$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer File: C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer (raw, json) Hash identifier: 4DiAKS2L/hvwtOl6cp8VD+mI90dG0nEp9Ja0zrDIOm0= Subject key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 76DD23130177BC6E0ADDC55FBD44FE23DA8EF51C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:16:27 +0000 Certificate not after: Sun 02 May 2027 02:21:27 +0000 Subordinate resources: IP: 103.112.190.0/24 IP: 103.112.192.0/23 IP: 103.210.193.0/24 IP: 2405:3740::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:dd:23:13:01:77:bc:6e:0a:dd:c5:5f:bd:44:fe:23:da:8e:f5:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:16:27 2026 GMT Not After : May 2 02:21:27 2027 GMT Subject: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:12:87:42:93:ca:ba:08:8c:03:68:5d:25:41: 46:8c:44:2e:61:8d:c5:ea:ca:19:67:84:f1:b6:04: 46:03:7a:58:85:3f:a9:a4:2e:21:0b:13:5b:61:43: d5:86:de:f9:89:c6:c4:07:aa:c3:31:54:1f:46:d2: ea:1f:d6:f6:f9:ab:c4:73:9d:13:8d:8c:d9:d7:2d: 85:1a:5c:61:99:07:65:95:e3:d3:ea:a4:af:d3:ee: e6:72:76:61:95:6d:7a:3d:72:1f:2c:a5:7c:76:14: 09:3d:f9:a7:ec:ab:56:33:19:d4:f9:df:d9:8a:95: 99:b4:e3:e5:fe:fd:91:19:ea:68:9b:cb:73:d9:92: 20:cf:05:8e:c5:34:b7:b6:a6:37:0c:e9:28:46:e1: ad:17:40:bc:6a:c4:45:00:9b:5c:1a:56:34:56:47: 5f:82:0e:6a:98:af:14:51:e2:34:33:35:dc:38:f8: cc:ea:cb:52:0d:8b:3e:2d:75:1d:2f:45:22:98:df: 45:45:df:a7:98:5c:91:8b:29:cc:2b:7e:d8:ca:6e: 37:45:87:89:a6:89:79:a6:1d:8e:7f:3e:7a:5d:e7: 0f:d6:26:dc:17:d2:21:0c:04:11:a0:94:5b:78:7d: b4:b9:42:0f:75:dd:a2:de:f7:9a:ba:ae:44:ef:45: a2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.190.0/24 103.112.192.0/23 103.210.193.0/24 IPv6: 2405:3740::/32 Signature Algorithm: sha256WithRSAEncryption 40:06:fc:ff:b0:a5:5f:7c:b7:db:62:33:49:d2:57:88:29:f7: b2:45:05:0c:d6:ae:45:26:7f:74:db:36:9a:64:95:99:ed:ed: 32:ad:2d:4d:ad:2d:d5:f2:f6:42:56:00:f2:f3:de:c6:bc:74: bc:eb:d7:71:74:f8:e5:eb:62:40:66:2d:c5:8c:8d:62:d0:d6: 18:cb:f6:b0:d2:cf:30:ea:5a:a1:71:a3:67:25:d6:55:73:ee: 10:05:3b:fa:4e:17:17:34:3f:8c:d4:19:a2:0d:03:17:f2:aa: 0d:c0:58:85:7c:96:4f:f2:36:7e:3c:7f:25:71:86:2e:ca:82: 88:91:5d:3f:a0:0c:1a:63:20:9c:5c:f3:fe:b2:a3:95:e6:5d: 96:7a:f0:af:27:5c:4b:4a:07:70:2f:4b:d8:4b:59:a2:5b:07: 50:de:30:9e:c1:e8:80:9e:45:53:3d:13:ce:70:b9:1f:d3:6e: a8:50:4d:47:43:ef:23:50:50:6a:b5:52:0f:61:14:0e:fd:45: b1:b7:9e:f6:f2:a2:1c:52:3f:ed:85:1b:ff:23:a8:21:02:30: 9f:c8:72:53:a8:a7:c7:eb:80:ed:5a:7b:2d:34:25:b8:0f:8a: 9e:c9:5b:bd:b0:05:12:5b:7a:4e:e5:9e:00:6a:a4:76:c9:09: 91:1d:aa:9a -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIUdt0jEwF3vG4K3cVfvUT+I9qO9RwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTYyN1oX DTI3MDUwMjAyMjEyN1owMzExMC8GA1UEAxMoQzYzMkEwQ0Y0REE3RERFNzdDQkNB QzFGMzY3MTE2QTA3RTNDRkZENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJcSh0KTyroIjANoXSVBRoxELmGNxerKGWeE8bYERgN6WIU/qaQuIQsTW2FD 1Ybe+YnGxAeqwzFUH0bS6h/W9vmrxHOdE42M2dcthRpcYZkHZZXj0+qkr9Pu5nJ2 YZVtej1yHyylfHYUCT35p+yrVjMZ1Pnf2YqVmbTj5f79kRnqaJvLc9mSIM8FjsU0 t7amNwzpKEbhrRdAvGrERQCbXBpWNFZHX4IOapivFFHiNDM13Dj4zOrLUg2LPi11 HS9FIpjfRUXfp5hckYspzCt+2MpuN0WHiaaJeaYdjn8+el3nD9Ym3BfSIQwEEaCU W3h9tLlCD3Xdot73mrquRO9For8CAwEAAaOCAtQwggLQMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMYyoM9Np93nfLysHzZxFqB+PP/XMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2U2NWU3ODEwLTY3ZjQtNDFjMi04MDM0LTQ2NTI3MzNiOGRkMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lNjVlNzgx MC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC9DNjMyQTBDRjREQTdEREU3 N0NCQ0FDMUYzNjcxMTZBMDdFM0NGRkQ3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATAS AwQAZ3C+AwQBZ3DAAwQAZ9LBMA0EAgACMAcDBQAkBTdAMA0GCSqGSIb3DQEBCwUA A4IBAQBABvz/sKVffLfbYjNJ0leIKfeyRQUM1q5FJn902zaaZJWZ7e0yrS1NrS3V 8vZCVgDy897GvHS869dxdPjl62JAZi3FjI1i0NYYy/aw0s8w6lqhcaNnJdZVc+4Q BTv6ThcXND+M1BmiDQMX8qoNwFiFfJZP8jZ+PH8lcYYuyoKIkV0/oAwaYyCcXPP+ sqOV5l2WevCvJ1xLSgdwL0vYS1miWwdQ3jCeweiAnkVTPRPOcLkf026oUE1HQ+8j UFBqtVIPYRQO/UWxt5728qIcUj/thRv/I6ghAjCfyHJTqKfH64DtWnstNCW4D4qe yVu9sAUSW3pO5Z4AaqR2yQmRHaqa -----END CERTIFICATE-----Generated at Tue May 12 22:52:54 2026 by rpki-client