$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer File: C8C1A31E42E799E9EDC0FAB813163052945845AC.cer (raw, json) Hash identifier: rX70x9F6hp3Pl+77McA0p6t7VA+Vr4sNAH7OHnZMLHw= Subject key identifier: C8:C1:A3:1E:42:E7:99:E9:ED:C0:FA:B8:13:16:30:52:94:58:45:AC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2D0D6F98650F9736848FC454FA10AFD2E6295843 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:17:38 +0000 Certificate not after: Sun 02 May 2027 00:22:38 +0000 Subordinate resources: IP: 103.152.92.0/23 IP: 2407:72c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:0d:6f:98:65:0f:97:36:84:8f:c4:54:fa:10:af:d2:e6:29:58:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:17:38 2026 GMT Not After : May 2 00:22:38 2027 GMT Subject: CN=C8C1A31E42E799E9EDC0FAB813163052945845AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:73:02:ac:65:6b:70:65:9b:a2:c8:60:54:7a: 5f:12:bf:11:d8:5f:c6:b9:aa:8a:42:6c:c9:54:ab: 47:f3:30:c5:b4:b5:8e:02:1e:0e:56:08:e5:59:fe: 55:7a:b2:6c:0c:4c:91:36:c1:a7:a3:db:44:f7:56: c3:55:e0:cd:77:5e:2b:70:a4:4f:2e:36:a8:7d:de: 22:bd:f7:5b:59:5e:bb:08:dd:25:ee:be:04:bf:dd: 2d:39:70:66:b2:a8:3c:04:ec:68:74:75:9a:99:2e: c0:70:8b:f9:26:cc:0b:76:bb:91:bc:97:bf:1e:fb: da:8e:3b:72:9f:73:d5:bd:e8:fd:d6:1e:a7:78:ee: 18:2b:d7:78:6c:0f:9a:39:22:22:da:4b:2e:37:1d: 5a:f7:e5:44:40:52:0c:0b:06:d9:48:68:71:20:2b: 31:96:72:59:61:e5:c1:1a:8f:e0:01:8b:b3:e6:2c: 71:78:93:b9:7a:77:ed:e6:fa:f3:6c:b3:eb:a2:55: b7:d7:fc:a7:a5:cc:56:09:44:25:e4:e7:2e:f8:2b: 9a:60:ab:a5:4d:60:33:22:b6:a5:9d:97:fe:eb:a0: 08:d8:f9:05:2c:08:90:e7:13:02:79:fa:25:88:d0: 9e:62:f9:d3:bc:37:f3:19:17:10:75:e5:02:97:c2: 7c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:C1:A3:1E:42:E7:99:E9:ED:C0:FA:B8:13:16:30:52:94:58:45:AC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.92.0/23 IPv6: 2407:72c0::/32 Signature Algorithm: sha256WithRSAEncryption 20:f0:eb:6a:50:c5:a8:2b:dd:95:2f:ac:22:d4:6b:45:a6:ec: 30:b1:40:99:86:c9:04:0d:11:8f:30:83:2c:f7:e6:f5:60:7d: e0:31:cd:1d:af:4d:c6:c1:a3:91:22:8a:c9:7d:24:4d:f6:fc: 8b:5d:f4:b4:ee:b9:51:76:b8:c2:c9:2a:a4:5e:c3:f6:fb:b6: 1a:a4:5f:9a:1c:38:8a:79:c0:18:98:0d:e1:0c:08:a2:65:7b: 98:5a:a7:30:cf:fe:b6:f0:51:2c:4e:b0:ac:65:91:2e:91:e3: b7:91:5f:71:c4:c2:f2:31:d0:b0:e9:ff:a1:72:35:59:03:7a: 2e:a9:84:e7:73:e9:8d:b9:93:26:21:c4:a1:bb:47:63:34:54: 86:4c:bf:4c:f2:5e:e3:02:af:63:b6:34:26:2d:32:bb:e9:b9: 15:78:fc:61:c2:6c:51:aa:e9:09:c5:e3:e3:14:90:3f:6b:31: 69:9b:59:9e:93:5e:6d:df:26:fc:53:e1:8a:96:d6:30:bd:24: a1:95:d1:07:66:13:6d:16:b2:47:25:0e:e8:78:6c:25:bd:7c: 5f:00:31:c1:37:37:59:e5:c6:de:20:e8:05:48:86:8b:99:c4: cc:c5:ca:52:59:15:86:aa:83:25:e4:d9:5c:33:23:7f:21:d0: c1:72:2d:99 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIULQ1vmGUPlzaEj8RU+hCv0uYpWEMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTczOFoX DTI3MDUwMjAwMjIzOFowMzExMC8GA1UEAxMoQzhDMUEzMUU0MkU3OTlFOUVEQzBG QUI4MTMxNjMwNTI5NDU4NDVBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ1zAqxla3Blm6LIYFR6XxK/EdhfxrmqikJsyVSrR/MwxbS1jgIeDlYI5Vn+ VXqybAxMkTbBp6PbRPdWw1XgzXdeK3CkTy42qH3eIr33W1leuwjdJe6+BL/dLTlw ZrKoPATsaHR1mpkuwHCL+SbMC3a7kbyXvx772o47cp9z1b3o/dYep3juGCvXeGwP mjkiItpLLjcdWvflREBSDAsG2UhocSArMZZyWWHlwRqP4AGLs+YscXiTuXp37eb6 82yz66JVt9f8p6XMVglEJeTnLvgrmmCrpU1gMyK2pZ2X/uugCNj5BSwIkOcTAnn6 JYjQnmL507w38xkXEHXlApfCfAMCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMjBox5C55np7cD6uBMWMFKUWEWsMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM4YzljMjUyLWY3Y2EtNGRkNS04OGY2LTIyYWRkYzg5MzRiMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zOGM5YzI1 Mi1mN2NhLTRkZDUtODhmNi0yMmFkZGM4OTM0YjMvMC9DOEMxQTMxRTQyRTc5OUU5 RURDMEZBQjgxMzE2MzA1Mjk0NTg0NUFDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5hcMA0EAgACMAcDBQAkB3LAMA0GCSqGSIb3DQEBCwUAA4IBAQAg8OtqUMWo K92VL6wi1GtFpuwwsUCZhskEDRGPMIMs9+b1YH3gMc0dr03GwaORIorJfSRN9vyL XfS07rlRdrjCySqkXsP2+7YapF+aHDiKecAYmA3hDAiiZXuYWqcwz/628FEsTrCs ZZEukeO3kV9xxMLyMdCw6f+hcjVZA3ouqYTnc+mNuZMmIcShu0djNFSGTL9M8l7j Aq9jtjQmLTK76bkVePxhwmxRqukJxePjFJA/azFpm1mek15t3yb8U+GKltYwvSSh ldEHZhNtFrJHJQ7oeGwlvXxfADHBNzdZ5cbeIOgFSIaLmcTMxcpSWRWGqoMl5Nlc MyN/IdDBci2Z -----END CERTIFICATE-----Generated at Tue May 12 22:28:59 2026 by rpki-client