$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer File: C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer (raw, json) Hash identifier: HSiRois6Dr5WwNKSRBd50Cz1vBPMsgF6xlYj7H8Kplc= Subject key identifier: C8:D2:4A:DF:5C:74:32:E5:E3:C1:D5:98:87:74:10:7A:71:7F:82:7B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3F4A27EAE679831F132A9047A7FCEE3D4982AB7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:48:41 +0000 Certificate not after: Sun 02 May 2027 00:53:41 +0000 Subordinate resources: IP: 103.104.12.0/22 IP: 2401:fcc0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4a:27:ea:e6:79:83:1f:13:2a:90:47:a7:fc:ee:3d:49:82:ab:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:48:41 2026 GMT Not After : May 2 00:53:41 2027 GMT Subject: CN=C8D24ADF5C7432E5E3C1D5988774107A717F827B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:55:75:63:b3:09:9d:aa:92:7b:d5:c7:c3:11: 0f:37:12:02:71:5e:56:d6:ed:dd:39:b4:97:6a:4a: 96:43:21:19:06:be:33:a3:96:e0:61:90:08:aa:f0: 8f:52:e6:37:09:59:f3:1d:d1:55:dd:9d:e7:8d:62: f5:ed:82:48:fe:e6:64:d0:f7:ec:c7:5a:73:69:a0: f9:7b:64:98:0f:91:df:3d:97:31:c5:85:99:e1:48: a1:c3:5a:d1:9b:a5:b0:ae:f5:89:f7:97:23:9d:21: be:7a:5a:71:cf:fd:d2:75:19:54:0c:22:b6:7b:e9: 48:27:90:32:17:c0:d6:ac:04:2e:6a:6e:19:e0:b8: 78:a5:3a:01:c0:d6:22:38:f9:5e:b2:2c:a6:4f:0d: bc:eb:12:95:58:07:7a:b0:87:cb:11:cc:fe:9b:fd: f8:2a:79:32:e8:7a:52:70:d3:e2:0c:4b:e6:df:38: 6d:23:07:ca:df:69:ce:d9:29:ed:3f:3e:28:29:58: 07:94:e7:da:3c:e5:43:df:5a:c8:0d:29:43:6f:18: 6b:f8:8b:cd:f6:31:77:32:1b:83:17:3d:71:a1:db: 7a:9a:1f:39:41:d3:cb:0d:7e:28:7a:5d:6c:15:63: 43:e2:9e:57:8c:f3:b4:3d:ed:27:81:e2:42:b2:d2: d5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:D2:4A:DF:5C:74:32:E5:E3:C1:D5:98:87:74:10:7A:71:7F:82:7B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.104.12.0/22 IPv6: 2401:fcc0::/32 Signature Algorithm: sha256WithRSAEncryption 6d:94:b4:02:40:79:c5:87:1c:99:2a:69:93:af:b8:28:91:39: 4f:50:e4:ac:c1:74:97:c5:50:0c:ec:82:1b:59:7f:31:bc:8a: 6b:b6:9b:1f:ba:60:47:f4:fb:30:b1:15:f2:8d:0c:c2:da:2f: c6:4f:71:e3:7f:ea:27:c0:7a:98:7a:43:a9:22:c3:98:95:aa: 68:ef:92:cf:b1:20:38:65:cc:55:47:fb:71:ab:34:a1:f0:8e: 7d:cf:a6:f2:72:41:99:a8:7d:79:7a:74:e8:c4:a8:7d:65:0c: 9e:34:84:d7:82:15:06:f2:43:95:a6:ed:b4:78:bd:31:1a:29: 8a:2f:8c:cd:e0:94:53:83:bd:00:ab:21:e6:bf:63:7b:43:7f: 1f:12:4f:04:ad:b5:08:62:41:00:85:8c:24:ec:65:3c:58:11: f4:8a:ea:01:ee:54:c6:e3:c8:bb:c7:d2:34:e3:5c:a8:ed:96: c6:68:7f:37:95:c3:7c:19:af:3d:ec:1a:07:7d:d1:77:e7:7d: e1:95:7e:ce:78:5e:6b:fd:f0:08:5c:4a:54:20:77:5a:6a:c7: 0e:e0:23:4f:e7:5a:3c:2d:f7:02:b5:8d:10:db:02:07:e9:17: 9a:ab:01:89:f6:af:55:d3:19:d9:21:8d:09:47:00:a6:38:52: a1:a1:45:bd -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUP0on6uZ5gx8TKpBHp/zuPUmCq3owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDg0MVoX DTI3MDUwMjAwNTM0MVowMzExMC8GA1UEAxMoQzhEMjRBREY1Qzc0MzJFNUUzQzFE NTk4ODc3NDEwN0E3MTdGODI3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKpVdWOzCZ2qknvVx8MRDzcSAnFeVtbt3Tm0l2pKlkMhGQa+M6OW4GGQCKrw j1LmNwlZ8x3RVd2d541i9e2CSP7mZND37Mdac2mg+XtkmA+R3z2XMcWFmeFIocNa 0ZulsK71ifeXI50hvnpacc/90nUZVAwitnvpSCeQMhfA1qwELmpuGeC4eKU6AcDW Ijj5XrIspk8NvOsSlVgHerCHyxHM/pv9+Cp5Muh6UnDT4gxL5t84bSMHyt9pztkp 7T8+KClYB5Tn2jzlQ99ayA0pQ28Ya/iLzfYxdzIbgxc9caHbepofOUHTyw1+KHpd bBVjQ+KeV4zztD3tJ4HiQrLS1WcCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMjSSt9cdDLl48HVmId0EHpxf4J7MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzY2YWQwOWYzLTAwMjMtNDQ0NS04NDE2LTVjYmRlMTNmZGQ0MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82NmFkMDlm My0wMDIzLTQ0NDUtODQxNi01Y2JkZTEzZmRkNDAvMC9DOEQyNEFERjVDNzQzMkU1 RTNDMUQ1OTg4Nzc0MTA3QTcxN0Y4MjdCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ2gMMA0EAgACMAcDBQAkAfzAMA0GCSqGSIb3DQEBCwUAA4IBAQBtlLQCQHnF hxyZKmmTr7gokTlPUOSswXSXxVAM7IIbWX8xvIprtpsfumBH9PswsRXyjQzC2i/G T3Hjf+onwHqYekOpIsOYlapo75LPsSA4ZcxVR/txqzSh8I59z6byckGZqH15enTo xKh9ZQyeNITXghUG8kOVpu20eL0xGimKL4zN4JRTg70AqyHmv2N7Q38fEk8ErbUI YkEAhYwk7GU8WBH0iuoB7lTG48i7x9I041yo7ZbGaH83lcN8Ga897BoHfdF3533h lX7OeF5r/fAIXEpUIHdaascO4CNP51o8LfcCtY0Q2wIH6ReaqwGJ9q9V0xnZIY0J RwCmOFKhoUW9 -----END CERTIFICATE-----Generated at Tue May 12 22:16:07 2026 by rpki-client