$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer File: C3CDEFC1D42DBC526894B49382D693AB81922151.cer (raw, json) Hash identifier: addb5veIFIsI/ZZhWQli50aLW49xfzBWMyLPRqvw/vA= Subject key identifier: C3:CD:EF:C1:D4:2D:BC:52:68:94:B4:93:82:D6:93:AB:81:92:21:51 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 38F500DA4EC9368D7D33C567D830C97DE5145112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft caRepository: rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:20:20 +0000 Certificate not after: Sun 02 May 2027 01:25:20 +0000 Subordinate resources: IP: 103.163.13.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f5:00:da:4e:c9:36:8d:7d:33:c5:67:d8:30:c9:7d:e5:14:51:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:20:20 2026 GMT Not After : May 2 01:25:20 2027 GMT Subject: CN=C3CDEFC1D42DBC526894B49382D693AB81922151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e0:9c:a8:b6:92:8d:d2:05:66:6d:a0:7a:f7: 59:a9:5d:c8:14:52:8b:29:bf:1b:e9:ce:8d:c4:9b: 28:2b:8e:1a:dc:01:bf:65:8d:8f:c5:31:1d:14:86: 6f:6d:2b:43:06:0b:50:65:2e:53:0c:3a:92:28:76: af:e8:d0:e3:e1:94:c5:d9:0d:00:8b:ac:d1:13:a6: 69:99:39:08:35:50:3d:e0:7b:f6:74:dd:d9:67:a7: 95:7c:2e:45:5b:68:af:6a:ad:18:44:39:82:0e:39: bb:31:6a:36:6a:c1:b1:70:ca:e2:04:d8:c0:73:7a: ad:bb:40:18:0e:d9:0b:16:7c:ea:7d:b0:ec:ba:3b: 4b:41:f9:ca:5a:9c:ab:cf:c3:fd:53:2d:3a:01:8d: e7:38:17:9d:7c:70:d2:23:2f:e2:67:bd:15:26:23: 1c:54:77:e1:73:b5:62:c0:7b:e6:b6:b4:bb:5e:e4: c6:33:f5:f3:96:f9:d5:e1:35:9c:3b:e2:d2:a6:b9: a0:1c:87:30:c2:c6:88:db:4d:13:7b:6c:34:0a:7a: f6:c7:5d:37:78:5a:6f:13:d4:02:4a:97:8b:03:e6: 6b:6a:39:ff:4c:13:b3:eb:5b:e9:64:d9:dc:5a:33: 67:5c:76:85:82:0f:ff:57:6c:93:27:f5:60:e4:0d: 46:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C3:CD:EF:C1:D4:2D:BC:52:68:94:B4:93:82:D6:93:AB:81:92:21:51 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.163.13.0/24 Signature Algorithm: sha256WithRSAEncryption 63:e0:85:e1:2d:d4:20:94:6c:15:ac:19:11:93:5a:c6:24:61: 1b:0e:8f:ef:d3:fd:ee:28:e5:ad:36:f0:69:eb:d8:22:63:1f: 5a:85:91:a5:b3:84:5e:dd:e3:69:77:d7:af:19:52:8e:a5:e4: 46:e5:da:af:67:61:76:94:49:24:53:ef:0b:1e:10:d6:ce:48: 37:23:0a:f3:d6:6e:c5:e0:2c:e2:d4:f2:6c:5f:30:88:74:61: 82:23:8e:17:a8:74:b4:2e:83:ac:28:e4:c0:44:d7:a7:5a:a9: b5:af:83:cc:eb:f8:f0:a6:30:dd:a5:bf:ff:00:a8:07:4c:56: 7e:e7:9d:2c:ff:eb:06:f2:0f:d3:4a:68:02:35:8d:1e:09:93: 3a:32:14:9d:a8:ea:18:fd:6a:28:5a:a7:53:8c:64:62:e8:6d: a7:36:dc:e6:c2:0e:ca:3d:0d:5c:88:96:fd:a9:39:ba:be:9f: 79:03:28:d0:6d:13:ac:83:3d:22:81:6b:53:41:5d:c8:1b:12: 09:76:b2:a6:0b:02:d0:df:75:68:b4:c9:ea:82:86:74:c9:f3: aa:c4:99:6f:97:d7:db:16:78:e0:9c:6a:9c:6b:70:3a:f2:b5: 59:ce:aa:07:ca:8f:11:b7:3f:4e:3a:f0:93:14:fb:40:cd:e3: 70:b2:62:c7 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUOPUA2k7JNo19M8Vn2DDJfeUUURIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjAyMFoX DTI3MDUwMjAxMjUyMFowMzExMC8GA1UEAxMoQzNDREVGQzFENDJEQkM1MjY4OTRC NDkzODJENjkzQUI4MTkyMjE1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANHgnKi2ko3SBWZtoHr3WaldyBRSiym/G+nOjcSbKCuOGtwBv2WNj8UxHRSG b20rQwYLUGUuUww6kih2r+jQ4+GUxdkNAIus0ROmaZk5CDVQPeB79nTd2WenlXwu RVtor2qtGEQ5gg45uzFqNmrBsXDK4gTYwHN6rbtAGA7ZCxZ86n2w7Lo7S0H5ylqc q8/D/VMtOgGN5zgXnXxw0iMv4me9FSYjHFR34XO1YsB75ra0u17kxjP185b51eE1 nDvi0qa5oByHMMLGiNtNE3tsNAp69sddN3habxPUAkqXiwPma2o5/0wTs+tb6WTZ 3FozZ1x2hYIP/1dskyf1YOQNRtcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMPN78HULbxSaJS0k4LWk6uBkiFRMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzk1ZGY1MTJmLTBkMWEtNGIwOS1iOWE0LWE5YzUyNWVjMjgxNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85NWRmNTEy Zi0wZDFhLTRiMDktYjlhNC1hOWM1MjVlYzI4MTcvMC9DM0NERUZDMUQ0MkRCQzUy Njg5NEI0OTM4MkQ2OTNBQjgxOTIyMTUxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6MNMA0GCSqGSIb3DQEBCwUAA4IBAQBj4IXhLdQglGwVrBkRk1rGJGEbDo/v 0/3uKOWtNvBp69giYx9ahZGls4Re3eNpd9evGVKOpeRG5dqvZ2F2lEkkU+8LHhDW zkg3Iwrz1m7F4Czi1PJsXzCIdGGCI44XqHS0LoOsKOTARNenWqm1r4PM6/jwpjDd pb//AKgHTFZ+550s/+sG8g/TSmgCNY0eCZM6MhSdqOoY/WooWqdTjGRi6G2nNtzm wg7KPQ1ciJb9qTm6vp95AyjQbROsgz0igWtTQV3IGxIJdrKmCwLQ33VotMnqgoZ0 yfOqxJlvl9fbFnjgnGqca3A68rVZzqoHyo8Rtz9OOvCTFPtAzeNwsmLH -----END CERTIFICATE-----Generated at Tue May 12 22:16:49 2026 by rpki-client