$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C940C2C66C795EF89DE57AA820616ED8225890BC.cer File: C940C2C66C795EF89DE57AA820616ED8225890BC.cer (raw, json) Hash identifier: J/EILJ1wyGzaXy7v86toZPs+Z5fOe0FpjUN4ZgMAueM= Subject key identifier: C9:40:C2:C6:6C:79:5E:F8:9D:E5:7A:A8:20:61:6E:D8:22:58:90:BC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 32D50A9A8BC66D37063C6FB57786D3DA35ADA236 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:55:36 +0000 Certificate not after: Sun 02 May 2027 02:00:36 +0000 Subordinate resources: IP: 103.181.248.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d5:0a:9a:8b:c6:6d:37:06:3c:6f:b5:77:86:d3:da:35:ad:a2:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:55:36 2026 GMT Not After : May 2 02:00:36 2027 GMT Subject: CN=C940C2C66C795EF89DE57AA820616ED8225890BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c7:df:6e:59:7b:2e:9c:9b:ef:8e:3c:82:70: 35:eb:2b:c5:19:98:52:e8:4a:fe:2d:f3:f1:45:6c: ed:9c:df:3b:e9:e7:08:9b:93:28:24:62:3c:02:8e: e2:f0:d3:a2:fd:bf:62:7c:49:55:d6:1f:da:17:64: ac:b8:bc:e4:96:94:d7:3b:2b:7b:3e:a7:67:5d:ee: 75:cc:7b:a9:c7:27:1b:34:5f:c9:5b:62:af:ca:16: 4f:e7:bb:44:44:24:c1:71:1a:78:59:ab:b7:70:9b: c5:49:ab:7f:4d:9b:5e:1a:c7:f2:e6:9e:a9:2d:e9: e8:93:f2:4d:e3:d3:88:bd:8c:eb:a2:45:dd:f1:b6: f5:e9:5c:82:ad:63:19:5f:46:41:d8:d9:c0:65:17: 15:d9:d1:4d:3b:cb:72:4d:72:f3:5c:3a:72:00:ee: e9:c9:fc:f5:12:94:ad:4b:da:ce:a4:9c:6f:1c:aa: 47:c9:e1:24:cc:72:ab:e3:fe:8c:95:6a:e3:6b:d5: d9:ca:86:6c:ec:67:a1:81:f8:2a:2a:12:85:99:60: 66:61:0e:2d:5f:ad:b8:d1:11:7b:96:42:cb:ff:c4: 4f:33:16:76:48:09:aa:d5:2a:43:3c:4c:bb:6d:a0: 4e:3b:2a:98:c2:c7:d2:89:56:ff:50:68:5d:5e:16: 14:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C9:40:C2:C6:6C:79:5E:F8:9D:E5:7A:A8:20:61:6E:D8:22:58:90:BC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.181.248.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:4f:bb:2f:61:d5:a4:76:98:36:97:dd:34:cb:5c:e8:fa:f2: e6:3b:6e:f4:39:72:3e:90:54:38:a2:cd:95:a0:21:02:17:be: 68:6e:6d:7a:b4:3b:89:6e:aa:ac:35:e5:9e:4f:24:11:b8:4a: de:1a:9c:f8:0d:fc:32:a0:d6:14:b3:fd:bd:30:f9:ca:78:76: aa:5d:98:05:14:1b:db:30:25:de:17:fe:95:db:d2:10:ce:b9: 5e:ee:b2:f2:00:cb:8e:a7:c4:bd:33:be:42:ae:b0:d8:54:ca: e2:45:bf:0f:ab:93:88:fa:f5:b9:c6:b7:d8:65:ff:b2:7c:fe: 8b:00:f3:8b:ad:92:fa:fc:e1:8d:87:60:a7:1a:bc:3a:50:94: 04:b2:d3:61:20:29:cb:4b:1a:77:9c:fb:9d:93:1f:57:5d:98: c5:a4:69:d7:06:73:b5:77:bc:2a:e6:83:2c:81:b3:a8:49:ae: 45:96:f4:24:7b:be:28:c9:5d:c1:fb:e2:23:92:41:74:85:50: 6f:5c:fc:b6:9c:cf:9c:e5:fa:7a:14:db:1d:dc:dc:01:f4:3c: 70:cf:ca:04:9e:99:50:eb:81:59:08:f7:dd:e8:3b:b0:4d:36: 4d:c1:b6:67:fb:8e:79:1d:e6:7b:47:8c:95:82:2b:d3:6b:63: 16:77:37:e0 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUMtUKmovGbTcGPG+1d4bT2jWtojYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTUzNloX DTI3MDUwMjAyMDAzNlowMzExMC8GA1UEAxMoQzk0MEMyQzY2Qzc5NUVGODlERTU3 QUE4MjA2MTZFRDgyMjU4OTBCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM/H325Zey6cm++OPIJwNesrxRmYUuhK/i3z8UVs7ZzfO+nnCJuTKCRiPAKO 4vDTov2/YnxJVdYf2hdkrLi85JaU1zsrez6nZ13udcx7qccnGzRfyVtir8oWT+e7 REQkwXEaeFmrt3CbxUmrf02bXhrH8uaeqS3p6JPyTePTiL2M66JF3fG29elcgq1j GV9GQdjZwGUXFdnRTTvLck1y81w6cgDu6cn89RKUrUvazqScbxyqR8nhJMxyq+P+ jJVq42vV2cqGbOxnoYH4KioShZlgZmEOLV+tuNERe5ZCy//ETzMWdkgJqtUqQzxM u22gTjsqmMLH0olW/1BoXV4WFBkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMlAwsZseV74neV6qCBhbtgiWJC8MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NlNGUxMDNlLTNkNzgtNGFlMC05YmE0LWQxNzkyZmZhMDRhYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jZTRlMTAz ZS0zZDc4LTRhZTAtOWJhNC1kMTc5MmZmYTA0YWMvMC9DOTQwQzJDNjZDNzk1RUY4 OURFNTdBQTgyMDYxNkVEODIyNTg5MEJDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7X4MA0GCSqGSIb3DQEBCwUAA4IBAQB/T7svYdWkdpg2l900y1zo+vLmO270 OXI+kFQ4os2VoCECF75obm16tDuJbqqsNeWeTyQRuEreGpz4DfwyoNYUs/29MPnK eHaqXZgFFBvbMCXeF/6V29IQzrle7rLyAMuOp8S9M75CrrDYVMriRb8Pq5OI+vW5 xrfYZf+yfP6LAPOLrZL6/OGNh2CnGrw6UJQEstNhICnLSxp3nPudkx9XXZjFpGnX BnO1d7wq5oMsgbOoSa5FlvQke74oyV3B++IjkkF0hVBvXPy2nM+c5fp6FNsd3NwB 9Dxwz8oEnplQ64FZCPfd6DuwTTZNwbZn+455HeZ7R4yVgivTa2MWdzfg -----END CERTIFICATE-----Generated at Wed May 13 00:21:29 2026 by rpki-client