$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer File: 0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer (raw, json) Hash identifier: owQcYWBQKW/qZX3Xx6cLYn1kB+5/XPbOQnBUIbxQFQw= Subject key identifier: 0C:ED:1E:ED:0E:85:E2:B8:BA:5E:FF:BE:C0:25:20:3D:7C:38:4B:C1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5ED62514966429FCF0BFDD3C76551CDEE5B2131B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:41:12 +0000 Certificate not after: Sun 02 May 2027 00:46:12 +0000 Subordinate resources: IP: 103.185.82.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:d6:25:14:96:64:29:fc:f0:bf:dd:3c:76:55:1c:de:e5:b2:13:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:41:12 2026 GMT Not After : May 2 00:46:12 2027 GMT Subject: CN=0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:5d:b8:d9:8c:47:02:0f:6f:11:0f:c2:6b: ff:54:3b:8d:d6:bd:cb:7e:d4:00:4e:6c:69:07:6f: 0b:25:ab:31:00:ac:85:e1:58:28:47:33:04:03:b8: a3:4c:3b:5d:a3:c3:fa:b2:09:3a:38:9d:9a:ca:26: bf:a7:89:c9:76:9f:43:46:9c:73:ea:17:38:ea:32: dc:a8:94:1a:6d:70:48:57:15:16:21:18:09:b8:62: f0:ab:4d:74:76:c9:bb:c3:ff:98:cd:79:d0:3d:fb: 8b:ea:e7:a1:87:96:70:65:e0:27:6b:64:de:92:d8: 43:84:7e:01:67:74:d2:9a:ce:67:33:83:a6:fc:dd: 71:23:d2:a4:c2:c6:ea:d0:1b:8b:77:97:21:78:01: 98:c5:da:59:13:c2:48:f6:c4:08:07:64:b3:14:81: 66:45:44:c1:97:13:69:c9:b2:f3:a0:c5:b2:0a:1a: 75:d7:d0:23:50:4d:ea:b2:36:8c:e6:d4:1e:93:a5: 07:d3:f3:0e:c8:8f:fb:7f:a0:3b:b8:8f:5f:65:7b: bb:9b:47:c9:e9:b2:d7:fc:ea:9a:b1:d5:59:cf:2d: 8d:1c:07:43:50:9f:18:1a:6f:39:88:96:c4:88:2b: bc:d2:95:a9:56:3d:8a:25:ec:85:35:48:3b:93:04: 75:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0C:ED:1E:ED:0E:85:E2:B8:BA:5E:FF:BE:C0:25:20:3D:7C:38:4B:C1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.185.82.0/23 Signature Algorithm: sha256WithRSAEncryption 65:d7:19:95:6c:17:b1:e0:7d:e8:a7:bc:46:41:f3:e7:06:77: 22:3e:9b:c7:05:d3:eb:e6:b5:5f:69:5e:4c:f0:c5:07:53:1e: 0c:ad:14:ca:1e:cc:3a:13:66:c9:12:f0:20:85:63:a1:74:e5: 84:f7:b4:d2:fc:68:ad:d9:90:ce:21:7d:b6:f9:d9:1d:f4:82: 88:8a:76:0d:a6:2a:1f:5a:79:4f:73:91:66:aa:9a:c3:41:c7: 23:f2:62:c5:cf:11:54:fc:2e:07:bb:35:a9:66:d9:be:a1:51: a8:56:b0:ce:2e:41:d6:ab:26:4d:0d:54:47:ef:ca:70:fd:fc: f4:cb:54:86:a2:f9:42:96:53:87:bc:fe:9e:62:12:8e:1a:6b: e5:5d:a4:f6:ad:af:0b:c0:20:8d:ef:2c:e0:f6:a0:11:ea:a5: 97:fa:1e:d9:90:b7:35:6b:2d:97:a9:89:f8:04:c8:9d:90:bd: fd:3d:86:eb:b8:ce:25:3d:66:47:2a:9f:d4:ef:14:6a:3b:1b: 2c:8d:46:03:25:c5:d1:40:71:1a:11:de:9e:ba:da:69:70:a1: f3:17:9e:14:1a:19:0b:5d:c0:81:f6:91:56:42:ca:2f:a6:a3: 9c:76:e3:51:32:49:93:7f:5f:a7:58:6f:de:26:f0:a5:c9:56: 72:8f:8f:fa -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUXtYlFJZkKfzwv908dlUc3uWyExswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDExMloX DTI3MDUwMjAwNDYxMlowMzExMC8GA1UEAxMoMENFRDFFRUQwRTg1RTJCOEJBNUVG RkJFQzAyNTIwM0Q3QzM4NEJDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZpXbjZjEcCD28RD8Jr/1Q7jda9y37UAE5saQdvCyWrMQCsheFYKEczBAO4 o0w7XaPD+rIJOjidmsomv6eJyXafQ0acc+oXOOoy3KiUGm1wSFcVFiEYCbhi8KtN dHbJu8P/mM150D37i+rnoYeWcGXgJ2tk3pLYQ4R+AWd00prOZzODpvzdcSPSpMLG 6tAbi3eXIXgBmMXaWRPCSPbECAdksxSBZkVEwZcTacmy86DFsgoaddfQI1BN6rI2 jObUHpOlB9PzDsiP+3+gO7iPX2V7u5tHyemy1/zqmrHVWc8tjRwHQ1CfGBpvOYiW xIgrvNKVqVY9iiXshTVIO5MEdWUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAztHu0OheK4ul7/vsAlID18OEvBMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzViZjJjZjAzLWY5ZjktNGJjYS04YzJjLTYwNzMyODBkZmVhOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81YmYyY2Yw My1mOWY5LTRiY2EtOGMyYy02MDczMjgwZGZlYTgvMC8wQ0VEMUVFRDBFODVFMkI4 QkE1RUZGQkVDMDI1MjAzRDdDMzg0QkMxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7lSMA0GCSqGSIb3DQEBCwUAA4IBAQBl1xmVbBex4H3op7xGQfPnBnciPpvH BdPr5rVfaV5M8MUHUx4MrRTKHsw6E2bJEvAghWOhdOWE97TS/Git2ZDOIX22+dkd 9IKIinYNpiofWnlPc5FmqprDQccj8mLFzxFU/C4HuzWpZtm+oVGoVrDOLkHWqyZN DVRH78pw/fz0y1SGovlCllOHvP6eYhKOGmvlXaT2ra8LwCCN7yzg9qAR6qWX+h7Z kLc1ay2XqYn4BMidkL39PYbruM4lPWZHKp/U7xRqOxssjUYDJcXRQHEaEd6eutpp cKHzF54UGhkLXcCB9pFWQsovpqOcduNRMkmTf1+nWG/eJvClyVZyj4/6 -----END CERTIFICATE-----Generated at Tue May 12 22:39:01 2026 by rpki-client