$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer File: C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer (raw, json) Hash identifier: 2L4ZgKXhdfi6Xodegwyd949S6EI1IhPE9LaHNWINFO8= Subject key identifier: C9:50:DC:35:28:E1:74:9C:72:1D:43:98:52:3D:A1:BA:FB:6B:BA:1D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 51C9981376EEED887B5C477AE0AA406DC2B070BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:56:56 +0000 Certificate not after: Sun 02 May 2027 02:01:56 +0000 Subordinate resources: IP: 103.115.164.0/24 IP: 103.121.122.0/24 IP: 2001:df5:2900::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:c9:98:13:76:ee:ed:88:7b:5c:47:7a:e0:aa:40:6d:c2:b0:70:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:56:56 2026 GMT Not After : May 2 02:01:56 2027 GMT Subject: CN=C950DC3528E1749C721D4398523DA1BAFB6BBA1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9c:21:be:29:06:61:e6:93:ae:50:e1:24:c7: 35:bd:f8:ef:1c:9c:a2:e1:53:4e:89:3e:dd:51:de: c7:15:2c:ed:82:0f:e6:3b:fa:5a:51:6e:7c:39:d1: 24:6c:b9:f4:01:14:03:c0:cc:13:9d:e9:cf:15:49: 08:43:21:0a:98:30:26:9b:cb:73:69:92:52:12:66: d3:3d:5b:78:a3:c3:b1:cb:f3:4d:42:ea:8b:d1:97: ca:b0:0a:7d:4c:11:5a:38:59:9d:39:88:0a:20:32: e0:67:44:12:f7:3f:ab:2e:30:14:6e:61:e7:9b:e6: b8:60:51:50:39:3e:4c:45:5d:de:73:d4:1d:92:df: 42:b7:56:08:cc:16:fd:be:b5:ea:eb:c3:3f:54:2b: 48:27:cb:35:fc:49:f0:7d:18:a0:e6:03:ec:2c:51: f7:d3:dc:88:06:ef:57:43:6b:da:86:c1:57:d7:9d: 1c:06:2e:55:f0:73:fe:cf:ac:07:d5:6e:d1:e7:d0: 4c:ad:86:bb:4e:e0:9c:0e:a5:cb:b5:0b:a2:80:b0: 51:13:a3:95:25:ab:be:33:60:49:9c:e7:81:fb:b6: a2:56:d9:d9:e8:b2:dc:94:e6:9b:a0:2a:68:82:2a: d9:dc:05:18:76:1e:29:8b:6c:8f:c5:9a:d2:14:07: 78:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C9:50:DC:35:28:E1:74:9C:72:1D:43:98:52:3D:A1:BA:FB:6B:BA:1D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.115.164.0/24 103.121.122.0/24 IPv6: 2001:df5:2900::/48 Signature Algorithm: sha256WithRSAEncryption a6:8d:84:07:dc:e5:73:59:f1:c8:66:86:63:1b:33:3b:95:38: 16:06:9f:0f:a3:c0:3d:0b:18:fe:fa:32:94:bb:42:2e:83:89: db:a9:71:1c:86:7d:16:c5:8d:11:0d:c1:ec:dd:f9:97:d8:9b: c0:88:89:b9:bd:65:90:89:c9:65:94:e1:cd:f7:1a:dc:25:e9: 5d:7d:c3:05:5f:03:af:9e:3a:ce:22:07:34:68:39:ad:fd:a7: f1:f1:8d:b9:73:e7:e6:ad:83:62:12:96:b5:b3:ff:22:f6:6b: 85:0b:5a:cb:b4:34:30:bd:e0:4b:33:2f:e4:ab:43:ce:fc:4d: f3:ec:6e:ba:3b:97:32:d3:31:39:30:59:3a:b5:2a:d8:49:a7: f6:68:fe:61:59:1c:5d:93:29:f4:07:90:90:bb:46:78:1b:f7: 13:65:78:e1:45:c8:35:1d:21:43:41:5b:8f:3d:d9:c3:f7:8e: dc:50:b5:40:7e:0c:b6:60:10:d9:f4:5d:b0:1e:7a:bd:a7:c8: c9:a7:47:9a:de:e5:7b:eb:1e:5f:06:b7:2a:39:f3:a9:02:04: d0:75:dd:1a:ce:44:92:92:98:d1:1b:93:1e:82:29:b6:aa:dd: 6f:fa:7d:9a:0b:b1:b6:b6:e7:7f:12:1b:9d:8d:6b:50:9d:62: 52:62:f0:fa -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUUcmYE3bu7Yh7XEd64KpAbcKwcLowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTY1NloX DTI3MDUwMjAyMDE1NlowMzExMC8GA1UEAxMoQzk1MERDMzUyOEUxNzQ5QzcyMUQ0 Mzk4NTIzREExQkFGQjZCQkExRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+cIb4pBmHmk65Q4STHNb347xycouFTTok+3VHexxUs7YIP5jv6WlFufDnR JGy59AEUA8DME53pzxVJCEMhCpgwJpvLc2mSUhJm0z1beKPDscvzTULqi9GXyrAK fUwRWjhZnTmICiAy4GdEEvc/qy4wFG5h55vmuGBRUDk+TEVd3nPUHZLfQrdWCMwW /b616uvDP1QrSCfLNfxJ8H0YoOYD7CxR99PciAbvV0Nr2obBV9edHAYuVfBz/s+s B9Vu0efQTK2Gu07gnA6ly7ULooCwUROjlSWrvjNgSZzngfu2olbZ2eiy3JTmm6Aq aIIq2dwFGHYeKYtsj8Wa0hQHeDsCAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMlQ3DUo4XScch1DmFI9obr7a7odMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2QwNjM0N2Y0LWVhMjYtNGQ0Yy1hNTY4LTFkODYzMzYwZTQyMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kMDYzNDdm NC1lYTI2LTRkNGMtYTU2OC0xZDg2MzM2MGU0MjEvMC9DOTUwREMzNTI4RTE3NDlD NzIxRDQzOTg1MjNEQTFCQUZCNkJCQTFELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQAZ3OkAwQAZ3l6MA8EAgACMAkDBwAgAQ31KQAwDQYJKoZIhvcNAQELBQADggEB AKaNhAfc5XNZ8chmhmMbMzuVOBYGnw+jwD0LGP76MpS7Qi6DidupcRyGfRbFjREN wezd+ZfYm8CIibm9ZZCJyWWU4c33Gtwl6V19wwVfA6+eOs4iBzRoOa39p/Hxjblz 5+atg2ISlrWz/yL2a4ULWsu0NDC94EszL+SrQ878TfPsbro7lzLTMTkwWTq1KthJ p/Zo/mFZHF2TKfQHkJC7Rngb9xNleOFFyDUdIUNBW4892cP3jtxQtUB+DLZgENn0 XbAeer2nyMmnR5re5XvrHl8Gtyo586kCBNB13RrORJKSmNEbkx6CKbaq3W/6fZoL sba2538SG52Na1CdYlJi8Po= -----END CERTIFICATE-----Generated at Tue May 12 22:46:05 2026 by rpki-client