$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer File: 0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer (raw, json) Hash identifier: YpxK3VQQ6BvHG8AurFxaiB/d0F28WzsicH2pPvQfB0Q= Subject key identifier: 0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 29C1C7EC4A7D3F78A0695A4D254C0DA38DACED39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:48:43 +0000 Certificate not after: Sun 02 May 2027 02:53:43 +0000 Subordinate resources: IP: 103.155.198.0/23 IP: 2406:76c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c1:c7:ec:4a:7d:3f:78:a0:69:5a:4d:25:4c:0d:a3:8d:ac:ed:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:48:43 2026 GMT Not After : May 2 02:53:43 2027 GMT Subject: CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:25:69:39:6d:cd:bb:f3:1f:e2:8a:38:65:e0: 3f:c8:76:48:6d:a9:1e:a2:fc:92:ae:bb:86:c9:04: 23:b7:bf:f2:00:5a:d6:94:ee:0e:61:3b:35:35:35: 07:dd:ee:11:5b:b2:51:29:00:5c:84:c4:b5:6d:12: 23:71:9a:18:5a:8f:0e:d6:8c:45:ef:eb:35:9e:a4: 62:51:79:81:4b:09:60:eb:5b:03:b6:59:18:96:c5: 9e:f8:06:2b:5b:b4:0e:c1:47:31:a8:98:06:8d:3a: 28:4c:39:9f:68:65:9a:c1:19:5a:fd:3b:ce:a5:d7: da:4b:5f:73:ac:c6:f1:ec:e8:a6:37:f7:25:1a:21: c6:38:30:d0:ee:4d:22:fd:34:e0:7f:2d:86:ef:94: 46:a2:ae:37:fa:30:66:54:ef:09:99:b0:70:5c:03: 5f:25:57:bc:5c:b2:d7:cc:ad:7b:f2:d0:6a:24:3e: e5:f6:4b:b2:fd:84:b5:99:3a:38:b9:eb:43:63:08: 17:d0:54:24:74:47:b4:d0:da:c7:d3:88:2a:7d:9a: 21:d4:b2:f8:ad:12:c6:67:dd:7c:5f:03:0b:28:d1: 1b:54:b4:50:c7:42:4d:59:1a:d8:6a:bd:87:67:46: 61:ba:65:b3:36:d6:ef:9e:5e:53:2a:d3:a8:30:8a: cd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.198.0/23 IPv6: 2406:76c0::/32 Signature Algorithm: sha256WithRSAEncryption 8a:65:8d:19:17:13:e0:5e:7d:64:6e:c3:28:50:d6:d8:ab:b0: b7:4c:16:f0:81:2f:46:45:7a:b1:d6:c1:d4:e9:32:2f:c5:ee: 0b:55:7b:a1:81:9c:ba:a1:3b:d9:85:f8:01:6e:e2:75:2b:33: 99:89:fa:57:23:28:33:e6:be:4d:0d:59:47:79:ac:69:84:b7: f5:c4:ed:1f:f3:6e:39:50:f5:33:77:f2:0e:d3:5c:ac:73:e2: 90:06:f7:c3:18:f2:e3:f6:84:32:b9:9b:52:6a:9a:93:0b:c7: d2:bb:2d:80:91:16:4b:fb:54:48:d6:8a:c5:57:62:11:e7:0b: 1b:e9:22:66:c8:bd:9a:03:e9:1e:8e:fe:fc:70:de:8a:80:23: ec:fa:0f:d3:2c:46:12:11:de:8d:dd:87:92:d7:6c:18:24:b9: bb:c8:d7:40:ff:7c:d4:64:3e:67:5e:d4:1b:6c:ea:1d:4b:60: c0:73:3d:f8:9a:44:9f:61:99:a7:51:00:8b:5c:47:26:61:7a: ad:e5:12:e3:56:b2:7b:cb:59:4d:b9:53:bc:00:36:e7:1f:a6: 52:42:06:67:aa:6a:2f:51:d0:9f:02:d3:9b:93:af:ee:b1:2c: ca:f2:e6:73:89:c4:be:af:8d:8b:39:c1:e5:dc:8a:36:ec:27: 94:71:22:74 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUKcHH7Ep9P3igaVpNJUwNo42s7TkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyNDg0M1oX DTI3MDUwMjAyNTM0M1owMzExMC8GA1UEAxMoMEJGRDZBRENCQ0Y3NDU3QzA1QzdG QTkxQTY5NTg3NThDNkNFQ0JCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJclaTltzbvzH+KKOGXgP8h2SG2pHqL8kq67hskEI7e/8gBa1pTuDmE7NTU1 B93uEVuyUSkAXITEtW0SI3GaGFqPDtaMRe/rNZ6kYlF5gUsJYOtbA7ZZGJbFnvgG K1u0DsFHMaiYBo06KEw5n2hlmsEZWv07zqXX2ktfc6zG8ezopjf3JRohxjgw0O5N Iv004H8thu+URqKuN/owZlTvCZmwcFwDXyVXvFyy18yte/LQaiQ+5fZLsv2EtZk6 OLnrQ2MIF9BUJHRHtNDax9OIKn2aIdSy+K0SxmfdfF8DCyjRG1S0UMdCTVka2Gq9 h2dGYbplszbW755eUyrTqDCKzTkCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAv9aty890V8Bcf6kaaVh1jGzsu+MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ZmMjUwNmIxLTM5NmQtNDk5ZS1iN2Y1LTVkOWY4ZTdlMGJlZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mZjI1MDZi MS0zOTZkLTQ5OWUtYjdmNS01ZDlmOGU3ZTBiZWUvMC8wQkZENkFEQ0JDRjc0NTdD MDVDN0ZBOTFBNjk1ODc1OEM2Q0VDQkJFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5vGMA0EAgACMAcDBQAkBnbAMA0GCSqGSIb3DQEBCwUAA4IBAQCKZY0ZFxPg Xn1kbsMoUNbYq7C3TBbwgS9GRXqx1sHU6TIvxe4LVXuhgZy6oTvZhfgBbuJ1KzOZ ifpXIygz5r5NDVlHeaxphLf1xO0f8245UPUzd/IO01ysc+KQBvfDGPLj9oQyuZtS apqTC8fSuy2AkRZL+1RI1orFV2IR5wsb6SJmyL2aA+kejv78cN6KgCPs+g/TLEYS Ed6N3YeS12wYJLm7yNdA/3zUZD5nXtQbbOodS2DAcz34mkSfYZmnUQCLXEcmYXqt 5RLjVrJ7y1lNuVO8ADbnH6ZSQgZnqmovUdCfAtObk6/usSzK8uZzicS+r42LOcHl 3Io27CeUcSJ0 -----END CERTIFICATE-----Generated at Wed May 13 01:07:11 2026 by rpki-client