$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C0DF2950676479309D2FBC873ADFE7F5B6058640.cer File: C0DF2950676479309D2FBC873ADFE7F5B6058640.cer (raw, json) Hash identifier: Q772KUaaCpEIRoCwoindOzEc5NUUuMUIZJEp+DhSS5M= Subject key identifier: C0:DF:29:50:67:64:79:30:9D:2F:BC:87:3A:DF:E7:F5:B6:05:86:40 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5E4240B7EAB21B52BEA5AD5DB9207583993B734E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:32:47 +0000 Certificate not after: Sun 02 May 2027 01:37:47 +0000 Subordinate resources: IP: 103.152.52.0/24 IP: 2001:df3:f780::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:42:40:b7:ea:b2:1b:52:be:a5:ad:5d:b9:20:75:83:99:3b:73:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:32:47 2026 GMT Not After : May 2 01:37:47 2027 GMT Subject: CN=C0DF2950676479309D2FBC873ADFE7F5B6058640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:93:95:32:16:8c:fb:c5:c6:0a:be:b8:35:84: 90:f6:3f:6c:ef:97:24:ff:6a:42:a1:1b:56:da:0f: 84:89:cd:4d:71:46:d7:f3:12:0d:5a:21:c4:2a:71: a5:74:95:e7:1f:25:67:23:e2:a3:5d:7c:ad:2d:35: 61:e4:04:18:6b:04:3b:9c:13:70:53:66:4f:41:f2: 18:f7:67:76:f3:46:fc:8c:dc:51:2d:38:58:7e:cb: 8d:67:24:4d:d3:72:ec:9d:bb:d8:c4:54:a2:04:b2: 3c:7c:85:9d:d2:bf:9a:8b:00:2d:eb:3f:4d:f1:e3: 60:fa:db:0a:70:ec:0e:7d:ef:25:bb:ad:3f:9e:b7: 5d:2e:3f:11:70:ed:d1:32:9d:db:ca:6c:57:fb:b2: bc:a1:33:ce:3e:ae:8b:c7:f8:14:1e:34:e8:1e:4b: 57:21:33:95:a8:fd:d3:cc:84:4f:3f:b8:ec:3c:52: 29:85:9f:41:3f:1c:93:95:6c:17:6d:84:37:59:11: bc:36:bd:e6:03:a3:7d:9e:74:e5:4a:41:b6:ad:e5: a9:fc:35:cf:31:90:b1:76:be:21:fc:6c:6d:06:3f: f0:ba:8e:96:ed:ee:85:d0:80:d3:f3:8f:d8:45:8a: 33:5e:d9:a7:c3:94:83:bb:f1:8c:c2:fe:ed:68:89: f8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:DF:29:50:67:64:79:30:9D:2F:BC:87:3A:DF:E7:F5:B6:05:86:40 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/C0DF2950676479309D2FBC873ADFE7F5B6058640.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.52.0/24 IPv6: 2001:df3:f780::/48 Signature Algorithm: sha256WithRSAEncryption 9b:18:a6:90:02:08:4b:e2:ac:b8:51:46:a1:71:06:63:6a:20: a1:8e:99:a4:5c:ec:42:f1:01:ae:76:cd:17:64:51:fb:64:69: df:7b:9a:cf:d4:ac:2d:93:83:49:5a:bd:15:20:4a:44:1b:67: 45:d6:70:de:f7:24:ac:b5:bb:c9:96:05:6e:4f:a6:b8:ba:2b: b0:71:72:c6:e8:db:3f:2f:81:b9:a0:01:cb:c5:d3:6a:20:da: 69:4f:23:aa:b4:4c:76:db:92:58:1b:88:be:d4:95:9d:f3:8e: 09:19:95:99:65:cc:d3:d2:34:28:56:89:98:56:ce:8f:d3:0b: 84:22:24:2c:75:27:8f:70:bb:95:27:03:56:f7:ce:72:3d:ae: 42:9a:e8:ce:e2:7f:30:67:8b:71:1f:01:c3:ef:16:18:c8:fa: 34:1e:dc:f6:36:a7:59:cd:ad:e9:6d:a7:bc:5c:b3:eb:95:c0: 98:94:6b:82:fd:7e:f3:b7:e8:52:2a:8a:71:60:5d:cc:22:f9: d8:2d:4e:a4:ce:66:d0:3c:93:3c:30:bc:89:0b:2a:6c:54:b3: 49:76:72:94:95:2f:29:c4:dd:d4:56:f7:7c:0b:9d:2a:9b:e5: 0d:5d:4a:dd:a5:a4:5b:39:fd:94:82:72:05:28:b2:18:19:14: 6d:78:07:53 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUXkJAt+qyG1K+pa1duSB1g5k7c04wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzI0N1oX DTI3MDUwMjAxMzc0N1owMzExMC8GA1UEAxMoQzBERjI5NTA2NzY0NzkzMDlEMkZC Qzg3M0FERkU3RjVCNjA1ODY0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN+TlTIWjPvFxgq+uDWEkPY/bO+XJP9qQqEbVtoPhInNTXFG1/MSDVohxCpx pXSV5x8lZyPio118rS01YeQEGGsEO5wTcFNmT0HyGPdndvNG/IzcUS04WH7LjWck TdNy7J272MRUogSyPHyFndK/mosALes/TfHjYPrbCnDsDn3vJbutP563XS4/EXDt 0TKd28psV/uyvKEzzj6ui8f4FB406B5LVyEzlaj908yETz+47DxSKYWfQT8ck5Vs F22EN1kRvDa95gOjfZ505UpBtq3lqfw1zzGQsXa+IfxsbQY/8LqOlu3uhdCA0/OP 2EWKM17Zp8OUg7vxjML+7WiJ+BUCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMDfKVBnZHkwnS+8hzrf5/W2BYZAMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E4NDRlMWIyLTkzYzYtNDhhZS05NmNjLWVkODM4MjlmNWEyMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hODQ0ZTFi Mi05M2M2LTQ4YWUtOTZjYy1lZDgzODI5ZjVhMjAvMC9DMERGMjk1MDY3NjQ3OTMw OUQyRkJDODczQURGRTdGNUI2MDU4NjQwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ5g0MA8EAgACMAkDBwAgAQ3z94AwDQYJKoZIhvcNAQELBQADggEBAJsYppAC CEvirLhRRqFxBmNqIKGOmaRc7ELxAa52zRdkUftkad97ms/UrC2Tg0lavRUgSkQb Z0XWcN73JKy1u8mWBW5Ppri6K7Bxcsbo2z8vgbmgAcvF02og2mlPI6q0THbbklgb iL7UlZ3zjgkZlZllzNPSNChWiZhWzo/TC4QiJCx1J49wu5UnA1b3znI9rkKa6M7i fzBni3EfAcPvFhjI+jQe3PY2p1nNreltp7xcs+uVwJiUa4L9fvO36FIqinFgXcwi +dgtTqTOZtA8kzwwvIkLKmxUs0l2cpSVLynE3dRW93wLnSqb5Q1dSt2lpFs5/ZSC cgUoshgZFG14B1M= -----END CERTIFICATE-----Generated at Tue May 12 22:10:03 2026 by rpki-client