$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer File: C23796060EF39ED0E6BB9F606F9F425C455FDC20.cer (raw, json) Hash identifier: KT+mitNjSrvtMfyYDYeA9libphfP0Q9d+Kzn41JCYiM= Subject key identifier: C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2773696BFABD3365FEB9B6F444CD575D7069B88C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:00:38 +0000 Certificate not after: Sun 02 May 2027 01:05:38 +0000 Subordinate resources: IP: 103.143.4.0/23 IP: 2405:4640::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:73:69:6b:fa:bd:33:65:fe:b9:b6:f4:44:cd:57:5d:70:69:b8:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:00:38 2026 GMT Not After : May 2 01:05:38 2027 GMT Subject: CN=C23796060EF39ED0E6BB9F606F9F425C455FDC20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d5:29:39:1f:db:87:1c:70:40:75:93:f2:d6: 0b:f5:6b:65:16:30:91:98:4c:59:5c:c9:98:0e:ba: 6e:88:6d:15:2d:26:40:1e:25:8c:c0:d2:35:39:ea: 20:65:51:44:e2:58:bc:8d:c3:06:44:09:c3:94:f8: e6:5d:59:30:c2:73:cd:f6:2e:28:dd:e7:3e:d4:8a: e1:ff:5f:06:cd:47:ec:0c:46:e9:d8:f1:7e:fc:1e: e8:9b:89:1c:52:a9:65:c7:81:76:9a:14:21:15:f2: c0:77:30:31:4d:6b:b4:00:fb:78:36:8e:93:73:a6: 27:f7:29:75:ec:1b:9f:84:d8:3e:0b:3f:bf:d3:96: be:82:25:91:fe:3d:88:d1:b8:57:b0:dd:f8:79:0f: 79:d7:44:c2:3b:56:57:a7:df:bc:ae:13:54:03:32: 5b:a5:e7:2c:e6:17:b8:96:f6:ca:f1:ea:56:9f:0c: e5:4e:1c:0a:63:5d:cc:d4:f7:f2:a8:f5:6f:bc:16: 00:4f:77:ba:8e:eb:a2:8f:65:66:23:b0:7c:7c:71: ed:26:00:98:66:7a:8f:67:de:8e:ea:8f:f0:eb:5b: e6:6a:13:3b:52:26:7c:6b:a5:db:ce:d2:65:9e:01: 36:0a:4a:35:b9:b1:1d:0c:6a:34:39:b5:61:9f:ea: 8b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:37:96:06:0E:F3:9E:D0:E6:BB:9F:60:6F:9F:42:5C:45:5F:DC:20 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/C23796060EF39ED0E6BB9F606F9F425C455FDC20.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.4.0/23 IPv6: 2405:4640::/32 Signature Algorithm: sha256WithRSAEncryption 33:31:0d:d3:10:4e:00:8d:c8:f3:10:a1:e3:82:e2:43:04:61: c1:d1:f8:03:c1:50:af:e0:27:25:61:25:72:80:ca:20:cf:8e: e9:52:84:71:45:0e:af:ec:32:76:59:f4:1a:33:65:07:71:2a: 1c:1d:90:0d:a0:95:30:4f:ad:73:52:12:a7:c9:21:df:34:e0: fb:fb:62:3f:a9:32:2c:84:7a:01:92:8f:0d:d4:c7:30:56:15: dd:a0:27:ec:1e:54:e3:21:4a:3f:8a:bf:73:c7:98:91:62:cd: 16:43:04:d1:45:1b:ec:9a:16:52:8a:aa:76:87:56:4d:1d:88: 30:b3:ac:a2:ae:57:61:99:e7:7a:5d:b8:32:4f:2f:4b:fd:b0: 25:55:a9:44:5f:ac:38:f4:94:4b:07:fe:85:ab:3c:72:8e:a8: 1d:d6:17:c2:0e:d8:1d:00:60:94:90:c7:48:17:4c:cd:fd:af: e6:cb:81:34:21:27:a8:45:4c:a7:79:6d:fb:34:ad:d5:66:05: 65:f9:43:8a:7a:71:65:9e:d3:e2:7d:45:9b:8e:60:c5:32:cc: 36:91:82:33:5d:d9:a7:21:98:db:7e:e9:d9:19:3a:14:65:ff: a1:39:6c:1f:d2:7b:ba:98:9b:fb:43:4a:0b:04:d8:d4:51:be: a0:04:50:78 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUJ3Npa/q9M2X+ubb0RM1XXXBpuIwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDAzOFoX DTI3MDUwMjAxMDUzOFowMzExMC8GA1UEAxMoQzIzNzk2MDYwRUYzOUVEMEU2QkI5 RjYwNkY5RjQyNUM0NTVGREMyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOLVKTkf24cccEB1k/LWC/VrZRYwkZhMWVzJmA66bohtFS0mQB4ljMDSNTnq IGVRROJYvI3DBkQJw5T45l1ZMMJzzfYuKN3nPtSK4f9fBs1H7AxG6djxfvwe6JuJ HFKpZceBdpoUIRXywHcwMU1rtAD7eDaOk3OmJ/cpdewbn4TYPgs/v9OWvoIlkf49 iNG4V7Dd+HkPeddEwjtWV6ffvK4TVAMyW6XnLOYXuJb2yvHqVp8M5U4cCmNdzNT3 8qj1b7wWAE93uo7roo9lZiOwfHxx7SYAmGZ6j2fejuqP8Otb5moTO1ImfGul287S ZZ4BNgpKNbmxHQxqNDm1YZ/qizcCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMI3lgYO857Q5rufYG+fQlxFX9wgMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc5OThkNmVlLTZmZDctNGUyZC1hZTQxLTY5MzlmZGIxNTNlZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83OTk4ZDZl ZS02ZmQ3LTRlMmQtYWU0MS02OTM5ZmRiMTUzZWUvMC9DMjM3OTYwNjBFRjM5RUQw RTZCQjlGNjA2RjlGNDI1QzQ1NUZEQzIwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ48EMA0EAgACMAcDBQAkBUZAMA0GCSqGSIb3DQEBCwUAA4IBAQAzMQ3TEE4A jcjzEKHjguJDBGHB0fgDwVCv4CclYSVygMogz47pUoRxRQ6v7DJ2WfQaM2UHcSoc HZANoJUwT61zUhKnySHfNOD7+2I/qTIshHoBko8N1McwVhXdoCfsHlTjIUo/ir9z x5iRYs0WQwTRRRvsmhZSiqp2h1ZNHYgws6yirldhmed6XbgyTy9L/bAlValEX6w4 9JRLB/6Fqzxyjqgd1hfCDtgdAGCUkMdIF0zN/a/my4E0ISeoRUyneW37NK3VZgVl +UOKenFlntPifUWbjmDFMsw2kYIzXdmnIZjbfunZGToUZf+hOWwf0nu6mJv7Q0oL BNjUUb6gBFB4 -----END CERTIFICATE-----Generated at Tue May 12 22:03:49 2026 by rpki-client