$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer File: 0A323FDFE5D2807EC2A8D77A7858F4989729B242.cer (raw, json) Hash identifier: DcAoT1aMeNoAumfLCABdaiuRGE7m0S+h4+Vi0RyV7PI= Subject key identifier: 0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 44882A8E1011BB9371C059772B50CD38EC083D08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft caRepository: rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:10:43 +0000 Certificate not after: Sun 02 May 2027 01:15:43 +0000 Subordinate resources: IP: 103.181.136.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:88:2a:8e:10:11:bb:93:71:c0:59:77:2b:50:cd:38:ec:08:3d:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:10:43 2026 GMT Not After : May 2 01:15:43 2027 GMT Subject: CN=0A323FDFE5D2807EC2A8D77A7858F4989729B242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b4:a4:f8:06:7a:83:a3:b7:e9:5f:0b:4b:c3: de:a5:7c:20:26:ce:0f:bb:7d:f7:c0:9e:a0:be:75: 33:07:a8:a1:2a:f6:1d:a2:bc:07:46:24:b3:7a:a8: 34:f4:52:d2:dd:24:00:d1:fa:fe:31:6d:dc:54:e6: 0d:15:fe:15:26:bb:c0:48:69:79:bf:f2:3c:4d:5c: 9b:fc:80:e8:8c:25:42:62:e5:7e:bc:39:9b:45:fb: e5:cf:7e:e6:b3:02:81:7a:88:e1:ba:60:c5:cb:ce: 49:04:4d:80:2b:10:d4:86:2c:67:d6:fd:3b:62:91: 64:55:4a:fd:bb:a0:16:19:31:95:81:fa:a1:84:0b: cc:50:4a:de:3c:e4:69:b9:67:5e:97:8e:ae:f6:01: e4:1e:9e:e5:12:c2:81:fa:4e:7d:41:a3:48:24:6c: a0:7b:9a:92:65:38:fb:b8:c8:64:81:22:d7:3f:32: 27:25:3a:2f:59:60:66:ae:2c:09:55:31:d3:a8:5b: 41:4d:79:a1:13:67:d5:d0:f2:ab:ca:a1:11:f6:f3: 40:89:b8:09:fc:d4:15:6d:ca:34:79:c8:0e:1e:20: ef:8a:83:04:77:01:6e:46:89:58:b4:9c:1b:7d:32: 29:f8:0c:a5:f1:c3:fb:83:13:7f:be:7d:d2:43:6d: e4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0A:32:3F:DF:E5:D2:80:7E:C2:A8:D7:7A:78:58:F4:98:97:29:B2:42 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/0A323FDFE5D2807EC2A8D77A7858F4989729B242.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.181.136.0/23 Signature Algorithm: sha256WithRSAEncryption 62:73:95:62:4a:b2:92:7c:c9:0a:0e:ac:ed:06:61:48:7b:3c: 9c:39:2f:c4:91:48:06:7d:db:45:70:36:c1:d3:ae:e8:4f:b3: 84:f4:fc:28:57:0f:3d:73:98:11:12:ca:fd:b5:6e:c7:31:88: 1e:35:dd:d6:12:19:8d:0f:7e:37:bb:bd:1a:5e:cc:ba:92:62: bc:7d:26:86:8a:7c:87:54:11:82:3b:09:aa:56:c2:76:fc:40: 24:20:ba:3e:98:a0:98:98:04:66:6b:e6:8b:61:ab:be:b8:fe: b1:5c:c7:31:df:0a:cb:af:be:e6:63:6b:44:83:d5:26:b2:b0: fb:86:51:6c:6f:09:8a:95:a8:57:cd:0c:76:c5:8e:96:87:44: cd:d8:12:7b:7b:ed:c2:54:f4:87:b6:d4:17:a5:0d:e4:5b:2a: 11:df:c4:88:ae:29:5a:62:b3:3c:c8:37:43:b7:9b:36:a6:e9: 6b:7b:c4:80:62:c5:28:93:72:b4:61:18:a2:4e:dc:19:6d:dd: ed:3d:7c:76:4d:8c:64:00:d5:c6:5c:7d:04:cc:2e:7a:f7:4d: 81:be:d2:b0:71:dc:e6:f7:f8:49:7d:07:f0:a7:d1:09:88:69: 41:7b:9f:7c:8c:20:cd:30:e5:de:68:bb:da:cc:43:87:2d:fa: 6e:c7:13:b4 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIURIgqjhARu5NxwFl3K1DNOOwIPQgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTA0M1oX DTI3MDUwMjAxMTU0M1owMzExMC8GA1UEAxMoMEEzMjNGREZFNUQyODA3RUMyQThE NzdBNzg1OEY0OTg5NzI5QjI0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJO0pPgGeoOjt+lfC0vD3qV8ICbOD7t998CeoL51MweooSr2HaK8B0Yks3qo NPRS0t0kANH6/jFt3FTmDRX+FSa7wEhpeb/yPE1cm/yA6IwlQmLlfrw5m0X75c9+ 5rMCgXqI4bpgxcvOSQRNgCsQ1IYsZ9b9O2KRZFVK/bugFhkxlYH6oYQLzFBK3jzk ablnXpeOrvYB5B6e5RLCgfpOfUGjSCRsoHuakmU4+7jIZIEi1z8yJyU6L1lgZq4s CVUx06hbQU15oRNn1dDyq8qhEfbzQIm4CfzUFW3KNHnIDh4g74qDBHcBbkaJWLSc G30yKfgMpfHD+4MTf7590kNt5DMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAoyP9/l0oB+wqjXenhY9JiXKbJCMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg3NmZkYzYwLTgwMjMtNDBjZC1hYWE0LWNkNmVkMjJjNGQ0NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84NzZmZGM2 MC04MDIzLTQwY2QtYWFhNC1jZDZlZDIyYzRkNDUvMC8wQTMyM0ZERkU1RDI4MDdF QzJBOEQ3N0E3ODU4RjQ5ODk3MjlCMjQyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7WIMA0GCSqGSIb3DQEBCwUAA4IBAQBic5ViSrKSfMkKDqztBmFIezycOS/E kUgGfdtFcDbB067oT7OE9PwoVw89c5gREsr9tW7HMYgeNd3WEhmND343u70aXsy6 kmK8fSaGinyHVBGCOwmqVsJ2/EAkILo+mKCYmARma+aLYau+uP6xXMcx3wrLr77m Y2tEg9UmsrD7hlFsbwmKlahXzQx2xY6Wh0TN2BJ7e+3CVPSHttQXpQ3kWyoR38SI rilaYrM8yDdDt5s2pulre8SAYsUok3K0YRiiTtwZbd3tPXx2TYxkANXGXH0EzC56 902BvtKwcdzm9/hJfQfwp9EJiGlBe598jCDNMOXeaLvazEOHLfpuxxO0 -----END CERTIFICATE-----Generated at Tue May 5 14:06:12 2026 by rpki-client