$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2C54A4433C48711637614DBB101ACAC627FB4444.cer File: 2C54A4433C48711637614DBB101ACAC627FB4444.cer (raw, json) Hash identifier: pnqwRdRmr+4rbfZJP16EXeBzQjgrVKk3kKch95odPAU= Subject key identifier: 2C:54:A4:43:3C:48:71:16:37:61:4D:BB:10:1A:CA:C6:27:FB:44:44 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4BF2AF03D2B9DD452E12DB0DE38E8CD36D9372B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.mft caRepository: rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:06:11 +0000 Certificate not after: Sun 02 May 2027 00:11:11 +0000 Subordinate resources: IP: 103.69.176.0/22 IP: 2001:df3:4e00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:f2:af:03:d2:b9:dd:45:2e:12:db:0d:e3:8e:8c:d3:6d:93:72:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:06:11 2026 GMT Not After : May 2 00:11:11 2027 GMT Subject: CN=2C54A4433C48711637614DBB101ACAC627FB4444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:66:62:0b:53:44:d9:23:ea:c7:7e:f5:99:fb: e7:fb:7e:bf:d8:20:42:fc:b0:e0:26:3c:a1:a0:ea: c7:4d:ab:2a:be:b1:f9:25:2d:a4:13:96:b4:88:4c: d3:78:2f:f2:e5:e3:e1:db:40:17:05:61:cf:4b:f9: 51:0e:45:81:87:56:54:d5:f3:26:13:4f:6b:b1:a5: b4:fc:1f:21:4b:6f:51:96:69:15:ba:e8:77:e7:be: cd:d0:cc:59:a5:d2:c6:11:98:54:92:b2:81:e4:7b: 59:a8:66:3c:1a:f1:be:06:97:e3:9b:70:32:aa:05: 51:95:34:c2:30:1a:e8:a0:5e:b8:f4:d2:bc:bf:77: a8:dd:56:93:84:a0:53:91:5f:26:28:b0:68:1e:99: 75:5a:89:7d:0b:41:ab:25:3c:01:bd:dd:a1:16:fa: 22:10:2f:8e:35:5d:b3:e2:36:8b:0b:cf:bd:b8:02: 1b:02:b8:de:d9:aa:dc:ea:dc:fc:87:aa:4e:a3:b8: 32:ce:79:53:fa:43:4f:6f:6c:db:36:32:8f:c8:57: bc:e5:4a:7c:9a:74:e0:b0:9d:e8:25:2c:26:2c:97: 68:8f:90:09:65:56:c8:62:16:d8:71:0a:f2:ed:c0: ab:06:0d:08:c5:6a:28:ef:9a:25:4f:d1:d5:91:8e: 87:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2C:54:A4:43:3C:48:71:16:37:61:4D:BB:10:1A:CA:C6:27:FB:44:44 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.69.176.0/22 IPv6: 2001:df3:4e00::/48 Signature Algorithm: sha256WithRSAEncryption 06:ac:79:93:87:eb:73:0a:c8:42:ea:59:2a:9d:0f:2b:8d:8f: ae:c2:22:a2:60:b2:72:9d:53:f8:85:06:ac:eb:5b:67:09:99: 36:d5:43:d9:30:c4:ac:af:44:2b:bd:ad:f2:f1:ce:49:11:50: 61:5c:73:a4:ab:c5:6d:ef:aa:8e:60:dd:37:2c:69:a0:30:8b: 6b:e9:b9:7a:9b:c8:8b:06:36:d6:eb:3f:ea:b6:61:ed:4f:59: f1:cd:5a:f2:91:0b:58:d8:9b:e8:fd:ce:b9:d5:56:48:8f:e2: 60:24:99:f1:73:d1:1f:c5:46:da:31:92:a5:12:98:c6:73:7e: 64:70:98:b9:1a:7f:39:80:7b:b8:6d:02:5d:0c:fd:2f:ab:ae: be:e6:e6:90:d1:9c:52:19:36:ce:83:d8:eb:5f:df:7b:4e:09: 6c:c3:3a:a9:d6:70:ef:bb:d3:c1:62:26:62:c5:ba:c0:1f:b6: 68:1c:68:67:da:bd:ab:36:fa:8e:e6:8b:20:f3:6d:c1:a5:af: f7:0c:af:59:a7:6d:e9:b6:3b:b3:c5:af:c6:c4:c9:f0:4f:46: 95:9e:69:9f:a6:ec:18:d2:b7:5b:20:f8:78:69:a2:c0:5e:2d: 4a:d0:52:ad:ea:c2:4f:63:0e:b9:1c:91:fa:89:09:4a:16:ce: 54:f7:b8:92 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUS/KvA9K53UUuEtsN446M022TcrEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDYxMVoX DTI3MDUwMjAwMTExMVowMzExMC8GA1UEAxMoMkM1NEE0NDMzQzQ4NzExNjM3NjE0 REJCMTAxQUNBQzYyN0ZCNDQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALlmYgtTRNkj6sd+9Zn75/t+v9ggQvyw4CY8oaDqx02rKr6x+SUtpBOWtIhM 03gv8uXj4dtAFwVhz0v5UQ5FgYdWVNXzJhNPa7GltPwfIUtvUZZpFbrod+e+zdDM WaXSxhGYVJKygeR7WahmPBrxvgaX45twMqoFUZU0wjAa6KBeuPTSvL93qN1Wk4Sg U5FfJiiwaB6ZdVqJfQtBqyU8Ab3doRb6IhAvjjVds+I2iwvPvbgCGwK43tmq3Orc /IeqTqO4Ms55U/pDT29s2zYyj8hXvOVKfJp04LCd6CUsJiyXaI+QCWVWyGIW2HEK 8u3AqwYNCMVqKO+aJU/R1ZGOhy0CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCxUpEM8SHEWN2FNuxAaysYn+0REMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzI4Yzc3ZWVlLTliY2MtNDAxZS04ZjRkLTVmMjM2NzU2Mjc1Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yOGM3N2Vl ZS05YmNjLTQwMWUtOGY0ZC01ZjIzNjc1NjI3NTcvMC8yQzU0QTQ0MzNDNDg3MTE2 Mzc2MTREQkIxMDFBQ0FDNjI3RkI0NDQ0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZ0WwMA8EAgACMAkDBwAgAQ3zTgAwDQYJKoZIhvcNAQELBQADggEBAAaseZOH 63MKyELqWSqdDyuNj67CIqJgsnKdU/iFBqzrW2cJmTbVQ9kwxKyvRCu9rfLxzkkR UGFcc6SrxW3vqo5g3TcsaaAwi2vpuXqbyIsGNtbrP+q2Ye1PWfHNWvKRC1jYm+j9 zrnVVkiP4mAkmfFz0R/FRtoxkqUSmMZzfmRwmLkafzmAe7htAl0M/S+rrr7m5pDR nFIZNs6D2Otf33tOCWzDOqnWcO+708FiJmLFusAftmgcaGfavas2+o7miyDzbcGl r/cMr1mnbem2O7PFr8bEyfBPRpWeaZ+m7BjSt1sg+HhposBeLUrQUq3qwk9jDrkc kfqJCUoWzlT3uJI= -----END CERTIFICATE-----Generated at Tue May 12 22:39:12 2026 by rpki-client