$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer File: 2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.cer (raw, json) Hash identifier: ZUdzH4oIkTAwf6WTu0onXiQWdEG69Y/UgJBPkPZjJFc= Subject key identifier: 2A:0F:66:41:16:FB:E2:E0:71:7E:83:DF:D4:F2:B6:ED:EB:09:E1:7E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 77AE37E9740B263D9342B97AB58FE4A357900B2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:17:13 +0000 Certificate not after: Sun 02 May 2027 00:22:13 +0000 Subordinate resources: IP: 103.67.90.0/23 IP: 2001:df3:1cc0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ae:37:e9:74:0b:26:3d:93:42:b9:7a:b5:8f:e4:a3:57:90:0b:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:17:13 2026 GMT Not After : May 2 00:22:13 2027 GMT Subject: CN=2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:20:6b:f7:51:2a:15:c1:70:8f:6f:24:d2:cc: f3:e1:a9:ca:e1:77:74:cb:71:d8:16:b5:76:d6:d6: fb:16:e5:64:0e:34:55:98:ba:b1:9b:b4:66:5c:67: 66:1e:4a:c4:10:e0:cb:5c:87:52:3c:45:86:59:2b: 11:f8:bd:fe:06:9b:66:1d:a6:c4:be:f3:06:8d:11: 01:22:ce:5b:70:69:f1:1d:2f:4d:32:5a:6a:7f:e5: 9b:74:9f:ce:76:5a:c9:51:92:7f:83:99:7f:7d:2a: 28:b3:49:9e:87:0e:ca:49:aa:bb:91:ad:0f:7a:9e: a5:08:be:50:b4:6c:d8:a8:0a:b3:da:65:ee:b7:64: 9f:f3:20:17:15:61:26:f5:91:29:69:35:43:55:61: c4:fd:ad:8f:ff:d5:c1:22:c4:e2:8b:d5:c8:8d:0d: c2:ce:c7:e9:85:c9:ec:bf:ff:4e:08:87:54:9f:56: 3b:32:37:2c:47:4b:04:17:7b:64:b7:e5:08:25:52: c4:96:81:ba:73:b8:76:97:16:e8:d9:c3:ba:96:09: d7:77:c0:95:6a:cc:11:47:cc:bd:30:20:5d:19:56: 6c:82:a0:84:b0:ce:57:d5:45:35:9c:82:55:09:b4: 41:1a:75:a3:3d:ca:cf:2b:65:b2:fb:6b:1a:0c:8b: 56:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:0F:66:41:16:FB:E2:E0:71:7E:83:DF:D4:F2:B6:ED:EB:09:E1:7E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/2A0F664116FBE2E0717E83DFD4F2B6EDEB09E17E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.67.90.0/23 IPv6: 2001:df3:1cc0::/48 Signature Algorithm: sha256WithRSAEncryption 83:02:db:e6:9a:a7:3b:c2:80:c0:9b:a8:50:8b:dd:b4:16:97: 1c:4f:0d:85:db:58:7f:89:a5:9f:33:10:41:ca:2e:91:4f:cf: 01:a9:59:0e:da:73:b7:bb:27:50:b3:01:6a:d7:e8:47:4c:3f: 9d:14:da:16:f5:93:61:dc:31:d8:f7:7f:5b:c3:be:b7:ac:7e: 22:cc:17:4c:65:75:00:c9:88:3a:d4:a5:a0:a9:f5:0b:b0:99: 21:03:ca:5c:08:7c:50:d7:21:f3:1a:d4:f5:75:5a:ae:dd:e7: d4:2a:3d:db:42:16:82:27:91:d2:4f:3d:ce:92:82:92:a3:92: be:08:4e:b5:96:b7:22:6e:72:ab:37:6d:5d:1b:6c:d8:b6:63: b8:5d:70:52:e3:11:ce:06:1c:b7:2a:39:50:f1:b1:8d:b0:0d: 44:d6:08:f6:5a:ff:24:1a:1c:73:85:09:30:3a:62:6a:dc:33: 8c:a4:b5:b0:0f:00:da:9b:42:b3:46:96:3b:a6:81:4f:3e:3a: 11:ac:bc:ea:64:aa:8b:da:b5:f3:7d:a2:8a:0d:e2:c0:2f:e9: 6e:5e:ee:55:6c:7b:19:55:ac:cd:81:3a:fd:ff:f4:78:2e:d5: 40:63:60:76:2d:55:20:e3:7e:fd:76:09:d6:0f:ac:8c:98:bf: b6:be:6d:59 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUd6436XQLJj2TQrl6tY/ko1eQCyswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTcxM1oX DTI3MDUwMjAwMjIxM1owMzExMC8GA1UEAxMoMkEwRjY2NDExNkZCRTJFMDcxN0U4 M0RGRDRGMkI2RURFQjA5RTE3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANYga/dRKhXBcI9vJNLM8+GpyuF3dMtx2Ba1dtbW+xblZA40VZi6sZu0Zlxn Zh5KxBDgy1yHUjxFhlkrEfi9/gabZh2mxL7zBo0RASLOW3Bp8R0vTTJaan/lm3Sf znZayVGSf4OZf30qKLNJnocOykmqu5GtD3qepQi+ULRs2KgKs9pl7rdkn/MgFxVh JvWRKWk1Q1VhxP2tj//VwSLE4ovVyI0Nws7H6YXJ7L//TgiHVJ9WOzI3LEdLBBd7 ZLflCCVSxJaBunO4dpcW6NnDupYJ13fAlWrMEUfMvTAgXRlWbIKghLDOV9VFNZyC VQm0QRp1oz3KzytlsvtrGgyLVh0CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCoPZkEW++LgcX6D39Tytu3rCeF+MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM4NDg4NTE5LThmMDQtNDRmNS04MzEyLThkOWQzNjE2ZDBkOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zODQ4ODUx OS04ZjA0LTQ0ZjUtODMxMi04ZDlkMzYxNmQwZDkvMC8yQTBGNjY0MTE2RkJFMkUw NzE3RTgzREZENEYyQjZFREVCMDlFMTdFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ0NaMA8EAgACMAkDBwAgAQ3zHMAwDQYJKoZIhvcNAQELBQADggEBAIMC2+aa pzvCgMCbqFCL3bQWlxxPDYXbWH+JpZ8zEEHKLpFPzwGpWQ7ac7e7J1CzAWrX6EdM P50U2hb1k2HcMdj3f1vDvresfiLMF0xldQDJiDrUpaCp9QuwmSEDylwIfFDXIfMa 1PV1Wq7d59QqPdtCFoInkdJPPc6SgpKjkr4ITrWWtyJucqs3bV0bbNi2Y7hdcFLj Ec4GHLcqOVDxsY2wDUTWCPZa/yQaHHOFCTA6YmrcM4yktbAPANqbQrNGljumgU8+ OhGsvOpkqovatfN9oooN4sAv6W5e7lVsexlVrM2BOv3/9Hgu1UBjYHYtVSDjfv12 CdYPrIyYv7a+bVk= -----END CERTIFICATE-----Generated at Tue May 12 22:39:10 2026 by rpki-client