$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer File: C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer (raw, json) Hash identifier: Yc59s9P77Og1cF5Q8Oyrrd1lKI9qL/di67R4qR82Lfw= Subject key identifier: C8:D0:45:47:C3:34:90:26:22:C8:D7:CF:29:F3:F1:DC:8B:43:5B:28 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6A9493279BB3B360169CE2AFA326CC48900CB369 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:46:39 +0000 Certificate not after: Sat 01 May 2027 23:51:39 +0000 Subordinate resources: IP: 103.95.160.0/23 IP: 2001:df1:b100::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:94:93:27:9b:b3:b3:60:16:9c:e2:af:a3:26:cc:48:90:0c:b3:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:46:39 2026 GMT Not After : May 1 23:51:39 2027 GMT Subject: CN=C8D04547C334902622C8D7CF29F3F1DC8B435B28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1b:0a:f7:1d:92:97:08:ab:65:49:9e:7b:cd: 3a:6e:ab:50:18:99:33:0b:1b:d5:6f:a4:38:24:35: 60:ff:93:60:ba:5e:14:f6:52:3c:8f:8f:14:06:d6: 52:61:e9:71:f0:34:22:81:32:70:90:1d:30:fe:57: d8:4e:bf:c4:28:c8:10:91:6e:a3:9c:8d:59:39:45: fd:fc:65:cb:61:53:4c:8b:d6:30:be:bf:52:b0:27: ad:92:40:66:5e:c5:a7:8c:80:85:ed:d3:6c:76:e5: 91:4c:b2:92:36:72:e9:4c:8f:94:7e:3c:55:29:47: ac:4b:c4:0e:c2:5b:78:19:c5:21:24:5f:77:33:dc: 2b:a2:b8:3e:77:e4:71:2f:76:68:0e:be:d4:38:e6: fa:5e:f2:ea:0a:a0:d1:65:07:fa:c1:98:50:42:4d: 10:52:dd:fd:08:c3:a0:73:2d:3b:e2:a5:0a:ea:d3: d7:b0:41:fd:53:9e:fc:24:4a:e7:43:45:45:bd:0a: 02:cb:fb:11:eb:74:c0:b1:28:07:3a:90:8d:22:a6: 53:70:9c:7b:fe:82:e5:ff:10:fc:ee:e0:15:12:4d: 76:03:46:2b:c9:4c:cc:6e:78:5f:9c:57:6a:7c:0c: d0:a5:29:65:b5:8e:4f:9f:64:e2:15:6c:f7:40:03: 21:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:D0:45:47:C3:34:90:26:22:C8:D7:CF:29:F3:F1:DC:8B:43:5B:28 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.95.160.0/23 IPv6: 2001:df1:b100::/48 Signature Algorithm: sha256WithRSAEncryption 0b:7b:24:b0:be:43:7c:55:b4:c1:37:2b:15:c9:7d:ed:d0:44: 4c:89:33:3c:7c:55:ee:ba:72:33:75:36:08:ef:c5:a5:ec:da: be:ff:eb:7a:54:84:9c:f2:f4:bb:43:51:6a:0d:37:8c:69:d1: 30:ed:fe:8f:d3:7a:50:ac:ba:6c:6a:75:15:c9:b2:46:12:a3: 67:63:15:03:60:8e:6f:86:6e:5e:c0:db:bc:f0:49:4d:2f:ad: 1c:5a:41:6d:be:9c:3f:17:33:97:c5:0f:16:f6:ad:db:97:e6: 35:e3:91:ea:2b:3b:5d:0a:f5:4c:41:f7:a1:a6:c3:e9:84:9a: 2c:45:c3:25:cc:32:1f:48:9c:d2:98:5d:9e:49:b4:e1:a2:f3: fb:ef:f1:87:23:7c:33:07:8f:45:ea:8a:06:68:f2:6a:34:9d: 60:3e:bd:0c:40:a2:62:6d:93:36:e2:f4:8a:17:12:69:ba:88: 3a:f4:48:c7:60:31:6a:a5:54:6e:fd:37:ae:b3:1d:cc:f7:79: 00:8e:3b:2c:f3:e9:28:2d:38:7c:f1:70:d7:1f:66:fb:4c:00: f0:39:aa:6b:31:40:ad:33:6c:4e:71:b1:b7:26:f9:7a:c1:0e: 13:c3:9d:c0:8e:09:b6:0e:9a:23:27:b2:5a:98:e8:33:6a:be: b1:95:e9:9e -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUapSTJ5uzs2AWnOKvoybMSJAMs2kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDYzOVoX DTI3MDUwMTIzNTEzOVowMzExMC8GA1UEAxMoQzhEMDQ1NDdDMzM0OTAyNjIyQzhE N0NGMjlGM0YxREM4QjQzNUIyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM4bCvcdkpcIq2VJnnvNOm6rUBiZMwsb1W+kOCQ1YP+TYLpeFPZSPI+PFAbW UmHpcfA0IoEycJAdMP5X2E6/xCjIEJFuo5yNWTlF/fxly2FTTIvWML6/UrAnrZJA Zl7Fp4yAhe3TbHblkUyykjZy6UyPlH48VSlHrEvEDsJbeBnFISRfdzPcK6K4Pnfk cS92aA6+1Djm+l7y6gqg0WUH+sGYUEJNEFLd/QjDoHMtO+KlCurT17BB/VOe/CRK 50NFRb0KAsv7Eet0wLEoBzqQjSKmU3Cce/6C5f8Q/O7gFRJNdgNGK8lMzG54X5xX anwM0KUpZbWOT59k4hVs90ADIXsCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMjQRUfDNJAmIsjXzynz8dyLQ1soMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzBhNzVkMzcxLTE4YzctNDhkZi04ZjYxLTFkNDA0YjY0NjQxMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wYTc1ZDM3 MS0xOGM3LTQ4ZGYtOGY2MS0xZDQwNGI2NDY0MTMvMC9DOEQwNDU0N0MzMzQ5MDI2 MjJDOEQ3Q0YyOUYzRjFEQzhCNDM1QjI4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ1+gMA8EAgACMAkDBwAgAQ3xsQAwDQYJKoZIhvcNAQELBQADggEBAAt7JLC+ Q3xVtME3KxXJfe3QREyJMzx8Ve66cjN1NgjvxaXs2r7/63pUhJzy9LtDUWoNN4xp 0TDt/o/TelCsumxqdRXJskYSo2djFQNgjm+Gbl7A27zwSU0vrRxaQW2+nD8XM5fF Dxb2rduX5jXjkeorO10K9UxB96Gmw+mEmixFwyXMMh9InNKYXZ5JtOGi8/vv8Ycj fDMHj0XqigZo8mo0nWA+vQxAomJtkzbi9IoXEmm6iDr0SMdgMWqlVG79N66zHcz3 eQCOOyzz6SgtOHzxcNcfZvtMAPA5qmsxQK0zbE5xsbcm+XrBDhPDncCOCbYOmiMn slqY6DNqvrGV6Z4= -----END CERTIFICATE-----Generated at Tue May 12 22:39:06 2026 by rpki-client