$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer File: 40929298F65205185DF4DD6F4BE251452B43C09A.cer (raw, json) Hash identifier: Aycv3EdCvkmOsbEedQoygx4Gd9GByDMkcovJfjeRyW0= Subject key identifier: 40:92:92:98:F6:52:05:18:5D:F4:DD:6F:4B:E2:51:45:2B:43:C0:9A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2D26033CC82D86F089D0697A4F372F24D301C58E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:55:40 +0000 Certificate not after: Sun 02 May 2027 00:00:40 +0000 Subordinate resources: IP: 103.189.206.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:26:03:3c:c8:2d:86:f0:89:d0:69:7a:4f:37:2f:24:d3:01:c5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:55:40 2026 GMT Not After : May 2 00:00:40 2027 GMT Subject: CN=40929298F65205185DF4DD6F4BE251452B43C09A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:de:91:25:d9:f7:cb:ee:f4:bc:94:63:6b:42: 03:9e:b5:75:93:16:45:9c:35:3b:3c:e9:4a:a1:90: 3b:60:5c:f9:d8:35:1e:bc:f5:48:9d:74:cd:c3:c1: 43:e9:ac:eb:e7:18:e8:b6:c1:7b:c7:2b:ca:42:61: 17:7d:6f:c3:28:d0:6b:c8:eb:c5:bd:e6:05:7b:1f: b9:de:24:e5:8b:dc:76:11:e7:dd:44:26:a8:4f:85: 8a:7c:d8:76:0c:af:d9:26:96:e1:da:16:30:01:fd: c6:bc:ee:f2:f1:74:23:fc:c8:90:44:29:6d:d7:b9: d9:d7:5f:63:56:38:17:0a:29:e3:d5:9c:34:90:ed: b9:a8:af:71:b6:c3:9b:98:e9:e4:e8:76:e5:39:5a: 23:72:48:29:19:68:0d:43:e2:84:d8:98:dd:9d:17: 5f:2d:37:32:95:42:85:be:2c:b7:32:2f:0d:fc:f1: 05:dc:db:8c:5f:14:ba:52:73:fe:88:b6:bf:78:37: 92:7e:db:e3:cb:b6:02:a5:94:e0:98:f9:b5:18:a6: 27:36:a1:d8:80:77:8b:0e:cc:23:fe:9d:9c:05:71: af:b2:64:78:3e:34:42:f5:2e:34:06:15:56:76:eb: 05:a7:a7:e9:c0:42:14:c6:d8:af:63:0a:10:f5:85: 56:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:92:92:98:F6:52:05:18:5D:F4:DD:6F:4B:E2:51:45:2B:43:C0:9A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.206.0/23 Signature Algorithm: sha256WithRSAEncryption a7:2f:b7:4d:d3:15:01:48:44:89:a7:8b:64:d0:e4:ff:43:44: 5a:07:16:8b:58:33:57:7e:1e:0c:65:2b:5a:72:4a:d6:bf:47: 8e:fb:06:24:ef:8d:76:9b:e7:5e:f5:4c:1f:c1:d8:ad:34:a2: 8b:f8:15:96:6d:0f:80:90:25:e6:ec:5d:74:47:e7:48:43:11: c8:c3:5f:a8:27:60:1a:5f:be:2a:8c:35:e9:49:6a:f0:59:c8: d1:6e:0c:4f:8d:6c:8b:bb:ab:88:70:1b:80:53:b0:42:40:8d: e6:90:10:20:3d:ef:f3:bc:0f:36:8f:18:ed:8e:dd:15:dd:12: ee:37:bd:b8:f8:52:89:c6:e8:79:1c:01:1c:b4:b4:28:83:e6: 11:a4:9b:27:83:2b:39:0f:94:23:c6:4b:bc:e5:61:c0:24:5b: 07:b4:6d:bf:fe:bd:f0:d7:ed:82:3a:a3:9e:4b:4e:86:d4:4c: d5:3a:56:85:02:4b:8e:ed:a9:e3:db:fd:9e:e1:68:74:e2:71: ed:f1:c3:5a:a5:32:3e:6b:a6:53:34:ab:df:6f:4f:c0:b1:8d: 0f:dc:98:e3:b2:a8:d1:3d:d0:2a:57:5b:5e:04:b5:bc:71:3a: 60:66:0c:ea:01:ce:70:46:95:93:eb:25:34:f7:a5:60:78:ed: f3:9b:36:78 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIULSYDPMgthvCJ0Gl6TzcvJNMBxY4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTU0MFoX DTI3MDUwMjAwMDA0MFowMzExMC8GA1UEAxMoNDA5MjkyOThGNjUyMDUxODVERjRE RDZGNEJFMjUxNDUyQjQzQzA5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKPekSXZ98vu9LyUY2tCA561dZMWRZw1OzzpSqGQO2Bc+dg1Hrz1SJ10zcPB Q+ms6+cY6LbBe8crykJhF31vwyjQa8jrxb3mBXsfud4k5YvcdhHn3UQmqE+FinzY dgyv2SaW4doWMAH9xrzu8vF0I/zIkEQpbde52ddfY1Y4Fwop49WcNJDtuaivcbbD m5jp5Oh25TlaI3JIKRloDUPihNiY3Z0XXy03MpVChb4stzIvDfzxBdzbjF8UulJz /oi2v3g3kn7b48u2AqWU4Jj5tRimJzah2IB3iw7MI/6dnAVxr7JkeD40QvUuNAYV VnbrBaen6cBCFMbYr2MKEPWFVukCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFECSkpj2UgUYXfTdb0viUUUrQ8CaMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE4MzFlZWI0LWYzNTctNDVhNy05MjY1LTQyOGIwMDdhMDI3MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xODMxZWVi NC1mMzU3LTQ1YTctOTI2NS00MjhiMDA3YTAyNzAvMC80MDkyOTI5OEY2NTIwNTE4 NURGNERENkY0QkUyNTE0NTJCNDNDMDlBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ73OMA0GCSqGSIb3DQEBCwUAA4IBAQCnL7dN0xUBSESJp4tk0OT/Q0RaBxaL WDNXfh4MZStackrWv0eO+wYk7412m+de9UwfwditNKKL+BWWbQ+AkCXm7F10R+dI QxHIw1+oJ2AaX74qjDXpSWrwWcjRbgxPjWyLu6uIcBuAU7BCQI3mkBAgPe/zvA82 jxjtjt0V3RLuN724+FKJxuh5HAEctLQog+YRpJsngys5D5Qjxku85WHAJFsHtG2/ /r3w1+2COqOeS06G1EzVOlaFAkuO7anj2/2e4Wh04nHt8cNapTI+a6ZTNKvfb0/A sY0P3JjjsqjRPdAqV1teBLW8cTpgZgzqAc5wRpWT6yU096VgeO3zmzZ4 -----END CERTIFICATE-----Generated at Tue May 5 14:19:34 2026 by rpki-client