$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer File: 0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer (raw, json) Hash identifier: 45uWx9xQYNgXyn/ZTeM2NL0Ksn9oAk4izH+ZcBuu7+0= Subject key identifier: 0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 467D4384CB52BA758E3F693E32CC63DE63543F00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:55:13 +0000 Certificate not after: Sun 02 May 2027 02:00:13 +0000 Subordinate resources: IP: 103.98.116.0/22 IP: 2401:97c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:7d:43:84:cb:52:ba:75:8e:3f:69:3e:32:cc:63:de:63:54:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:55:13 2026 GMT Not After : May 2 02:00:13 2027 GMT Subject: CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:79:9b:82:77:fc:c3:9d:f7:a3:5e:b7:42:c6: 1a:f8:46:fa:a9:a7:3a:ca:03:c1:12:ee:82:12:0a: 56:d2:97:04:5b:cb:c3:7b:a8:f4:43:e0:63:b1:80: ea:d9:2f:f1:6f:7c:19:ed:26:8b:96:e4:7e:2b:d4: 1f:3a:bb:18:09:a2:68:05:1d:0f:88:fe:cc:b4:8a: bc:6e:f5:34:72:6a:85:86:6c:97:ca:da:d1:44:d4: 0b:91:1f:7a:88:ce:eb:dd:53:d0:34:ad:d3:54:a9: 1a:a9:a5:19:de:d0:e7:b9:d8:68:9e:3a:14:0c:0f: 84:bc:05:ec:94:61:bc:ba:4c:67:45:c4:cb:2f:95: f0:a5:9b:f5:a9:ff:60:53:67:31:3a:d7:57:6d:73: 87:5d:c1:32:20:34:2b:ab:55:cc:d1:69:31:4d:7f: f4:c2:f7:05:52:ad:29:17:67:be:43:8c:d3:d2:c4: 1b:19:44:d6:37:ec:66:f4:3b:97:3d:25:92:ba:ef: 74:27:6d:c0:af:cf:9e:5f:99:9f:1e:35:2a:05:42: e2:ca:69:e2:eb:dd:bd:1f:36:63:26:22:b9:bb:a8: 9c:c5:57:9c:b7:d3:df:ea:c7:6f:32:33:85:64:27: a3:84:90:d5:f6:6b:7d:4d:a6:fe:e2:5d:e8:49:db: ca:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.98.116.0/22 IPv6: 2401:97c0::/32 Signature Algorithm: sha256WithRSAEncryption 16:45:cb:24:54:52:a5:f6:fa:c8:e0:b9:51:ee:a8:e1:33:ab: 56:85:61:c0:de:23:c0:20:68:0f:af:c7:89:65:c3:5c:23:d7: cc:55:ff:ee:ac:f0:28:9a:c8:24:21:6e:04:bd:bb:46:da:1a: 0a:6b:de:3b:ce:75:70:83:e1:32:4b:c7:b7:4e:bb:9d:ad:b7: a9:ff:00:44:a9:29:8f:9e:75:83:b6:df:64:e1:87:4e:a1:86: f1:1a:8d:bb:c6:2a:d0:a6:57:ab:39:da:0e:02:72:3f:a0:d9: 5c:3c:f3:e7:e1:74:6b:88:6c:6d:16:a9:48:91:03:d5:56:ab: b1:50:fb:31:c9:46:52:56:5d:2c:79:23:1b:ea:0d:b5:8d:7a: 8f:55:d2:69:55:f0:d0:7a:91:48:0d:bd:de:0e:af:2c:ec:4d: 7f:73:af:39:28:86:61:d8:f3:fd:f9:42:a3:e3:26:4f:65:c6: e2:0a:a1:b4:e4:d2:ca:4b:98:ea:a5:75:2b:35:37:d5:8d:48: eb:a5:e5:c7:75:11:c1:78:ad:9f:73:68:82:07:57:07:07:b6: 2b:88:04:85:14:b8:98:cb:74:b2:76:4f:ca:a1:8c:55:98:ba: 78:77:47:4a:09:0c:13:ed:9c:e8:bc:c1:d7:f8:d7:6e:f7:5c: 2b:11:4a:d3 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIURn1DhMtSunWOP2k+Msxj3mNUPwAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTUxM1oX DTI3MDUwMjAyMDAxM1owMzExMC8GA1UEAxMoMEZGRTJFQTEyQUMxNTZBRjc4QUMy RDlBNDU5QUYxNkUyMTc2RUVDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALp5m4J3/MOd96Net0LGGvhG+qmnOsoDwRLughIKVtKXBFvLw3uo9EPgY7GA 6tkv8W98Ge0mi5bkfivUHzq7GAmiaAUdD4j+zLSKvG71NHJqhYZsl8ra0UTUC5Ef eojO691T0DSt01SpGqmlGd7Q57nYaJ46FAwPhLwF7JRhvLpMZ0XEyy+V8KWb9an/ YFNnMTrXV21zh13BMiA0K6tVzNFpMU1/9ML3BVKtKRdnvkOM09LEGxlE1jfsZvQ7 lz0lkrrvdCdtwK/Pnl+Znx41KgVC4spp4uvdvR82YyYiubuonMVXnLfT3+rHbzIz hWQno4SQ1fZrfU2m/uJd6Enbyq0CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFA/+LqEqwVaveKwtmkWa8W4hdu7IMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NjZDUzOTQ4LWRkZjMtNDQ5YS1iZjJiLWNmM2Y3YWUxNzZkMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jY2Q1Mzk0 OC1kZGYzLTQ0OWEtYmYyYi1jZjNmN2FlMTc2ZDMvMC8wRkZFMkVBMTJBQzE1NkFG NzhBQzJEOUE0NTlBRjE2RTIxNzZFRUM4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ2J0MA0EAgACMAcDBQAkAZfAMA0GCSqGSIb3DQEBCwUAA4IBAQAWRcskVFKl 9vrI4LlR7qjhM6tWhWHA3iPAIGgPr8eJZcNcI9fMVf/urPAomsgkIW4EvbtG2hoK a947znVwg+EyS8e3Trudrbep/wBEqSmPnnWDtt9k4YdOoYbxGo27xirQplerOdoO AnI/oNlcPPPn4XRriGxtFqlIkQPVVquxUPsxyUZSVl0seSMb6g21jXqPVdJpVfDQ epFIDb3eDq8s7E1/c685KIZh2PP9+UKj4yZPZcbiCqG05NLKS5jqpXUrNTfVjUjr peXHdRHBeK2fc2iCB1cHB7YriASFFLiYy3Sydk/KoYxVmLp4d0dKCQwT7ZzovMHX +Ndu91wrEUrT -----END CERTIFICATE-----Generated at Tue May 12 22:52:46 2026 by rpki-client