$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer File: C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer (raw, json) Hash identifier: w5PmFZWJ64TE5BFd9duFPzsAP57znhizmmJ+PgthvTM= Subject key identifier: C7:06:F9:00:08:D6:29:3E:5E:35:C7:B1:7D:D3:B4:14:EE:B9:A0:A0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2CE5CBAD2921AE1094DB3E1C0A89BAB2BA18C8D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:58:04 +0000 Certificate not after: Sun 02 May 2027 01:03:04 +0000 Subordinate resources: IP: 103.191.196.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:e5:cb:ad:29:21:ae:10:94:db:3e:1c:0a:89:ba:b2:ba:18:c8:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:58:04 2026 GMT Not After : May 2 01:03:04 2027 GMT Subject: CN=C706F90008D6293E5E35C7B17DD3B414EEB9A0A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ed:75:43:db:53:f4:2a:60:27:12:55:cb:88: 92:60:76:60:08:07:c4:4e:f4:c7:d9:e6:f8:28:02: f5:a5:29:3e:09:ad:36:d6:7a:df:e9:fc:57:46:9e: 33:e0:81:d7:b9:7c:55:cb:4a:b3:84:b9:05:73:65: 47:27:22:2c:77:34:4c:5f:01:c2:7a:96:f7:ad:4b: 38:ef:25:8e:8d:bb:1c:77:cc:31:b2:5c:c4:ac:55: 44:b2:33:a6:99:13:75:3a:84:20:ab:76:6a:05:fb: 3b:74:9c:ce:69:a5:b4:28:18:c1:85:03:46:3d:56: 20:ed:1e:22:5b:cd:d2:09:d3:2d:2e:88:ed:1f:cd: 59:7c:56:42:f9:d6:01:f7:e2:7d:7d:14:b6:3e:dd: 9c:76:8f:48:29:6b:1c:06:ab:07:a6:ec:94:6d:d1: f7:06:33:ed:b5:75:2e:f1:15:a0:85:e3:ab:73:f1: bb:ae:70:40:f3:96:e7:8a:f5:95:04:1d:d7:41:e1: fd:87:55:85:5f:6a:c1:02:0e:71:df:6a:9f:ed:a7: fd:13:c0:c2:90:2c:ad:b2:63:4a:ee:1d:16:03:fc: 69:20:b7:de:4b:1b:38:a1:98:17:db:4a:ec:7b:58: 75:84:b9:50:03:3e:39:09:c3:28:c9:5d:d9:1c:11: c5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:06:F9:00:08:D6:29:3E:5E:35:C7:B1:7D:D3:B4:14:EE:B9:A0:A0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.196.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:f6:6b:97:a4:15:b5:76:54:a5:f3:f5:ca:07:b5:2a:05:6b: b6:72:bc:cc:86:fb:6b:b3:2b:f6:51:42:64:0e:d5:2a:c7:29: e6:ab:d7:a8:b9:8e:de:1b:dd:d9:10:d5:82:44:90:9e:16:bc: 2e:c4:4b:7e:b0:66:af:6e:04:5b:03:2c:4b:1b:18:7c:75:34: 8a:49:64:1b:8c:26:3f:f9:65:26:ed:dc:18:28:d7:a5:da:d8: c7:fc:b6:2e:fb:ed:48:69:29:40:6a:2d:75:43:00:f7:41:94: 9f:7b:c7:d3:a6:98:ed:ff:9b:70:f1:8b:7e:cf:ce:e2:a3:78: ae:4c:fe:c5:87:42:85:80:b2:fa:22:27:f3:9a:32:d4:95:e0: 3f:4c:89:4a:ee:89:05:ba:52:27:6e:34:6a:db:2b:00:2e:57: 34:9b:55:b3:71:5f:9e:59:2a:5c:8f:66:6e:54:01:a3:01:0d: 64:74:22:fc:02:54:23:e4:59:7b:07:a6:38:54:57:c0:13:11: 58:e6:4f:65:0b:59:2f:d6:5a:08:2a:f8:9c:ce:c9:ec:60:7e: a2:43:ed:2a:76:26:dc:91:62:a3:ce:67:5d:5c:c6:61:2a:ae: 67:4b:76:a5:86:e1:ba:5f:72:48:85:ba:7f:31:69:ab:17:eb: fc:62:5a:bb -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIULOXLrSkhrhCU2z4cCom6sroYyNIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTgwNFoX DTI3MDUwMjAxMDMwNFowMzExMC8GA1UEAxMoQzcwNkY5MDAwOEQ2MjkzRTVFMzVD N0IxN0REM0I0MTRFRUI5QTBBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIjtdUPbU/QqYCcSVcuIkmB2YAgHxE70x9nm+CgC9aUpPgmtNtZ63+n8V0ae M+CB17l8VctKs4S5BXNlRyciLHc0TF8BwnqW961LOO8ljo27HHfMMbJcxKxVRLIz ppkTdTqEIKt2agX7O3SczmmltCgYwYUDRj1WIO0eIlvN0gnTLS6I7R/NWXxWQvnW AffifX0Utj7dnHaPSClrHAarB6bslG3R9wYz7bV1LvEVoIXjq3Pxu65wQPOW54r1 lQQd10Hh/YdVhV9qwQIOcd9qn+2n/RPAwpAsrbJjSu4dFgP8aSC33ksbOKGYF9tK 7HtYdYS5UAM+OQnDKMld2RwRxVMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMcG+QAI1ik+XjXHsX3TtBTuuaCgMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc1ZDZlZmZmLTg1YjItNGFmNC04OWFiLTZkOThjOTUyN2RhNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83NWQ2ZWZm Zi04NWIyLTRhZjQtODlhYi02ZDk4Yzk1MjdkYTQvMC9DNzA2RjkwMDA4RDYyOTNF NUUzNUM3QjE3REQzQjQxNEVFQjlBMEEwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7/EMA0GCSqGSIb3DQEBCwUAA4IBAQBN9muXpBW1dlSl8/XKB7UqBWu2crzM hvtrsyv2UUJkDtUqxynmq9eouY7eG93ZENWCRJCeFrwuxEt+sGavbgRbAyxLGxh8 dTSKSWQbjCY/+WUm7dwYKNel2tjH/LYu++1IaSlAai11QwD3QZSfe8fTppjt/5tw 8Yt+z87io3iuTP7Fh0KFgLL6IifzmjLUleA/TIlK7okFulInbjRq2ysALlc0m1Wz cV+eWSpcj2ZuVAGjAQ1kdCL8AlQj5Fl7B6Y4VFfAExFY5k9lC1kv1loIKviczsns YH6iQ+0qdibckWKjzmddXMZhKq5nS3alhuG6X3JIhbp/MWmrF+v8Ylq7 -----END CERTIFICATE-----Generated at Tue May 12 22:33:17 2026 by rpki-client