$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer File: 4DD4106B03003D9C5B51BF893631C8E467E07F65.cer (raw, json) Hash identifier: C2twCQzN3nCsDIPSkJjkGxO296cBlo7D1EnuDMTBaGk= Subject key identifier: 4D:D4:10:6B:03:00:3D:9C:5B:51:BF:89:36:31:C8:E4:67:E0:7F:65 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3641288735FFEBE13B12715DF3A387155E5B8238 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:58:17 +0000 Certificate not after: Sun 02 May 2027 00:03:17 +0000 Subordinate resources: IP: 103.150.148.0/23 IP: 2406:540::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:41:28:87:35:ff:eb:e1:3b:12:71:5d:f3:a3:87:15:5e:5b:82:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:58:17 2026 GMT Not After : May 2 00:03:17 2027 GMT Subject: CN=4DD4106B03003D9C5B51BF893631C8E467E07F65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:93:7e:70:6a:f4:8a:45:b1:3b:d8:a0:20:70: b4:b3:44:9e:c5:3a:34:05:35:cb:a1:59:29:66:f8: de:d6:2b:f9:c0:20:60:a9:66:38:ac:ad:c7:26:ae: 6d:75:8b:9b:6e:8d:83:dd:3f:9b:5f:75:55:08:49: 65:79:a9:18:4c:c4:f6:30:bb:79:07:f0:14:59:eb: 93:45:74:80:28:5a:38:f7:e0:98:4e:e7:59:5b:fd: 8a:e6:d8:39:01:39:9a:ba:76:f5:41:87:fb:a1:84: 9e:7b:92:e2:46:b6:9f:af:e6:5f:a2:b4:ba:11:b2: fe:52:7e:33:2a:a1:4e:27:9c:e5:0d:fb:95:ec:6d: 54:54:14:57:14:39:e4:9b:0c:f6:22:a3:69:4b:8d: fa:2f:5a:7a:e1:eb:ee:a0:55:27:79:43:81:f7:05: 6d:64:56:89:a1:80:b7:bb:6b:8f:9c:77:f0:95:d3: 23:a6:25:df:e9:d7:21:44:f5:f4:dd:d1:79:c6:7e: ca:ac:30:3d:24:b2:60:4a:c8:f9:35:ee:80:e7:32: e4:39:a8:11:eb:1a:66:ea:f9:9b:9a:29:66:c9:d4: f6:50:e7:4e:90:2b:68:c3:91:ee:e6:06:43:48:be: 69:fc:dc:33:de:84:da:c5:2c:f8:6a:ec:0e:05:fa: ab:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4D:D4:10:6B:03:00:3D:9C:5B:51:BF:89:36:31:C8:E4:67:E0:7F:65 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.148.0/23 IPv6: 2406:540::/32 Signature Algorithm: sha256WithRSAEncryption 62:24:71:85:34:e3:06:fb:fb:49:65:d6:32:3e:21:57:5f:8c: fe:2e:af:44:0f:5f:38:7f:ad:ac:53:2a:e4:b6:5e:a2:55:ec: 26:d8:8b:51:ff:8a:b0:dc:6f:7a:a3:6e:ed:3a:74:da:d6:56: 31:1e:04:03:8d:64:23:96:e1:70:ee:c1:24:fd:48:de:aa:4c: 71:87:ed:31:a1:c6:ca:9d:73:e0:a7:41:d3:21:94:3d:41:b0: d1:9b:86:95:5e:f8:2c:5b:a2:97:4e:b4:e8:fe:bc:86:d6:cd: e0:84:a2:ae:eb:f9:89:0c:a9:f4:ae:16:71:96:e1:32:9c:4c: 90:e3:f4:42:fc:48:bf:bd:b9:76:71:58:16:ee:63:45:e8:0d: ca:aa:dc:db:09:76:42:d8:ce:c5:77:ab:5a:a0:fa:a0:34:8d: 95:03:08:7c:25:16:d9:5e:81:e0:f8:0e:a4:8f:8f:b9:99:f0: 7d:a8:49:0f:b4:98:40:7c:bd:41:87:58:e0:40:1e:8e:5d:e3: 37:85:a7:ad:49:6c:15:b8:8d:97:19:41:5a:39:15:e0:14:00: 9a:7b:22:65:a9:9e:a8:33:9b:37:a8:a2:e1:33:9e:ec:ed:77: cd:c8:83:e5:94:b3:26:9c:15:bd:ed:35:43:f3:e5:bc:44:5d: 3f:19:c3:54 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUNkEohzX/6+E7EnFd86OHFV5bgjgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTgxN1oX DTI3MDUwMjAwMDMxN1owMzExMC8GA1UEAxMoNERENDEwNkIwMzAwM0Q5QzVCNTFC Rjg5MzYzMUM4RTQ2N0UwN0Y2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOaTfnBq9IpFsTvYoCBwtLNEnsU6NAU1y6FZKWb43tYr+cAgYKlmOKytxyau bXWLm26Ng90/m191VQhJZXmpGEzE9jC7eQfwFFnrk0V0gChaOPfgmE7nWVv9iubY OQE5mrp29UGH+6GEnnuS4ka2n6/mX6K0uhGy/lJ+MyqhTiec5Q37lextVFQUVxQ5 5JsM9iKjaUuN+i9aeuHr7qBVJ3lDgfcFbWRWiaGAt7trj5x38JXTI6Yl3+nXIUT1 9N3RecZ+yqwwPSSyYErI+TXugOcy5DmoEesaZur5m5opZsnU9lDnTpAraMOR7uYG Q0i+afzcM96E2sUs+GrsDgX6q5UCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE3UEGsDAD2cW1G/iTYxyORn4H9lMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzFiZGU5MzZiLTUzY2YtNGIwOC1iNWY3LTJiOTBkZTIxZmU5NC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xYmRlOTM2 Yi01M2NmLTRiMDgtYjVmNy0yYjkwZGUyMWZlOTQvMC80REQ0MTA2QjAzMDAzRDlD NUI1MUJGODkzNjMxQzhFNDY3RTA3RjY1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5aUMA0EAgACMAcDBQAkBgVAMA0GCSqGSIb3DQEBCwUAA4IBAQBiJHGFNOMG +/tJZdYyPiFXX4z+Lq9ED184f62sUyrktl6iVewm2ItR/4qw3G96o27tOnTa1lYx HgQDjWQjluFw7sEk/Ujeqkxxh+0xocbKnXPgp0HTIZQ9QbDRm4aVXvgsW6KXTrTo /ryG1s3ghKKu6/mJDKn0rhZxluEynEyQ4/RC/Ei/vbl2cVgW7mNF6A3KqtzbCXZC 2M7Fd6taoPqgNI2VAwh8JRbZXoHg+A6kj4+5mfB9qEkPtJhAfL1Bh1jgQB6OXeM3 haetSWwVuI2XGUFaORXgFACaeyJlqZ6oM5s3qKLhM57s7XfNyIPllLMmnBW97TVD 8+W8RF0/GcNU -----END CERTIFICATE-----Generated at Tue May 5 17:52:02 2026 by rpki-client