$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.cer File: 0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.cer (raw, json) Hash identifier: Co8h+IWcrqT3DIRSeOsjBmZIkZiTczfmEn9WEeWqGFY= Subject key identifier: 0B:EF:C1:EC:59:3B:16:C7:9B:C5:60:0E:F5:81:3B:0C:C6:E2:48:BE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3001E268AFF905DFE2CAAA367579BDD7CFBE137E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft caRepository: rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:45:25 +0000 Certificate not after: Sun 02 May 2027 01:50:25 +0000 Subordinate resources: IP: 203.3.90.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:01:e2:68:af:f9:05:df:e2:ca:aa:36:75:79:bd:d7:cf:be:13:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:45:25 2026 GMT Not After : May 2 01:50:25 2027 GMT Subject: CN=0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:af:e6:e2:2f:4d:de:51:f7:aa:0b:9a:ba:96: 18:8e:7c:c5:eb:11:3a:37:08:f7:65:49:91:72:b1: 22:08:96:bb:05:0f:e7:1b:20:8d:72:45:ad:1f:62: 01:4e:a9:d6:69:6b:4d:48:3e:9a:85:cd:67:65:c6: 9d:27:06:c5:e6:1e:df:5e:8d:24:8e:09:7d:ec:6b: de:34:af:7b:b2:bf:8d:c5:3d:a9:99:52:09:24:0f: 88:9d:96:7f:09:f2:23:76:fa:a6:5c:91:ea:aa:8d: 91:d1:d5:c2:73:4c:d0:2a:49:c0:03:0c:6c:16:0a: 12:b7:03:51:36:a2:6e:fe:01:cd:14:77:65:22:a3: ac:c6:41:a5:5a:b7:18:8f:dc:3f:6e:9c:c7:39:a8: 91:84:4a:e2:fd:4a:77:3d:dc:1c:29:33:10:86:81: 43:34:5b:f6:4c:b3:d1:d0:44:79:d0:79:bf:61:21: 1e:8c:ec:66:b5:97:fb:d2:04:b7:b8:e3:de:3b:34: 57:ec:b4:50:49:bb:65:6e:f3:71:6f:b3:e2:5f:6b: d0:1a:0d:57:f0:8e:6c:8e:dd:ea:e2:40:fb:03:79: 4a:b5:a8:40:2f:73:b0:b5:ba:96:3a:f4:63:b0:00: 01:e0:cc:95:01:df:0e:cb:84:c9:34:b1:01:bd:4d: ed:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0B:EF:C1:EC:59:3B:16:C7:9B:C5:60:0E:F5:81:3B:0C:C6:E2:48:BE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.3.90.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:8d:02:76:c6:d6:0f:20:59:95:a3:06:cd:3c:a7:cf:48:13: 50:6b:8a:2e:51:14:df:8b:3c:85:44:1e:71:cf:4d:9b:e5:bb: eb:db:78:8a:55:31:7b:c7:90:ca:ae:01:3e:b3:5f:c7:a7:45: 56:dc:a2:91:77:fb:d2:26:e6:05:96:4b:24:59:6d:75:f0:ab: 6c:a5:72:12:55:0f:75:8c:aa:88:84:26:6c:22:6d:57:83:12: aa:8f:62:1d:6e:18:55:a5:84:f1:e6:ba:14:18:01:b6:26:1b: f7:f7:76:1a:f8:3a:e0:51:af:8a:0e:7f:94:e0:10:b1:ca:b9: 08:c0:fe:a8:3b:e2:6a:dd:7f:99:c6:3b:a8:c5:50:f6:d9:f4: 6e:ec:8f:01:e8:f1:99:2a:16:88:a7:00:28:97:b7:89:79:39: 50:65:78:a4:ac:2d:e5:da:08:3a:9b:41:8f:48:08:3e:33:a1: 8d:b0:20:fd:bc:93:d6:62:22:a1:40:a7:67:01:27:ec:5f:1e: 2a:9b:2b:90:52:05:4d:6d:7d:f2:a7:6f:06:58:13:42:76:0f: 4f:1d:b7:33:03:13:ad:67:e7:3f:ca:4c:11:96:73:f1:24:51: 99:3c:27:b5:24:6a:53:0b:9d:3d:47:a9:67:79:f6:02:51:02: 50:75:d5:4a -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUMAHiaK/5Bd/iyqo2dXm918++E34wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDUyNVoX DTI3MDUwMjAxNTAyNVowMzExMC8GA1UEAxMoMEJFRkMxRUM1OTNCMTZDNzlCQzU2 MDBFRjU4MTNCMENDNkUyNDhCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ+v5uIvTd5R96oLmrqWGI58xesROjcI92VJkXKxIgiWuwUP5xsgjXJFrR9i AU6p1mlrTUg+moXNZ2XGnScGxeYe316NJI4Jfexr3jSve7K/jcU9qZlSCSQPiJ2W fwnyI3b6plyR6qqNkdHVwnNM0CpJwAMMbBYKErcDUTaibv4BzRR3ZSKjrMZBpVq3 GI/cP26cxzmokYRK4v1Kdz3cHCkzEIaBQzRb9kyz0dBEedB5v2EhHozsZrWX+9IE t7jj3js0V+y0UEm7ZW7zcW+z4l9r0BoNV/CObI7d6uJA+wN5SrWoQC9zsLW6ljr0 Y7AAAeDMlQHfDsuEyTSxAb1N7UsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAvvwexZOxbHm8VgDvWBOwzG4ki+MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2JkODcxMzAzLTAyMWEtNGEwYi05ZWZiLWFlMmRiNmM5MGQ4NC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iZDg3MTMw My0wMjFhLTRhMGItOWVmYi1hZTJkYjZjOTBkODQvMC8wQkVGQzFFQzU5M0IxNkM3 OUJDNTYwMEVGNTgxM0IwQ0M2RTI0OEJFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAywNaMA0GCSqGSIb3DQEBCwUAA4IBAQArjQJ2xtYPIFmVowbNPKfPSBNQa4ou URTfizyFRB5xz02b5bvr23iKVTF7x5DKrgE+s1/Hp0VW3KKRd/vSJuYFlkskWW11 8KtspXISVQ91jKqIhCZsIm1XgxKqj2IdbhhVpYTx5roUGAG2Jhv393Ya+DrgUa+K Dn+U4BCxyrkIwP6oO+Jq3X+ZxjuoxVD22fRu7I8B6PGZKhaIpwAol7eJeTlQZXik rC3l2gg6m0GPSAg+M6GNsCD9vJPWYiKhQKdnASfsXx4qmyuQUgVNbX3yp28GWBNC dg9PHbczAxOtZ+c/ykwRlnPxJFGZPCe1JGpTC509R6lnefYCUQJQddVK -----END CERTIFICATE-----Generated at Tue May 12 22:02:49 2026 by rpki-client