$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C2F21005CDD8F19E492720297D0BA5C66395653F.cer File: C2F21005CDD8F19E492720297D0BA5C66395653F.cer (raw, json) Hash identifier: oROwRwZ4Y7vLecUdJFAcK6wxkkl6kU3da67pSXnFNa0= Subject key identifier: C2:F2:10:05:CD:D8:F1:9E:49:27:20:29:7D:0B:A5:C6:63:95:65:3F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1DA468A7B6DCE6838C492EFCB48FF8490A3E7F2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:11:19 +0000 Certificate not after: Sun 02 May 2027 00:16:19 +0000 Subordinate resources: IP: 103.91.55.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a4:68:a7:b6:dc:e6:83:8c:49:2e:fc:b4:8f:f8:49:0a:3e:7f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:11:19 2026 GMT Not After : May 2 00:16:19 2027 GMT Subject: CN=C2F21005CDD8F19E492720297D0BA5C66395653F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:07:2d:68:d3:0c:aa:a2:4b:b8:20:c5:52:f8: e3:bb:7c:0f:50:7e:66:e0:67:67:5a:3b:5d:f7:46: 1e:13:b6:25:36:20:84:2f:a7:b4:3b:c0:cc:33:7d: 8c:fa:92:09:07:56:84:70:47:24:1f:fc:7d:07:c6: 40:b9:b1:d9:09:c3:ee:ab:d6:d4:91:72:40:58:16: d3:48:1b:56:a5:1c:a2:97:45:18:9d:75:55:92:44: 6b:67:c4:ae:a6:9b:a8:b7:90:53:5b:1d:81:2e:dd: 7b:02:0b:89:75:73:66:df:df:b2:6b:c4:aa:67:9e: 08:ad:e2:45:d5:ca:c6:10:ed:1a:66:20:43:94:1a: ca:74:a3:0a:5b:ab:32:8b:d0:07:36:42:fe:e3:f8: f9:4a:b7:5e:e0:95:6d:b8:67:f2:a0:0c:fc:be:e1: 1b:38:e1:9c:ef:d7:27:9b:81:3b:c4:fe:84:84:ca: da:33:a6:fa:42:82:b3:cd:a8:72:34:2c:02:ee:70: 94:81:73:08:a7:6b:ed:46:7c:5f:10:95:28:5a:28: 22:b1:b7:35:76:53:cb:13:bf:56:63:5e:11:f1:6e: 36:b0:64:45:ed:69:53:c3:e0:b6:7e:a1:e1:22:fb: 59:86:7b:0c:0c:03:91:32:0f:7c:a4:ef:71:69:bd: 59:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:F2:10:05:CD:D8:F1:9E:49:27:20:29:7D:0B:A5:C6:63:95:65:3F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/C2F21005CDD8F19E492720297D0BA5C66395653F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.91.55.0/24 Signature Algorithm: sha256WithRSAEncryption 48:2a:63:30:ee:b0:c0:7d:bc:f5:dc:14:0d:41:14:ae:03:50: 13:c8:39:35:ad:0c:47:c4:b7:3b:1a:9d:fe:bd:e6:49:50:ef: f8:ff:50:d0:3f:b5:2f:87:c6:71:56:b3:95:76:6d:d1:61:84: c7:b7:00:ab:8e:b6:3e:21:4b:4b:93:20:79:ec:dd:9b:a1:6e: 91:a7:1e:78:a8:30:5c:dd:36:0e:6a:6a:ec:43:bd:90:b7:bd: c0:47:8e:5c:7d:6e:e8:5a:4b:7b:13:fa:df:28:92:7f:29:74: be:d0:dc:96:c3:20:b4:c3:c3:58:c3:8b:2d:46:13:98:c2:82: b0:8a:f5:55:c0:57:e5:96:40:e3:3f:7c:f9:08:75:5c:d4:11: 84:9f:bf:84:60:bc:3f:55:55:fa:6e:08:39:07:64:be:b4:c4: 02:8a:0c:17:af:ad:9e:eb:0a:1c:18:c3:74:76:3d:89:7e:fa: 26:fe:91:50:95:c3:5d:f1:36:27:3f:1e:85:14:26:c8:02:d3: b3:8f:9f:b8:c9:02:79:ec:a3:cf:97:9c:a2:95:78:92:cc:93: 64:b1:4a:39:7d:43:c4:f2:34:55:40:0c:24:a9:a5:ae:23:41: 66:54:be:1a:1d:ee:a3:d8:c2:43:cd:27:42:1e:ae:2a:ff:7f: cb:57:7c:2d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUHaRop7bc5oOMSS78tI/4SQo+fy8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTExOVoX DTI3MDUwMjAwMTYxOVowMzExMC8GA1UEAxMoQzJGMjEwMDVDREQ4RjE5RTQ5Mjcy MDI5N0QwQkE1QzY2Mzk1NjUzRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJQHLWjTDKqiS7ggxVL447t8D1B+ZuBnZ1o7XfdGHhO2JTYghC+ntDvAzDN9 jPqSCQdWhHBHJB/8fQfGQLmx2QnD7qvW1JFyQFgW00gbVqUcopdFGJ11VZJEa2fE rqabqLeQU1sdgS7dewILiXVzZt/fsmvEqmeeCK3iRdXKxhDtGmYgQ5QaynSjClur MovQBzZC/uP4+Uq3XuCVbbhn8qAM/L7hGzjhnO/XJ5uBO8T+hITK2jOm+kKCs82o cjQsAu5wlIFzCKdr7UZ8XxCVKFooIrG3NXZTyxO/VmNeEfFuNrBkRe1pU8Pgtn6h 4SL7WYZ7DAwDkTIPfKTvcWm9Wd8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMLyEAXN2PGeSScgKX0LpcZjlWU/MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJmZmJhZjcxLTJkNTctNGU0YS05MWQwLWNhYzhhYjBhY2VmZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yZmZiYWY3 MS0yZDU3LTRlNGEtOTFkMC1jYWM4YWIwYWNlZmUvMC9DMkYyMTAwNUNERDhGMTlF NDkyNzIwMjk3RDBCQTVDNjYzOTU2NTNGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ1s3MA0GCSqGSIb3DQEBCwUAA4IBAQBIKmMw7rDAfbz13BQNQRSuA1ATyDk1 rQxHxLc7Gp3+veZJUO/4/1DQP7Uvh8ZxVrOVdm3RYYTHtwCrjrY+IUtLkyB57N2b oW6Rpx54qDBc3TYOamrsQ72Qt73AR45cfW7oWkt7E/rfKJJ/KXS+0NyWwyC0w8NY w4stRhOYwoKwivVVwFfllkDjP3z5CHVc1BGEn7+EYLw/VVX6bgg5B2S+tMQCigwX r62e6wocGMN0dj2Jfvom/pFQlcNd8TYnPx6FFCbIAtOzj5+4yQJ57KPPl5yilXiS zJNksUo5fUPE8jRVQAwkqaWuI0FmVL4aHe6j2MJDzSdCHq4q/3/LV3wt -----END CERTIFICATE-----Generated at Tue May 12 22:16:04 2026 by rpki-client