$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C352DFD797F0814103500130B1A6B6876355C3DF.cer File: C352DFD797F0814103500130B1A6B6876355C3DF.cer (raw, json) Hash identifier: jbFq5PZUsMngzxISYWaY9lAL6zkOyUlc6nT3XxVM2rU= Subject key identifier: C3:52:DF:D7:97:F0:81:41:03:50:01:30:B1:A6:B6:87:63:55:C3:DF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7B4F56318B5DAB9CFD10125C9B411DF9B4AAEFF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:56:50 +0000 Certificate not after: Sun 02 May 2027 01:01:50 +0000 Subordinate resources: IP: 103.188.249.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:4f:56:31:8b:5d:ab:9c:fd:10:12:5c:9b:41:1d:f9:b4:aa:ef:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:56:50 2026 GMT Not After : May 2 01:01:50 2027 GMT Subject: CN=C352DFD797F0814103500130B1A6B6876355C3DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a7:1e:48:b1:38:e4:fb:bf:53:c6:27:d4:70: 71:88:6e:e8:48:0c:3d:a1:60:7e:f1:26:97:b3:eb: 79:ba:6c:98:ba:27:5a:9e:03:ff:83:23:30:b8:36: e0:2b:c3:20:3c:d1:d3:34:eb:01:65:b0:74:cc:46: f7:a7:89:20:cd:59:d6:8d:da:ba:6b:0f:6b:f0:a3: c7:5a:0b:ee:83:76:fb:33:d1:51:91:b8:a5:2a:b3: 27:7a:89:e3:33:e3:f3:98:bb:05:2a:95:78:6c:3f: 46:a4:db:11:15:44:e8:04:53:37:24:01:f2:ef:cd: dc:4a:e4:39:44:e8:ff:60:fa:65:ef:af:43:1d:c1: 4e:43:9e:75:ce:62:ff:11:b4:45:00:4d:44:bd:f2: 43:31:11:7a:ad:a9:ea:f0:28:55:3c:69:c8:01:4b: a6:09:75:c3:de:d4:50:db:31:c2:62:c7:fe:28:79: 57:ef:82:0c:be:8d:75:76:91:1c:7c:fb:70:cc:17: 02:4a:2c:b0:18:5d:04:1d:7f:2c:e9:19:fe:d4:e3: 12:a6:22:7b:12:bd:4c:c6:d0:38:9c:4f:72:8f:6a: b8:da:c9:0f:b6:65:26:7a:29:c9:8d:aa:dd:da:76: 82:7a:30:d7:56:82:ae:df:87:0b:d9:c9:10:8c:4f: 3d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C3:52:DF:D7:97:F0:81:41:03:50:01:30:B1:A6:B6:87:63:55:C3:DF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.188.249.0/24 Signature Algorithm: sha256WithRSAEncryption 36:ae:4b:3a:23:30:16:50:1a:69:7d:b8:0f:47:b2:ab:53:bc: 49:7d:2f:05:22:52:11:fe:b4:2d:88:4e:1d:1d:52:13:b0:09: 2a:fa:36:8b:29:58:3e:9d:66:35:33:81:61:04:52:0f:ae:6f: e2:66:9e:36:fb:7b:f6:ef:1a:c2:f9:53:94:c2:95:11:e2:41: 75:c4:12:e0:c1:a2:21:30:ef:8e:5d:c2:60:f5:f5:52:a2:e8: 80:30:b6:8e:df:70:31:1e:c6:76:6b:90:c9:b0:7c:94:b8:eb: c9:6a:7b:50:ac:95:56:e1:a0:cb:63:1e:2f:72:12:55:c1:e1: 43:6a:59:18:44:96:59:39:c0:b4:e0:08:a4:06:cf:fb:ca:ce: ab:b5:5f:80:bf:f1:73:7a:c7:4f:22:91:00:cd:85:23:ad:9e: 43:e5:ec:4c:54:2f:a0:88:ce:bc:9c:ea:d7:2d:b4:f9:44:4c: cc:69:4d:4d:f9:2b:1b:3f:a1:7d:b2:9e:9d:b7:61:90:c2:d7: db:bb:4c:a2:2c:9c:a4:73:61:44:3e:a8:18:9f:de:ee:53:da: c3:f3:6a:02:5b:13:0c:6f:0c:6c:91:73:b4:19:34:14:63:26: a9:51:47:8c:40:66:22:e5:28:85:b7:27:c4:66:67:a8:b3:0a: 1a:4d:06:2e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUe09WMYtdq5z9EBJcm0Ed+bSq7/AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTY1MFoX DTI3MDUwMjAxMDE1MFowMzExMC8GA1UEAxMoQzM1MkRGRDc5N0YwODE0MTAzNTAw MTMwQjFBNkI2ODc2MzU1QzNERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKynHkixOOT7v1PGJ9RwcYhu6EgMPaFgfvEml7PrebpsmLonWp4D/4MjMLg2 4CvDIDzR0zTrAWWwdMxG96eJIM1Z1o3aumsPa/Cjx1oL7oN2+zPRUZG4pSqzJ3qJ 4zPj85i7BSqVeGw/RqTbERVE6ARTNyQB8u/N3ErkOUTo/2D6Ze+vQx3BTkOedc5i /xG0RQBNRL3yQzEReq2p6vAoVTxpyAFLpgl1w97UUNsxwmLH/ih5V++CDL6NdXaR HHz7cMwXAkossBhdBB1/LOkZ/tTjEqYiexK9TMbQOJxPco9quNrJD7ZlJnopyY2q 3dp2gnow11aCrt+HC9nJEIxPPU0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMNS39eX8IFBA1ABMLGmtodjVcPfMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc0NjdlYzMzLTVhNzItNGM2NS05ZmQzLTY2ZWY4NDc5Mzk0ZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83NDY3ZWMz My01YTcyLTRjNjUtOWZkMy02NmVmODQ3OTM5NGQvMC9DMzUyREZENzk3RjA4MTQx MDM1MDAxMzBCMUE2QjY4NzYzNTVDM0RGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ7z5MA0GCSqGSIb3DQEBCwUAA4IBAQA2rks6IzAWUBppfbgPR7KrU7xJfS8F IlIR/rQtiE4dHVITsAkq+jaLKVg+nWY1M4FhBFIPrm/iZp42+3v27xrC+VOUwpUR 4kF1xBLgwaIhMO+OXcJg9fVSouiAMLaO33AxHsZ2a5DJsHyUuOvJantQrJVW4aDL Yx4vchJVweFDalkYRJZZOcC04AikBs/7ys6rtV+Av/FzesdPIpEAzYUjrZ5D5exM VC+giM68nOrXLbT5REzMaU1N+SsbP6F9sp6dt2GQwtfbu0yiLJykc2FEPqgYn97u U9rD82oCWxMMbwxskXO0GTQUYyapUUeMQGYi5SiFtyfEZmeoswoaTQYu -----END CERTIFICATE-----Generated at Tue May 12 22:52:45 2026 by rpki-client