$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer File: CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer (raw, json) Hash identifier: nnshJkSBzZn8oLhuwXS2iNVzhfOZVjYKWG3GmQU62uU= Subject key identifier: CA:E3:95:EB:47:BB:4E:57:99:0D:F2:83:DD:7B:95:95:0C:FB:68:3D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 511B459287A6C06FC4D39F4B761BF4E6D81767A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:16:27 +0000 Certificate not after: Sun 02 May 2027 00:21:27 +0000 Subordinate resources: IP: 103.162.36.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:1b:45:92:87:a6:c0:6f:c4:d3:9f:4b:76:1b:f4:e6:d8:17:67:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:16:27 2026 GMT Not After : May 2 00:21:27 2027 GMT Subject: CN=CAE395EB47BB4E57990DF283DD7B95950CFB683D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:16:f0:d3:db:81:0e:50:84:65:ce:0f:95:9c: 72:db:8f:c3:11:8c:17:f7:26:d6:63:e5:23:09:5a: 48:15:6b:f6:5b:09:db:3c:d9:8e:db:9e:94:f8:c9: 17:4a:50:54:ba:25:d6:06:50:de:bb:60:f4:1f:7f: f6:1f:1b:b3:cb:29:ef:5f:69:e2:cf:4a:01:92:66: 47:42:53:19:b6:82:84:50:72:61:8e:be:a4:5a:ea: 88:5a:59:ab:ee:e0:0a:d7:b6:cc:ac:ea:eb:d4:b0: c0:6f:80:e4:58:7f:82:3a:94:01:90:2d:b5:77:9e: 83:43:6f:df:85:c2:64:e8:b8:1f:e1:a3:ff:06:01: c2:71:7e:97:a2:44:5f:d5:cd:85:6e:9c:fd:4a:92: f2:b0:b0:4e:86:d3:2b:25:17:52:5f:b9:de:70:23: dc:bc:9a:cb:8d:ec:1f:34:16:57:9f:6c:8a:8d:44: 2d:d7:1f:9e:7e:e2:ba:cc:7e:c1:c9:b8:f4:04:82: 38:c1:72:d2:15:85:07:b4:0a:79:ba:cb:b7:53:7f: 4c:32:0d:c3:b7:89:64:a8:2f:f2:a3:fc:6c:28:14: 43:15:02:0f:27:9a:de:ab:cb:83:8f:8d:14:2b:99: ee:48:a3:ae:56:ef:c9:73:a3:48:cb:4c:3a:c9:37: 84:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CA:E3:95:EB:47:BB:4E:57:99:0D:F2:83:DD:7B:95:95:0C:FB:68:3D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.36.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:2e:d6:c4:a4:57:d0:28:91:7a:87:5e:20:8c:49:d9:f4:31: 31:15:e4:bc:8e:11:d0:03:87:6a:7c:6e:26:cf:fb:e6:5c:44: 65:ed:19:33:ea:0f:6b:93:1e:25:3d:29:21:65:0a:7b:cc:93: 38:27:e7:16:36:0a:62:0b:6a:3e:10:a6:e1:8e:6c:01:dd:fd: 56:b6:61:6a:82:a1:11:83:c5:78:8a:73:90:83:4b:52:fd:7f: 10:0b:4a:a3:a9:69:68:80:ce:d6:77:12:05:be:9a:da:c1:c6: ac:3d:c7:fa:b3:22:bd:06:bc:80:83:98:f3:be:6b:e2:e1:f7: 25:ee:4a:3b:24:07:30:ec:5b:3e:33:00:b8:5a:94:f8:4a:9e: c9:56:88:9b:50:b5:51:6b:d6:a7:16:76:f7:7c:c2:db:c1:64: 4f:2b:f2:38:dc:7a:33:9d:3f:1a:38:8d:58:99:83:51:4a:00: 40:66:4e:38:26:6a:6f:00:9d:29:df:2d:06:aa:07:6c:e4:da: c3:4c:5e:93:ca:d9:5f:83:ed:03:f7:69:63:66:5b:65:49:ca: 44:2f:41:be:c4:89:02:50:1b:11:93:14:3d:2e:b5:24:a7:1c: 4f:9a:b6:0d:56:59:94:c8:60:a1:b6:52:2c:81:e9:2d:01:27: b6:41:bb:cc -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUURtFkoemwG/E059Ldhv05tgXZ6YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTYyN1oX DTI3MDUwMjAwMjEyN1owMzExMC8GA1UEAxMoQ0FFMzk1RUI0N0JCNEU1Nzk5MERG MjgzREQ3Qjk1OTUwQ0ZCNjgzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANcW8NPbgQ5QhGXOD5WcctuPwxGMF/cm1mPlIwlaSBVr9lsJ2zzZjtuelPjJ F0pQVLol1gZQ3rtg9B9/9h8bs8sp719p4s9KAZJmR0JTGbaChFByYY6+pFrqiFpZ q+7gCte2zKzq69SwwG+A5Fh/gjqUAZAttXeeg0Nv34XCZOi4H+Gj/wYBwnF+l6JE X9XNhW6c/UqS8rCwTobTKyUXUl+53nAj3Lyay43sHzQWV59sio1ELdcfnn7iusx+ wcm49ASCOMFy0hWFB7QKebrLt1N/TDINw7eJZKgv8qP8bCgUQxUCDyea3qvLg4+N FCuZ7kijrlbvyXOjSMtMOsk3hFcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMrjletHu05XmQ3yg917lZUM+2g9MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM2ZjNhZTk3LWY1MmUtNDk3Ny05MGQxLTQzNDlhYWQwNTJhOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zNmYzYWU5 Ny1mNTJlLTQ5NzctOTBkMS00MzQ5YWFkMDUyYTgvMC9DQUUzOTVFQjQ3QkI0RTU3 OTkwREYyODNERDdCOTU5NTBDRkI2ODNELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6IkMA0GCSqGSIb3DQEBCwUAA4IBAQAeLtbEpFfQKJF6h14gjEnZ9DExFeS8 jhHQA4dqfG4mz/vmXERl7Rkz6g9rkx4lPSkhZQp7zJM4J+cWNgpiC2o+EKbhjmwB 3f1WtmFqgqERg8V4inOQg0tS/X8QC0qjqWlogM7WdxIFvprawcasPcf6syK9BryA g5jzvmvi4fcl7ko7JAcw7Fs+MwC4WpT4Sp7JVoibULVRa9anFnb3fMLbwWRPK/I4 3HoznT8aOI1YmYNRSgBAZk44JmpvAJ0p3y0Gqgds5NrDTF6Tytlfg+0D92ljZltl ScpEL0G+xIkCUBsRkxQ9LrUkpxxPmrYNVlmUyGChtlIsgektASe2QbvM -----END CERTIFICATE-----Generated at Tue May 12 22:16:43 2026 by rpki-client