$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer File: 03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.cer (raw, json) Hash identifier: 4106sZknbuMNprQFnqggSJ/yulWaHUUXoT98i5cjrTo= Subject key identifier: 03:CE:E5:EC:F5:D8:2A:C4:35:BB:82:56:96:0A:60:65:A0:A4:EC:90 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6FA32795551E3F03E2C8F9E893C899822D623B12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft caRepository: rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:57:20 +0000 Certificate not after: Sun 02 May 2027 01:02:20 +0000 Subordinate resources: IP: 202.90.198.0/23 IP: 2001:df0:c5::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:a3:27:95:55:1e:3f:03:e2:c8:f9:e8:93:c8:99:82:2d:62:3b:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:57:20 2026 GMT Not After : May 2 01:02:20 2027 GMT Subject: CN=03CEE5ECF5D82AC435BB8256960A6065A0A4EC90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6b:39:5d:fd:7d:85:eb:4e:e4:7f:e3:3a:88: 7a:99:ab:c0:cf:0a:31:40:5c:bd:ec:5c:cf:42:1c: 32:2c:14:bd:30:1d:8a:3f:d8:fd:50:8a:0a:5c:29: aa:e7:e0:5d:ef:88:92:77:6c:ad:21:08:a1:e0:6f: f6:2a:39:a0:37:b5:54:81:49:fe:8d:1d:af:ea:0f: 8d:5a:75:89:3e:6a:f8:0a:8d:c2:61:ec:f3:de:d4: 7a:dd:88:5c:90:0e:db:d5:ab:e3:d0:89:52:8e:46: 05:a6:20:33:2f:43:3e:1b:43:37:bf:31:75:1c:ba: a7:4a:7b:f1:53:53:5d:21:eb:e8:49:08:a8:ac:8c: 09:9a:18:f8:fb:58:ed:70:b3:f4:78:52:16:7e:d0: 82:f5:5a:c6:54:6d:61:89:69:92:35:a9:17:f7:cc: fb:81:22:bf:2c:ed:14:5b:36:a9:92:8a:00:82:f3: 49:0a:4a:c6:1c:9f:9d:89:e8:57:06:53:ac:78:4f: 6b:ce:10:44:a8:10:39:50:81:1e:9e:5d:95:6b:eb: ab:51:61:83:26:8e:28:72:45:c8:8d:75:7b:d5:89: 5f:39:81:2d:bb:72:2e:63:50:75:a8:33:03:40:67: b9:3c:5e:f8:97:bc:85:e8:f8:b6:53:f5:9e:11:a3: c6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:CE:E5:EC:F5:D8:2A:C4:35:BB:82:56:96:0A:60:65:A0:A4:EC:90 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/03CEE5ECF5D82AC435BB8256960A6065A0A4EC90.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.90.198.0/23 IPv6: 2001:df0:c5::/48 Signature Algorithm: sha256WithRSAEncryption 27:1e:ee:e8:c5:5b:73:70:b4:01:c6:fb:56:00:58:95:ed:70: 24:5f:b3:48:02:55:d6:20:3e:cd:94:e3:47:b8:af:c5:6d:23: 8e:5e:6a:d1:04:fb:3c:f7:c8:5a:6e:bc:52:52:38:a0:31:61: 54:20:fd:ae:62:39:be:9f:b4:f2:c0:8d:96:6d:2f:6e:7b:56: 10:28:e4:01:0c:17:30:20:f5:05:e1:9e:80:95:0b:9b:f9:be: bf:fd:c1:9a:b9:90:b2:64:4a:35:fd:76:ee:ce:df:e3:0e:4c: c6:8b:0b:2d:f9:ad:18:32:e1:42:f7:34:79:8e:b8:92:79:87: 0c:7b:34:4e:ea:10:eb:e8:cb:41:9c:ba:e5:46:fc:9f:41:0e: 85:07:b4:eb:bb:93:d1:7f:92:41:9d:e7:0b:de:13:0b:a5:ab: fd:4c:9e:83:b8:e9:44:bb:b4:7a:09:f9:fa:c1:dc:a5:60:3e: 5e:bf:24:66:20:9c:b5:b9:0f:da:22:08:dd:c6:57:16:d6:40: d3:b7:70:7b:82:81:5b:03:79:c2:f6:01:53:09:e0:e5:23:db: b5:97:1f:a4:12:e6:b7:ff:fc:1e:10:a3:6a:f6:04:a6:7b:01: 44:8c:10:8d:76:82:e5:a1:5a:29:28:17:3a:64:18:ae:32:ea: 3c:cd:ef:ba -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUb6MnlVUePwPiyPnok8iZgi1iOxIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTcyMFoX DTI3MDUwMjAxMDIyMFowMzExMC8GA1UEAxMoMDNDRUU1RUNGNUQ4MkFDNDM1QkI4 MjU2OTYwQTYwNjVBMEE0RUM5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJNrOV39fYXrTuR/4zqIepmrwM8KMUBcvexcz0IcMiwUvTAdij/Y/VCKClwp qufgXe+IkndsrSEIoeBv9io5oDe1VIFJ/o0dr+oPjVp1iT5q+AqNwmHs897Uet2I XJAO29Wr49CJUo5GBaYgMy9DPhtDN78xdRy6p0p78VNTXSHr6EkIqKyMCZoY+PtY 7XCz9HhSFn7QgvVaxlRtYYlpkjWpF/fM+4EivyztFFs2qZKKAILzSQpKxhyfnYno VwZTrHhPa84QRKgQOVCBHp5dlWvrq1FhgyaOKHJFyI11e9WJXzmBLbtyLmNQdagz A0BnuTxe+Je8hej4tlP1nhGjxmECAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAPO5ez12CrENbuCVpYKYGWgpOyQMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc0ZTFmMzcwLWYzMWYtNDdlZC04YTQxLWIyOGJjOGRhZjQzNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83NGUxZjM3 MC1mMzFmLTQ3ZWQtOGE0MS1iMjhiYzhkYWY0MzUvMC8wM0NFRTVFQ0Y1RDgyQUM0 MzVCQjgyNTY5NjBBNjA2NUEwQTRFQzkwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBylrGMA8EAgACMAkDBwAgAQ3wAMUwDQYJKoZIhvcNAQELBQADggEBACce7ujF W3NwtAHG+1YAWJXtcCRfs0gCVdYgPs2U40e4r8VtI45eatEE+zz3yFpuvFJSOKAx YVQg/a5iOb6ftPLAjZZtL257VhAo5AEMFzAg9QXhnoCVC5v5vr/9wZq5kLJkSjX9 du7O3+MOTMaLCy35rRgy4UL3NHmOuJJ5hwx7NE7qEOvoy0GcuuVG/J9BDoUHtOu7 k9F/kkGd5wveEwulq/1MnoO46US7tHoJ+frB3KVgPl6/JGYgnLW5D9oiCN3GVxbW QNO3cHuCgVsDecL2AVMJ4OUj27WXH6QS5rf//B4Qo2r2BKZ7AUSMEI12guWhWiko FzpkGK4y6jzN77o= -----END CERTIFICATE-----Generated at Tue May 12 22:45:54 2026 by rpki-client