$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer File: 05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.cer (raw, json) Hash identifier: V7U+zkaONBiBtPplO2D+oWJSVis5BVNvUZt6rSDpzHY= Subject key identifier: 05:CF:9E:16:17:EC:F8:BE:02:F2:FD:FA:27:F1:3A:86:2A:2B:20:EB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 50250D2E2B40401C5293FE70099B45F5019434CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:59:21 +0000 Certificate not after: Sun 02 May 2027 00:04:21 +0000 Subordinate resources: IP: 103.81.254.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:25:0d:2e:2b:40:40:1c:52:93:fe:70:09:9b:45:f5:01:94:34:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:59:21 2026 GMT Not After : May 2 00:04:21 2027 GMT Subject: CN=05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5e:76:44:a4:48:d3:d3:73:1a:ba:da:90:09: 85:88:3e:ce:d2:a0:96:2c:4b:c1:0c:06:71:c2:ee: 04:65:6f:35:4d:c3:ad:85:b9:02:42:eb:f6:8d:0a: 2e:14:bc:cb:c0:f1:40:3a:ed:b6:12:ca:b3:27:30: 86:7f:ec:53:ec:4d:79:2c:0e:be:8b:09:0f:c9:a1: 15:f4:ee:e6:c4:fa:4e:d9:22:c8:a9:b3:c6:b0:37: ae:67:01:79:97:c5:a4:67:15:f2:7e:4b:ee:54:06: 43:80:6b:c4:7d:73:a1:a7:cd:6d:7f:ac:63:2d:44: d3:59:0b:89:ed:0d:c0:c2:61:c2:a4:f3:41:ea:62: 3a:b7:87:83:c9:a2:99:4d:c4:56:6a:31:c1:25:ff: 53:03:7d:38:0a:60:ed:14:bd:4e:4f:3b:b6:1f:35: 66:98:18:b7:af:ba:a5:e8:4e:39:74:d6:fc:46:0a: 20:e8:1c:88:9c:0c:ac:74:85:39:18:c6:78:ad:c1: 31:7e:ec:67:b1:28:64:d0:f1:4e:0c:ac:57:55:d7: 3c:e8:88:16:9f:19:5c:6b:8b:14:cf:ee:0b:65:31: e2:a0:12:f1:d9:61:94:5c:ba:d0:86:98:22:ea:a9: 03:b6:f7:5b:6f:70:ab:22:75:2f:8a:3e:11:b7:6b: 9d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 05:CF:9E:16:17:EC:F8:BE:02:F2:FD:FA:27:F1:3A:86:2A:2B:20:EB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/05CF9E1617ECF8BE02F2FDFA27F13A862A2B20EB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.81.254.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:b8:83:40:83:bc:cd:83:03:19:c6:06:ea:c8:d1:9f:46:a2: 02:2e:d1:f0:68:04:96:b5:43:bf:df:97:0e:6c:18:1b:56:93: 42:4a:75:c3:9a:2d:29:fe:bf:26:9f:e1:3d:e2:db:b8:65:1a: 4d:7a:67:34:02:55:d5:75:fb:71:6f:03:ec:1b:b5:42:ea:23: 6c:a4:a2:1d:5a:5b:9d:c7:bd:77:9d:7b:a5:12:28:fc:50:0e: 5b:45:5b:be:9c:03:f5:39:54:e5:96:df:79:72:3f:05:77:90: da:b2:bf:b9:46:3b:4d:f3:59:0b:d7:58:99:e5:7b:b0:31:d7: 73:36:46:5d:8a:2f:53:6d:42:a7:57:02:6a:74:83:22:d9:0a: a8:9a:12:08:d2:70:43:40:c6:0d:21:17:2d:15:97:2b:6d:22: 69:97:d7:a8:16:e2:88:53:fc:c5:ab:71:55:3b:28:97:0c:bc: 23:b9:7f:89:7f:25:bc:c0:90:5c:8a:51:75:9b:78:ec:5e:be: 68:d6:dc:50:21:49:1f:34:4e:a3:ff:6b:6e:23:4d:91:6d:01: c7:58:d2:a7:9e:0a:08:61:f6:eb:54:bd:66:d9:bb:07:b0:cf: 05:77:ea:15:13:0c:68:3d:84:82:95:5f:73:70:b5:3f:a8:7d: 44:a6:3c:ca -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUUCUNLitAQBxSk/5wCZtF9QGUNM4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTkyMVoX DTI3MDUwMjAwMDQyMVowMzExMC8GA1UEAxMoMDVDRjlFMTYxN0VDRjhCRTAyRjJG REZBMjdGMTNBODYyQTJCMjBFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNedkSkSNPTcxq62pAJhYg+ztKglixLwQwGccLuBGVvNU3DrYW5AkLr9o0K LhS8y8DxQDrtthLKsycwhn/sU+xNeSwOvosJD8mhFfTu5sT6TtkiyKmzxrA3rmcB eZfFpGcV8n5L7lQGQ4BrxH1zoafNbX+sYy1E01kLie0NwMJhwqTzQepiOreHg8mi mU3EVmoxwSX/UwN9OApg7RS9Tk87th81ZpgYt6+6pehOOXTW/EYKIOgciJwMrHSF ORjGeK3BMX7sZ7EoZNDxTgysV1XXPOiIFp8ZXGuLFM/uC2Ux4qAS8dlhlFy60IaY IuqpA7b3W29wqyJ1L4o+EbdrnX0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAXPnhYX7Pi+AvL9+ifxOoYqKyDrMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzFkZmQ0MjM0LTEzMjMtNGYwZS1iNjg2LTFkNzJhY2I4ODAyOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xZGZkNDIz NC0xMzIzLTRmMGUtYjY4Ni0xZDcyYWNiODgwMjkvMC8wNUNGOUUxNjE3RUNGOEJF MDJGMkZERkEyN0YxM0E4NjJBMkIyMEVCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ1H+MA0GCSqGSIb3DQEBCwUAA4IBAQBuuINAg7zNgwMZxgbqyNGfRqICLtHw aASWtUO/35cObBgbVpNCSnXDmi0p/r8mn+E94tu4ZRpNemc0AlXVdftxbwPsG7VC 6iNspKIdWludx713nXulEij8UA5bRVu+nAP1OVTllt95cj8Fd5Dasr+5RjtN81kL 11iZ5XuwMddzNkZdii9TbUKnVwJqdIMi2QqomhII0nBDQMYNIRctFZcrbSJpl9eo FuKIU/zFq3FVOyiXDLwjuX+JfyW8wJBcilF1m3jsXr5o1txQIUkfNE6j/2tuI02R bQHHWNKnngoIYfbrVL1m2bsHsM8Fd+oVEwxoPYSClV9zcLU/qH1EpjzK -----END CERTIFICATE-----Generated at Tue May 12 22:10:21 2026 by rpki-client