$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer File: CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.cer (raw, json) Hash identifier: qkQDC9uHkz4NBZFVIauwxVRe+xyXQjJF2voCZl/xb8U= Subject key identifier: CB:63:D5:70:18:CC:4F:E9:CA:8A:00:9B:2E:8B:BD:AF:ED:8A:15:05 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 330C69944BC555E99835584E8E9318CEC01F6052 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:18:53 +0000 Certificate not after: Sun 02 May 2027 00:23:53 +0000 Subordinate resources: IP: 103.177.218.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:0c:69:94:4b:c5:55:e9:98:35:58:4e:8e:93:18:ce:c0:1f:60:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:18:53 2026 GMT Not After : May 2 00:23:53 2027 GMT Subject: CN=CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cf:de:15:71:15:3e:0f:69:41:c1:15:5c:01: a5:c1:33:76:e4:4d:f3:b7:ac:fb:8e:74:73:6a:a8: cc:f1:63:2d:db:04:04:36:c7:96:d5:62:d0:e6:31: d1:a1:a3:41:e9:17:d5:4c:c9:c1:f5:53:ed:54:9a: b4:55:dd:5c:37:45:aa:5a:3d:6b:17:98:50:61:d9: 00:bd:ee:20:a2:e7:5e:c6:ee:95:de:70:75:45:82: 35:62:ed:d0:79:c0:e7:30:f3:1d:f3:6d:48:59:25: 38:9b:b1:89:16:e7:76:d7:7b:2f:25:29:ed:3c:a1: 62:c3:b8:7b:24:5b:c4:24:8e:9c:87:1b:3d:21:d6: 92:f9:b2:bc:a0:34:77:71:0d:d2:ad:14:6f:76:9f: 17:3c:66:f8:49:39:46:2a:4b:c0:92:ee:ab:01:e6: 55:74:e9:ea:93:85:84:04:8b:b9:58:6b:fe:bc:ee: 1b:21:46:b9:96:1c:8e:e8:be:fe:c1:cc:2d:25:5b: 18:cc:13:5c:01:e8:48:fb:e4:d0:7d:62:5b:25:5d: 5c:1c:be:10:f6:53:49:34:c7:3e:c8:41:e5:ee:8d: 91:e2:29:a0:6c:03:2b:27:27:b6:f8:94:a4:5c:9a: 66:a6:f4:87:45:37:e4:41:e6:0b:f9:72:7d:e5:3b: 6f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:63:D5:70:18:CC:4F:E9:CA:8A:00:9B:2E:8B:BD:AF:ED:8A:15:05 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/CB63D57018CC4FE9CA8A009B2E8BBDAFED8A1505.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.218.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:5a:be:9a:7a:ce:c7:57:e4:0b:4e:d2:0c:78:e0:ce:e1:72: 57:ba:3e:fd:2b:78:44:06:b7:27:46:5b:74:c5:98:54:d7:22: 58:1e:84:78:4b:59:3e:d5:06:3b:eb:e0:97:0b:cd:07:48:dd: 8c:29:21:4b:ba:9a:31:42:45:ed:56:13:d5:9c:b1:ac:24:89: 25:bc:62:7d:2c:b0:5c:d6:53:d5:5b:bc:25:ba:30:02:b1:05: 76:14:00:a5:f6:13:2c:b1:32:75:8d:8f:00:a4:45:b5:3c:8f: e0:54:2b:1a:b6:45:e4:36:1a:7d:f1:9a:d9:d7:87:37:be:4e: 1c:80:18:fa:eb:08:a4:15:9b:17:50:70:c8:92:fe:d3:6a:12: 98:c3:55:fc:d7:0b:c2:5f:91:a2:72:a7:d6:78:40:f1:d8:de: 13:78:bb:6e:c2:ae:ab:28:56:e6:14:73:1c:81:e9:bf:38:8e: 9f:99:40:e7:0f:70:2a:57:37:ca:5a:d1:cb:10:10:96:ed:ed: 7b:3f:c6:bc:1a:f9:19:9d:63:e0:30:43:9b:c2:ad:61:81:d4: 6e:e0:94:c9:9d:b1:fc:86:f8:42:54:28:95:c8:62:8a:c6:00: a2:1e:29:7d:65:a0:29:dd:a9:9d:d3:84:87:4c:da:1e:47:c7: 61:ae:1f:d3 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUMwxplEvFVemYNVhOjpMYzsAfYFIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTg1M1oX DTI3MDUwMjAwMjM1M1owMzExMC8GA1UEAxMoQ0I2M0Q1NzAxOENDNEZFOUNBOEEw MDlCMkU4QkJEQUZFRDhBMTUwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKXP3hVxFT4PaUHBFVwBpcEzduRN87es+450c2qozPFjLdsEBDbHltVi0OYx 0aGjQekX1UzJwfVT7VSatFXdXDdFqlo9axeYUGHZAL3uIKLnXsbuld5wdUWCNWLt 0HnA5zDzHfNtSFklOJuxiRbndtd7LyUp7TyhYsO4eyRbxCSOnIcbPSHWkvmyvKA0 d3EN0q0Ub3afFzxm+Ek5RipLwJLuqwHmVXTp6pOFhASLuVhr/rzuGyFGuZYcjui+ /sHMLSVbGMwTXAHoSPvk0H1iWyVdXBy+EPZTSTTHPshB5e6NkeIpoGwDKycntviU pFyaZqb0h0U35EHmC/lyfeU7bxcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMtj1XAYzE/pyooAmy6Lva/tihUFMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzNhYjhlNjBmLWY5OTMtNDUzNC05ZGEwLWYyODVhODYwM2Y2OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zYWI4ZTYw Zi1mOTkzLTQ1MzQtOWRhMC1mMjg1YTg2MDNmNjkvMC9DQjYzRDU3MDE4Q0M0RkU5 Q0E4QTAwOUIyRThCQkRBRkVEOEExNTA1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7HaMA0GCSqGSIb3DQEBCwUAA4IBAQA9Wr6aes7HV+QLTtIMeODO4XJXuj79 K3hEBrcnRlt0xZhU1yJYHoR4S1k+1QY76+CXC80HSN2MKSFLupoxQkXtVhPVnLGs JIklvGJ9LLBc1lPVW7wlujACsQV2FACl9hMssTJ1jY8ApEW1PI/gVCsatkXkNhp9 8ZrZ14c3vk4cgBj66wikFZsXUHDIkv7TahKYw1X81wvCX5GicqfWeEDx2N4TeLtu wq6rKFbmFHMcgem/OI6fmUDnD3AqVzfKWtHLEBCW7e17P8a8GvkZnWPgMEObwq1h gdRu4JTJnbH8hvhCVCiVyGKKxgCiHil9ZaAp3amd04SHTNoeR8dhrh/T -----END CERTIFICATE-----Generated at Tue May 12 22:03:53 2026 by rpki-client