$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer File: CB0A606FD0642E68B5212AE751953E0B9A92959F.cer (raw, json) Hash identifier: vg+Cj7qE/gZ/zL331BMn1D9oXLfdNG3/2tXl+czcTqQ= Subject key identifier: CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 142D2FCE836E97E006CC29FF45B8235AB430AF8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:56:53 +0000 Certificate not after: Sun 02 May 2027 02:01:53 +0000 Subordinate resources: IP: 45.118.112.0/22 IP: 103.14.20.0/23 IP: 103.25.166.0/23 IP: 2401:10c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:2d:2f:ce:83:6e:97:e0:06:cc:29:ff:45:b8:23:5a:b4:30:af:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:56:53 2026 GMT Not After : May 2 02:01:53 2027 GMT Subject: CN=CB0A606FD0642E68B5212AE751953E0B9A92959F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9b:bf:e3:86:50:ec:24:f7:e4:32:49:7c:bb: 0f:10:09:d7:f5:9f:fe:a7:9e:71:a8:86:94:2b:a9: 91:3e:3f:f2:7b:35:9d:61:54:4b:a8:7e:65:a3:31: 3b:2b:44:89:8d:36:f3:23:3b:a2:28:d0:9a:23:0f: 8c:58:ef:4a:a2:4c:4d:9d:09:ea:26:d6:04:f6:81: b5:cc:47:32:02:ea:9c:d1:43:90:c9:7b:8b:b0:a6: e8:c2:45:48:8f:a7:b2:dd:3b:f5:73:3e:74:8f:ca: 0d:33:73:20:5f:9c:79:2d:c3:0e:e5:30:d0:42:85: df:2d:b3:42:52:59:93:9a:97:f3:08:ea:0c:29:16: 32:a0:a3:db:4c:00:1b:f2:a6:f2:a7:a6:55:0a:2f: 31:3d:51:f6:63:10:cf:b4:7e:11:03:d8:d0:1d:3c: 43:89:7a:3d:83:be:6b:d5:10:74:a4:4b:8b:f1:e0: cc:cc:7d:01:ef:08:9e:e4:35:e0:86:19:eb:4b:30: 30:83:a4:fe:97:5d:94:1d:e9:cf:4f:f2:d5:a5:7f: ea:71:db:45:6a:da:79:84:61:5a:ce:cf:39:83:fc: f8:7a:9b:ec:15:9f:1e:22:02:ad:9f:e0:d9:10:1c: 31:a1:82:ba:e9:d8:ad:76:29:23:d7:9e:fc:df:e6: e0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.118.112.0/22 103.14.20.0/23 103.25.166.0/23 IPv6: 2401:10c0::/32 Signature Algorithm: sha256WithRSAEncryption 75:1d:3d:4a:5e:6d:98:12:1d:e8:ad:20:8f:5e:3f:84:cd:85: de:26:0e:e5:3f:df:1f:31:ed:4f:ee:41:1d:51:56:87:5a:28: 5b:63:00:ef:6c:8c:6e:92:e1:34:24:a7:15:ad:b6:ae:11:fd: 28:9f:15:81:33:77:aa:67:66:5a:9c:c7:2b:ef:a9:8b:90:aa: b3:a4:c7:f5:f9:c9:54:0c:69:7d:2e:29:a3:03:89:b8:2a:08: 8b:da:4c:6b:ad:fc:54:16:92:73:25:ac:ce:1c:66:f9:61:8a: fb:24:3a:b6:7d:e0:0e:cd:5b:b1:52:e3:88:19:52:39:db:cc: 57:48:75:4d:4d:b1:66:a2:da:fb:a7:6c:01:83:0a:c4:7c:f1: a8:2d:d2:8f:e3:54:a8:2e:b3:18:2b:b6:fb:1e:b7:de:7f:11: 58:18:ae:26:17:13:4c:ef:8f:9b:47:1e:30:2b:fd:88:78:45: 4c:a4:4d:8a:0b:18:4f:e9:78:1c:22:95:a8:6c:f5:cf:1c:b2: 01:17:f9:c3:5b:60:5c:da:47:81:d0:66:7d:45:f1:cd:08:6c: df:36:54:6b:8a:54:4a:70:24:5a:da:a7:f1:c6:16:42:4b:7c: 43:e6:a3:97:88:a1:ab:ae:f6:55:61:01:02:29:2d:7e:58:1a: c5:bd:6b:cf -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIUFC0vzoNul+AGzCn/RbgjWrQwr4swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTY1M1oX DTI3MDUwMjAyMDE1M1owMzExMC8GA1UEAxMoQ0IwQTYwNkZEMDY0MkU2OEI1MjEy QUU3NTE5NTNFMEI5QTkyOTU5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALybv+OGUOwk9+QySXy7DxAJ1/Wf/qeecaiGlCupkT4/8ns1nWFUS6h+ZaMx OytEiY028yM7oijQmiMPjFjvSqJMTZ0J6ibWBPaBtcxHMgLqnNFDkMl7i7Cm6MJF SI+nst079XM+dI/KDTNzIF+ceS3DDuUw0EKF3y2zQlJZk5qX8wjqDCkWMqCj20wA G/Km8qemVQovMT1R9mMQz7R+EQPY0B08Q4l6PYO+a9UQdKRLi/HgzMx9Ae8InuQ1 4IYZ60swMIOk/pddlB3pz0/y1aV/6nHbRWraeYRhWs7POYP8+Hqb7BWfHiICrZ/g 2RAcMaGCuunYrXYpI9ee/N/m4MkCAwEAAaOCAtQwggLQMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMsKYG/QZC5otSEq51GVPguakpWfMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2QwNzQ3MWEzLWVlNTMtNDk5Yy05ZjJkLWNmMTZiMWU0YTM1My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kMDc0NzFh My1lZTUzLTQ5OWMtOWYyZC1jZjE2YjFlNGEzNTMvMC9DQjBBNjA2RkQwNjQyRTY4 QjUyMTJBRTc1MTk1M0UwQjlBOTI5NTlGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATAS AwQCLXZwAwQBZw4UAwQBZxmmMA0EAgACMAcDBQAkARDAMA0GCSqGSIb3DQEBCwUA A4IBAQB1HT1KXm2YEh3orSCPXj+EzYXeJg7lP98fMe1P7kEdUVaHWihbYwDvbIxu kuE0JKcVrbauEf0onxWBM3eqZ2ZanMcr76mLkKqzpMf1+clUDGl9LimjA4m4KgiL 2kxrrfxUFpJzJazOHGb5YYr7JDq2feAOzVuxUuOIGVI528xXSHVNTbFmotr7p2wB gwrEfPGoLdKP41SoLrMYK7b7HrfefxFYGK4mFxNM74+bRx4wK/2IeEVMpE2KCxhP 6XgcIpWobPXPHLIBF/nDW2Bc2keB0GZ9RfHNCGzfNlRrilRKcCRa2qfxxhZCS3xD 5qOXiKGrrvZVYQECKS1+WBrFvWvP -----END CERTIFICATE-----Generated at Wed May 13 01:45:26 2026 by rpki-client