$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.cer File: C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.cer (raw, json) Hash identifier: USBVIpoKscE///8zCjufpEb1341kgYaxeEvjY+oJCjo= Subject key identifier: C1:6F:24:B5:1E:8F:9D:35:19:46:75:A5:A6:B5:BB:F3:8D:DB:33:02 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1F790DD746D51A9388B7075019719B7539E4EECF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft caRepository: rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:39:10 +0000 Certificate not after: Sun 02 May 2027 00:44:10 +0000 Subordinate resources: IP: 103.180.95.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:79:0d:d7:46:d5:1a:93:88:b7:07:50:19:71:9b:75:39:e4:ee:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:39:10 2026 GMT Not After : May 2 00:44:10 2027 GMT Subject: CN=C16F24B51E8F9D35194675A5A6B5BBF38DDB3302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4f:25:32:08:a2:80:3e:aa:93:d2:88:cc:7f: cf:f8:ae:cf:99:32:00:39:6a:f4:a4:a6:f3:3d:1c: f1:8c:f9:e2:80:3a:97:5e:1c:87:5f:07:ba:eb:43: 30:c4:0e:bd:8c:cf:ad:53:55:32:99:d4:b9:77:64: 89:cf:63:74:a4:2b:e8:15:38:07:2c:8b:7a:7d:3f: dc:31:55:f7:2d:a0:2e:8c:7d:5b:c9:c1:b7:ab:1f: dd:ce:f6:fa:dd:ac:03:da:f1:66:44:02:0b:62:05: fe:e6:7b:b1:0a:01:c1:42:e8:21:d2:0e:35:4e:87: eb:48:97:3e:3f:02:93:3b:dd:d6:97:84:0f:41:c4: 7c:a1:7a:d0:f2:94:99:56:73:89:2c:dc:d5:25:74: ab:cd:f3:56:20:ac:70:32:1d:eb:d6:00:f5:e8:f0: 07:08:5b:53:b9:a4:52:54:01:25:6c:8e:0f:04:11: cb:0d:19:11:6e:6c:84:62:75:ae:bd:16:09:cd:cf: 69:d2:0d:c0:c2:99:9b:d4:33:a7:6d:32:a7:a6:2b: b9:b7:1b:64:f9:ea:49:bf:1a:29:61:02:33:e5:f5: b5:92:40:c0:b6:76:bf:0f:1a:14:c6:23:b9:de:f1: 41:b2:98:e9:c0:53:a9:18:71:2c:36:8d:3d:80:ac: eb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C1:6F:24:B5:1E:8F:9D:35:19:46:75:A5:A6:B5:BB:F3:8D:DB:33:02 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.95.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:a0:36:ca:82:af:ea:b9:ba:fc:c2:b6:ad:2b:0f:d7:84:97: 0d:6f:b6:c3:95:db:05:cb:20:05:d9:41:c1:69:d0:4d:5e:ef: 08:e1:9e:83:a4:69:68:ef:79:a8:7e:c5:c8:bb:1b:1c:27:c1: b1:52:d4:63:3d:44:78:98:3f:b2:b0:16:ad:1b:44:e9:2c:71: 00:ab:5e:87:f4:4f:f5:8a:ef:9c:f1:a2:ee:61:43:68:1a:05: 2c:6b:ef:ef:10:a3:34:a2:6f:66:d7:f0:c8:ba:47:7f:fb:14: 09:b5:10:8c:d6:a0:da:75:eb:0e:f6:90:f9:4e:30:53:3d:f9: 5d:da:07:84:13:22:01:31:6a:43:a2:4f:86:8e:84:6a:53:f0: 9d:46:35:fe:e1:58:02:a5:96:cb:db:80:cd:8b:e7:f4:1f:b8: 35:80:07:6f:32:35:07:26:88:47:d4:7a:a8:58:26:e9:09:e6: 97:62:03:ff:17:61:81:75:1c:1d:a1:be:53:9f:de:b8:16:ca: 3a:1d:09:f2:62:d9:20:87:4a:0e:62:36:85:28:17:40:6d:de: be:40:ee:96:d2:7d:1e:79:d3:8a:9b:a7:4f:e6:6a:e6:25:52: 03:b3:a2:2a:8b:5b:6c:f2:3e:06:8b:4e:40:c4:22:c8:50:e6: 52:f8:54:cd -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUH3kN10bVGpOItwdQGXGbdTnk7s8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzkxMFoX DTI3MDUwMjAwNDQxMFowMzExMC8GA1UEAxMoQzE2RjI0QjUxRThGOUQzNTE5NDY3 NUE1QTZCNUJCRjM4RERCMzMwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANhPJTIIooA+qpPSiMx/z/iuz5kyADlq9KSm8z0c8Yz54oA6l14ch18HuutD MMQOvYzPrVNVMpnUuXdkic9jdKQr6BU4ByyLen0/3DFV9y2gLox9W8nBt6sf3c72 +t2sA9rxZkQCC2IF/uZ7sQoBwULoIdIONU6H60iXPj8Ckzvd1peED0HEfKF60PKU mVZziSzc1SV0q83zViCscDId69YA9ejwBwhbU7mkUlQBJWyODwQRyw0ZEW5shGJ1 rr0WCc3PadINwMKZm9Qzp20yp6YrubcbZPnqSb8aKWECM+X1tZJAwLZ2vw8aFMYj ud7xQbKY6cBTqRhxLDaNPYCs66cCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMFvJLUej501GUZ1paa1u/ON2zMCMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzU5Y2MyZTViLTNiOTEtNDJhZi04MjAzLTVlM2I5MTcwNDg0My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81OWNjMmU1 Yi0zYjkxLTQyYWYtODIwMy01ZTNiOTE3MDQ4NDMvMC9DMTZGMjRCNTFFOEY5RDM1 MTk0Njc1QTVBNkI1QkJGMzhEREIzMzAyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ7RfMA0GCSqGSIb3DQEBCwUAA4IBAQCcoDbKgq/qubr8wratKw/XhJcNb7bD ldsFyyAF2UHBadBNXu8I4Z6DpGlo73mofsXIuxscJ8GxUtRjPUR4mD+ysBatG0Tp LHEAq16H9E/1iu+c8aLuYUNoGgUsa+/vEKM0om9m1/DIukd/+xQJtRCM1qDadesO 9pD5TjBTPfld2geEEyIBMWpDok+GjoRqU/CdRjX+4VgCpZbL24DNi+f0H7g1gAdv MjUHJohH1HqoWCbpCeaXYgP/F2GBdRwdob5Tn964Fso6HQnyYtkgh0oOYjaFKBdA bd6+QO6W0n0eedOKm6dP5mrmJVIDs6Iqi1ts8j4Gi05AxCLIUOZS+FTN -----END CERTIFICATE-----Generated at Tue May 12 22:16:59 2026 by rpki-client