$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer File: 0CCF948F3DA2CC08F062DFCB57CA07067D419783.cer (raw, json) Hash identifier: OJsDLn2nieaL1l3uNPaVeJbdcNrLJ6RZ8qg6Jpu1efU= Subject key identifier: 0C:CF:94:8F:3D:A2:CC:08:F0:62:DF:CB:57:CA:07:06:7D:41:97:83 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 679A3A1C9507DCBE01ADFAA4500857B19B105B82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:54:08 +0000 Certificate not after: Sun 02 May 2027 00:59:08 +0000 Subordinate resources: IP: 103.155.168.0/23 IP: 2406:72c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:9a:3a:1c:95:07:dc:be:01:ad:fa:a4:50:08:57:b1:9b:10:5b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:54:08 2026 GMT Not After : May 2 00:59:08 2027 GMT Subject: CN=0CCF948F3DA2CC08F062DFCB57CA07067D419783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fa:7f:aa:df:78:79:e6:47:24:2b:aa:2a:1d: 3f:e4:d7:56:9b:26:f4:fc:f2:8a:b7:b7:d4:f2:7a: dd:86:ba:1d:67:bd:52:9b:48:fb:a6:66:80:cb:8d: f0:17:ab:40:a3:29:85:52:7a:ed:8c:c5:b9:6e:cf: 66:25:cb:79:92:4d:c2:b2:94:1a:1f:50:07:4a:0b: 7c:9f:d4:b1:f9:8f:17:bc:85:34:1a:8b:e4:f6:9f: 95:32:24:4b:b6:ee:8b:1d:fc:a3:d6:ec:e3:eb:6c: e1:9a:43:3d:bb:9e:9e:67:01:e3:92:c1:c5:e6:f7: 58:d1:3d:2a:89:90:3d:ec:37:52:a8:7b:bd:6e:7a: a8:ef:b2:53:fb:fe:b8:e8:64:a3:86:ba:ba:1a:bc: 5c:5f:fb:e9:77:d3:33:dc:4e:61:bb:06:c4:d5:a7: 0c:95:26:93:7d:12:d3:ef:45:0c:33:bd:21:24:50: 83:89:5e:65:3f:82:a8:3c:33:41:21:84:fa:aa:dc: 91:30:75:ab:21:1f:12:40:f5:1c:b6:0f:07:e9:82: bf:b7:1b:c7:4f:27:16:2d:0c:c4:bb:f9:30:bf:8c: dc:d4:fc:e4:c3:4a:c6:31:bb:01:52:40:b4:8a:fd: 1e:c3:8a:ed:77:1c:12:c1:03:2d:96:a1:22:b8:64: 92:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0C:CF:94:8F:3D:A2:CC:08:F0:62:DF:CB:57:CA:07:06:7D:41:97:83 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/0CCF948F3DA2CC08F062DFCB57CA07067D419783.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.168.0/23 IPv6: 2406:72c0::/32 Signature Algorithm: sha256WithRSAEncryption 63:6c:58:02:5b:bc:1f:b6:e0:8c:52:22:25:63:de:33:3b:f9: 38:bb:a8:e5:7b:bf:8d:e3:a7:35:e8:a2:33:0c:0d:8c:67:5e: 18:04:a5:84:11:4d:4a:fb:dd:06:63:3a:55:29:44:ad:e5:65: 0f:93:a7:9a:98:c1:d8:21:db:cb:35:b4:f9:a0:17:01:82:a1: 09:46:07:64:ce:0d:95:4f:73:01:1f:a3:58:33:57:1a:30:8e: 38:4a:51:dc:5c:38:fd:bc:06:10:7b:d0:d2:fa:cb:bc:56:b2: 82:b6:a4:30:e9:68:30:f1:7a:86:20:31:1f:71:2c:bd:8a:59: 4f:23:f8:63:83:99:4f:7f:af:30:bf:d2:25:16:1a:47:27:01: a4:ca:84:e4:d2:72:ce:40:5a:f3:b0:48:07:dc:1e:ae:19:19: 92:d8:38:e0:ef:c2:6a:74:13:03:4d:5b:40:07:34:1d:7d:3e: 00:92:05:77:f8:48:f9:aa:5e:02:ef:54:a2:21:05:1f:b5:f7: 53:5a:4e:8f:55:e5:e2:a4:17:66:ad:42:63:b7:c2:9e:90:3e: b3:0f:60:54:bf:ff:e1:75:88:bd:24:aa:e1:58:62:2e:f3:13: 2d:f0:13:17:b5:d3:8e:88:8b:0d:c0:41:d1:d6:eb:da:49:a4: 1b:86:9c:b1 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUZ5o6HJUH3L4BrfqkUAhXsZsQW4IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTQwOFoX DTI3MDUwMjAwNTkwOFowMzExMC8GA1UEAxMoMENDRjk0OEYzREEyQ0MwOEYwNjJE RkNCNTdDQTA3MDY3RDQxOTc4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJn6f6rfeHnmRyQrqiodP+TXVpsm9Pzyire31PJ63Ya6HWe9UptI+6ZmgMuN 8BerQKMphVJ67YzFuW7PZiXLeZJNwrKUGh9QB0oLfJ/UsfmPF7yFNBqL5PaflTIk S7buix38o9bs4+ts4ZpDPbuenmcB45LBxeb3WNE9KomQPew3Uqh7vW56qO+yU/v+ uOhko4a6uhq8XF/76XfTM9xOYbsGxNWnDJUmk30S0+9FDDO9ISRQg4leZT+CqDwz QSGE+qrckTB1qyEfEkD1HLYPB+mCv7cbx08nFi0MxLv5ML+M3NT85MNKxjG7AVJA tIr9HsOK7XccEsEDLZahIrhkkgECAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAzPlI89oswI8GLfy1fKBwZ9QZeDMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZmZjhmNGFiLTFhYjgtNDg5NC1iNzU4LWQ5YmNlMzgwM2U0Yy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82ZmY4ZjRh Yi0xYWI4LTQ4OTQtYjc1OC1kOWJjZTM4MDNlNGMvMC8wQ0NGOTQ4RjNEQTJDQzA4 RjA2MkRGQ0I1N0NBMDcwNjdENDE5NzgzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5uoMA0EAgACMAcDBQAkBnLAMA0GCSqGSIb3DQEBCwUAA4IBAQBjbFgCW7wf tuCMUiIlY94zO/k4u6jle7+N46c16KIzDA2MZ14YBKWEEU1K+90GYzpVKUSt5WUP k6eamMHYIdvLNbT5oBcBgqEJRgdkzg2VT3MBH6NYM1caMI44SlHcXDj9vAYQe9DS +su8VrKCtqQw6Wgw8XqGIDEfcSy9illPI/hjg5lPf68wv9IlFhpHJwGkyoTk0nLO QFrzsEgH3B6uGRmS2Djg78JqdBMDTVtABzQdfT4AkgV3+Ej5ql4C71SiIQUftfdT Wk6PVeXipBdmrUJjt8KekD6zD2BUv//hdYi9JKrhWGIu8xMt8BMXtdOOiIsNwEHR 1uvaSaQbhpyx -----END CERTIFICATE-----Generated at Tue May 12 22:10:42 2026 by rpki-client