$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/202D68B92C393694107A2F9B59DF1822383F0A40.cer File: 202D68B92C393694107A2F9B59DF1822383F0A40.cer (raw, json) Hash identifier: TSI35J7E+mMerJXulnXWdudyVXI6qgo9UrmjOu/79F8= Subject key identifier: 20:2D:68:B9:2C:39:36:94:10:7A:2F:9B:59:DF:18:22:38:3F:0A:40 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 203B8EF6147D64882C6C8EC64E98B29437B80D8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.mft caRepository: rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:47:42 +0000 Certificate not after: Sun 02 May 2027 00:52:42 +0000 Subordinate resources: IP: 103.220.44.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3b:8e:f6:14:7d:64:88:2c:6c:8e:c6:4e:98:b2:94:37:b8:0d:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:47:42 2026 GMT Not After : May 2 00:52:42 2027 GMT Subject: CN=202D68B92C393694107A2F9B59DF1822383F0A40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5e:df:c9:d6:6a:7b:58:fd:77:95:08:85:81: e9:88:ad:ac:e8:6d:1f:86:8e:cd:5a:0e:7e:0b:02: ca:ce:7d:87:5e:65:a8:9b:ba:8f:80:51:01:8e:12: 44:c0:63:b3:ae:2b:99:0b:da:62:48:a2:66:7c:e5: e3:25:58:82:4e:cf:74:94:58:c9:00:b7:18:e7:1e: 95:f3:fe:05:dc:d7:ff:40:fc:66:57:b4:51:82:d8: 9a:e9:55:67:18:84:7b:7d:9a:21:3f:27:73:8a:58: 60:09:50:63:20:a9:6b:c7:81:cc:8f:d9:f4:24:7a: 9f:8b:08:d0:f9:72:f8:ca:f7:80:6f:3c:50:bf:6c: 30:dd:19:df:98:1c:66:c1:82:8d:83:13:58:84:59: f6:12:94:2a:ea:26:76:08:15:01:22:35:40:f1:95: 2b:a8:7c:67:7f:fe:99:6d:13:26:ed:75:cc:c3:1e: c2:e1:99:87:32:49:30:45:ab:f2:64:1c:3c:19:e3: bd:1d:ac:b4:12:8b:08:19:d3:d9:c7:ac:68:c5:20: ae:12:de:5f:7e:ac:f8:6f:15:46:95:98:39:f1:25: ab:88:71:97:db:fc:d4:b1:50:2f:2f:51:03:ff:06: 69:fb:c4:c4:0a:56:59:ee:d9:d9:c2:80:86:fa:d6: 82:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:2D:68:B9:2C:39:36:94:10:7A:2F:9B:59:DF:18:22:38:3F:0A:40 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.220.44.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:a8:83:a4:9e:a7:b1:ef:d0:80:cb:65:ba:ff:44:de:12:09: 16:70:f0:55:b2:6f:2f:30:f6:19:9c:93:a8:ec:68:78:7a:ed: 02:ff:93:c2:1f:21:91:c6:87:a4:a7:4b:b0:56:3d:64:7e:bf: 7a:2a:9b:1b:28:03:55:8c:8e:e3:e6:b9:be:f4:6b:46:70:3e: 6d:6c:99:2e:c9:32:e0:d3:2f:fd:99:8d:08:f0:ba:b2:8c:25: 81:a3:d6:a2:f2:ce:ce:f6:00:13:46:a7:05:7e:2d:3d:8e:17: 8c:a1:1f:d0:97:40:a5:39:b9:fa:91:40:71:0b:e3:ec:e9:34: 7c:e0:f2:62:4f:42:3f:08:67:54:c7:48:7d:da:b1:4f:ee:fb: a7:47:1c:e2:da:a1:f6:fc:b6:3c:d7:e4:a6:a8:b8:fc:32:7c: e8:7d:f3:a0:77:91:3a:3c:aa:64:ba:9f:7a:8f:61:d2:4f:c8: 18:37:7a:a4:f0:31:e1:85:e4:fc:ea:36:c0:86:db:c0:84:38: a0:35:32:df:16:ec:73:7f:db:f9:97:10:11:9c:53:0c:7c:e1: 72:7d:cf:09:13:9a:c5:43:fc:08:e9:41:e7:1a:95:24:c3:4f: 8d:57:c4:96:dd:ea:4e:b1:d8:cf:a8:20:44:e5:cd:94:71:96: ce:4d:e2:e4 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUIDuO9hR9ZIgsbI7GTpiylDe4DYswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDc0MloX DTI3MDUwMjAwNTI0MlowMzExMC8GA1UEAxMoMjAyRDY4QjkyQzM5MzY5NDEwN0Ey RjlCNTlERjE4MjIzODNGMEE0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL5e38nWantY/XeVCIWB6YitrOhtH4aOzVoOfgsCys59h15lqJu6j4BRAY4S RMBjs64rmQvaYkiiZnzl4yVYgk7PdJRYyQC3GOcelfP+BdzX/0D8Zle0UYLYmulV ZxiEe32aIT8nc4pYYAlQYyCpa8eBzI/Z9CR6n4sI0Ply+Mr3gG88UL9sMN0Z35gc ZsGCjYMTWIRZ9hKUKuomdggVASI1QPGVK6h8Z3/+mW0TJu11zMMewuGZhzJJMEWr 8mQcPBnjvR2stBKLCBnT2cesaMUgrhLeX36s+G8VRpWYOfElq4hxl9v81LFQLy9R A/8GafvExApWWe7Z2cKAhvrWggMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCAtaLksOTaUEHovm1nfGCI4PwpAMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzY1NzI5MjkxLWExYTctNGIxOS05M2Y2LTFkODQ1NzRhNjdhZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82NTcyOTI5 MS1hMWE3LTRiMTktOTNmNi0xZDg0NTc0YTY3YWUvMC8yMDJENjhCOTJDMzkzNjk0 MTA3QTJGOUI1OURGMTgyMjM4M0YwQTQwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ9wsMA0GCSqGSIb3DQEBCwUAA4IBAQCNqIOknqex79CAy2W6/0TeEgkWcPBV sm8vMPYZnJOo7Gh4eu0C/5PCHyGRxoekp0uwVj1kfr96KpsbKANVjI7j5rm+9GtG cD5tbJkuyTLg0y/9mY0I8LqyjCWBo9ai8s7O9gATRqcFfi09jheMoR/Ql0ClObn6 kUBxC+Ps6TR84PJiT0I/CGdUx0h92rFP7vunRxzi2qH2/LY81+SmqLj8MnzoffOg d5E6PKpkup96j2HST8gYN3qk8DHhheT86jbAhtvAhDigNTLfFuxzf9v5lxARnFMM fOFyfc8JE5rFQ/wI6UHnGpUkw0+NV8SW3epOsdjPqCBE5c2UcZbOTeLk -----END CERTIFICATE-----Generated at Tue May 5 18:19:55 2026 by rpki-client