$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer File: 70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer (raw, json) Hash identifier: AvhtR+coXnjmc2jbk5oiycre2U7H4pIWM4oUnkqZZtw= Subject key identifier: 70:CC:E0:31:F1:04:4D:EE:6C:AF:56:5B:13:75:F6:DD:34:58:9B:4E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 79FBF02419F7B31B445AF7D6F58DECB8F41A8B8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:49:42 +0000 Certificate not after: Sat 01 May 2027 23:54:42 +0000 Subordinate resources: IP: 103.157.80.0/23 IP: 2001:df5:1780::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:fb:f0:24:19:f7:b3:1b:44:5a:f7:d6:f5:8d:ec:b8:f4:1a:8b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:49:42 2026 GMT Not After : May 1 23:54:42 2027 GMT Subject: CN=70CCE031F1044DEE6CAF565B1375F6DD34589B4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fc:97:bf:97:74:af:07:aa:6c:de:e3:e9:6a: 70:c3:38:6e:84:dd:4e:4f:b0:fb:29:dd:a1:45:57: 8c:66:91:41:58:af:f2:b9:8d:be:e9:2e:8b:f0:1d: c4:48:2f:ab:6c:0c:38:e6:ab:f6:9f:b4:c9:8a:0a: 8f:f1:24:6e:18:40:29:ce:47:33:68:d0:25:d0:9f: d4:8e:ab:70:4b:3c:73:6a:41:ee:a4:bf:56:15:6d: 84:87:75:25:1a:36:c1:5d:48:cb:72:12:ab:a6:95: 6f:30:c6:3a:9d:24:58:82:17:ea:68:77:17:29:cd: d9:ed:4e:91:bd:e6:fa:74:dd:3e:b0:1b:55:e8:8d: 33:fd:ab:e2:43:21:2e:0e:02:4f:3b:16:e7:fe:2d: d1:8b:e2:88:64:ce:82:fc:6b:29:3e:a3:3f:75:59: ba:81:f0:74:86:58:02:57:f8:dd:23:86:00:ae:e4: 0e:e0:24:98:56:ee:27:f0:99:5a:42:05:27:09:e3: 7f:eb:7f:39:5f:e9:af:78:0e:04:1f:2b:c3:8d:2b: af:f1:60:71:ad:fb:db:93:61:1d:49:f0:dd:2c:27: 91:6d:cb:da:79:c3:97:ac:f8:54:ab:4f:fa:f3:7a: 00:3d:28:08:a9:61:b0:b3:f3:c2:cb:45:6f:e8:98: 1b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 70:CC:E0:31:F1:04:4D:EE:6C:AF:56:5B:13:75:F6:DD:34:58:9B:4E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.80.0/23 IPv6: 2001:df5:1780::/48 Signature Algorithm: sha256WithRSAEncryption 66:a4:38:db:25:ea:c5:47:31:fc:9d:f4:ca:38:be:09:6b:4e: 9b:68:2a:b5:20:17:05:c9:1f:d2:70:2c:4f:c5:2d:09:21:b6: ba:df:42:2a:aa:a6:d3:7c:d1:f0:17:76:a2:c0:88:05:65:4e: 95:f5:0c:38:ff:d1:25:60:69:e4:9b:08:59:5f:4f:ff:07:48: f4:df:18:89:e9:be:1f:4a:35:31:60:c6:56:6e:bd:81:d1:ee: 56:6b:41:81:91:b6:5d:59:2c:86:a9:cc:87:73:d9:a5:76:55: e5:b9:ce:98:dc:53:cc:1c:3f:4b:8e:52:d8:96:85:23:04:ef: 59:28:3a:ed:10:ba:30:56:df:90:69:9e:ef:49:cf:72:51:87: 0c:06:1d:e0:c9:73:5e:24:55:35:b8:95:70:c1:ea:9f:cd:1a: 08:39:14:af:c9:51:68:c9:73:ea:32:66:38:52:fe:dc:f6:bd: 23:ed:cb:9e:aa:bf:86:91:bb:67:4e:1c:55:e3:7b:55:8c:7a: 2c:7f:98:a0:f1:21:2d:50:4d:8d:35:88:e0:d9:b1:2d:32:dd: 3b:4f:a7:83:fb:f5:4f:d2:7d:16:d1:e4:49:b9:16:9e:7b:3e: d8:2d:12:9e:8a:f5:d7:91:81:b4:b0:95:6b:77:7f:48:a8:11: 39:24:a7:f7 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUefvwJBn3sxtEWvfW9Y3suPQai48wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDk0MloX DTI3MDUwMTIzNTQ0MlowMzExMC8GA1UEAxMoNzBDQ0UwMzFGMTA0NERFRTZDQUY1 NjVCMTM3NUY2REQzNDU4OUI0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJH8l7+XdK8Hqmze4+lqcMM4boTdTk+w+yndoUVXjGaRQViv8rmNvukui/Ad xEgvq2wMOOar9p+0yYoKj/EkbhhAKc5HM2jQJdCf1I6rcEs8c2pB7qS/VhVthId1 JRo2wV1Iy3ISq6aVbzDGOp0kWIIX6mh3FynN2e1Okb3m+nTdPrAbVeiNM/2r4kMh Lg4CTzsW5/4t0YviiGTOgvxrKT6jP3VZuoHwdIZYAlf43SOGAK7kDuAkmFbuJ/CZ WkIFJwnjf+t/OV/pr3gOBB8rw40rr/Fgca3725NhHUnw3SwnkW3L2nnDl6z4VKtP +vN6AD0oCKlhsLPzwstFb+iYG5UCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHDM4DHxBE3ubK9WWxN19t00WJtOMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzBmY2Y3YzllLWY4YzMtNDAxNS04ODFiLWEyYzIxODE5ZDZiOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wZmNmN2M5 ZS1mOGMzLTQwMTUtODgxYi1hMmMyMTgxOWQ2YjkvMC83MENDRTAzMUYxMDQ0REVF NkNBRjU2NUIxMzc1RjZERDM0NTg5QjRFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ51QMA8EAgACMAkDBwAgAQ31F4AwDQYJKoZIhvcNAQELBQADggEBAGakONsl 6sVHMfyd9Mo4vglrTptoKrUgFwXJH9JwLE/FLQkhtrrfQiqqptN80fAXdqLAiAVl TpX1DDj/0SVgaeSbCFlfT/8HSPTfGInpvh9KNTFgxlZuvYHR7lZrQYGRtl1ZLIap zIdz2aV2VeW5zpjcU8wcP0uOUtiWhSME71koOu0QujBW35Bpnu9Jz3JRhwwGHeDJ c14kVTW4lXDB6p/NGgg5FK/JUWjJc+oyZjhS/tz2vSPty56qv4aRu2dOHFXje1WM eix/mKDxIS1QTY01iODZsS0y3TtPp4P79U/SfRbR5Em5Fp57PtgtEp6K9deRgbSw lWt3f0ioETkkp/c= -----END CERTIFICATE-----Generated at Tue May 12 22:03:31 2026 by rpki-client