$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/02C3F17E0D809542F2AF03C8B741DB928B4A04DA.cer File: 02C3F17E0D809542F2AF03C8B741DB928B4A04DA.cer (raw, json) Hash identifier: uSEqVeKrDDkoeTyA+IeDKh4kbSDsuZyqnuLckmO0mJA= Subject key identifier: 02:C3:F1:7E:0D:80:95:42:F2:AF:03:C8:B7:41:DB:92:8B:4A:04:DA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7ED1FC8748B43F9CC9FF6279B1C8ED7CB46F7B1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/02C3F17E0D809542F2AF03C8B741DB928B4A04DA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:27:02 +0000 Certificate not after: Sun 02 May 2027 00:32:02 +0000 Subordinate resources: IP: 103.83.100.0/23 IP: 2001:df7:da00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d1:fc:87:48:b4:3f:9c:c9:ff:62:79:b1:c8:ed:7c:b4:6f:7b:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:27:02 2026 GMT Not After : May 2 00:32:02 2027 GMT Subject: CN=02C3F17E0D809542F2AF03C8B741DB928B4A04DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1a:73:ea:d3:33:fc:6f:d2:75:dc:3e:e9:de: cf:74:6d:8a:ff:fc:c3:5e:01:b3:62:93:5b:81:06: c3:61:1f:ff:c3:67:18:f2:77:12:48:6b:43:49:8d: 65:c6:8e:22:67:2c:b2:5c:14:56:0f:f6:aa:7d:33: 1b:6c:51:0b:b1:65:fe:4d:86:5f:8a:61:a5:51:7c: 20:f7:38:e9:7b:01:52:52:0a:5b:57:46:85:02:3a: 60:29:70:cf:f4:f0:3f:08:36:11:f1:dd:3c:f9:1d: ad:ef:ff:9a:e2:73:88:94:1c:f9:7b:dd:cb:2c:69: 84:cd:0d:e1:4d:f7:f1:99:31:75:d4:e9:b8:b8:ce: 18:99:34:6a:82:54:d8:f2:a3:f4:23:4d:f1:ef:68: 14:d2:e2:dd:ae:25:0e:5f:e9:15:e4:cb:12:af:f2: 79:ee:ac:40:9b:8b:ec:31:ec:63:38:fd:32:21:d4: 57:e2:44:a4:19:a9:93:43:a5:fe:79:b9:ff:02:f0: cd:d8:e5:5b:32:00:61:33:e7:da:58:a6:4f:75:8a: dd:0e:5e:f8:11:c1:cc:3e:38:09:9e:93:73:e0:d7: 59:da:61:69:26:f3:e9:4b:2c:3f:8c:83:08:ac:ce: b5:de:fc:54:27:11:ea:19:48:22:c4:8b:ad:1f:e6: 9f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:C3:F1:7E:0D:80:95:42:F2:AF:03:C8:B7:41:DB:92:8B:4A:04:DA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/02C3F17E0D809542F2AF03C8B741DB928B4A04DA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.83.100.0/23 IPv6: 2001:df7:da00::/48 Signature Algorithm: sha256WithRSAEncryption 58:9e:14:1b:28:58:a6:82:9c:df:40:5a:a4:af:7e:4a:e7:f7: f0:f9:c6:79:af:72:a2:a3:ed:02:28:d2:52:36:88:f8:44:ba: 80:9f:ff:e7:f5:32:28:7c:0d:22:4a:93:fe:8f:8b:f4:0e:87: e0:15:55:76:f9:08:08:42:44:28:ef:dc:23:de:4f:b0:86:a6: 5d:84:8c:4d:a1:fa:7d:79:ab:c0:c8:57:65:a0:d5:02:d5:b6: d7:b2:ee:4b:77:60:02:86:f7:e7:2f:49:89:32:6b:4d:e0:db: 56:d4:34:0b:4b:bc:53:db:26:78:d8:89:ab:2a:a4:ad:19:d4: 89:44:2b:72:69:bf:27:29:7d:20:8f:33:26:11:1c:d0:4d:d7: f9:5d:e9:8c:80:6d:a7:f4:b0:e7:4b:0f:55:b1:40:3c:38:58: af:99:98:c7:24:26:04:a5:e9:ab:0b:c9:e5:62:13:b0:c8:a8: f2:b7:77:fe:92:d5:06:b7:15:b9:02:79:b7:c3:8b:dc:e9:46: 5e:c5:f0:f3:ac:df:7e:a7:e6:a0:b1:9e:6b:5c:e7:84:7c:7f: 7d:7b:77:bc:2f:0f:b9:c2:c2:15:64:ea:90:1c:17:65:49:ab: d0:d4:0b:fb:af:57:2a:30:db:e2:67:3b:c7:1f:72:64:dd:ac: a3:8d:50:aa -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUftH8h0i0P5zJ/2J5scjtfLRvexowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjcwMloX DTI3MDUwMjAwMzIwMlowMzExMC8GA1UEAxMoMDJDM0YxN0UwRDgwOTU0MkYyQUYw M0M4Qjc0MURCOTI4QjRBMDREQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALsac+rTM/xv0nXcPunez3Rtiv/8w14Bs2KTW4EGw2Ef/8NnGPJ3EkhrQ0mN ZcaOImcsslwUVg/2qn0zG2xRC7Fl/k2GX4phpVF8IPc46XsBUlIKW1dGhQI6YClw z/TwPwg2EfHdPPkdre//muJziJQc+XvdyyxphM0N4U338ZkxddTpuLjOGJk0aoJU 2PKj9CNN8e9oFNLi3a4lDl/pFeTLEq/yee6sQJuL7DHsYzj9MiHUV+JEpBmpk0Ol /nm5/wLwzdjlWzIAYTPn2limT3WK3Q5e+BHBzD44CZ6Tc+DXWdphaSbz6UssP4yD CKzOtd78VCcR6hlIIsSLrR/mnysCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFALD8X4NgJVC8q8DyLdB25KLSgTaMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQ2YzA2NDU1LTE1YzAtNGYzZC04MTNiLWMwN2JlZjc4ZjAyNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80NmMwNjQ1 NS0xNWMwLTRmM2QtODEzYi1jMDdiZWY3OGYwMjUvMC8wMkMzRjE3RTBEODA5NTQy RjJBRjAzQzhCNzQxREI5MjhCNEEwNERBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ1NkMA8EAgACMAkDBwAgAQ332gAwDQYJKoZIhvcNAQELBQADggEBAFieFBso WKaCnN9AWqSvfkrn9/D5xnmvcqKj7QIo0lI2iPhEuoCf/+f1Mih8DSJKk/6Pi/QO h+AVVXb5CAhCRCjv3CPeT7CGpl2EjE2h+n15q8DIV2Wg1QLVttey7kt3YAKG9+cv SYkya03g21bUNAtLvFPbJnjYiasqpK0Z1IlEK3JpvycpfSCPMyYRHNBN1/ld6YyA baf0sOdLD1WxQDw4WK+ZmMckJgSl6asLyeViE7DIqPK3d/6S1Qa3FbkCebfDi9zp Rl7F8POs336n5qCxnmtc54R8f317d7wvD7nCwhVk6pAcF2VJq9DUC/uvVyow2+Jn O8cfcmTdrKONUKo= -----END CERTIFICATE-----Generated at Tue May 12 22:09:57 2026 by rpki-client