$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer File: C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.cer (raw, json) Hash identifier: H+Ing4H21xZqCF+oET1VVm4HV3JJgSNnkkpJ77XR9FY= Subject key identifier: C0:74:83:FD:18:FF:18:39:E6:2A:24:FF:8E:D6:07:A4:4F:4A:2E:F1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 498B2BCBD9EBD983F699F83FDFE1C11941B14D91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:00:06 +0000 Certificate not after: Sun 02 May 2027 02:05:06 +0000 Subordinate resources: IP: 103.142.202.0/23 IP: 2001:df1:5680::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:8b:2b:cb:d9:eb:d9:83:f6:99:f8:3f:df:e1:c1:19:41:b1:4d:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:00:06 2026 GMT Not After : May 2 02:05:06 2027 GMT Subject: CN=C07483FD18FF1839E62A24FF8ED607A44F4A2EF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c8:cd:43:09:bb:b5:63:2d:5c:55:71:4a:d4: 8e:86:57:f8:a6:27:03:7e:3d:ca:e3:0f:a6:e5:cc: f2:12:fa:04:f4:5f:e6:a4:be:d7:75:af:48:61:5f: 05:d5:92:50:88:52:93:33:ca:af:3f:33:0f:cd:af: 56:8d:bf:5b:be:44:29:8f:0a:c9:43:c6:f0:1e:13: c9:89:35:92:50:9e:9d:af:19:4a:d7:b3:64:5f:a1: 8a:1a:bb:9e:46:d2:d9:7f:aa:2f:20:1c:cc:93:b5: 5b:0d:61:0a:30:3a:a6:15:85:c5:38:77:b7:71:c7: 15:28:69:f3:68:73:b0:7c:e3:88:cc:89:cb:fc:c4: dd:73:92:15:f0:91:6c:aa:82:49:3d:89:8f:54:9c: db:05:ee:b3:7b:dd:18:1b:f4:7f:43:d3:1c:5d:f4: 0a:04:81:cf:8e:f6:14:1a:44:66:9e:31:c8:28:5e: a6:1b:5c:05:0e:a5:69:18:e8:8c:11:67:04:7c:c0: f9:bd:84:7a:d7:4d:88:0e:4b:6f:ff:5e:ec:42:6c: e7:ef:07:ea:46:12:e2:2a:c5:37:ee:9e:09:b6:e6: af:9c:33:da:f2:a2:ef:14:29:a4:50:21:23:76:a6: e2:7c:4c:4d:55:4e:53:8e:9b:5c:b1:97:1f:37:0a: 7b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:74:83:FD:18:FF:18:39:E6:2A:24:FF:8E:D6:07:A4:4F:4A:2E:F1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C07483FD18FF1839E62A24FF8ED607A44F4A2EF1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.202.0/23 IPv6: 2001:df1:5680::/48 Signature Algorithm: sha256WithRSAEncryption 85:4c:f7:4e:28:20:5e:7c:e7:18:9a:8e:9a:41:a0:24:44:4c: 93:36:74:81:7f:0b:d8:27:81:69:5b:ca:e6:1d:ce:e7:93:ed: f1:19:97:0a:8e:61:21:c0:0e:c4:cd:ce:c6:ea:14:ab:0a:59: bb:c0:9c:01:17:a0:53:ad:b1:a5:0d:f8:67:0a:54:d9:0e:0e: 36:e5:50:95:13:20:3e:6a:cb:6f:5f:5b:4b:24:b2:da:9a:64: 06:85:f6:05:c8:32:3c:0d:6f:2c:84:f7:54:b8:61:a5:75:73: 82:2a:5c:e6:70:6c:78:ea:30:99:94:2d:4e:d3:7c:0a:f6:79: 7b:b8:4e:cd:06:db:09:04:13:75:e4:c0:4e:ff:bf:8b:83:9c: 64:b2:d8:1c:20:4e:19:04:78:17:bd:d8:00:3a:1c:1b:32:ff: 92:b8:b7:36:c6:f6:1a:f6:7f:72:e1:31:59:f9:c9:9d:c2:55: 3b:25:3e:2b:ae:64:81:8a:33:0f:9a:6d:33:db:ef:da:f4:b2: 39:1b:86:c4:61:67:6e:bc:84:a6:8b:71:14:9d:bb:d8:55:ad: fe:47:af:41:d1:03:a2:8a:42:0a:ec:ab:1e:c3:c7:ef:c2:05: a7:76:bd:b8:0b:1d:4a:fe:51:62:e3:d5:1e:1e:3a:cc:f8:2c: fc:72:03:7e -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUSYsry9nr2YP2mfg/3+HBGUGxTZEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDAwNloX DTI3MDUwMjAyMDUwNlowMzExMC8GA1UEAxMoQzA3NDgzRkQxOEZGMTgzOUU2MkEy NEZGOEVENjA3QTQ0RjRBMkVGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLIzUMJu7VjLVxVcUrUjoZX+KYnA349yuMPpuXM8hL6BPRf5qS+13WvSGFf BdWSUIhSkzPKrz8zD82vVo2/W75EKY8KyUPG8B4TyYk1klCena8ZStezZF+hihq7 nkbS2X+qLyAczJO1Ww1hCjA6phWFxTh3t3HHFShp82hzsHzjiMyJy/zE3XOSFfCR bKqCST2Jj1Sc2wXus3vdGBv0f0PTHF30CgSBz472FBpEZp4xyChephtcBQ6laRjo jBFnBHzA+b2EetdNiA5Lb/9e7EJs5+8H6kYS4irFN+6eCbbmr5wz2vKi7xQppFAh I3am4nxMTVVOU46bXLGXHzcKe/UCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMB0g/0Y/xg55iok/47WB6RPSi7xMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q2N2ZiODM3LTFiMmYtNGM0ZS1iOTk5LTZlOTkwZGRjMTQ5OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kNjdmYjgz Ny0xYjJmLTRjNGUtYjk5OS02ZTk5MGRkYzE0OTkvMC9DMDc0ODNGRDE4RkYxODM5 RTYyQTI0RkY4RUQ2MDdBNDRGNEEyRUYxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ47KMA8EAgACMAkDBwAgAQ3xVoAwDQYJKoZIhvcNAQELBQADggEBAIVM904o IF585xiajppBoCRETJM2dIF/C9gngWlbyuYdzueT7fEZlwqOYSHADsTNzsbqFKsK WbvAnAEXoFOtsaUN+GcKVNkODjblUJUTID5qy29fW0skstqaZAaF9gXIMjwNbyyE 91S4YaV1c4IqXOZwbHjqMJmULU7TfAr2eXu4Ts0G2wkEE3XkwE7/v4uDnGSy2Bwg ThkEeBe92AA6HBsy/5K4tzbG9hr2f3LhMVn5yZ3CVTslPiuuZIGKMw+abTPb79r0 sjkbhsRhZ268hKaLcRSdu9hVrf5Hr0HRA6KKQgrsqx7Dx+/CBad2vbgLHUr+UWLj 1R4eOsz4LPxyA34= -----END CERTIFICATE-----Generated at Tue May 12 22:46:02 2026 by rpki-client