$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer File: 2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer (raw, json) Hash identifier: hplDSAS9dsGqPyvJzjxSOs2wIOKCmOuxrh678IBLCIQ= Subject key identifier: 2F:F9:D5:2A:DC:77:7F:A3:CE:51:AA:F9:44:8B:87:76:DC:B4:33:B3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1ECE8E5B3A11928879EA37FD419EB2EFD1846741 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft caRepository: rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:54:30 +0000 Certificate not after: Sun 02 May 2027 01:59:30 +0000 Subordinate resources: IP: 103.178.84.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ce:8e:5b:3a:11:92:88:79:ea:37:fd:41:9e:b2:ef:d1:84:67:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:54:30 2026 GMT Not After : May 2 01:59:30 2027 GMT Subject: CN=2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:88:b8:44:e1:3d:69:9a:c3:6e:6c:ab:53:79: 23:f7:fd:f2:a8:c3:d7:1b:e8:1a:53:63:44:7c:f3: 27:6c:ef:92:73:2d:e8:6f:4e:fd:57:04:f7:64:d6: bc:f2:3d:86:43:dd:d2:42:f4:ce:5a:81:72:37:f9: f6:cd:97:e0:91:96:2d:8a:b2:17:ac:7e:95:f5:51: 23:be:a1:0d:5f:fb:fc:4f:72:cf:34:00:ff:1b:7b: c2:cb:e1:b2:2f:b5:4a:cd:78:eb:b3:27:73:08:9d: e4:88:4c:ff:4d:7a:63:72:14:ec:37:41:40:cb:b3: 0b:c1:20:d5:f9:87:af:ab:c7:57:ff:2a:15:f0:52: db:0b:be:f5:d0:a3:01:a4:89:eb:75:da:85:ea:0f: e5:4c:e6:ec:ed:ac:4f:8b:bf:4d:9a:46:2e:e0:c4: 6c:1c:9a:60:72:e3:58:0d:c6:b5:72:ae:29:78:a1: 99:06:88:55:a7:79:07:24:73:44:1b:44:5f:4a:10: 12:85:1d:6d:8a:ed:0b:b5:76:d2:f1:dc:46:79:4a: 81:ab:3a:c9:cd:d9:c1:44:b1:5e:a2:f8:d5:8f:57: b0:3b:19:d9:ae:c6:8d:91:ba:47:4e:b4:bd:90:6c: 35:6a:61:d0:8a:2a:2b:4f:1e:36:42:e1:42:4a:1a: c8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:F9:D5:2A:DC:77:7F:A3:CE:51:AA:F9:44:8B:87:76:DC:B4:33:B3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.84.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:37:b9:b7:1d:15:6e:31:1e:24:1d:4a:93:6d:c7:ad:ae:4a: b4:55:06:30:ac:f6:0d:da:74:ae:e5:00:88:15:1f:57:08:7f: 7e:77:c6:33:f3:be:1f:54:73:0f:a2:6f:af:92:3e:77:41:a5: 2a:7e:f5:0c:ac:15:8b:43:10:99:b4:35:a6:42:9e:d8:76:5d: d7:05:1a:33:07:0d:5a:df:01:62:cf:21:cf:27:ef:84:1e:2c: 18:b3:60:62:47:87:d1:8d:fe:c2:f6:48:2a:92:2e:30:b0:a2: 7f:6e:13:ea:6a:11:16:13:26:d6:91:e8:3e:b9:30:59:08:27: b2:7b:ae:28:f6:48:2a:09:06:5d:da:91:6d:6d:e1:ca:3d:34: f8:1e:a1:4f:76:7a:c8:b3:9f:81:4e:00:65:46:17:88:5c:80: 24:9c:9d:65:37:b5:ab:d3:4c:13:7b:53:52:b8:1d:e7:b8:24: 36:22:7e:49:52:fe:ad:59:9c:2c:1f:8e:d7:dc:88:69:7e:96: 13:6c:b9:9b:93:d8:c5:a4:20:53:58:9b:53:cd:69:b1:6a:54: a2:5e:2c:8f:5e:2a:33:d3:3d:14:63:34:93:4b:1a:3a:48:62: 5e:03:20:ea:d5:7b:60:42:39:9c:c1:92:19:c1:f7:9c:ca:35: 34:a6:4e:e7 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUHs6OWzoRkoh56jf9QZ6y79GEZ0EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTQzMFoX DTI3MDUwMjAxNTkzMFowMzExMC8GA1UEAxMoMkZGOUQ1MkFEQzc3N0ZBM0NFNTFB QUY5NDQ4Qjg3NzZEQ0I0MzNCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ6IuEThPWmaw25sq1N5I/f98qjD1xvoGlNjRHzzJ2zvknMt6G9O/VcE92TW vPI9hkPd0kL0zlqBcjf59s2X4JGWLYqyF6x+lfVRI76hDV/7/E9yzzQA/xt7wsvh si+1Ss1467Mncwid5IhM/016Y3IU7DdBQMuzC8Eg1fmHr6vHV/8qFfBS2wu+9dCj AaSJ63XaheoP5Uzm7O2sT4u/TZpGLuDEbByaYHLjWA3GtXKuKXihmQaIVad5ByRz RBtEX0oQEoUdbYrtC7V20vHcRnlKgas6yc3ZwUSxXqL41Y9XsDsZ2a7GjZG6R060 vZBsNWph0IoqK08eNkLhQkoayGkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC/51Srcd3+jzlGq+USLh3bctDOzMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NjMDc1ZWY2LWEyNTEtNDdkZC04ZGRhLWNhZGZmNDk3YTdlNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jYzA3NWVm Ni1hMjUxLTQ3ZGQtOGRkYS1jYWRmZjQ5N2E3ZTUvMC8yRkY5RDUyQURDNzc3RkEz Q0U1MUFBRjk0NDhCODc3NkRDQjQzM0IzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7JUMA0GCSqGSIb3DQEBCwUAA4IBAQBKN7m3HRVuMR4kHUqTbcetrkq0VQYw rPYN2nSu5QCIFR9XCH9+d8Yz874fVHMPom+vkj53QaUqfvUMrBWLQxCZtDWmQp7Y dl3XBRozBw1a3wFizyHPJ++EHiwYs2BiR4fRjf7C9kgqki4wsKJ/bhPqahEWEybW keg+uTBZCCeye64o9kgqCQZd2pFtbeHKPTT4HqFPdnrIs5+BTgBlRheIXIAknJ1l N7Wr00wTe1NSuB3nuCQ2In5JUv6tWZwsH47X3IhpfpYTbLmbk9jFpCBTWJtTzWmx alSiXiyPXioz0z0UYzSTSxo6SGJeAyDq1XtgQjmcwZIZwfecyjU0pk7n -----END CERTIFICATE-----Generated at Tue May 12 22:39:09 2026 by rpki-client