$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/CB8AF4DC288016428E892458A0C0010ECF1897B7.cer File: CB8AF4DC288016428E892458A0C0010ECF1897B7.cer (raw, json) Hash identifier: 57oobZZMNnaSIoeQe7r27g1KyITqyZng0BLjjFakLRk= Subject key identifier: CB:8A:F4:DC:28:80:16:42:8E:89:24:58:A0:C0:01:0E:CF:18:97:B7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 54CB2808E7F1B8D5A1843FC4F9097FB7BD6DB2E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft caRepository: rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:01:28 +0000 Certificate not after: Sun 02 May 2027 00:06:28 +0000 Subordinate resources: IP: 103.166.162.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:cb:28:08:e7:f1:b8:d5:a1:84:3f:c4:f9:09:7f:b7:bd:6d:b2:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:01:28 2026 GMT Not After : May 2 00:06:28 2027 GMT Subject: CN=CB8AF4DC288016428E892458A0C0010ECF1897B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:99:a0:91:d6:52:62:e0:93:d2:c1:13:39:e6: ee:00:59:10:e8:95:19:7b:b3:1d:e7:67:aa:d7:98: 12:b5:30:f0:4a:68:d4:3c:fa:0e:e4:b1:f8:46:5a: 79:77:51:24:77:5b:d0:3f:a5:8b:9f:f7:e7:84:97: 2e:d2:aa:58:d2:07:ab:e0:24:83:76:ea:5a:2a:62: b5:22:a8:57:fc:b8:6f:6e:16:f2:3b:7f:be:6c:55: 54:43:8a:00:b0:e5:24:15:2d:0c:1c:fd:bc:36:a0: 38:10:f5:e5:c4:97:65:a9:76:df:07:fa:d3:46:e8: ed:0e:eb:9b:83:25:67:37:f5:0d:92:a1:d5:32:30: 50:da:bd:e6:55:da:d1:5d:45:c3:99:77:ad:74:2d: df:b4:9a:1f:49:25:0a:03:a3:e1:9e:d6:db:61:9e: d4:d7:34:f1:22:63:ff:4b:56:87:9a:18:9d:00:f2: d1:fa:38:f7:4b:43:af:4e:93:ed:46:f6:db:43:fd: 18:4e:92:38:23:44:5b:64:2c:6e:ba:60:dc:a5:9f: 84:70:c4:c3:70:58:91:a3:97:4e:0c:de:14:e5:82: 4c:28:4a:4c:c3:c7:f4:f4:56:38:9f:39:a8:bc:a6: 99:78:21:40:10:73:fd:4c:af:58:33:1d:74:49:9f: 36:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:8A:F4:DC:28:80:16:42:8E:89:24:58:A0:C0:01:0E:CF:18:97:B7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/CB8AF4DC288016428E892458A0C0010ECF1897B7.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.162.0/23 Signature Algorithm: sha256WithRSAEncryption a0:fb:51:53:a0:8c:c0:d9:fc:25:e0:7f:19:cc:22:31:7a:b6: e1:1e:da:41:d6:27:44:a6:71:8a:95:38:c0:55:f2:be:53:c4: 1d:d6:6e:d1:33:3c:93:7f:20:ec:4d:05:d1:39:6d:a6:81:d4: f0:fe:c2:38:5b:b0:70:7a:78:4d:8a:68:96:5b:7c:bd:73:41: 55:29:30:94:34:4d:9a:05:34:02:db:cd:18:80:c2:1f:2e:f9: 8a:43:d0:f0:fd:25:28:43:58:22:e7:d1:96:db:3a:b7:16:da: 2c:b7:20:aa:84:20:ec:84:1f:0c:40:02:ba:4f:50:ce:16:ff: a9:32:fa:a9:b1:58:30:3d:34:65:8b:98:d0:3f:1e:fd:d8:07: 37:b4:d3:cb:8d:50:0a:3d:ca:12:93:64:c4:3d:59:f7:e8:ca: b1:8d:10:a1:91:61:fc:ff:d1:36:c3:85:18:b8:20:22:24:8c: cf:89:18:e4:8b:b2:d4:db:68:03:c3:3a:f6:99:33:39:48:86: 7b:41:74:99:f5:cf:3e:11:55:73:86:a4:73:06:a2:28:a8:49: d7:98:2a:87:5c:ce:2d:be:84:96:51:7a:ca:e2:59:93:ab:82: 1f:1c:a9:69:7e:99:82:53:48:ac:f0:7f:5f:8d:2d:e1:57:2c: 19:82:56:6b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUVMsoCOfxuNWhhD/E+Ql/t71tsuIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDEyOFoX DTI3MDUwMjAwMDYyOFowMzExMC8GA1UEAxMoQ0I4QUY0REMyODgwMTY0MjhFODky NDU4QTBDMDAxMEVDRjE4OTdCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMmZoJHWUmLgk9LBEznm7gBZEOiVGXuzHednqteYErUw8Epo1Dz6DuSx+EZa eXdRJHdb0D+li5/354SXLtKqWNIHq+Akg3bqWipitSKoV/y4b24W8jt/vmxVVEOK ALDlJBUtDBz9vDagOBD15cSXZal23wf600bo7Q7rm4MlZzf1DZKh1TIwUNq95lXa 0V1Fw5l3rXQt37SaH0klCgOj4Z7W22Ge1Nc08SJj/0tWh5oYnQDy0fo490tDr06T 7Ub220P9GE6SOCNEW2Qsbrpg3KWfhHDEw3BYkaOXTgzeFOWCTChKTMPH9PRWOJ85 qLymmXghQBBz/UyvWDMddEmfNjcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMuK9NwogBZCjokkWKDAAQ7PGJe3MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzIxNDY3NmNkLWRlMzktNDY4YS1hZDI1LTY3NWUxYjkxMGZhYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yMTQ2NzZj ZC1kZTM5LTQ2OGEtYWQyNS02NzVlMWI5MTBmYWMvMC9DQjhBRjREQzI4ODAxNjQy OEU4OTI0NThBMEMwMDEwRUNGMTg5N0I3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6aiMA0GCSqGSIb3DQEBCwUAA4IBAQCg+1FToIzA2fwl4H8ZzCIxerbhHtpB 1idEpnGKlTjAVfK+U8Qd1m7RMzyTfyDsTQXROW2mgdTw/sI4W7BwenhNimiWW3y9 c0FVKTCUNE2aBTQC280YgMIfLvmKQ9Dw/SUoQ1gi59GW2zq3FtostyCqhCDshB8M QAK6T1DOFv+pMvqpsVgwPTRli5jQPx792Ac3tNPLjVAKPcoSk2TEPVn36MqxjRCh kWH8/9E2w4UYuCAiJIzPiRjki7LU22gDwzr2mTM5SIZ7QXSZ9c8+EVVzhqRzBqIo qEnXmCqHXM4tvoSWUXrK4lmTq4IfHKlpfpmCU0is8H9fjS3hVywZglZr -----END CERTIFICATE-----Generated at Tue May 12 22:39:16 2026 by rpki-client