$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer File: 04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer (raw, json) Hash identifier: mwVx32gZ1GFGospTLG4toIPbXYkTQ9rJMyl0QCQ52fM= Subject key identifier: 04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 41DCF98FB6F5CCBFAD8F02E77862C361AA2E9DCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft caRepository: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:08:57 +0000 Certificate not after: Sun 02 May 2027 01:13:57 +0000 Subordinate resources: IP: 103.233.142.0/23 IP: 150.107.104.0/23 IP: 203.153.120.0/21 IP: 2401:1d00::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:dc:f9:8f:b6:f5:cc:bf:ad:8f:02:e7:78:62:c3:61:aa:2e:9d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:08:57 2026 GMT Not After : May 2 01:13:57 2027 GMT Subject: CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e7:22:61:0f:43:1f:ea:b4:74:ec:ee:79:eb: 1e:6f:67:a7:33:4f:0b:9e:01:c9:28:17:ae:35:4f: 67:cc:11:3a:d8:22:fa:14:5a:ca:7e:3f:02:01:50: 74:e4:47:26:29:6b:68:b4:89:45:ad:f6:92:e4:01: 64:d6:74:d5:e1:15:d2:20:5d:1c:af:4f:31:2d:f6: 4c:24:e1:99:2e:ec:ff:44:eb:1d:77:ad:14:e5:d4: f7:95:73:7c:6d:eb:a3:f2:93:1e:2a:f8:d8:97:a2: 30:83:2e:a5:89:47:ff:d0:77:48:f5:3e:e6:ed:13: 98:6e:69:f1:b7:b2:b8:dd:82:02:ba:d4:3e:78:33: e6:31:bc:4e:ab:91:82:43:bd:29:ac:cf:1b:48:83: 9e:f4:7f:45:0e:2e:a7:78:91:96:c9:52:d5:b9:12: b4:a0:4e:43:36:76:15:b9:30:97:11:9c:cd:27:12: e9:de:3b:2b:a9:b7:c0:d1:bc:86:16:ba:52:09:28: d7:83:9c:10:f1:26:7c:c2:c4:0f:36:64:08:e1:a2: 8d:70:82:6a:c7:76:88:9a:3d:14:d7:a9:e0:14:8d: 4f:e2:78:71:24:4a:f9:c0:41:87:35:07:61:28:a6: 84:aa:5b:f0:09:4b:8a:57:5c:4c:fd:63:aa:0b:23: 47:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.233.142.0/23 150.107.104.0/23 203.153.120.0/21 IPv6: 2401:1d00::/32 Signature Algorithm: sha256WithRSAEncryption 72:ce:40:a4:7f:42:f6:f5:f6:82:96:18:37:2e:97:4a:00:67: 52:6f:06:fa:82:bd:9e:3a:76:a6:7e:27:1e:8d:80:49:1a:81: 97:df:83:ad:d9:6e:91:49:02:58:a1:85:c3:25:cb:67:4f:b8: 8a:38:25:4c:54:e5:0f:50:e4:bd:c7:60:49:f4:ae:fc:d7:94: aa:be:31:dc:cb:88:8d:88:4e:46:6a:42:03:d7:41:fd:70:0c: b4:74:0e:5e:99:bc:16:e7:69:42:ce:b0:56:f9:8f:1c:e4:8d: 6d:3b:90:da:a6:ba:ba:d5:28:2a:c2:63:ae:a1:4e:3c:e2:3a: c5:7e:26:51:de:cf:54:a4:4a:4a:cc:34:d5:47:b2:e4:5c:14: 37:14:f1:fb:a0:df:3a:21:8f:c7:55:bb:d0:9c:d3:22:3a:25: 4b:52:16:7d:64:5b:87:ee:72:c5:b7:77:74:24:8a:86:21:0b: 96:86:ed:90:e6:fa:dd:53:16:40:cc:fa:96:1a:0f:65:0b:c5: 71:94:40:b3:ce:a8:d7:bf:1b:33:69:b7:ce:76:bd:9e:dd:90: e1:fa:af:dd:42:39:e7:5e:bc:f3:82:a8:96:70:d7:ca:df:59: f8:a5:ff:9e:91:8f:0f:38:1d:35:3f:34:b0:93:13:9f:b0:55: c9:9a:a3:2c -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIUQdz5j7b1zL+tjwLneGLDYaouncswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDg1N1oX DTI3MDUwMjAxMTM1N1owMzExMC8GA1UEAxMoMDRDOEVGNkY1MjYwRkRBMDY2NjFE OUU5NTMwNDU3MkI4RTdDNDk5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKXnImEPQx/qtHTs7nnrHm9npzNPC54BySgXrjVPZ8wROtgi+hRayn4/AgFQ dORHJilraLSJRa32kuQBZNZ01eEV0iBdHK9PMS32TCThmS7s/0TrHXetFOXU95Vz fG3ro/KTHir42JeiMIMupYlH/9B3SPU+5u0TmG5p8beyuN2CArrUPngz5jG8TquR gkO9KazPG0iDnvR/RQ4up3iRlslS1bkStKBOQzZ2FbkwlxGczScS6d47K6m3wNG8 hha6Ugko14OcEPEmfMLEDzZkCOGijXCCasd2iJo9FNep4BSNT+J4cSRK+cBBhzUH YSimhKpb8AlLildcTP1jqgsjR70CAwEAAaOCAtQwggLQMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFATI729SYP2gZmHZ6VMEVyuOfEmTMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzgzZDA3ODZkLTNkM2UtNDViNy05NjY1LThkNDc0ZmQxNGFlYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84M2QwNzg2 ZC0zZDNlLTQ1YjctOTY2NS04ZDQ3NGZkMTRhZWEvMC8wNEM4RUY2RjUyNjBGREEw NjY2MUQ5RTk1MzA0NTcyQjhFN0M0OTkzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATAS AwQBZ+mOAwQBlmtoAwQDy5l4MA0EAgACMAcDBQAkAR0AMA0GCSqGSIb3DQEBCwUA A4IBAQByzkCkf0L29faClhg3LpdKAGdSbwb6gr2eOnamficejYBJGoGX34Ot2W6R SQJYoYXDJctnT7iKOCVMVOUPUOS9x2BJ9K7815SqvjHcy4iNiE5GakID10H9cAy0 dA5embwW52lCzrBW+Y8c5I1tO5Daprq61SgqwmOuoU484jrFfiZR3s9UpEpKzDTV R7LkXBQ3FPH7oN86IY/HVbvQnNMiOiVLUhZ9ZFuH7nLFt3d0JIqGIQuWhu2Q5vrd UxZAzPqWGg9lC8VxlECzzqjXvxszabfOdr2e3ZDh+q/dQjnnXrzzgqiWcNfK31n4 pf+ekY8POB01PzSwkxOfsFXJmqMs -----END CERTIFICATE-----Generated at Tue May 12 22:03:30 2026 by rpki-client