$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer File: 267381234DE67CD8E7FCC532540C0B1A698FD8B0.cer (raw, json) Hash identifier: eam8qY9EeW5rrql/tKhHbwhU1sIjNcxHcSgjlbJI8sg= Subject key identifier: 26:73:81:23:4D:E6:7C:D8:E7:FC:C5:32:54:0C:0B:1A:69:8F:D8:B0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2C537B501C6CA2003405F06A4363B1A45B5286C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:00:32 +0000 Certificate not after: Sun 02 May 2027 02:05:32 +0000 Subordinate resources: IP: 103.15.214.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:53:7b:50:1c:6c:a2:00:34:05:f0:6a:43:63:b1:a4:5b:52:86:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:00:32 2026 GMT Not After : May 2 02:05:32 2027 GMT Subject: CN=267381234DE67CD8E7FCC532540C0B1A698FD8B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:af:f1:6d:d9:6b:f3:bc:13:5b:fc:6c:b0:f9: 87:d2:1d:cc:e7:78:d5:00:b9:37:0c:37:be:5a:78: b1:87:17:5c:56:39:07:a4:29:bf:7b:f2:f2:d4:6b: cc:e9:af:b6:39:1e:70:1a:6c:a3:1e:30:f6:66:87: bd:25:4a:6c:a0:a5:b4:8b:1d:31:d0:bc:2f:3c:cb: a2:cb:08:8b:45:f6:37:e1:53:d7:36:18:22:ce:e1: 08:6e:97:43:28:66:79:c6:92:51:35:0d:bc:2d:b9: dc:50:5f:ed:6f:09:4c:57:ef:ad:6a:fd:2d:6c:3d: 05:d9:54:14:9e:07:e9:c6:1d:26:6b:b7:83:db:91: c2:69:ce:a1:9e:3f:20:d1:2c:f8:92:d2:d0:92:9b: f1:92:01:01:0d:6d:6d:4e:f2:4c:a9:29:15:80:b4: 9a:99:93:7c:dd:97:66:27:d1:ac:ab:84:eb:5f:39: fc:9e:68:26:1d:45:6e:39:21:79:33:71:2a:f2:78: 53:07:fc:10:a2:01:4a:43:8a:f7:b2:84:ff:43:73: e6:3a:0c:ff:40:a4:61:2e:33:79:20:56:2d:c2:4a: f5:8a:fb:2a:12:97:ec:7c:35:fe:e0:f4:70:a9:61: a8:73:d8:2a:cd:21:94:b2:74:f8:96:be:56:f3:22: 38:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 26:73:81:23:4D:E6:7C:D8:E7:FC:C5:32:54:0C:0B:1A:69:8F:D8:B0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/267381234DE67CD8E7FCC532540C0B1A698FD8B0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.15.214.0/23 Signature Algorithm: sha256WithRSAEncryption 15:8f:58:24:8b:79:0e:b3:0f:7b:a5:a3:bf:06:8c:a9:8c:61: e6:36:ec:14:47:3e:69:48:c8:d3:c1:7a:82:93:07:20:0c:af: 50:af:46:34:7d:02:c0:cc:c9:50:9c:e6:16:49:f2:cf:6d:7f: fd:0c:00:de:87:07:a8:a8:83:64:57:83:ee:68:4d:09:76:87: fd:7c:18:e3:c9:b1:76:4d:0e:46:23:51:0e:c2:cf:57:9c:85: 78:49:64:ce:f9:51:13:62:7e:d4:23:b7:17:50:df:71:a1:a1: 0c:a8:85:95:4e:86:a5:01:1e:d6:4d:96:48:6a:d4:c7:8a:d1: 25:ea:03:34:5b:c4:ed:1a:f9:40:ed:8a:12:72:ab:6a:9c:79: 59:47:9f:5c:72:ba:ff:b3:61:67:53:86:55:0d:3c:7e:fc:2c: 90:46:c2:6b:87:c3:de:d3:57:db:7a:95:44:31:63:76:7d:51: a0:22:a5:11:28:a9:15:81:74:f8:2f:6b:65:8b:e0:2f:f1:6d: 8e:90:ff:cc:e1:ee:4f:f2:1e:4f:90:5c:d9:bc:ec:79:0b:6b: 6a:14:f4:8b:44:6f:0e:95:bc:12:38:28:bf:eb:35:51:46:db: 8c:8a:ff:ce:78:c7:f7:fb:82:96:b9:e7:00:c5:31:09:93:2f: e4:a9:3c:fe -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIULFN7UBxsogA0BfBqQ2OxpFtShsEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDAzMloX DTI3MDUwMjAyMDUzMlowMzExMC8GA1UEAxMoMjY3MzgxMjM0REU2N0NEOEU3RkND NTMyNTQwQzBCMUE2OThGRDhCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKmv8W3Za/O8E1v8bLD5h9IdzOd41QC5Nww3vlp4sYcXXFY5B6Qpv3vy8tRr zOmvtjkecBpsox4w9maHvSVKbKCltIsdMdC8LzzLossIi0X2N+FT1zYYIs7hCG6X QyhmecaSUTUNvC253FBf7W8JTFfvrWr9LWw9BdlUFJ4H6cYdJmu3g9uRwmnOoZ4/ INEs+JLS0JKb8ZIBAQ1tbU7yTKkpFYC0mpmTfN2XZifRrKuE6185/J5oJh1Fbjkh eTNxKvJ4Uwf8EKIBSkOK97KE/0Nz5joM/0CkYS4zeSBWLcJK9Yr7KhKX7Hw1/uD0 cKlhqHPYKs0hlLJ0+Ja+VvMiOCcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCZzgSNN5nzY5/zFMlQMCxppj9iwMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q2ZjQ3NjdkLWU4NGYtNDIxMC04NDIzLTQwNjk2NjE4ZjM3Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kNmY0NzY3 ZC1lODRmLTQyMTAtODQyMy00MDY5NjYxOGYzNzcvMC8yNjczODEyMzRERTY3Q0Q4 RTdGQ0M1MzI1NDBDMEIxQTY5OEZEOEIwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZw/WMA0GCSqGSIb3DQEBCwUAA4IBAQAVj1gki3kOsw97paO/BoypjGHmNuwU Rz5pSMjTwXqCkwcgDK9Qr0Y0fQLAzMlQnOYWSfLPbX/9DADehweoqINkV4PuaE0J dof9fBjjybF2TQ5GI1EOws9XnIV4SWTO+VETYn7UI7cXUN9xoaEMqIWVToalAR7W TZZIatTHitEl6gM0W8TtGvlA7YoScqtqnHlZR59ccrr/s2FnU4ZVDTx+/CyQRsJr h8Pe01fbepVEMWN2fVGgIqURKKkVgXT4L2tli+Av8W2OkP/M4e5P8h5PkFzZvOx5 C2tqFPSLRG8OlbwSOCi/6zVRRtuMiv/OeMf3+4KWuecAxTEJky/kqTz+ -----END CERTIFICATE-----Generated at Tue May 12 22:38:44 2026 by rpki-client