$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.cer File: C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.cer (raw, json) Hash identifier: Gow4cqatwDW8Yn6XSAEdMNXUvMWD/8rNth8gUfXd3ns= Subject key identifier: C8:1C:7B:AD:CE:1C:C5:07:5C:39:8F:6A:91:BF:29:C7:9B:9D:24:19 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2C55B682E2CC2C42B3FC43106864EDFC0A5B7D1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:41:13 +0000 Certificate not after: Sat 01 May 2027 23:46:13 +0000 Subordinate resources: IP: 103.68.212.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:55:b6:82:e2:cc:2c:42:b3:fc:43:10:68:64:ed:fc:0a:5b:7d:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:41:13 2026 GMT Not After : May 1 23:46:13 2027 GMT Subject: CN=C81C7BADCE1CC5075C398F6A91BF29C79B9D2419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3e:36:86:41:d8:8e:f8:51:3c:c7:33:d7:8f: 79:86:3c:fa:ba:15:62:f4:e1:cf:8e:0d:0e:58:ab: 5d:69:3b:80:29:33:ab:77:30:93:24:37:76:e2:32: 27:28:09:5c:47:dc:8e:92:95:c1:e5:d6:28:65:cb: 27:5b:77:ec:46:94:e5:65:03:18:27:bc:d9:46:71: c7:51:82:bd:23:d9:3c:e4:dc:9d:58:a1:43:ec:02: 36:7c:5c:c9:da:27:05:69:e4:02:ca:cb:47:27:61: b6:ef:b1:17:c1:d8:28:c1:8c:a9:cb:3a:d1:39:31: 14:d8:61:69:3b:c0:2b:5c:f9:55:05:4e:80:4a:c5: 28:a1:39:3a:0c:2a:d1:2e:fd:8b:44:8d:47:e8:e6: 93:15:df:c1:c7:f1:94:06:1f:e7:b7:6c:98:64:74: bc:2f:40:42:34:e1:1d:29:aa:4f:58:67:de:60:5f: 2c:8c:8d:1d:03:9b:d1:b8:fe:ff:74:de:57:8e:e3: c7:b9:5e:04:b0:80:6c:bb:00:c7:34:10:67:77:05: 38:5e:a0:49:32:e8:a1:9b:61:1c:0f:c1:df:2a:bd: 64:6d:a3:b5:a4:12:e0:dd:a4:0a:69:01:da:a3:d3: a0:bf:93:63:6e:13:01:3f:80:46:79:1f:91:73:03: b1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:1C:7B:AD:CE:1C:C5:07:5C:39:8F:6A:91:BF:29:C7:9B:9D:24:19 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.68.212.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:30:72:18:ae:a6:16:ba:e0:3f:17:f6:1f:45:c2:63:0b:ea: 40:27:d4:4f:c8:b7:18:16:b6:cf:76:8a:ab:1d:f8:7c:32:08: 21:87:83:cc:b0:46:a6:54:09:10:f3:8d:f6:33:34:e3:52:2e: d2:ea:16:9e:fc:5e:6a:52:f2:28:88:da:fb:cb:eb:e1:7f:a2: 80:2a:2b:8a:08:29:18:27:4b:52:ca:d4:c4:fa:80:08:fc:71: 98:16:0a:e5:b7:c6:db:67:71:be:65:ad:3c:e3:1b:19:8f:df: 83:95:15:6f:2a:d2:21:88:4f:22:fc:e6:2d:7b:c3:8a:89:7e: 33:03:4f:5d:b6:24:25:dd:f4:d9:be:54:4d:7a:bf:1d:5e:45: 80:f7:ec:f7:5e:4a:de:e8:82:0b:7b:27:57:09:82:1e:c3:ca: 2d:71:99:61:7b:af:72:90:f1:8d:5a:0c:63:59:56:5c:12:c0: c2:ef:cc:31:b6:a8:4a:da:b4:10:55:94:62:c3:be:14:a3:0c: 8c:aa:52:92:10:55:3b:5d:89:51:e1:83:f0:8b:2e:90:6a:89: 51:f4:b8:9f:f6:8b:06:bf:e7:91:e2:b2:f9:fa:02:83:b8:ad: 60:4a:4e:36:2f:d2:25:b7:f4:f7:4a:06:17:85:8c:40:cc:d7: db:6b:ef:df -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIULFW2guLMLEKz/EMQaGTt/ApbfRwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDExM1oX DTI3MDUwMTIzNDYxM1owMzExMC8GA1UEAxMoQzgxQzdCQURDRTFDQzUwNzVDMzk4 RjZBOTFCRjI5Qzc5QjlEMjQxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMY+NoZB2I74UTzHM9ePeYY8+roVYvThz44NDlirXWk7gCkzq3cwkyQ3duIy JygJXEfcjpKVweXWKGXLJ1t37EaU5WUDGCe82UZxx1GCvSPZPOTcnVihQ+wCNnxc ydonBWnkAsrLRydhtu+xF8HYKMGMqcs60TkxFNhhaTvAK1z5VQVOgErFKKE5Ogwq 0S79i0SNR+jmkxXfwcfxlAYf57dsmGR0vC9AQjThHSmqT1hn3mBfLIyNHQOb0bj+ /3TeV47jx7leBLCAbLsAxzQQZ3cFOF6gSTLooZthHA/B3yq9ZG2jtaQS4N2kCmkB 2qPToL+TY24TAT+ARnkfkXMDsQECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMgce63OHMUHXDmPapG/KcebnSQZMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzAyNjBjZjE2LTc0ZmYtNGYyZi1iNTZjLWU1ODFlYWVhMjUxYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wMjYwY2Yx Ni03NGZmLTRmMmYtYjU2Yy1lNTgxZWFlYTI1MWMvMC9DODFDN0JBRENFMUNDNTA3 NUMzOThGNkE5MUJGMjlDNzlCOUQyNDE5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ0TUMA0GCSqGSIb3DQEBCwUAA4IBAQBqMHIYrqYWuuA/F/YfRcJjC+pAJ9RP yLcYFrbPdoqrHfh8Mgghh4PMsEamVAkQ8432MzTjUi7S6hae/F5qUvIoiNr7y+vh f6KAKiuKCCkYJ0tSytTE+oAI/HGYFgrlt8bbZ3G+Za084xsZj9+DlRVvKtIhiE8i /OYte8OKiX4zA09dtiQl3fTZvlRNer8dXkWA9+z3Xkre6IILeydXCYIew8otcZlh e69ykPGNWgxjWVZcEsDC78wxtqhK2rQQVZRiw74UowyMqlKSEFU7XYlR4YPwiy6Q aolR9Lif9osGv+eR4rL5+gKDuK1gSk42L9Ilt/T3SgYXhYxAzNfba+/f -----END CERTIFICATE-----Generated at Tue May 12 22:03:24 2026 by rpki-client