$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer File: C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer (raw, json) Hash identifier: pOEVDwhM3UPTk3J27qGvafioB2g6p27GD3hm4S5zT8c= Subject key identifier: C0:FD:03:30:B0:66:5A:32:4B:ED:EF:57:93:F7:3F:D4:FA:6F:30:C1 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 68D8068889B830DE78874E6EEEBBF7E1A5154141 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:06:05 +0000 Certificate not after: Sun 02 May 2027 02:11:05 +0000 Subordinate resources: IP: 160.25.236.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:d8:06:88:89:b8:30:de:78:87:4e:6e:ee:bb:f7:e1:a5:15:41:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 02:06:05 2026 GMT Not After : May 2 02:11:05 2027 GMT Subject: CN=C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:92:c9:42:13:de:6f:0f:d2:5e:b6:e1:07:e9: c4:21:ec:99:8c:3c:0b:74:2b:63:68:76:f7:be:4b: b0:7a:ee:4d:14:fe:4f:e9:bb:c8:a9:06:be:3d:d6: 2f:f6:14:05:de:f0:09:11:f3:83:e6:ee:5b:5b:b7: 44:ad:e2:60:90:a3:f7:87:6d:89:d9:b7:ba:49:97: d6:9b:60:ab:0a:a9:75:01:4a:9d:94:18:b6:de:d2: 30:36:ae:5a:b8:c6:7a:8e:81:d5:ce:7a:71:51:7b: 50:b0:11:a8:00:2c:1e:5b:a8:d0:91:36:d8:3a:39: f2:af:73:78:94:ce:79:bf:d5:c8:d9:9c:7d:df:a6: 44:88:0d:61:b6:14:56:99:08:e6:07:0b:13:c5:60: bf:20:8a:8e:08:57:3d:8d:ca:ba:cf:16:60:5d:20: 37:3d:e8:6b:4f:bc:5a:33:7b:52:be:de:a6:f2:5f: cf:79:57:2d:cf:36:59:3d:46:58:f6:ae:d4:b7:b0: 8b:66:3f:44:02:ac:19:ec:ca:6b:82:d5:b2:ec:9d: 80:be:58:20:10:f9:59:5e:33:bf:4c:3d:5f:15:0a: 4d:e9:b0:a8:8c:8a:7a:78:43:2e:73:0d:97:a8:24: 3f:b9:0f:b4:3b:a6:cb:87:83:36:4a:1e:f1:86:4d: 23:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:FD:03:30:B0:66:5A:32:4B:ED:EF:57:93:F7:3F:D4:FA:6F:30:C1 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.236.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:9f:10:b7:d1:16:7d:3c:21:17:91:9b:9f:ab:cd:51:46:73: ca:f7:51:2c:ec:8d:f3:cb:69:7e:49:94:fb:54:de:28:bb:64: 0c:05:9b:eb:2e:28:d8:cc:e3:5f:39:ee:65:24:6e:c5:7f:5e: 82:af:95:13:2b:af:f3:4c:8b:f5:fa:58:fb:a3:ad:d5:20:8b: 56:ad:aa:18:c5:c4:95:10:f5:19:33:7e:f3:2b:09:fb:36:df: fb:12:d2:b9:0a:74:64:48:17:9e:1c:ef:8f:da:83:a5:19:42: cd:1c:33:a5:11:33:a8:07:ea:fa:26:bf:f0:73:8d:6a:ec:c3: df:a2:67:5f:f2:d5:e0:67:9d:02:0a:37:40:92:ad:2c:a4:14: b3:41:c5:9d:e3:2f:a0:e0:4b:ba:b2:46:34:86:4c:e9:19:d8: a5:81:a9:70:51:22:4a:8f:98:b9:13:80:c7:10:ec:f2:a5:00: 8f:11:c9:cd:4a:1b:d6:6a:cc:c5:27:4a:67:8f:f6:ad:12:9d: fb:34:24:db:f0:f8:1a:a1:43:4f:f2:4e:79:f4:1c:7d:75:1c: 3f:87:56:39:c0:f8:c3:1e:6b:32:c3:a7:08:b0:88:11:7f:2a: 6c:de:22:7d:f1:a3:67:1f:bd:c1:39:02:46:48:0f:b2:be:50: d3:ae:5e:10 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUaNgGiIm4MN54h05u7rv34aUVQUEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAyMDYwNVoX DTI3MDUwMjAyMTEwNVowMzExMC8GA1UEAxMoQzBGRDAzMzBCMDY2NUEzMjRCRURF RjU3OTNGNzNGRDRGQTZGMzBDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJiSyUIT3m8P0l624QfpxCHsmYw8C3QrY2h2975LsHruTRT+T+m7yKkGvj3W L/YUBd7wCRHzg+buW1u3RK3iYJCj94dtidm3ukmX1ptgqwqpdQFKnZQYtt7SMDau WrjGeo6B1c56cVF7ULARqAAsHluo0JE22Do58q9zeJTOeb/VyNmcfd+mRIgNYbYU VpkI5gcLE8VgvyCKjghXPY3Kus8WYF0gNz3oa0+8WjN7Ur7epvJfz3lXLc82WT1G WPau1Lewi2Y/RAKsGezKa4LVsuydgL5YIBD5WV4zv0w9XxUKTemwqIyKenhDLnMN l6gkP7kPtDumy4eDNkoe8YZNI6UCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMD9AzCwZloyS+3vV5P3P9T6bzDBMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RlYzJhMWFjLTVhZTQtNDdhZC04ZGIxLTY1MmM3ZjNmN2U4Zi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kZWMyYTFh Yy01YWU0LTQ3YWQtOGRiMS02NTJjN2YzZjdlOGYvMC9DMEZEMDMzMEIwNjY1QTMy NEJFREVGNTc5M0Y3M0ZENEZBNkYzMEMxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBnsMA0GCSqGSIb3DQEBCwUAA4IBAQBNnxC30RZ9PCEXkZufq81RRnPK91Es 7I3zy2l+SZT7VN4ou2QMBZvrLijYzONfOe5lJG7Ff16Cr5UTK6/zTIv1+lj7o63V IItWraoYxcSVEPUZM37zKwn7Nt/7EtK5CnRkSBeeHO+P2oOlGULNHDOlETOoB+r6 Jr/wc41q7MPfomdf8tXgZ50CCjdAkq0spBSzQcWd4y+g4Eu6skY0hkzpGdilgalw USJKj5i5E4DHEOzypQCPEcnNShvWaszFJ0pnj/atEp37NCTb8PgaoUNP8k559Bx9 dRw/h1Y5wPjDHmsyw6cIsIgRfyps3iJ98aNnH73BOQJGSA+yvlDTrl4Q -----END CERTIFICATE-----Generated at Tue May 12 22:09:54 2026 by rpki-client