$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer File: C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.cer (raw, json) Hash identifier: MYo57hO8LtXa6PjmIk3grAhZ3mYQLlrFN78ggfrt7Pk= Subject key identifier: C3:BB:CA:C5:DE:3D:DA:25:DA:5C:7D:A8:E3:6C:01:09:56:D2:7A:88 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 203C36C75C7F8F097787B18F8DD32AB78AB8B33F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:11:29 +0000 Certificate not after: Sun 02 May 2027 00:16:29 +0000 Subordinate resources: IP: 103.13.181.0/24 IP: 103.55.160.0/24 IP: 2001:df0:2e7::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3c:36:c7:5c:7f:8f:09:77:87:b1:8f:8d:d3:2a:b7:8a:b8:b3:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:11:29 2026 GMT Not After : May 2 00:16:29 2027 GMT Subject: CN=C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:80:44:fe:e7:64:97:66:69:b0:20:1d:24:36: f4:15:b6:11:fd:cc:8e:b3:5a:32:28:0d:db:89:e0: 13:e2:51:dd:89:62:25:af:53:36:35:ee:9c:7e:3f: fc:f4:40:f4:58:c0:6d:6d:b7:c3:e6:6d:e2:93:e9: d9:f8:8b:58:d2:24:f6:dc:7d:76:d0:ed:b1:b7:1a: f8:df:e7:6f:57:6a:0a:49:62:db:cd:c8:50:6d:60: 14:ec:e1:8a:be:22:27:86:df:3b:3e:c8:25:3c:2d: 77:8b:81:95:4a:b9:79:f0:28:57:f3:ac:c0:fa:80: c0:31:0a:83:b5:08:38:0b:24:b5:7f:e1:f7:ae:c0: 32:eb:62:38:75:8b:a6:19:60:9e:4d:c7:b4:0f:b5: d9:16:6f:f2:01:36:ff:ea:0b:5f:a1:1a:64:a9:dc: 55:1b:b5:e8:28:f8:ff:6d:65:b2:83:c5:00:5d:62: ce:ee:b3:28:83:6e:51:e7:42:91:f6:17:51:d6:a3: b9:25:82:0b:5b:2e:00:26:18:db:a2:64:9a:b1:2d: 6b:a9:ba:0f:fd:a7:6e:0e:d5:8c:a3:9f:bc:03:af: 48:21:65:c1:83:0e:fc:b3:9a:2a:c7:48:02:26:80: 23:96:ab:91:c4:4e:84:f7:f8:4f:4f:01:28:11:52: dc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C3:BB:CA:C5:DE:3D:DA:25:DA:5C:7D:A8:E3:6C:01:09:56:D2:7A:88 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/C3BBCAC5DE3DDA25DA5C7DA8E36C010956D27A88.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.13.181.0/24 103.55.160.0/24 IPv6: 2001:df0:2e7::/48 Signature Algorithm: sha256WithRSAEncryption 86:55:19:78:24:50:07:dd:90:bf:5f:e6:10:76:d4:99:1d:a9: f5:b4:0a:98:6b:11:f8:ef:90:57:2b:7c:be:b3:93:b9:e9:56: 1d:5e:04:f6:8e:f7:8f:0e:5f:c9:fe:1e:3f:4b:28:9b:ae:4a: 55:05:bb:16:c5:5a:ba:11:39:4f:cf:58:80:fa:9e:e2:70:1b: f0:49:a6:45:c9:0a:2e:50:2e:e2:bc:b2:eb:ad:5b:1f:7e:cf: 2e:2a:c0:7c:50:61:2a:a1:d5:7b:d1:ea:40:79:58:61:5e:c5: 49:ca:d6:17:91:21:24:32:9e:6d:c0:fb:4b:44:2e:9e:8a:e7: bb:a2:63:f9:04:02:39:d1:cf:0d:a3:57:e3:2a:ec:2d:38:a2: 4f:b4:df:d8:80:0f:fa:61:bf:e5:95:3d:60:9c:61:36:e8:b6: 63:2f:7c:db:c3:2e:4e:34:7b:f9:b7:98:1f:95:db:aa:be:7f: 4a:4a:c4:98:51:0c:5d:3a:bf:91:87:da:f5:e1:c2:b0:66:7b: f1:84:29:bc:b9:d5:ec:f4:9d:96:bd:06:0a:f3:a6:d6:1b:4d: 2d:dc:9c:48:3d:48:62:fc:22:e6:bb:cb:9d:5d:64:54:af:ca: 85:44:38:3d:61:8e:bc:1f:40:ab:39:ac:cd:1f:c8:3b:bf:96: fa:42:1a:f0 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUIDw2x1x/jwl3h7GPjdMqt4q4sz8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTEyOVoX DTI3MDUwMjAwMTYyOVowMzExMC8GA1UEAxMoQzNCQkNBQzVERTNEREEyNURBNUM3 REE4RTM2QzAxMDk1NkQyN0E4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALSARP7nZJdmabAgHSQ29BW2Ef3MjrNaMigN24ngE+JR3YliJa9TNjXunH4/ /PRA9FjAbW23w+Zt4pPp2fiLWNIk9tx9dtDtsbca+N/nb1dqCkli283IUG1gFOzh ir4iJ4bfOz7IJTwtd4uBlUq5efAoV/OswPqAwDEKg7UIOAsktX/h967AMutiOHWL phlgnk3HtA+12RZv8gE2/+oLX6EaZKncVRu16Cj4/21lsoPFAF1izu6zKINuUedC kfYXUdajuSWCC1suACYY26JkmrEta6m6D/2nbg7VjKOfvAOvSCFlwYMO/LOaKsdI AiaAI5arkcROhPf4T08BKBFS3AECAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMO7ysXePdol2lx9qONsAQlW0nqIMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzMwMzdiNjNjLWU0OTgtNGU0Ny1iOTdlLTY3YWJhNDU4NzgxYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zMDM3YjYz Yy1lNDk4LTRlNDctYjk3ZS02N2FiYTQ1ODc4MWMvMC9DM0JCQ0FDNURFM0REQTI1 REE1QzdEQThFMzZDMDEwOTU2RDI3QTg4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQAZw21AwQAZzegMA8EAgACMAkDBwAgAQ3wAucwDQYJKoZIhvcNAQELBQADggEB AIZVGXgkUAfdkL9f5hB21JkdqfW0CphrEfjvkFcrfL6zk7npVh1eBPaO948OX8n+ Hj9LKJuuSlUFuxbFWroROU/PWID6nuJwG/BJpkXJCi5QLuK8suutWx9+zy4qwHxQ YSqh1XvR6kB5WGFexUnK1heRISQynm3A+0tELp6K57uiY/kEAjnRzw2jV+Mq7C04 ok+039iAD/phv+WVPWCcYTbotmMvfNvDLk40e/m3mB+V26q+f0pKxJhRDF06v5GH 2vXhwrBme/GEKby51ez0nZa9BgrzptYbTS3cnEg9SGL8Iua7y51dZFSvyoVEOD1h jrwfQKs5rM0fyDu/lvpCGvA= -----END CERTIFICATE-----Generated at Tue May 12 22:10:12 2026 by rpki-client