$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer File: 0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.cer (raw, json) Hash identifier: FVjfQruwO866ljEA76T8Ewv0oS4D4Viipy6XUi3d1pA= Subject key identifier: 0C:CC:E4:0D:07:CA:93:17:BC:33:59:D3:C3:80:B3:C9:AB:94:E8:DD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 124581AC2FA06289B602ABD22DB2745948674483 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft caRepository: rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:08:23 +0000 Certificate not after: Sun 02 May 2027 01:13:23 +0000 Subordinate resources: IP: 103.158.13.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:45:81:ac:2f:a0:62:89:b6:02:ab:d2:2d:b2:74:59:48:67:44:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:08:23 2026 GMT Not After : May 2 01:13:23 2027 GMT Subject: CN=0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:59:de:b1:a4:6f:4d:6d:ec:09:3a:34:9f:a7: 9c:3f:26:7c:f7:6e:be:f7:87:38:0d:d4:e7:81:ee: 23:92:d4:4f:49:39:61:b8:2b:39:a6:42:69:0b:4a: 40:86:35:85:2b:a6:5f:ee:9e:7e:06:6b:2b:d3:90: 5f:cf:c7:63:1e:cd:5b:75:ab:3b:03:6a:b9:bd:9e: 7b:0f:6e:79:68:4b:ea:15:fa:97:a2:c0:94:2d:98: 0d:20:da:26:d4:bd:08:03:d7:74:22:d6:07:53:e1: 88:82:39:d2:f8:2b:af:46:7e:da:e4:8d:13:1d:82: b6:33:ae:e8:47:9e:7e:ca:d3:b8:8b:03:1a:31:32: 64:a9:04:41:83:08:e9:d4:2c:d9:3c:20:2d:eb:25: 99:30:dd:e4:58:b5:2b:8d:d3:7d:11:18:a4:81:37: 3c:5c:7a:44:01:42:c8:df:69:9d:a2:8a:63:24:60: f7:34:ea:d8:e6:71:5b:25:89:32:78:e8:cd:6d:6a: 9e:01:ad:c6:fe:68:e5:62:fd:7c:bb:48:8b:0a:af: 3a:d5:cf:8c:0a:80:1c:d8:84:67:44:bf:70:aa:33: 8c:ee:83:cc:2f:a9:f7:e1:0a:51:67:42:f2:ea:d3: 90:bd:43:0e:f2:ea:ad:b6:6b:ce:7d:de:12:18:cd: bf:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0C:CC:E4:0D:07:CA:93:17:BC:33:59:D3:C3:80:B3:C9:AB:94:E8:DD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/0CCCE40D07CA9317BC3359D3C380B3C9AB94E8DD.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.13.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:8c:2c:11:1d:b0:0d:4c:2d:52:78:d6:0b:a1:40:b4:34:e6: 82:c9:2a:d6:90:ae:50:a8:56:b7:08:3e:5f:75:56:b3:1e:b3: 14:13:51:d9:f6:aa:69:4b:5d:ca:e7:f8:7a:b0:54:16:20:91: 55:c7:1c:ff:dd:76:72:02:ef:f2:01:29:db:53:c7:d3:9a:09: 93:73:7a:7d:ae:33:82:79:96:ba:fa:1d:d0:64:aa:ae:c6:13: ee:7e:bc:ce:0d:27:18:86:ba:16:44:1e:c3:2b:f4:21:df:db: 31:ac:0c:dd:03:d1:fb:86:cc:e2:e4:9c:d1:b9:40:58:1c:e8: 5c:04:eb:9b:45:1c:1a:d5:4a:da:47:90:5a:45:6a:02:ff:22: ba:d5:fa:c8:dd:cf:a8:61:9d:50:7f:d5:e8:fc:37:57:97:7c: 7d:8c:81:8f:79:1b:0f:c9:6d:05:f9:cd:01:67:31:3f:45:7a: 4a:c6:3f:18:eb:9a:2b:f2:08:0a:0d:a8:fc:70:0b:3d:22:95: 27:6a:1f:48:ad:2b:cc:e6:af:bc:7a:a6:eb:3e:e1:b6:2c:14: 7b:c5:a8:f5:68:4b:dc:dc:90:bd:55:64:a8:29:c2:a7:4d:f2: c6:a6:d7:04:fd:e5:fe:87:91:90:49:00:e4:b8:fc:95:6c:ec: f4:01:c1:f1 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUEkWBrC+gYom2AqvSLbJ0WUhnRIMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDgyM1oX DTI3MDUwMjAxMTMyM1owMzExMC8GA1UEAxMoMENDQ0U0MEQwN0NBOTMxN0JDMzM1 OUQzQzM4MEIzQzlBQjk0RThERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMtZ3rGkb01t7Ak6NJ+nnD8mfPduvveHOA3U54HuI5LUT0k5YbgrOaZCaQtK QIY1hSumX+6efgZrK9OQX8/HYx7NW3WrOwNqub2eew9ueWhL6hX6l6LAlC2YDSDa JtS9CAPXdCLWB1PhiII50vgrr0Z+2uSNEx2CtjOu6EeefsrTuIsDGjEyZKkEQYMI 6dQs2TwgLeslmTDd5Fi1K43TfREYpIE3PFx6RAFCyN9pnaKKYyRg9zTq2OZxWyWJ MnjozW1qngGtxv5o5WL9fLtIiwqvOtXPjAqAHNiEZ0S/cKozjO6DzC+p9+EKUWdC 8urTkL1DDvLqrbZrzn3eEhjNv9kCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAzM5A0HypMXvDNZ08OAs8mrlOjdMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzgzNmZkNTUxLTZhYmEtNDIyMi04YTI2LTk4NjM0NjgyNWIzOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84MzZmZDU1 MS02YWJhLTQyMjItOGEyNi05ODYzNDY4MjViMzgvMC8wQ0NDRTQwRDA3Q0E5MzE3 QkMzMzU5RDNDMzgwQjNDOUFCOTRFOERELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ54NMA0GCSqGSIb3DQEBCwUAA4IBAQB9jCwRHbANTC1SeNYLoUC0NOaCySrW kK5QqFa3CD5fdVazHrMUE1HZ9qppS13K5/h6sFQWIJFVxxz/3XZyAu/yASnbU8fT mgmTc3p9rjOCeZa6+h3QZKquxhPufrzODScYhroWRB7DK/Qh39sxrAzdA9H7hszi 5JzRuUBYHOhcBOubRRwa1UraR5BaRWoC/yK61frI3c+oYZ1Qf9Xo/DdXl3x9jIGP eRsPyW0F+c0BZzE/RXpKxj8Y65or8ggKDaj8cAs9IpUnah9IrSvM5q+8eqbrPuG2 LBR7xaj1aEvc3JC9VWSoKcKnTfLGptcE/eX+h5GQSQDkuPyVbOz0AcHx -----END CERTIFICATE-----Generated at Tue May 12 22:03:20 2026 by rpki-client