$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer File: 02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer (raw, json) Hash identifier: oSKTmbEiKpFm2NTEkM1dbNr5FRqAHR8GEvxTvqpbVts= Subject key identifier: 02:CB:E6:5B:5D:AF:9C:DD:C7:C9:73:B2:63:9A:2C:DC:B9:DB:EE:0C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4D95C666F19785D7CD7A2BDEBFE806C2D6EED0F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:14:26 +0000 Certificate not after: Sun 02 May 2027 02:19:26 +0000 Subordinate resources: IP: 103.148.196.0/23 IP: 2001:df2:e780::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:95:c6:66:f1:97:85:d7:cd:7a:2b:de:bf:e8:06:c2:d6:ee:d0:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:14:26 2026 GMT Not After : May 2 02:19:26 2027 GMT Subject: CN=02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9a:4a:da:0d:fe:3f:cf:bf:3c:63:c4:88:ac: 14:a6:59:dc:a6:f5:40:be:e9:d2:32:d9:bf:0d:21: fd:c0:c8:c4:73:e6:30:39:7e:dc:b2:af:97:02:33: 00:e4:17:54:9d:4f:11:ee:19:61:66:9b:fb:d6:57: 0f:74:bd:69:b0:af:cf:81:b1:e6:15:35:9e:55:ad: d9:ef:93:71:57:76:37:d5:d3:75:4c:6a:3c:f4:ff: ea:14:12:13:49:b6:6f:d7:0c:41:3a:65:a1:98:da: ae:50:04:02:4e:07:13:95:c5:83:34:ed:ae:7e:0e: 6f:39:08:e2:9e:b4:8f:7b:42:45:3c:75:cc:16:09: 93:59:86:46:e7:4c:38:07:d7:80:b2:1e:8c:85:56: d7:00:18:c3:3c:58:d0:49:41:75:f3:e1:86:e3:94: b8:66:04:fd:85:d7:e5:b8:98:48:27:b6:8d:35:f7: 40:ac:a4:42:bf:05:46:7b:94:83:1a:cf:91:22:ad: 35:5d:06:43:f0:b9:1d:d0:0a:4d:09:3a:74:98:44: f0:5f:44:15:12:c2:96:a4:3a:83:55:4c:db:0e:14: 24:50:af:09:da:09:df:cb:63:39:91:93:88:00:53: ad:cc:72:fb:71:d1:d2:25:62:bf:3d:dc:ba:12:25: b7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:CB:E6:5B:5D:AF:9C:DD:C7:C9:73:B2:63:9A:2C:DC:B9:DB:EE:0C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.196.0/23 IPv6: 2001:df2:e780::/48 Signature Algorithm: sha256WithRSAEncryption 21:e0:d7:45:58:eb:df:09:bc:d8:1a:69:9b:44:d2:bc:eb:08: 6f:f9:18:f2:48:36:f3:1a:32:a6:f4:6f:ca:e3:cd:2a:aa:20: 06:d4:6c:2e:e5:2b:db:10:0a:e6:8e:ee:8d:fd:da:96:e6:a8: a6:fc:bf:35:59:b0:ee:34:2e:7d:3b:ef:25:a9:7e:77:3f:bb: 0a:23:5c:13:28:25:4e:8a:70:c6:52:fb:c2:b0:d2:49:42:df: a0:73:df:79:28:c1:9f:08:a2:fc:52:b5:6d:c9:ce:b6:79:df: 0e:bb:a8:f9:3a:48:2b:59:2c:e2:0d:7b:9e:5b:ab:f9:91:d7: df:2a:97:ee:30:4b:b0:9c:96:b4:4f:60:d1:bf:cb:bb:eb:5f: 49:3a:c8:79:c2:3b:1b:d2:4c:85:1d:b3:36:12:12:36:86:78: 5a:b5:c3:ce:9b:38:93:dc:10:b2:1c:f7:b1:8f:d5:45:8c:39: e7:e5:69:cd:ef:5f:39:7e:28:1b:c6:f5:4d:96:cc:74:0a:31: c0:20:cd:6b:2b:ec:0d:20:0a:99:45:20:5e:55:3a:cd:f6:e8: 1e:26:b0:79:3f:ad:05:74:4a:62:af:5d:66:51:14:0a:6e:65: 8a:06:31:12:3a:57:2c:15:18:5c:79:76:30:c4:41:58:7c:dd: 4e:fa:54:43 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUTZXGZvGXhdfNeivev+gGwtbu0PMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTQyNloX DTI3MDUwMjAyMTkyNlowMzExMC8GA1UEAxMoMDJDQkU2NUI1REFGOUNEREM3Qzk3 M0IyNjM5QTJDRENCOURCRUUwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6aStoN/j/PvzxjxIisFKZZ3Kb1QL7p0jLZvw0h/cDIxHPmMDl+3LKvlwIz AOQXVJ1PEe4ZYWab+9ZXD3S9abCvz4Gx5hU1nlWt2e+TcVd2N9XTdUxqPPT/6hQS E0m2b9cMQTploZjarlAEAk4HE5XFgzTtrn4ObzkI4p60j3tCRTx1zBYJk1mGRudM OAfXgLIejIVW1wAYwzxY0ElBdfPhhuOUuGYE/YXX5biYSCe2jTX3QKykQr8FRnuU gxrPkSKtNV0GQ/C5HdAKTQk6dJhE8F9EFRLClqQ6g1VM2w4UJFCvCdoJ38tjOZGT iABTrcxy+3HR0iVivz3cuhIlt3cCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFALL5ltdr5zdx8lzsmOaLNy52+4MMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2U0NmY1YTA1LTMyYjUtNGQzYy1iNGUwLWFiZGRjZjczZjVlOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lNDZmNWEw NS0zMmI1LTRkM2MtYjRlMC1hYmRkY2Y3M2Y1ZTkvMC8wMkNCRTY1QjVEQUY5Q0RE QzdDOTczQjI2MzlBMkNEQ0I5REJFRTBDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ5TEMA8EAgACMAkDBwAgAQ3y54AwDQYJKoZIhvcNAQELBQADggEBACHg10VY 698JvNgaaZtE0rzrCG/5GPJINvMaMqb0b8rjzSqqIAbUbC7lK9sQCuaO7o392pbm qKb8vzVZsO40Ln077yWpfnc/uwojXBMoJU6KcMZS+8Kw0klC36Bz33kowZ8IovxS tW3JzrZ53w67qPk6SCtZLOINe55bq/mR198ql+4wS7CclrRPYNG/y7vrX0k6yHnC OxvSTIUdszYSEjaGeFq1w86bOJPcELIc97GP1UWMOeflac3vXzl+KBvG9U2WzHQK McAgzWsr7A0gCplFIF5VOs326B4msHk/rQV0SmKvXWZRFApuZYoGMRI6VywVGFx5 djDEQVh83U76VEM= -----END CERTIFICATE-----Generated at Tue May 12 22:10:41 2026 by rpki-client