$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer File: 102CB228255AC59C06F56BF9291AABDD49CD72E1.cer (raw, json) Hash identifier: hKkAzqt7uxqE6TSefXSlSbQ41dIOJugpPUU8cOZB+RI= Subject key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 57D2DAFCEE1C004B33506D34EE52FE0D8A8C3CA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:55:14 +0000 Certificate not after: Sun 02 May 2027 00:00:14 +0000 Subordinate resources: IP: 180.214.240.0/20 IP: 202.91.8.0/21 IP: 2402:f080::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:d2:da:fc:ee:1c:00:4b:33:50:6d:34:ee:52:fe:0d:8a:8c:3c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:55:14 2026 GMT Not After : May 2 00:00:14 2027 GMT Subject: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cc:b9:85:9e:40:2f:d3:ec:5b:7d:6a:da:ad: 97:57:fc:67:87:68:12:de:49:ce:0c:77:9c:cd:11: e1:99:0b:1c:1d:f5:ec:9a:45:bd:11:88:54:1c:48: 02:a0:10:8f:f6:84:6c:51:4f:81:00:34:67:e1:40: 17:27:2d:8c:bf:2c:21:38:dc:3a:62:de:fa:0f:de: 62:ca:4e:ce:02:9b:9b:c2:21:99:ad:fe:ca:91:c5: b7:87:29:14:a5:e2:bf:cc:06:99:48:1d:b5:9a:dc: 2d:5f:f8:d8:8a:10:69:86:52:16:cf:51:a3:30:ad: 63:76:7d:39:64:8c:4e:5c:cc:0b:35:fb:a0:8b:4b: 0e:ea:fb:55:c6:eb:93:90:11:96:fa:4a:46:3b:2d: 59:9c:73:ae:56:0c:34:53:5d:93:0d:92:c6:18:82: 69:ec:f1:95:16:b6:c2:26:c7:93:3d:20:0d:77:56: 63:68:ae:0d:19:3f:ed:50:47:1c:ca:51:0f:dc:76: d8:bd:a3:f1:2b:37:8b:f3:3c:56:d6:0f:c0:43:f0: 49:2d:d2:1f:3e:62:b3:1f:c9:bb:02:e6:4d:ce:2f: 76:6f:34:fb:44:fe:eb:46:92:84:fe:dc:f0:f0:bf: 33:23:0d:2d:13:9c:80:d0:a1:68:9d:d1:ed:da:e1: e1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.214.240.0/20 202.91.8.0/21 IPv6: 2402:f080::/32 Signature Algorithm: sha256WithRSAEncryption 8b:66:07:c1:32:1a:b9:73:29:9f:48:4c:1e:99:38:30:a4:cd: 02:57:18:fa:c8:7b:d7:37:d2:4a:59:33:32:bd:23:6e:93:92: e5:85:e8:3b:01:37:2c:02:4b:b2:e9:85:5b:a3:34:93:d6:0e: f2:02:20:ae:93:4c:69:7b:d4:97:42:78:67:77:e3:6d:ef:43: ba:df:59:e3:72:3f:22:69:72:08:c2:95:5c:60:dd:ed:59:45: 57:44:24:e3:00:5e:fd:3a:1e:b5:15:3e:2a:60:d6:03:86:fb: 81:5a:90:ee:5f:a8:75:20:b8:fe:9c:ec:c9:44:30:03:39:cf: c6:a7:cb:13:90:73:07:d2:98:21:9f:42:a0:f1:98:e1:b7:e0: 00:86:01:6e:b9:80:ab:26:f4:2c:20:3f:64:b0:6c:ab:f9:2e: f8:3a:32:db:d2:16:59:f6:2c:b6:c3:15:97:ae:c1:21:51:a5: 01:52:8f:36:d1:85:a1:6d:ac:26:b2:a4:a2:d4:91:10:51:fc: 05:4d:56:82:10:17:f0:cd:6a:4b:db:56:00:84:db:f0:64:ec: da:7e:ef:b1:f4:ee:05:7e:a6:90:6d:fe:14:2e:15:d9:bd:a5: 64:a6:6f:6a:71:9a:5b:bf:02:da:71:ec:59:ec:30:24:e2:cc: af:fa:73:77 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUV9La/O4cAEszUG007lL+DYqMPKQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTUxNFoX DTI3MDUwMjAwMDAxNFowMzExMC8GA1UEAxMoMTAyQ0IyMjgyNTVBQzU5QzA2RjU2 QkY5MjkxQUFCREQ0OUNENzJFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANfMuYWeQC/T7Ft9atqtl1f8Z4doEt5Jzgx3nM0R4ZkLHB317JpFvRGIVBxI AqAQj/aEbFFPgQA0Z+FAFyctjL8sITjcOmLe+g/eYspOzgKbm8Ihma3+ypHFt4cp FKXiv8wGmUgdtZrcLV/42IoQaYZSFs9RozCtY3Z9OWSMTlzMCzX7oItLDur7Vcbr k5ARlvpKRjstWZxzrlYMNFNdkw2SxhiCaezxlRa2wibHkz0gDXdWY2iuDRk/7VBH HMpRD9x22L2j8Ss3i/M8VtYPwEPwSS3SHz5isx/JuwLmTc4vdm80+0T+60aShP7c 8PC/MyMNLROcgNChaJ3R7drh4XUCAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBAssiglWsWcBvVr+Skaq91JzXLhMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE3ZTY1YjY3LTkwNWMtNDAzYy04Yzc5LTIzMTU2NTk2NjhhYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xN2U2NWI2 Ny05MDVjLTQwM2MtOGM3OS0yMzE1NjU5NjY4YWEvMC8xMDJDQjIyODI1NUFDNTlD MDZGNTZCRjkyOTFBQUJERDQ5Q0Q3MkUxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQEtNbwAwQDylsIMA0EAgACMAcDBQAkAvCAMA0GCSqGSIb3DQEBCwUAA4IBAQCL ZgfBMhq5cymfSEwemTgwpM0CVxj6yHvXN9JKWTMyvSNuk5Llheg7ATcsAkuy6YVb ozST1g7yAiCuk0xpe9SXQnhnd+Nt70O631njcj8iaXIIwpVcYN3tWUVXRCTjAF79 Oh61FT4qYNYDhvuBWpDuX6h1ILj+nOzJRDADOc/Gp8sTkHMH0pghn0Kg8Zjht+AA hgFuuYCrJvQsID9ksGyr+S74OjLb0hZZ9iy2wxWXrsEhUaUBUo820YWhbawmsqSi 1JEQUfwFTVaCEBfwzWpL21YAhNvwZOzafu+x9O4FfqaQbf4ULhXZvaVkpm9qcZpb vwLacexZ7DAk4syv+nN3 -----END CERTIFICATE-----Generated at Tue May 12 22:15:46 2026 by rpki-client