$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer File: AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer (raw, json) Hash identifier: U/BN2RPm4qeP7+SFpzFIB/590rjuTnO7C0TFvCMEUU0= Subject key identifier: AC:23:DD:AA:2C:89:DF:C4:3F:0D:12:03:31:CD:3C:8F:1E:60:D1:CA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1A4AFFAA191321DF79FCC52CEEDCE6132BB94AD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:38:19 +0000 Certificate not after: Sun 02 May 2027 01:43:19 +0000 Subordinate resources: AS: 149675 IP: 103.184.18.0/23 IP: 202.160.139.0/24 IP: 2001:df2:5c0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:4a:ff:aa:19:13:21:df:79:fc:c5:2c:ee:dc:e6:13:2b:b9:4a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:38:19 2026 GMT Not After : May 2 01:43:19 2027 GMT Subject: CN=AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a8:08:63:03:f5:cf:84:fd:69:af:35:81:36: d0:3d:9b:da:cb:2c:0a:10:f0:16:c3:83:db:d5:a8: 01:05:6c:6a:34:be:4e:ca:d4:59:f3:18:f4:a7:31: fc:20:ac:89:f4:4b:9a:05:75:78:88:8c:94:d3:bf: f6:e3:e5:9d:67:5d:ec:15:ac:e6:52:b0:f9:be:b9: 78:3c:9d:54:3e:a5:8a:06:e4:fd:13:d3:23:b4:f0: f7:15:9d:cb:ad:30:cc:24:f0:c0:72:20:91:70:f1: 97:ce:91:1b:ad:27:2d:55:49:7f:30:4c:07:a6:8b: 7a:f4:3b:d4:89:f6:9b:f2:ac:02:59:f8:77:53:89: 8c:31:e3:10:22:49:1b:2e:d0:95:ec:1c:10:f9:d3: c7:81:d6:3a:53:59:50:35:70:df:49:46:06:af:2f: ad:b4:e9:0e:07:7d:3a:f0:1e:72:cb:1c:8a:10:5c: cd:7f:b3:cb:08:36:95:dc:0a:60:ed:0b:00:7f:1b: 5e:b5:64:dc:56:da:d4:3f:cb:f6:3b:1e:ab:9b:18: a5:81:02:0a:f2:8d:58:40:f6:33:27:10:e0:49:a5: f7:ce:37:f8:5a:2e:a4:29:5d:9c:38:61:ab:d6:d4: 87:71:c2:b8:b4:e1:48:ad:e8:47:6f:c1:2c:22:28: b8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AC:23:DD:AA:2C:89:DF:C4:3F:0D:12:03:31:CD:3C:8F:1E:60:D1:CA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.18.0/23 202.160.139.0/24 IPv6: 2001:df2:5c0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 149675 Signature Algorithm: sha256WithRSAEncryption 4f:9f:11:22:83:52:57:27:4d:be:96:8f:0a:c9:1d:0a:91:97: 0c:47:f5:bd:83:68:46:91:a5:71:64:d2:cc:90:14:ec:81:f9: 01:73:3d:c9:ea:61:cc:80:6f:22:87:eb:f7:f6:c7:5c:51:12: c6:93:03:e6:a2:36:69:7c:77:04:25:47:85:81:41:f2:40:95: 55:a6:4b:64:89:ec:78:a3:82:ca:07:06:c5:43:6a:4e:a3:b4: 6b:df:83:ef:22:9c:6c:16:22:aa:cc:cf:a8:38:d9:49:d1:5c: af:51:bd:c2:5b:a8:75:c3:30:36:d7:f3:49:e6:7c:19:6b:0f: bc:96:83:eb:97:6f:ba:3d:b3:e5:24:9a:d1:d3:47:e8:d0:42: 6d:b0:86:f8:f2:9b:a9:29:74:34:d7:26:72:ea:0f:0f:4c:d9: 69:e0:06:c6:67:5e:d2:35:76:7e:40:b3:6a:86:5c:93:a1:dc: 75:9c:dd:bf:14:5d:37:d6:b8:b0:70:33:c9:09:8e:63:9d:00: ad:4f:a7:91:30:5c:51:ac:8b:a2:48:1b:05:8a:b8:32:a6:5c: 9e:3b:83:ea:dd:b7:d8:a8:cb:dd:06:51:01:13:5a:3f:ab:56: 79:ce:6a:19:66:4b:53:35:0f:1e:d0:68:7b:13:c3:a4:57:1d: 93:c6:c7:84 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUGkr/qhkTId95/MUs7tzmEyu5StcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzgxOVoX DTI3MDUwMjAxNDMxOVowMzExMC8GA1UEAxMoQUMyM0REQUEyQzg5REZDNDNGMEQx MjAzMzFDRDNDOEYxRTYwRDFDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKqoCGMD9c+E/WmvNYE20D2b2sssChDwFsOD29WoAQVsajS+TsrUWfMY9Kcx /CCsifRLmgV1eIiMlNO/9uPlnWdd7BWs5lKw+b65eDydVD6ligbk/RPTI7Tw9xWd y60wzCTwwHIgkXDxl86RG60nLVVJfzBMB6aLevQ71In2m/KsAln4d1OJjDHjECJJ Gy7QlewcEPnTx4HWOlNZUDVw30lGBq8vrbTpDgd9OvAecsscihBczX+zywg2ldwK YO0LAH8bXrVk3Fba1D/L9jseq5sYpYECCvKNWED2MycQ4Eml9843+FoupCldnDhh q9bUh3HCuLThSK3oR2/BLCIouG0CAwEAAaOCAuwwggLoMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKwj3aosid/EPw0SAzHNPI8eYNHKMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2IwZDkxNGVmLTBiMWYtNDkwYi04MDhkLWEyN2I4M2ZmOWEzZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iMGQ5MTRl Zi0wYjFmLTQ5MGItODA4ZC1hMjdiODNmZjlhM2UvMC9BQzIzRERBQTJDODlERkM0 M0YwRDEyMDMzMUNEM0M4RjFFNjBEMUNBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQBZ7gSAwQAyqCLMA8EAgACMAkDBwAgAQ3yBcAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAkirMA0GCSqGSIb3DQEBCwUAA4IBAQBPnxEig1JXJ02+lo8KyR0KkZcM R/W9g2hGkaVxZNLMkBTsgfkBcz3J6mHMgG8ih+v39sdcURLGkwPmojZpfHcEJUeF gUHyQJVVpktkiex4o4LKBwbFQ2pOo7Rr34PvIpxsFiKqzM+oONlJ0VyvUb3CW6h1 wzA21/NJ5nwZaw+8loPrl2+6PbPlJJrR00fo0EJtsIb48pupKXQ01yZy6g8PTNlp 4AbGZ17SNXZ+QLNqhlyTodx1nN2/FF031riwcDPJCY5jnQCtT6eRMFxRrIuiSBsF irgyplyeO4Pq3bfYqMvdBlEBE1o/q1Z5zmoZZktTNQ8e0Gh7E8OkVx2TxseE -----END CERTIFICATE-----Generated at Tue May 5 17:51:13 2026 by rpki-client