$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer File: 0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer (raw, json) Hash identifier: pTUp6IzqgCf4TE6cJYSlrWHwN7r27q3YakqIk56IZ8o= Subject key identifier: 0F:3D:CD:95:FC:3F:C6:D7:D7:B3:D1:68:76:AB:81:E1:44:75:23:E5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 38B18C9AD75BB62F0C4E6951950F67F45B5F1D5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:59:10 +0000 Certificate not after: Sun 02 May 2027 02:04:10 +0000 Subordinate resources: IP: 103.158.126.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:b1:8c:9a:d7:5b:b6:2f:0c:4e:69:51:95:0f:67:f4:5b:5f:1d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:59:10 2026 GMT Not After : May 2 02:04:10 2027 GMT Subject: CN=0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a6:bb:30:1a:11:5f:a0:1f:29:2a:4d:67:14: 65:68:31:6b:3d:6f:07:8c:32:4a:b5:d4:d4:c2:81: 6a:9a:0f:5e:50:c7:64:5b:46:07:f3:5e:3d:82:4d: 59:05:66:a7:94:a9:de:f3:8f:1c:09:73:d7:69:29: 76:0f:f5:ad:2d:2c:4e:f4:06:7a:7a:94:8e:b5:11: ae:da:96:f6:d9:72:65:b9:7d:6e:42:b5:b4:34:1d: c8:e3:5c:45:dc:d0:07:e9:31:cc:30:11:50:24:58: d3:a9:df:ac:04:51:75:e5:e5:36:c9:9d:c6:86:1b: ff:e6:bb:0c:d1:18:a8:2f:3f:e8:4a:86:b5:c9:dd: 03:16:c6:80:1c:cc:99:9f:ab:58:c8:10:5c:41:e0: f7:b8:07:40:fa:3d:68:83:93:39:39:97:e6:de:7d: 77:31:b3:ba:12:ec:a2:63:32:1d:53:25:43:7f:52: 64:03:56:fe:d7:94:a0:ef:90:b8:7a:ac:65:1d:1a: 66:ff:20:97:88:1a:10:60:b2:ff:2a:55:e7:ff:5c: 96:8f:8b:f0:31:b9:bc:b8:04:87:08:26:83:85:c1: 68:05:97:20:13:09:3e:84:7f:da:d7:96:ec:c1:f3: eb:14:d5:95:87:e5:c3:a7:87:c1:ab:42:76:07:b6: 50:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0F:3D:CD:95:FC:3F:C6:D7:D7:B3:D1:68:76:AB:81:E1:44:75:23:E5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.126.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:78:5d:91:e5:01:fb:f0:47:48:bb:ac:ef:da:7b:67:b2:be: a9:09:ee:b9:2d:6d:9e:eb:be:ca:4b:6d:3d:f0:ec:4c:46:e8: b2:8f:68:a0:c5:1a:88:ab:ac:dd:3d:87:61:69:3c:06:2c:cd: 31:8b:ee:1e:aa:86:19:17:67:72:b1:5b:ff:1d:ef:5d:b1:ee: 72:45:30:7c:6d:40:2d:59:bc:e9:28:a5:b3:de:15:34:90:2e: 4d:56:ba:18:33:85:dd:64:14:b6:5b:a4:27:17:41:e1:00:a5: 49:4e:b3:1e:a8:d7:da:2e:9f:97:97:52:e0:f8:90:36:ec:3d: d2:1a:d2:af:9f:a1:28:fa:6b:c5:8d:16:83:9a:cc:2e:52:a8: c7:3f:e2:72:35:14:d6:d8:5b:d7:9a:40:a8:51:b4:dc:a9:d7: 2d:06:26:4b:94:75:a7:08:4c:38:4e:cb:74:8c:ae:11:20:4e: 9b:c0:df:3f:cc:88:fa:79:03:5b:fa:26:44:3d:a0:11:a7:ef: 2e:6f:e1:73:74:59:ff:dc:e5:63:c1:a0:60:0d:00:04:ba:67: 13:ee:ae:da:b5:d5:65:1b:17:44:46:9a:97:8e:63:1e:9d:c8: 35:cb:de:42:a5:50:01:62:1f:c1:93:e5:61:a9:62:77:23:9e: c5:b2:a4:2e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUOLGMmtdbti8MTmlRlQ9n9FtfHV8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTkxMFoX DTI3MDUwMjAyMDQxMFowMzExMC8GA1UEAxMoMEYzRENEOTVGQzNGQzZEN0Q3QjNE MTY4NzZBQjgxRTE0NDc1MjNFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALCmuzAaEV+gHykqTWcUZWgxaz1vB4wySrXU1MKBapoPXlDHZFtGB/NePYJN WQVmp5Sp3vOPHAlz12kpdg/1rS0sTvQGenqUjrURrtqW9tlyZbl9bkK1tDQdyONc RdzQB+kxzDARUCRY06nfrARRdeXlNsmdxoYb/+a7DNEYqC8/6EqGtcndAxbGgBzM mZ+rWMgQXEHg97gHQPo9aIOTOTmX5t59dzGzuhLsomMyHVMlQ39SZANW/teUoO+Q uHqsZR0aZv8gl4gaEGCy/ypV5/9clo+L8DG5vLgEhwgmg4XBaAWXIBMJPoR/2teW 7MHz6xTVlYflw6eHwatCdge2UNsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFA89zZX8P8bX17PRaHargeFEdSPlMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q0NGRmYjVhLTZlMjQtNGE0ZC04OTY5LWViM2NiZTM0ZTQ3ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kNDRkZmI1 YS02ZTI0LTRhNGQtODk2OS1lYjNjYmUzNGU0N2UvMC8wRjNEQ0Q5NUZDM0ZDNkQ3 RDdCM0QxNjg3NkFCODFFMTQ0NzUyM0U1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ55+MA0GCSqGSIb3DQEBCwUAA4IBAQBqeF2R5QH78EdIu6zv2ntnsr6pCe65 LW2e677KS2098OxMRuiyj2igxRqIq6zdPYdhaTwGLM0xi+4eqoYZF2dysVv/He9d se5yRTB8bUAtWbzpKKWz3hU0kC5NVroYM4XdZBS2W6QnF0HhAKVJTrMeqNfaLp+X l1Lg+JA27D3SGtKvn6Eo+mvFjRaDmswuUqjHP+JyNRTW2FvXmkCoUbTcqdctBiZL lHWnCEw4Tst0jK4RIE6bwN8/zIj6eQNb+iZEPaARp+8ub+FzdFn/3OVjwaBgDQAE umcT7q7atdVlGxdERpqXjmMencg1y95CpVABYh/Bk+VhqWJ3I57FsqQu -----END CERTIFICATE-----Generated at Tue May 12 22:38:48 2026 by rpki-client