$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer File: 0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer (raw, json) Hash identifier: Q4YcSs9/xwrg2B0wv8rJ8lPpHSTk4rWliJqmC81T/N0= Subject key identifier: 0B:CB:AF:8D:D0:B6:39:1E:71:5B:01:36:3D:7C:9B:A2:D5:5E:3A:6B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 03A642E55884B1F2323F66687463DCC51E32F95E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:27:06 +0000 Certificate not after: Sun 02 May 2027 02:32:06 +0000 Subordinate resources: IP: 103.16.198.0/23 IP: 103.251.44.0/23 IP: 202.74.236.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:a6:42:e5:58:84:b1:f2:32:3f:66:68:74:63:dc:c5:1e:32:f9:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:27:06 2026 GMT Not After : May 2 02:32:06 2027 GMT Subject: CN=0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c9:45:6f:db:c6:2f:74:2f:04:be:20:5a:cc: 2a:c5:10:1f:4a:47:d5:c1:29:4c:54:97:74:4d:2b: a4:2c:22:b3:7d:27:ad:06:cc:69:f0:e8:93:b2:a4: c0:1e:f7:cf:4f:0e:15:2c:82:2e:a7:ea:47:7a:2c: e6:0c:dd:bc:60:40:85:91:08:96:bb:ca:f2:1c:0a: df:4e:3f:57:97:8d:04:47:86:d0:93:8a:68:c7:67: 06:2f:d3:2c:0d:6c:96:0f:1e:71:d2:f1:16:b4:8f: 35:41:c1:31:40:2b:f7:b7:54:a2:df:7a:ee:d9:74: 83:a6:d9:7c:89:01:11:ac:8e:56:e0:b3:ec:3b:59: 93:92:c4:4d:a7:74:65:88:99:ed:de:fd:47:75:1f: a2:ac:29:56:75:c6:ce:c7:43:87:02:1a:fd:1b:f5: 01:d6:08:4f:33:70:2e:24:39:30:da:81:83:83:84: 6e:d3:af:40:75:3f:29:22:e3:aa:16:4b:6b:ee:8b: 3c:32:b9:ae:b6:6b:3c:e8:c7:e2:aa:aa:1a:ee:94: 28:78:c7:d0:7b:ec:f5:4c:1e:20:98:54:dd:c9:6a: 3f:b9:5e:aa:85:d5:73:cb:21:b1:16:1b:57:6b:5f: c0:22:61:df:cf:fd:b0:e7:d1:fd:0b:65:cc:59:47: 89:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0B:CB:AF:8D:D0:B6:39:1E:71:5B:01:36:3D:7C:9B:A2:D5:5E:3A:6B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.16.198.0/23 103.251.44.0/23 202.74.236.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:71:c8:61:80:26:ae:4b:09:3a:e7:0b:a4:59:fe:1e:18:7d: 6f:21:fc:a6:37:ad:83:7b:82:87:ec:ba:db:a2:d6:a2:10:a6: 3c:94:c7:e2:7b:aa:90:bb:f2:8d:0e:f4:97:4b:72:a4:17:e8: 54:a0:5b:05:4b:72:ac:d5:b1:7c:1c:18:d9:1e:2e:ba:1e:3d: a8:92:97:85:a9:72:3f:4f:26:52:e3:8e:7c:e8:14:8a:a5:c9: c8:e5:24:ce:c1:ac:41:aa:dc:92:cd:38:8d:26:14:a6:75:9b: 62:67:68:f7:9c:40:21:9f:72:2d:1f:72:ed:1e:ea:20:91:c3: 72:11:60:9c:45:bb:bc:e6:c2:74:5e:b7:9d:e8:93:7b:43:bc: 20:ad:09:9f:1a:c2:52:da:ba:a7:6c:e2:00:9c:92:90:9e:8e: 40:2c:1e:86:43:99:ef:d7:83:ac:89:e3:ba:83:6a:fe:27:48: 1a:50:b3:78:79:84:9a:ba:f2:37:f7:3a:8a:2d:b2:cd:2a:4a: 7c:56:6b:0d:17:63:08:67:db:d9:c1:38:86:59:cf:6a:8d:6d: a8:3e:51:10:ad:6c:27:27:44:0c:de:bb:af:42:7d:87:5b:97: 03:14:75:8e:25:b6:43:32:57:0c:16:fc:33:de:35:d6:2a:c4: 43:d6:a4:21 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUA6ZC5ViEsfIyP2ZodGPcxR4y+V4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjcwNloX DTI3MDUwMjAyMzIwNlowMzExMC8GA1UEAxMoMEJDQkFGOEREMEI2MzkxRTcxNUIw MTM2M0Q3QzlCQTJENTVFM0E2QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOHJRW/bxi90LwS+IFrMKsUQH0pH1cEpTFSXdE0rpCwis30nrQbMafDok7Kk wB73z08OFSyCLqfqR3os5gzdvGBAhZEIlrvK8hwK304/V5eNBEeG0JOKaMdnBi/T LA1slg8ecdLxFrSPNUHBMUAr97dUot967tl0g6bZfIkBEayOVuCz7DtZk5LETad0 ZYiZ7d79R3UfoqwpVnXGzsdDhwIa/Rv1AdYITzNwLiQ5MNqBg4OEbtOvQHU/KSLj qhZLa+6LPDK5rrZrPOjH4qqqGu6UKHjH0Hvs9UweIJhU3clqP7leqoXVc8shsRYb V2tfwCJh38/9sOfR/QtlzFlHieECAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAvLr43QtjkecVsBNj18m6LVXjprMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2VlYjk4Y2VkLWFmMTgtNGJmZi1hZDcxLTczZDJiMGM5ZDhhOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lZWI5OGNl ZC1hZjE4LTRiZmYtYWQ3MS03M2QyYjBjOWQ4YTkvMC8wQkNCQUY4REQwQjYzOTFF NzE1QjAxMzYzRDdDOUJBMkQ1NUUzQTZCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATAS AwQBZxDGAwQBZ/ssAwQCykrsMA0GCSqGSIb3DQEBCwUAA4IBAQBacchhgCauSwk6 5wukWf4eGH1vIfymN62De4KH7LrbotaiEKY8lMfie6qQu/KNDvSXS3KkF+hUoFsF S3Ks1bF8HBjZHi66Hj2okpeFqXI/TyZS44586BSKpcnI5STOwaxBqtySzTiNJhSm dZtiZ2j3nEAhn3ItH3LtHuogkcNyEWCcRbu85sJ0Xred6JN7Q7wgrQmfGsJS2rqn bOIAnJKQno5ALB6GQ5nv14OsieO6g2r+J0gaULN4eYSauvI39zqKLbLNKkp8VmsN F2MIZ9vZwTiGWc9qjW2oPlEQrWwnJ0QM3ruvQn2HW5cDFHWOJbZDMlcMFvwz3jXW KsRD1qQh -----END CERTIFICATE-----Generated at Tue May 12 22:03:50 2026 by rpki-client