$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer File: 0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer (raw, json) Hash identifier: KjEGNnJ+SzOy7XMg647CtbPmzIiYxXTSIXANtSEnlMI= Subject key identifier: 0D:CE:F2:10:E6:B2:D9:C5:5C:FF:D3:B1:5E:5E:94:0C:3A:FE:7A:3C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 57E471F877635B833BE08CABDCA7BA3DEB79072E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:02:31 +0000 Certificate not after: Sun 02 May 2027 02:07:31 +0000 Subordinate resources: IP: 27.0.196.0/22 IP: 103.229.160.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:e4:71:f8:77:63:5b:83:3b:e0:8c:ab:dc:a7:ba:3d:eb:79:07:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:02:31 2026 GMT Not After : May 2 02:07:31 2027 GMT Subject: CN=0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:41:b7:32:43:1a:fe:14:60:f5:50:59:1d:26: da:ab:51:a5:65:ab:83:ad:90:83:eb:88:d6:5c:38: 4f:46:6d:69:70:3b:0b:90:28:5d:dc:be:d9:47:e3: 01:cd:cf:76:66:15:92:00:0e:e0:3a:aa:87:a9:7f: e8:f4:0d:f1:79:e2:fa:8b:ff:31:60:29:b8:7f:cb: e2:ff:ff:b3:54:a8:de:6c:0d:88:83:46:5f:ea:dd: 3c:a3:56:f4:ed:46:ee:d8:95:0d:2a:41:65:0d:a6: ff:d1:a6:0c:66:36:0c:49:4e:43:d5:41:bf:71:41: 06:c4:e8:0e:af:9a:ac:54:5e:a9:5a:10:e2:f2:a7: de:7a:74:33:ec:cb:2d:14:23:51:9b:dd:47:5d:2c: 24:a4:e1:a7:f8:54:f6:04:53:c5:cd:84:d2:de:01: 27:e7:b4:17:12:64:e6:8a:5e:a7:cd:ae:5c:cf:67: cd:40:36:00:a9:c0:b2:ba:8e:7b:d8:a8:84:70:8c: 5b:d1:cf:e3:39:45:84:ce:ca:c2:a2:b6:55:9b:68: 77:b6:2f:59:75:f6:02:06:1a:f4:ec:58:0b:08:da: 18:95:04:c7:fe:73:3d:b6:26:23:9f:ba:08:cf:49: 98:d6:e5:5e:49:d4:85:b5:3c:35:b6:c1:77:d3:0c: 4f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:CE:F2:10:E6:B2:D9:C5:5C:FF:D3:B1:5E:5E:94:0C:3A:FE:7A:3C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.0.196.0/22 103.229.160.0/22 Signature Algorithm: sha256WithRSAEncryption 23:1a:9b:66:19:62:f5:9c:52:58:33:96:c5:bc:12:97:7d:47: a8:86:f6:43:ba:7d:0f:bd:05:f6:6a:0a:7a:5f:20:e8:e9:38: 9c:9e:13:f8:fe:cc:d3:6a:21:9c:22:7d:94:9c:13:f5:45:32: 87:99:86:ea:3a:7b:16:9f:40:99:0b:61:52:7b:d9:e2:14:54: 9c:f0:a1:4a:23:c3:24:bd:08:bf:ad:20:a6:4a:63:66:a3:a1: 49:b1:22:b8:9c:66:3b:01:b8:9a:1a:bf:39:d9:8f:bc:fc:e9: de:fe:29:c1:3a:55:fa:a2:4d:77:15:fc:00:ab:fc:86:47:65: 52:9c:34:fe:d4:91:7d:32:be:ff:d2:93:92:1e:e6:f5:67:3d: 19:b8:cd:64:f8:35:69:13:51:87:8e:dc:d1:9d:ed:49:a5:38: 3c:29:3b:2c:35:df:78:bf:e5:c1:52:09:02:fd:b3:27:6e:a6: d6:0b:d7:c1:29:1e:58:a0:ea:66:8f:e3:62:1b:18:fb:f9:ae: 95:7b:e7:e5:eb:5d:f2:66:fb:ff:46:21:4a:61:1a:d2:3f:da: 27:f8:1b:35:12:ec:ad:24:43:29:4c:f9:b0:04:1a:af:33:fc: 6f:cf:9f:39:79:1d:05:fd:cc:d6:3d:6a:b8:d7:02:6a:1a:8b: e3:45:5f:9f -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUV+Rx+HdjW4M74Iyr3Ke6Pet5By4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDIzMVoX DTI3MDUwMjAyMDczMVowMzExMC8GA1UEAxMoMERDRUYyMTBFNkIyRDlDNTVDRkZE M0IxNUU1RTk0MEMzQUZFN0EzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMBBtzJDGv4UYPVQWR0m2qtRpWWrg62Qg+uI1lw4T0ZtaXA7C5AoXdy+2Ufj Ac3PdmYVkgAO4Dqqh6l/6PQN8Xni+ov/MWApuH/L4v//s1So3mwNiINGX+rdPKNW 9O1G7tiVDSpBZQ2m/9GmDGY2DElOQ9VBv3FBBsToDq+arFReqVoQ4vKn3np0M+zL LRQjUZvdR10sJKThp/hU9gRTxc2E0t4BJ+e0FxJk5opep82uXM9nzUA2AKnAsrqO e9iohHCMW9HP4zlFhM7KwqK2VZtod7YvWXX2AgYa9OxYCwjaGJUEx/5zPbYmI5+6 CM9JmNblXknUhbU8NbbBd9MMTwMCAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFA3O8hDmstnFXP/TsV5elAw6/no8MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q5M2ViOGY2LWJiNmMtNGVhNy04NmRmLWIyNDNjNTE2NGQyMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kOTNlYjhm Ni1iYjZjLTRlYTctODZkZi1iMjQzYzUxNjRkMjIvMC8wRENFRjIxMEU2QjJEOUM1 NUNGRkQzQjE1RTVFOTQwQzNBRkU3QTNDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQCGwDEAwQCZ+WgMA0GCSqGSIb3DQEBCwUAA4IBAQAjGptmGWL1nFJYM5bFvBKX fUeohvZDun0PvQX2agp6XyDo6TicnhP4/szTaiGcIn2UnBP1RTKHmYbqOnsWn0CZ C2FSe9niFFSc8KFKI8MkvQi/rSCmSmNmo6FJsSK4nGY7AbiaGr852Y+8/One/inB OlX6ok13FfwAq/yGR2VSnDT+1JF9Mr7/0pOSHub1Zz0ZuM1k+DVpE1GHjtzRne1J pTg8KTssNd94v+XBUgkC/bMnbqbWC9fBKR5YoOpmj+NiGxj7+a6Ve+fl613yZvv/ RiFKYRrSP9on+Bs1EuytJEMpTPmwBBqvM/xvz585eR0F/czWPWq41wJqGovjRV+f -----END CERTIFICATE-----Generated at Tue May 12 22:45:28 2026 by rpki-client