$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer File: 2C1233B548C07507C6EF58E2A03DD8309F820753.cer (raw, json) Hash identifier: ePmG7Dis+Q0sYOKxF2AQyQbG5wbIkCNt3tIMYRWOmic= Subject key identifier: 2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 39B80FB5B4055BDA39F104D680EABA2B919459E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft caRepository: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:33:40 +0000 Certificate not after: Sun 02 May 2027 00:38:40 +0000 Subordinate resources: IP: 103.234.218.0/24 IP: 2407:3e80::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:b8:0f:b5:b4:05:5b:da:39:f1:04:d6:80:ea:ba:2b:91:94:59:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:33:40 2026 GMT Not After : May 2 00:38:40 2027 GMT Subject: CN=2C1233B548C07507C6EF58E2A03DD8309F820753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:77:bd:df:13:31:3e:c7:1c:b7:ee:04:99:37: c7:a5:ad:e7:00:a3:f6:ad:66:9c:69:93:c5:cf:1a: b4:77:82:69:24:52:46:1c:48:50:da:32:56:e6:11: f7:89:0b:77:24:e0:cc:46:ec:e5:a5:3a:80:5e:02: f1:f5:47:a9:11:4b:a5:c9:8a:75:ff:b8:ce:30:7d: d9:40:26:43:c5:b2:70:83:a6:2f:05:65:73:e0:36: 5f:8d:89:e8:8c:94:13:47:f6:9a:1c:46:0c:3f:a1: 43:be:2d:f3:69:a5:83:44:c4:37:53:2f:95:df:62: 7d:68:4d:c0:66:3a:9d:08:bc:78:b1:5e:c4:23:db: e5:6c:47:db:bd:ea:0b:c8:39:51:3d:a1:fd:b6:de: 04:9a:c1:aa:60:33:86:04:3e:de:42:64:b4:38:ad: bb:e5:f0:3e:51:dc:f6:9f:e6:7f:98:0e:7d:0b:98: 28:c0:3e:fb:58:ca:52:05:29:e5:17:08:b7:39:c6: 57:51:a8:ca:9e:64:62:af:81:f3:7b:a6:68:a3:9d: 43:18:af:9f:d3:da:67:38:f4:91:f1:25:f0:82:17: f9:e5:46:e6:2b:e1:21:a7:43:e7:7a:7f:cb:bf:fb: d1:c4:fc:04:e3:1f:e6:ad:f2:ea:f4:35:a8:39:f7: e0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.234.218.0/24 IPv6: 2407:3e80::/32 Signature Algorithm: sha256WithRSAEncryption 5c:9f:3a:08:55:b7:92:a4:45:67:bb:a7:a8:d3:06:60:cd:a1: d4:6e:31:97:9b:ad:09:cd:27:8f:77:39:3b:80:56:22:72:6f: 88:04:76:aa:ea:e9:b4:73:ee:83:00:1e:02:89:78:ae:b3:8d: cf:be:e8:48:2b:7f:95:bb:a4:e3:3d:18:51:0b:3c:fb:51:86: 7f:09:f7:be:b4:e6:b9:63:dc:9e:0f:9d:65:e9:26:b0:d6:a2: ac:0b:10:61:8b:e0:da:1f:cd:ef:15:2a:b6:01:df:1f:64:26: 42:fe:95:c1:23:16:32:c6:e7:fd:2b:c5:33:10:0b:f2:72:73: e9:7f:b9:65:11:a3:10:26:99:2c:2e:f4:52:c1:00:2a:58:a8: 7e:b9:ff:d7:d4:54:e3:cf:3f:4f:ba:ce:9d:1c:07:c5:48:9b: 65:fb:42:7f:e0:4f:77:e8:4f:4e:83:c1:a1:32:e2:2e:ea:ec: e0:95:30:60:e0:93:c6:be:c4:c7:cb:ee:e5:70:8a:20:01:e1: eb:88:e5:eb:cb:2d:5e:44:7d:35:5c:a1:e5:3d:e1:b8:9a:72: ec:f9:cc:3b:2b:ee:9e:10:33:6f:5d:fe:44:6c:af:ed:9a:80: 4b:76:0e:1c:23:d0:c8:a9:ab:5d:9e:94:0f:41:19:07:7c:0f: e5:f3:cf:cb -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUObgPtbQFW9o58QTWgOq6K5GUWeQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzM0MFoX DTI3MDUwMjAwMzg0MFowMzExMC8GA1UEAxMoMkMxMjMzQjU0OEMwNzUwN0M2RUY1 OEUyQTAzREQ4MzA5RjgyMDc1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALx3vd8TMT7HHLfuBJk3x6Wt5wCj9q1mnGmTxc8atHeCaSRSRhxIUNoyVuYR 94kLdyTgzEbs5aU6gF4C8fVHqRFLpcmKdf+4zjB92UAmQ8WycIOmLwVlc+A2X42J 6IyUE0f2mhxGDD+hQ74t82mlg0TEN1Mvld9ifWhNwGY6nQi8eLFexCPb5WxH273q C8g5UT2h/bbeBJrBqmAzhgQ+3kJktDitu+XwPlHc9p/mf5gOfQuYKMA++1jKUgUp 5RcItznGV1Goyp5kYq+B83umaKOdQxivn9PaZzj0kfEl8IIX+eVG5ivhIadD53p/ y7/70cT8BOMf5q3y6vQ1qDn34DECAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCwSM7VIwHUHxu9Y4qA92DCfggdTMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzUxZTk0MjQzLTg3ZjAtNDI2Zi1hOWNhLTRjMTllZGIwNmI0Mi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81MWU5NDI0 My04N2YwLTQyNmYtYTljYS00YzE5ZWRiMDZiNDIvMC8yQzEyMzNCNTQ4QzA3NTA3 QzZFRjU4RTJBMDNERDgzMDlGODIwNzUzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQAZ+raMA0EAgACMAcDBQAkBz6AMA0GCSqGSIb3DQEBCwUAA4IBAQBcnzoIVbeS pEVnu6eo0wZgzaHUbjGXm60JzSePdzk7gFYicm+IBHaq6um0c+6DAB4CiXius43P vuhIK3+Vu6TjPRhRCzz7UYZ/Cfe+tOa5Y9yeD51l6Saw1qKsCxBhi+DaH83vFSq2 Ad8fZCZC/pXBIxYyxuf9K8UzEAvycnPpf7llEaMQJpksLvRSwQAqWKh+uf/X1FTj zz9Pus6dHAfFSJtl+0J/4E936E9Og8GhMuIu6uzglTBg4JPGvsTHy+7lcIogAeHr iOXryy1eRH01XKHlPeG4mnLs+cw7K+6eEDNvXf5EbK/tmoBLdg4cI9DIqatdnpQP QRkHfA/l88/L -----END CERTIFICATE-----Generated at Tue May 12 22:03:45 2026 by rpki-client