137IotA3f3P5x2N+H1bL2BmKUREg7uNtvG/zb+w= Subject key identifier: 38:08:19:CB:34:56:4C:78:D6:43:A2:5A:36:87:4B:03:D1:C8:58:9A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 60DFDDFC479F04650360F2A706813D7AAA745C6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/380819CB34564C78D643A25A36874B03D1C8589A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:44:45 +0000 Certificate not after: Sun 02 May 2027 00:49:45 +0000 Subordinate resources: IP: 103.167.4.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 05:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:df:dd:fc:47:9f:04:65:03:60:f2:a7:06:81:3d:7a:aa:74:5c:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:44:45 2026 GMT Not After : May 2 00:49:45 2027 GMT Subject: CN=380819CB34564C78D643A25A36874B03D1C8589A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c2:a3:8b:c0:96:db:ef:7f:64:f6:a7:e3:c9: 4f:33:53:90:1a:31:f1:13:9f:4b:b9:a0:d2:48:85: ad:2b:36:ab:f3:20:0e:fa:4a:7b:b4:f9:f7:2f:1b: 0c:eb:5a:93:d2:fd:10:b5:fb:a2:d9:30:d5:b9:9b: c7:44:28:ee:86:2a:bf:54:69:ab:42:f1:d6:07:84: 0d:b6:a6:63:6e:35:02:5a:83:eb:2f:3f:e3:56:1a: c2:b8:8e:3e:0c:9a:af:4e:10:0d:c8:10:06:de:34: 7f:9b:e4:e8:c7:6b:70:84:0b:36:0c:9a:01:10:f5: c8:c6:d1:58:d0:31:c3:17:5c:80:ff:5d:5b:0d:10: 41:44:10:75:cc:1b:25:3f:ad:f1:88:80:23:05:68: 4a:48:7d:57:6f:12:c2:50:95:fc:71:1d:dd:45:91: 67:ef:01:34:59:1f:78:cf:b9:f5:81:cb:9f:fd:be: 8a:70:f8:fc:cf:d7:57:7d:02:35:53:fd:0e:5c:6a: bf:23:71:38:90:9f:b4:6d:f3:6e:a8:88:3d:3c:b3: f1:b5:0c:27:1b:b9:b4:15:1f:0f:1a:ad:d5:b8:9c: 49:87:31:c5:ec:33:16:ce:31:d2:d0:ba:33:32:99: 61:68:97:d2:67:1f:f1:67:22:47:36:1b:b7:2b:4d: 5b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 38:08:19:CB:34:56:4C:78:D6:43:A2:5A:36:87:4B:03:D1:C8:58:9A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/380819CB34564C78D643A25A36874B03D1C8589A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.4.0/23 Signature Algorithm: sha256WithRSAEncryption 29:d7:ad:62:3d:07:51:09:e1:66:e7:52:44:ae:5f:65:86:0a: 86:60:74:c3:15:cc:1f:9c:ee:9b:e0:d7:08:dd:52:ac:49:7d: 9b:b9:40:30:6a:2f:0a:4a:e3:94:ba:b5:30:b0:42:aa:17:48: 84:ec:27:31:ad:f2:bd:d5:2d:45:6e:ea:f1:56:34:d2:8b:77: 29:d8:19:94:84:aa:6e:b2:3b:d1:d8:55:61:84:a6:41:c6:f3: 43:67:fa:fb:59:7d:b5:fd:7b:98:e4:c6:30:5f:5b:f9:58:e5: a5:8e:73:29:54:e5:29:14:93:5d:4e:5f:8e:34:84:aa:ba:fa: 78:6c:25:4b:d7:a2:10:4c:92:56:94:04:a8:55:30:06:f0:2a: 1f:35:20:16:6f:5a:86:09:ba:68:e9:f3:a1:15:3d:2a:7b:1b: 46:6e:ed:46:46:3c:cb:f6:55:fb:80:70:db:42:08:53:92:13: fa:01:4e:1e:9f:56:c9:9e:f8:f7:47:49:2d:13:c1:a3:f2:7d: ec:b0:9e:13:24:7d:68:f2:6c:7f:21:4f:44:65:7f:00:fe:14: 6c:92:ad:90:9c:2f:49:d7:85:1f:44:aa:29:06:c1:01:2c:52: b6:71:d8:1b:21:35:ab:37:06:dc:78:a1:1f:85:2e:78:2d:e0: ad:de:18:12 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUYN/d/EefBGUDYPKnBoE9eqp0XG8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDQ0NVoX DTI3MDUwMjAwNDk0NVowMzExMC8GA1UEAxMoMzgwODE5Q0IzNDU2NEM3OEQ2NDNB MjVBMzY4NzRCMDNEMUM4NTg5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANvCo4vAltvvf2T2p+PJTzNTkBox8ROfS7mg0kiFrSs2q/MgDvpKe7T59y8b DOtak9L9ELX7otkw1bmbx0Qo7oYqv1Rpq0Lx1geEDbamY241AlqD6y8/41YawriO Pgyar04QDcgQBt40f5vk6MdrcIQLNgyaARD1yMbRWNAxwxdcgP9dWw0QQUQQdcwb JT+t8YiAIwVoSkh9V28SwlCV/HEd3UWRZ+8BNFkfeM+59YHLn/2+inD4/M/XV30C NVP9DlxqvyNxOJCftG3zbqiIPTyz8bUMJxu5tBUfDxqt1bicSYcxxewzFs4x0tC6 MzKZYWiX0mcf8WciRzYbtytNW+MCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDgIGcs0Vkx41kOiWjaHSwPRyFiaMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzYwYzE0Yjk5LTRlZTctNDIyYS1iMDY0LWRjYTMyMzZkNjc1Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82MGMxNGI5 OS00ZWU3LTQyMmEtYjA2NC1kY2EzMjM2ZDY3NTYvMC8zODA4MTlDQjM0NTY0Qzc4 RDY0M0EyNUEzNjg3NEIwM0QxQzg1ODlBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6cEMA0GCSqGSIb3DQEBCwUAA4IBAQAp161iPQdRCeFm51JErl9lhgqGYHTD FcwfnO6b4NcI3VKsSX2buUAwai8KSuOUurUwsEKqF0iE7CcxrfK91S1FburxVjTS i3cp2BmUhKpusjvR2FVhhKZBxvNDZ/r7WX21/XuY5MYwX1v5WOWljnMpVOUpFJNd Tl+ONISquvp4bCVL16IQTJJWlASoVTAG8CofNSAWb1qGCbpo6fOhFT0qextGbu1G RjzL9lX7gHDbQghTkhP6AU4en1bJnvj3R0ktE8Gj8n3ssJ4TJH1o8mx/IU9EZX8A /hRskq2QnC9J14UfRKopBsEBLFK2cdgbITWrNwbceKEfhS54LeCt3hgS -----END CERTIFICATE-----Generated at Fri May 8 07:30:45 2026 by rpki-client