$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer File: C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.cer (raw, json) Hash identifier: NHHZKtBen3VdKhLA4EsNaesbj8zQDU/0IyVSwSfC7tw= Subject key identifier: C0:43:3C:FC:2E:06:4A:77:FD:CB:37:B4:9C:2C:93:C4:D0:A0:52:6C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 10253254E239F372799D8447E46A1F6E77721643 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:47:29 +0000 Certificate not after: Sun 02 May 2027 00:52:29 +0000 Subordinate resources: IP: 103.126.226.0/24 IP: 103.147.154.0/24 IP: 2001:df7:5300::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:25:32:54:e2:39:f3:72:79:9d:84:47:e4:6a:1f:6e:77:72:16:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:47:29 2026 GMT Not After : May 2 00:52:29 2027 GMT Subject: CN=C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:de:80:2a:74:80:2c:09:ea:8e:0e:c9:88:f9: 81:33:29:49:7d:bf:58:d7:78:5a:33:80:f8:91:54: 72:03:6f:c8:a3:2f:fd:f8:00:76:a7:59:07:fe:0b: 84:b1:c3:b3:86:5c:53:4d:8d:43:92:75:45:b6:36: eb:1a:d0:4d:85:60:d0:72:be:3b:09:76:d5:4b:ef: 45:ee:95:04:b0:f6:aa:74:92:f7:c8:68:e9:6e:8c: 2e:01:b2:6e:7b:93:d3:30:ae:4e:fb:73:85:8d:ba: 07:c8:44:7d:e6:eb:e2:71:67:5c:e4:7b:2e:a4:dd: 01:40:7e:55:cb:60:60:4f:f6:50:21:96:96:d0:76: 6a:d7:41:4c:af:e5:ba:3d:10:10:9e:2e:c5:38:e9: 32:74:6c:0f:4c:7a:f5:d8:46:e3:05:9b:e6:d3:c2: e4:b3:f0:47:24:70:8d:6c:f9:2e:1f:1b:1a:1a:d6: c1:9e:e0:33:57:4e:d3:19:79:86:e3:04:36:1a:ca: b4:35:bb:cd:41:eb:af:08:13:b1:4d:16:67:f3:4f: 00:2d:c6:5c:5a:fd:1c:57:42:e8:7e:fe:58:22:7a: e0:98:14:c8:6a:59:9f:7d:b6:ed:d4:cf:be:8c:5c: 78:73:02:21:64:fe:75:c5:41:16:73:e2:f2:01:fd: 17:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:43:3C:FC:2E:06:4A:77:FD:CB:37:B4:9C:2C:93:C4:D0:A0:52:6C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/C0433CFC2E064A77FDCB37B49C2C93C4D0A0526C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.126.226.0/24 103.147.154.0/24 IPv6: 2001:df7:5300::/48 Signature Algorithm: sha256WithRSAEncryption 71:f8:f5:f1:ee:31:a6:df:cf:b3:04:f9:2e:b5:e9:18:4b:b5: cd:a4:c0:18:7e:ce:db:0f:60:55:56:35:63:f1:c4:9a:9d:1f: 79:6e:bb:dc:72:34:b0:3d:18:9a:74:35:6a:eb:e2:e5:aa:ea: e7:d8:53:6f:4b:bf:56:7b:d3:41:60:a4:92:ab:c8:23:1a:89: 88:53:5a:c0:70:63:0f:54:0f:32:20:9a:03:2a:7b:0b:cb:56: 1e:94:af:d0:38:a3:6b:bf:34:3f:27:9a:0c:06:c3:f8:00:b0: 28:33:b7:7b:0a:44:a3:96:57:cd:90:36:02:31:f8:2c:2d:3d: 2f:63:a9:d1:68:33:e9:82:c0:8a:7a:66:40:53:cf:be:90:47: 59:26:d2:45:11:78:af:2d:7a:9a:8c:94:0d:3d:f3:3e:92:bc: 0e:25:5e:cd:f9:71:5c:f6:2f:8f:52:61:c7:fb:90:e8:1e:83: eb:c5:c2:44:be:77:79:4c:70:2d:aa:ab:21:aa:f5:ea:82:2e: d7:73:77:79:67:f5:b9:10:7b:6f:fc:a2:8f:3f:e6:6c:06:39: d2:af:10:d4:a9:af:5e:9c:ad:f8:9b:0a:2e:3d:89:a0:23:a2: fd:53:3c:7f:88:31:0d:d4:7e:6a:93:ca:ee:da:38:cb:36:fc: 94:37:5c:4c -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUECUyVOI583J5nYRH5GofbndyFkMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDcyOVoX DTI3MDUwMjAwNTIyOVowMzExMC8GA1UEAxMoQzA0MzNDRkMyRTA2NEE3N0ZEQ0Iz N0I0OUMyQzkzQzREMEEwNTI2QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALregCp0gCwJ6o4OyYj5gTMpSX2/WNd4WjOA+JFUcgNvyKMv/fgAdqdZB/4L hLHDs4ZcU02NQ5J1RbY26xrQTYVg0HK+Owl21UvvRe6VBLD2qnSS98ho6W6MLgGy bnuT0zCuTvtzhY26B8hEfebr4nFnXOR7LqTdAUB+VctgYE/2UCGWltB2atdBTK/l uj0QEJ4uxTjpMnRsD0x69dhG4wWb5tPC5LPwRyRwjWz5Lh8bGhrWwZ7gM1dO0xl5 huMENhrKtDW7zUHrrwgTsU0WZ/NPAC3GXFr9HFdC6H7+WCJ64JgUyGpZn3227dTP voxceHMCIWT+dcVBFnPi8gH9F28CAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMBDPPwuBkp3/cs3tJwsk8TQoFJsMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzY0Y2Y2MzJkLWQ2MWEtNDgyNi1iNTcyLTlmMTk0OGFlNTgwYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82NGNmNjMy ZC1kNjFhLTQ4MjYtYjU3Mi05ZjE5NDhhZTU4MGMvMC9DMDQzM0NGQzJFMDY0QTc3 RkRDQjM3QjQ5QzJDOTNDNEQwQTA1MjZDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQAZ37iAwQAZ5OaMA8EAgACMAkDBwAgAQ33UwAwDQYJKoZIhvcNAQELBQADggEB AHH49fHuMabfz7ME+S616RhLtc2kwBh+ztsPYFVWNWPxxJqdH3luu9xyNLA9GJp0 NWrr4uWq6ufYU29Lv1Z700FgpJKryCMaiYhTWsBwYw9UDzIgmgMqewvLVh6Ur9A4 o2u/ND8nmgwGw/gAsCgzt3sKRKOWV82QNgIx+CwtPS9jqdFoM+mCwIp6ZkBTz76Q R1km0kUReK8tepqMlA098z6SvA4lXs35cVz2L49SYcf7kOgeg+vFwkS+d3lMcC2q qyGq9eqCLtdzd3ln9bkQe2/8oo8/5mwGOdKvENSpr16crfibCi49iaAjov1TPH+I MQ3UfmqTyu7aOMs2/JQ3XEw= -----END CERTIFICATE-----Generated at Tue May 12 22:45:53 2026 by rpki-client