$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2CFE6C04191B28EDA13984F5549231D1840AACEC.cer File: 2CFE6C04191B28EDA13984F5549231D1840AACEC.cer (raw, json) Hash identifier: 5j9eeHgdWZStTSrI5ZJiv4ffXw8YMT3QIT0rU6Irx/k= Subject key identifier: 2C:FE:6C:04:19:1B:28:ED:A1:39:84:F5:54:92:31:D1:84:0A:AC:EC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4E27E54EEE0B7EFB92F9670859A4EEEAC7303A8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:59:56 +0000 Certificate not after: Sun 02 May 2027 02:04:56 +0000 Subordinate resources: IP: 117.104.192.0/19 IP: 202.153.16.0/20 IP: 2406:7f00::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:27:e5:4e:ee:0b:7e:fb:92:f9:67:08:59:a4:ee:ea:c7:30:3a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:59:56 2026 GMT Not After : May 2 02:04:56 2027 GMT Subject: CN=2CFE6C04191B28EDA13984F5549231D1840AACEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:35:f9:d5:10:9a:40:70:62:90:38:14:73: b5:56:77:93:c2:bb:51:f6:20:98:66:c4:75:38:a0: b0:eb:57:fb:98:94:8a:63:41:16:c2:05:bf:dd:8a: c2:69:24:68:3d:a3:09:42:41:e3:63:b1:a6:21:c0: 3d:7f:9f:b2:86:0e:a6:b6:54:84:5e:b8:d6:d7:6f: 46:fa:6e:fe:33:7a:06:e8:96:a3:a5:5b:07:02:5d: a1:ee:b4:8f:27:40:fa:8e:82:fc:fe:c1:7e:ce:b6: 20:01:77:a8:c7:89:dc:14:65:05:13:94:a0:5c:bd: eb:3c:0c:f2:41:d1:a6:67:bc:ba:bd:28:58:50:58: 98:33:61:36:ce:48:0e:60:6a:dd:53:89:57:78:77: 3e:58:66:92:ec:ac:37:c4:1a:31:f3:5f:1c:e1:da: 73:93:a9:29:eb:dd:59:66:78:7a:df:6e:4a:3d:6b: 89:16:38:9a:83:0b:cb:e0:43:3d:f8:27:76:e8:9b: a9:e8:54:5a:85:d4:f0:b6:2c:e7:c2:bb:00:d8:bc: 81:3e:10:0d:0c:54:54:52:08:91:00:f1:79:2b:81: e0:9a:d1:b0:f5:4e:ed:12:ec:0a:14:49:6e:60:1c: 4c:72:9f:59:11:71:26:af:28:c3:e2:a3:ce:78:e0: 63:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2C:FE:6C:04:19:1B:28:ED:A1:39:84:F5:54:92:31:D1:84:0A:AC:EC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/2CFE6C04191B28EDA13984F5549231D1840AACEC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.104.192.0/19 202.153.16.0/20 IPv6: 2406:7f00::/32 Signature Algorithm: sha256WithRSAEncryption 30:1c:b7:1f:18:48:86:b3:f8:9a:11:a9:58:55:90:ce:e4:66: 2c:0b:75:f7:ad:19:15:be:a2:ab:21:05:7e:26:d1:2e:c7:bc: 17:c5:0b:45:16:19:30:05:cc:85:fe:4e:5f:5b:ff:c2:d8:2d: 39:4a:19:98:81:47:cf:78:b7:6c:d1:f0:5b:56:19:d7:e7:cd: 2f:ab:92:cd:98:ab:75:6f:95:e3:7d:d1:d0:49:03:19:56:9f: b1:84:85:07:62:81:51:81:cd:c8:4d:a2:65:76:f6:01:43:83: e5:94:08:74:38:73:11:dd:13:c7:f8:4c:75:f0:3f:c7:91:dd: e9:d7:d4:49:a4:bf:61:52:60:c6:22:d5:c1:71:cf:e9:22:6b: 69:34:56:18:ab:26:37:de:55:65:ac:04:ea:88:10:46:be:cc: b9:88:60:81:0a:a2:13:43:aa:e7:21:e0:04:13:23:b1:b9:8f: c8:a4:dc:17:61:ab:70:b1:5a:c6:f2:45:c3:73:45:81:21:c0: 12:f4:75:5e:e8:d7:f1:53:8b:aa:d3:1f:2b:68:8d:ce:69:8d: aa:b2:e5:8c:6d:56:a4:17:09:36:ca:c2:1e:98:cc:f7:74:7b: 4c:81:5e:c9:f4:5b:d2:01:b3:97:cb:ec:f8:9c:5a:7d:de:79: 1c:d8:70:52 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUTiflTu4LfvuS+WcIWaTu6scwOoswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTk1NloX DTI3MDUwMjAyMDQ1NlowMzExMC8GA1UEAxMoMkNGRTZDMDQxOTFCMjhFREExMzk4 NEY1NTQ5MjMxRDE4NDBBQUNFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCeNfnVEJpAcGKQOBRztVZ3k8K7UfYgmGbEdTigsOtX+5iUimNBFsIFv92K wmkkaD2jCUJB42OxpiHAPX+fsoYOprZUhF641tdvRvpu/jN6BuiWo6VbBwJdoe60 jydA+o6C/P7Bfs62IAF3qMeJ3BRlBROUoFy96zwM8kHRpme8ur0oWFBYmDNhNs5I DmBq3VOJV3h3PlhmkuysN8QaMfNfHOHac5OpKevdWWZ4et9uSj1riRY4moMLy+BD PfgnduibqehUWoXU8LYs58K7ANi8gT4QDQxUVFIIkQDxeSuB4JrRsPVO7RLsChRJ bmAcTHKfWRFxJq8ow+KjznjgY6MCAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCz+bAQZGyjtoTmE9VSSMdGECqzsMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q1OTA4YjgzLTdmNDQtNDZlMC04NTM1LTZmYjg0YjU5ZDU4YS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kNTkwOGI4 My03ZjQ0LTQ2ZTAtODUzNS02ZmI4NGI1OWQ1OGEvMC8yQ0ZFNkMwNDE5MUIyOEVE QTEzOTg0RjU1NDkyMzFEMTg0MEFBQ0VDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQFdWjAAwQEypkQMA0EAgACMAcDBQAkBn8AMA0GCSqGSIb3DQEBCwUAA4IBAQAw HLcfGEiGs/iaEalYVZDO5GYsC3X3rRkVvqKrIQV+JtEux7wXxQtFFhkwBcyF/k5f W//C2C05ShmYgUfPeLds0fBbVhnX580vq5LNmKt1b5XjfdHQSQMZVp+xhIUHYoFR gc3ITaJldvYBQ4PllAh0OHMR3RPH+Ex18D/Hkd3p19RJpL9hUmDGItXBcc/pImtp NFYYqyY33lVlrATqiBBGvsy5iGCBCqITQ6rnIeAEEyOxuY/IpNwXYatwsVrG8kXD c0WBIcAS9HVe6NfxU4uq0x8raI3OaY2qsuWMbVakFwk2ysIemMz3dHtMgV7J9FvS AbOXy+z4nFp93nkc2HBS -----END CERTIFICATE-----Generated at Tue May 12 22:52:31 2026 by rpki-client