$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer File: CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer (raw, json) Hash identifier: 2E5nlaIs8ESgFLWb2j8GnbfxhAsN1Ot3vRZW/wekutE= Subject key identifier: CB:72:F7:26:3B:76:6A:B1:05:9A:DF:BA:5B:91:93:C2:C5:E5:85:30 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3E611BE7CD9F8AA2A90C1129F4CEF3C1DB6FFBFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft caRepository: rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:32:43 +0000 Certificate not after: Sun 02 May 2027 00:37:43 +0000 Subordinate resources: IP: 103.79.96.0/24 IP: 2001:df6:9200::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:61:1b:e7:cd:9f:8a:a2:a9:0c:11:29:f4:ce:f3:c1:db:6f:fb:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:32:43 2026 GMT Not After : May 2 00:37:43 2027 GMT Subject: CN=CB72F7263B766AB1059ADFBA5B9193C2C5E58530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:83:21:25:96:2b:c2:69:79:0f:00:72:ba:c5: 98:71:cf:d1:9c:6e:07:cb:cf:31:34:09:f6:6f:df: ef:b1:da:15:6e:fc:4d:02:95:f2:4e:7e:0f:38:c7: 4a:95:ab:4b:3a:10:ed:b3:b8:fd:af:a1:cc:e6:69: aa:04:86:05:53:ae:3b:41:5c:ed:ee:8e:dd:68:a7: e2:5f:53:95:2f:a5:61:2e:49:61:45:94:ec:45:74: 3f:29:8d:80:d3:b2:8d:56:08:73:33:dd:20:4f:76: 0f:58:72:f5:fd:38:86:e7:83:35:ad:8f:c2:16:3c: 00:cb:39:59:77:b0:32:1e:5c:5c:34:3b:75:93:b3: 49:74:e0:01:ab:aa:c6:a5:63:e4:5b:ae:29:b2:ba: d5:77:c0:ae:ca:74:16:53:64:e2:82:54:c2:96:ec: 98:65:9d:79:ee:42:38:29:28:71:65:f3:40:46:b3: 76:fc:7d:c2:b6:f6:f8:41:f3:c3:b3:e1:70:7c:2f: 52:33:a6:ff:cc:3b:a1:78:e3:aa:8e:2a:bc:68:46: c5:ed:73:8e:a1:75:4b:49:f3:12:45:2a:8a:ab:ba: 6c:06:46:5e:3f:5a:33:d0:d4:5b:1b:3a:c9:f7:83: 65:b4:27:ff:a2:47:22:af:2f:ec:49:b9:d3:1b:c7: fb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:72:F7:26:3B:76:6A:B1:05:9A:DF:BA:5B:91:93:C2:C5:E5:85:30 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.79.96.0/24 IPv6: 2001:df6:9200::/48 Signature Algorithm: sha256WithRSAEncryption 3b:e2:52:5c:33:1d:e2:06:9d:18:5c:8e:86:c7:5e:bd:89:d2: af:cd:82:aa:5a:eb:3d:2b:e2:08:e6:d5:70:95:0c:84:ba:1a: 61:ac:59:35:52:5a:ce:87:6d:b2:56:ce:68:dc:0c:e9:f0:cf: b0:73:19:51:ff:ce:80:ec:89:0c:b0:64:ba:39:dd:27:23:42: 18:58:55:1c:77:77:6d:1c:a6:0c:c5:7d:d8:65:7e:66:e8:6c: ad:2e:af:36:4e:6a:87:59:e3:f1:e6:f1:d0:a2:fa:1c:c3:9d: 15:ac:99:b4:0d:5e:75:a1:c2:58:23:8b:21:4b:57:15:37:f1: 64:56:7d:96:36:9e:75:d6:ec:27:d7:ea:06:4a:3b:22:04:8e: e9:dc:c6:2c:bf:5f:df:4f:1b:21:d9:5f:ca:24:3d:fd:08:92: b5:6c:b6:1f:65:7b:20:b2:96:2a:10:2a:6f:10:f8:de:02:79: b0:d3:79:3d:27:f3:4a:b7:ff:f6:5a:48:12:e8:c7:0b:f6:77: 46:90:7e:68:72:a4:42:63:ca:d1:b4:d4:ad:5d:dd:8f:24:eb: 5e:9f:94:98:8b:3d:47:2c:6b:b9:5c:d8:15:da:94:79:4f:88: 07:bb:a2:c4:c5:f0:f6:54:21:b1:0d:53:e3:2d:f4:8c:f2:44: 85:e9:6d:a4 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUPmEb582fiqKpDBEp9M7zwdtv+/wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzI0M1oX DTI3MDUwMjAwMzc0M1owMzExMC8GA1UEAxMoQ0I3MkY3MjYzQjc2NkFCMTA1OUFE RkJBNUI5MTkzQzJDNUU1ODUzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM2DISWWK8JpeQ8AcrrFmHHP0ZxuB8vPMTQJ9m/f77HaFW78TQKV8k5+DzjH SpWrSzoQ7bO4/a+hzOZpqgSGBVOuO0Fc7e6O3Win4l9TlS+lYS5JYUWU7EV0PymN gNOyjVYIczPdIE92D1hy9f04hueDNa2PwhY8AMs5WXewMh5cXDQ7dZOzSXTgAauq xqVj5FuuKbK61XfArsp0FlNk4oJUwpbsmGWdee5COCkocWXzQEazdvx9wrb2+EHz w7PhcHwvUjOm/8w7oXjjqo4qvGhGxe1zjqF1S0nzEkUqiqu6bAZGXj9aM9DUWxs6 yfeDZbQn/6JHIq8v7Em50xvH++ECAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMty9yY7dmqxBZrfuluRk8LF5YUwMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzUwNmNkMTU1LWI1M2YtNDE0Ni1hMTdjLTdmMTM3NWVjYTI0YS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81MDZjZDE1 NS1iNTNmLTQxNDYtYTE3Yy03ZjEzNzVlY2EyNGEvMC9DQjcyRjcyNjNCNzY2QUIx MDU5QURGQkE1QjkxOTNDMkM1RTU4NTMwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ09gMA8EAgACMAkDBwAgAQ32kgAwDQYJKoZIhvcNAQELBQADggEBADviUlwz HeIGnRhcjobHXr2J0q/Ngqpa6z0r4gjm1XCVDIS6GmGsWTVSWs6HbbJWzmjcDOnw z7BzGVH/zoDsiQywZLo53ScjQhhYVRx3d20cpgzFfdhlfmbobK0urzZOaodZ4/Hm 8dCi+hzDnRWsmbQNXnWhwlgjiyFLVxU38WRWfZY2nnXW7CfX6gZKOyIEjuncxiy/ X99PGyHZX8okPf0IkrVsth9leyCylioQKm8Q+N4CebDTeT0n80q3//ZaSBLoxwv2 d0aQfmhypEJjytG01K1d3Y8k616flJiLPUcsa7lc2BXalHlPiAe7osTF8PZUIbEN U+Mt9IzyRIXpbaQ= -----END CERTIFICATE-----Generated at Tue May 12 22:04:10 2026 by rpki-client