$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C855F0A07BFEA69901C5345D79932B70E2991F5E.cer File: C855F0A07BFEA69901C5345D79932B70E2991F5E.cer (raw, json) Hash identifier: /wab5JVYOTR+YKwPZkvOLVcJDcKLIq8Bj7UaGgXIPw8= Subject key identifier: C8:55:F0:A0:7B:FE:A6:99:01:C5:34:5D:79:93:2B:70:E2:99:1F:5E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1849778AB1FA93EF0253EC2D1C325CBF787DA149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:31:49 +0000 Certificate not after: Sun 02 May 2027 01:36:49 +0000 Subordinate resources: IP: 103.169.143.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:49:77:8a:b1:fa:93:ef:02:53:ec:2d:1c:32:5c:bf:78:7d:a1:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:31:49 2026 GMT Not After : May 2 01:36:49 2027 GMT Subject: CN=C855F0A07BFEA69901C5345D79932B70E2991F5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:52:f9:22:b2:2b:c8:ce:c9:1c:76:76:a1:42: fa:2f:c0:0b:d1:57:4c:ad:e1:8c:32:96:09:2e:78: 55:79:42:7f:6d:86:35:ae:43:86:88:3f:23:5a:a2: 71:ef:65:04:83:73:c7:f9:6b:b8:de:1a:23:ad:1d: dd:a9:d2:e0:75:84:1f:73:8e:f2:e5:0e:8a:ae:49: d6:cd:f3:dc:35:5a:b1:a1:2a:bb:8f:c3:b5:31:94: 66:04:fd:58:1f:05:e2:cb:a5:ad:04:c2:9e:33:cc: 2e:47:97:a5:e2:6e:a8:9a:7e:9d:b6:61:f8:cd:4c: 96:3b:a2:6d:ef:50:65:2a:c0:b0:33:b6:dd:81:7f: ee:8f:21:30:db:b2:c5:80:6a:dd:7c:a6:a4:21:fe: a6:79:b6:97:b8:a1:b3:b2:fa:07:78:96:5d:d1:ad: fe:9b:2c:96:c5:0d:86:63:f8:49:c0:00:3e:e5:21: b2:35:80:63:52:9d:1a:90:cb:5b:8a:fd:2f:35:48: f9:8e:df:70:02:32:39:1c:1b:fc:2f:c6:45:7b:f4: d4:d4:b3:b4:ae:d7:6a:f6:46:40:65:5b:51:52:12: f7:ff:11:6c:76:e6:5b:8f:2e:1c:ab:8f:b6:61:78: 5b:c6:5d:e6:38:68:40:40:b9:be:7c:df:79:1a:c3: 30:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:55:F0:A0:7B:FE:A6:99:01:C5:34:5D:79:93:2B:70:E2:99:1F:5E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/C855F0A07BFEA69901C5345D79932B70E2991F5E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.143.0/24 Signature Algorithm: sha256WithRSAEncryption 95:70:8a:da:69:db:5c:95:33:22:06:06:97:48:f0:1a:0f:dc: b1:8b:f1:40:69:be:77:b2:d0:47:00:26:6a:d9:12:84:3e:17: 2e:16:e5:a5:49:a0:05:54:a7:ff:9f:ff:74:36:59:b0:c8:09: 3f:a9:27:46:0c:c6:96:44:12:21:df:6b:62:6e:89:41:92:88: f6:95:ed:db:f4:3c:9e:06:01:0e:39:2f:2c:d2:80:7f:14:9d: be:bf:0d:79:64:28:75:37:60:3d:02:42:c3:1a:cf:12:7e:4e: 69:72:b3:aa:da:54:70:75:a4:ba:43:c5:75:3b:51:cc:4b:98: 05:d8:61:63:6c:0d:1a:76:4b:30:5a:89:61:6f:9e:4c:19:b9: 86:9f:90:72:e3:96:03:ca:03:c0:72:08:14:e8:f8:e5:7d:03: b4:6e:ce:a3:b2:d3:6c:3a:85:ee:d8:10:9e:23:1e:b6:37:6d: 5c:fd:34:6e:43:ba:b5:d0:47:de:e9:26:46:d5:ef:03:cb:f7: a1:fd:12:50:10:bb:60:cf:53:ab:73:1e:b6:33:b6:ff:6e:6c: eb:00:3b:f8:67:4c:2e:6e:bf:78:e0:81:a9:8b:d3:86:e4:d3: ad:6e:2c:49:f2:ca:b2:01:eb:ea:42:d1:74:5e:fe:8c:5a:9b: e8:48:ec:4c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUGEl3irH6k+8CU+wtHDJcv3h9oUkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzE0OVoX DTI3MDUwMjAxMzY0OVowMzExMC8GA1UEAxMoQzg1NUYwQTA3QkZFQTY5OTAxQzUz NDVENzk5MzJCNzBFMjk5MUY1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJNS+SKyK8jOyRx2dqFC+i/AC9FXTK3hjDKWCS54VXlCf22GNa5Dhog/I1qi ce9lBINzx/lruN4aI60d3anS4HWEH3OO8uUOiq5J1s3z3DVasaEqu4/DtTGUZgT9 WB8F4sulrQTCnjPMLkeXpeJuqJp+nbZh+M1Mljuibe9QZSrAsDO23YF/7o8hMNuy xYBq3XympCH+pnm2l7ihs7L6B3iWXdGt/psslsUNhmP4ScAAPuUhsjWAY1KdGpDL W4r9LzVI+Y7fcAIyORwb/C/GRXv01NSztK7XavZGQGVbUVIS9/8RbHbmW48uHKuP tmF4W8Zd5jhoQEC5vnzfeRrDMH0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMhV8KB7/qaZAcU0XXmTK3DimR9eMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E2ZGUxYThlLWMyYjgtNDk5Ni05NDkyLTZmOTJjMmRmZWM3YS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hNmRlMWE4 ZS1jMmI4LTQ5OTYtOTQ5Mi02ZjkyYzJkZmVjN2EvMC9DODU1RjBBMDdCRkVBNjk5 MDFDNTM0NUQ3OTkzMkI3MEUyOTkxRjVFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6mPMA0GCSqGSIb3DQEBCwUAA4IBAQCVcIraadtclTMiBgaXSPAaD9yxi/FA ab53stBHACZq2RKEPhcuFuWlSaAFVKf/n/90NlmwyAk/qSdGDMaWRBIh32tibolB koj2le3b9DyeBgEOOS8s0oB/FJ2+vw15ZCh1N2A9AkLDGs8Sfk5pcrOq2lRwdaS6 Q8V1O1HMS5gF2GFjbA0adkswWolhb55MGbmGn5By45YDygPAcggU6PjlfQO0bs6j stNsOoXu2BCeIx62N21c/TRuQ7q10Efe6SZG1e8Dy/eh/RJQELtgz1Orcx62M7b/ bmzrADv4Z0wubr944IGpi9OG5NOtbixJ8sqyAevqQtF0Xv6MWpvoSOxM -----END CERTIFICATE-----Generated at Tue May 12 22:03:28 2026 by rpki-client