$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/41E81C122CFE1947633AAA5A517B7923E1A78966.cer File: 41E81C122CFE1947633AAA5A517B7923E1A78966.cer (raw, json) Hash identifier: R7Kt6l+T+n4LrQoBSsIjX6+o2kdkqf92IQKob43hCFQ= Subject key identifier: 41:E8:1C:12:2C:FE:19:47:63:3A:AA:5A:51:7B:79:23:E1:A7:89:66 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 06BE9FDD308A1049C890ECF4E10DF96CD4384C78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.mft caRepository: rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:45:12 +0000 Certificate not after: Sat 01 May 2027 23:50:12 +0000 Subordinate resources: IP: 202.160.139.0/24 IP: 2403:e380::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:be:9f:dd:30:8a:10:49:c8:90:ec:f4:e1:0d:f9:6c:d4:38:4c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:45:12 2026 GMT Not After : May 1 23:50:12 2027 GMT Subject: CN=41E81C122CFE1947633AAA5A517B7923E1A78966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5a:91:cb:05:60:bc:2a:ad:6c:60:05:c8:13: b6:70:eb:22:72:5c:a4:27:35:83:d6:b6:7b:bb:d8: 8a:66:68:fd:c0:04:64:77:e1:7a:ee:2d:a4:19:bb: 2f:e4:92:8f:9b:6b:44:fc:ce:9e:61:12:d6:e7:00: c4:da:20:5e:2f:25:41:d8:b8:fc:b9:38:d8:5e:b8: 15:d0:54:ad:77:36:80:93:61:e0:b2:88:9a:2c:82: ce:50:54:7e:88:1d:9e:c8:f9:fc:f9:fb:5e:01:a3: 33:02:c7:ba:5d:c8:c4:02:9b:de:db:bd:66:31:ee: 52:f6:06:3d:b2:22:09:a2:15:8b:a3:c4:23:94:6c: 68:b8:37:20:c4:82:e4:3c:18:d4:69:9a:8d:ce:41: bd:0e:35:5e:2b:e3:5f:5d:a2:cb:bc:f9:57:96:36: 62:eb:18:88:39:1c:68:78:f0:0e:57:c6:57:93:4a: 2b:c9:c0:7b:5a:a5:c5:2b:4a:1a:2c:b2:42:89:d5: 49:68:95:3b:9b:3a:dd:d2:a7:82:32:0b:17:ea:29: ba:6f:a1:2c:d2:86:22:f0:de:53:c8:04:57:6a:94: 55:85:33:67:c6:74:3e:bd:f0:66:87:48:16:e3:aa: 0d:4f:bc:73:6a:5e:db:e6:87:fa:0d:95:c0:63:f1: be:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 41:E8:1C:12:2C:FE:19:47:63:3A:AA:5A:51:7B:79:23:E1:A7:89:66 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/41E81C122CFE1947633AAA5A517B7923E1A78966.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.160.139.0/24 IPv6: 2403:e380::/32 Signature Algorithm: sha256WithRSAEncryption 08:5c:b1:56:e0:99:42:fb:f1:0b:5b:ae:f9:a6:c8:ea:d1:14: 02:b8:c0:c0:a6:b5:17:05:90:68:22:1a:54:77:b1:6b:7a:19: ff:08:ec:ec:48:52:39:9c:01:b8:b7:60:1e:d2:db:4f:12:52: 24:8c:1f:66:78:c7:8d:54:90:4e:54:7b:8b:2b:84:33:88:ff: a8:4a:01:23:d0:c7:20:96:d3:07:bc:47:ac:e1:9e:cb:7a:13: 46:1a:50:87:78:a0:ca:a4:c7:5a:6f:3a:da:92:50:46:2d:11: 3d:cb:d9:8c:8f:c9:f8:bf:e2:16:29:1b:cb:49:41:74:e0:da: 30:45:f9:cd:ae:ef:63:b0:93:52:f3:63:b4:f3:ef:af:45:88: 83:e5:20:a4:83:42:1a:db:a5:de:98:79:1a:b1:ed:85:d6:32: ae:da:d8:82:5f:71:99:9f:f7:16:0d:b4:15:f6:85:17:dc:da: 7b:ff:78:4d:5c:85:a6:6f:c8:24:69:45:af:c4:e4:b8:1f:6a: 01:10:4b:97:0b:51:65:d7:1a:1b:f5:50:03:5b:69:07:44:ad: cd:ec:59:7d:1c:1b:17:d3:99:d8:13:45:27:a8:83:48:97:b1: b9:96:84:31:ca:cb:22:c9:5f:f8:ab:a2:eb:c1:36:d2:39:b7: 4b:5e:4d:a8 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUBr6f3TCKEEnIkOz04Q35bNQ4THgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDUxMloX DTI3MDUwMTIzNTAxMlowMzExMC8GA1UEAxMoNDFFODFDMTIyQ0ZFMTk0NzYzM0FB QTVBNTE3Qjc5MjNFMUE3ODk2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5akcsFYLwqrWxgBcgTtnDrInJcpCc1g9a2e7vYimZo/cAEZHfheu4tpBm7 L+SSj5trRPzOnmES1ucAxNogXi8lQdi4/Lk42F64FdBUrXc2gJNh4LKImiyCzlBU fogdnsj5/Pn7XgGjMwLHul3IxAKb3tu9ZjHuUvYGPbIiCaIVi6PEI5RsaLg3IMSC 5DwY1Gmajc5BvQ41XivjX12iy7z5V5Y2YusYiDkcaHjwDlfGV5NKK8nAe1qlxStK GiyyQonVSWiVO5s63dKngjILF+opum+hLNKGIvDeU8gEV2qUVYUzZ8Z0Pr3wZodI FuOqDU+8c2pe2+aH+g2VwGPxvtcCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEHoHBIs/hlHYzqqWlF7eSPhp4lmMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzA3NGYyMTRhLWJmNTUtNDA0OC04NDVkLTIwNjc1ZmI1ZjJhNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wNzRmMjE0 YS1iZjU1LTQwNDgtODQ1ZC0yMDY3NWZiNWYyYTQvMC80MUU4MUMxMjJDRkUxOTQ3 NjMzQUFBNUE1MTdCNzkyM0UxQTc4OTY2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQAyqCLMA0EAgACMAcDBQAkA+OAMA0GCSqGSIb3DQEBCwUAA4IBAQAIXLFW4JlC +/ELW675psjq0RQCuMDAprUXBZBoIhpUd7Frehn/COzsSFI5nAG4t2Ae0ttPElIk jB9meMeNVJBOVHuLK4QziP+oSgEj0McgltMHvEes4Z7LehNGGlCHeKDKpMdabzra klBGLRE9y9mMj8n4v+IWKRvLSUF04NowRfnNru9jsJNS82O08++vRYiD5SCkg0Ia 26XemHkase2F1jKu2tiCX3GZn/cWDbQV9oUX3Np7/3hNXIWmb8gkaUWvxOS4H2oB EEuXC1Fl1xob9VADW2kHRK3N7Fl9HBsX05nYE0UnqINIl7G5loQxyssiyV/4q6Lr wTbSObdLXk2o -----END CERTIFICATE-----Generated at Tue May 5 22:08:58 2026 by rpki-client