$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C80F1ABFA2D82FD943F357E54256F9D077A237B6.cer File: C80F1ABFA2D82FD943F357E54256F9D077A237B6.cer (raw, json) Hash identifier: S/1zWDt90kW+5yKmEKeOWMQh223sczmxo4m1KRJS2Tk= Subject key identifier: C8:0F:1A:BF:A2:D8:2F:D9:43:F3:57:E5:42:56:F9:D0:77:A2:37:B6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 346938EE09DFA68A3809500746A8D74B38CE678F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/C80F1ABFA2D82FD943F357E54256F9D077A237B6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:43:20 +0000 Certificate not after: Sun 02 May 2027 00:48:20 +0000 Subordinate resources: IP: 103.241.204.0/22 IP: 2001:df3:7000::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:69:38:ee:09:df:a6:8a:38:09:50:07:46:a8:d7:4b:38:ce:67:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:43:20 2026 GMT Not After : May 2 00:48:20 2027 GMT Subject: CN=C80F1ABFA2D82FD943F357E54256F9D077A237B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:88:be:fc:d7:ee:40:ce:d9:d8:ba:97:d1:b6: 2f:1b:c2:21:45:f7:a6:25:c1:f8:b2:a0:11:01:cc: a0:f1:7c:b8:4d:89:57:82:2c:b8:2c:8d:36:e1:5e: 70:b8:ac:7d:78:33:e6:7b:89:a0:4d:ce:c2:df:4c: d3:cc:5c:0c:5e:94:79:c1:b5:61:ff:dc:40:c2:bc: b1:3d:a9:f2:e4:10:8b:2c:bf:d5:ab:52:aa:0f:51: ef:4b:99:db:92:91:93:98:6f:65:0e:98:b6:e7:66: ed:d2:8b:ba:5e:63:80:b8:20:97:3f:1d:e3:5d:68: c7:a5:10:f5:c6:63:ee:ca:e7:ad:ce:66:21:87:4b: 79:75:37:06:74:8e:e0:d7:45:f3:ff:1b:75:da:fe: 0c:c7:fa:4f:87:96:c7:16:92:d8:30:0b:9e:20:3f: e5:6f:4e:8e:e6:f8:e0:a7:49:7e:2c:61:8c:6a:e1: 3b:6f:e2:d7:74:93:ce:df:25:be:ef:3c:c8:f7:4a: ff:3e:c3:1a:0e:33:10:43:28:4f:a4:00:c7:17:86: ca:a3:2c:a6:a3:b9:22:c4:7a:76:55:ee:1c:c4:7c: 89:9a:cf:e7:d6:84:d4:5b:82:91:c0:76:60:e1:2a: 0c:48:9d:81:f6:cf:c2:9d:a4:2f:2e:08:ba:03:a8: 2c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:0F:1A:BF:A2:D8:2F:D9:43:F3:57:E5:42:56:F9:D0:77:A2:37:B6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/C80F1ABFA2D82FD943F357E54256F9D077A237B6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.241.204.0/22 IPv6: 2001:df3:7000::/48 Signature Algorithm: sha256WithRSAEncryption 8a:c5:eb:c2:e8:1a:73:f9:99:8e:8b:70:4c:58:1a:07:c5:b1: 38:51:e2:7e:01:91:bb:9c:e4:99:ca:fa:e0:35:3e:92:e6:de: 6d:24:0c:c6:71:80:3f:00:1e:d3:dc:6e:67:ef:9b:53:df:a6: 2e:86:62:f5:ac:6c:76:85:e6:e7:e8:f8:de:72:52:6b:7a:b3: 89:3b:03:c5:f0:db:00:62:c5:c5:a0:7f:e1:5f:27:aa:c9:f2: dd:b4:d5:df:74:af:bb:ea:9e:a0:9a:63:b7:0e:86:30:93:88: 6c:ee:d3:86:81:53:ab:97:43:9d:7d:66:2c:40:4f:71:2e:4d: 3d:ce:87:dd:33:22:69:74:37:cc:79:ae:f8:b3:ba:3a:f6:db: 90:e1:c6:e8:0c:b9:cc:d1:a3:ec:43:51:0c:49:b9:86:35:90: de:20:8c:53:46:77:db:94:01:6f:2b:21:67:1c:ef:2a:e3:05: c5:40:1f:6a:9b:98:97:60:e0:8e:8b:1a:09:68:fa:2a:f2:6e: 54:15:e3:29:0d:45:b9:2e:c3:75:ca:6c:4e:7f:0d:91:57:04: 55:47:43:97:3f:82:11:3a:80:b3:e7:e1:94:f6:8c:67:40:b2: e3:32:d9:de:fa:05:87:d1:54:41:94:c3:4e:1f:f5:b9:35:ff: b6:0c:9d:3c -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUNGk47gnfpoo4CVAHRqjXSzjOZ48wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDMyMFoX DTI3MDUwMjAwNDgyMFowMzExMC8GA1UEAxMoQzgwRjFBQkZBMkQ4MkZEOTQzRjM1 N0U1NDI1NkY5RDA3N0EyMzdCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ+IvvzX7kDO2di6l9G2LxvCIUX3piXB+LKgEQHMoPF8uE2JV4IsuCyNNuFe cLisfXgz5nuJoE3Owt9M08xcDF6UecG1Yf/cQMK8sT2p8uQQiyy/1atSqg9R70uZ 25KRk5hvZQ6Ytudm7dKLul5jgLgglz8d411ox6UQ9cZj7srnrc5mIYdLeXU3BnSO 4NdF8/8bddr+DMf6T4eWxxaS2DALniA/5W9Ojub44KdJfixhjGrhO2/i13STzt8l vu88yPdK/z7DGg4zEEMoT6QAxxeGyqMspqO5IsR6dlXuHMR8iZrP59aE1FuCkcB2 YOEqDEidgfbPwp2kLy4IugOoLKkCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMgPGr+i2C/ZQ/NX5UJW+dB3oje2MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVlYTBjZjlhLWM1N2QtNDM5NS05MjQ5LWJmY2Y0NjcyNDI4Mi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81ZWEwY2Y5 YS1jNTdkLTQzOTUtOTI0OS1iZmNmNDY3MjQyODIvMC9DODBGMUFCRkEyRDgyRkQ5 NDNGMzU3RTU0MjU2RjlEMDc3QTIzN0I2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZ/HMMA8EAgACMAkDBwAgAQ3zcAAwDQYJKoZIhvcNAQELBQADggEBAIrF68Lo GnP5mY6LcExYGgfFsThR4n4Bkbuc5JnK+uA1PpLm3m0kDMZxgD8AHtPcbmfvm1Pf pi6GYvWsbHaF5ufo+N5yUmt6s4k7A8Xw2wBixcWgf+FfJ6rJ8t201d90r7vqnqCa Y7cOhjCTiGzu04aBU6uXQ519ZixAT3EuTT3Oh90zIml0N8x5rvizujr225DhxugM uczRo+xDUQxJuYY1kN4gjFNGd9uUAW8rIWcc7yrjBcVAH2qbmJdg4I6LGglo+iry blQV4ykNRbkuw3XKbE5/DZFXBFVHQ5c/ghE6gLPn4ZT2jGdAsuMy2d76BYfRVEGU w04f9bk1/7YMnTw= -----END CERTIFICATE-----Generated at Tue May 12 22:09:51 2026 by rpki-client