$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer File: CBCB35E23C07702B4DDE1E1E9E8015438F516E45.cer (raw, json) Hash identifier: WDLjSUfQzoYU6omAhzyMXVcYQVC16nYpHQZ/oU8eu+g= Subject key identifier: CB:CB:35:E2:3C:07:70:2B:4D:DE:1E:1E:9E:80:15:43:8F:51:6E:45 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 62FE74180F5C6A2022D17837A08D20326DA8421D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft caRepository: rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:17:48 +0000 Certificate not after: Sun 02 May 2027 01:22:48 +0000 Subordinate resources: IP: 103.101.142.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:fe:74:18:0f:5c:6a:20:22:d1:78:37:a0:8d:20:32:6d:a8:42:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:17:48 2026 GMT Not After : May 2 01:22:48 2027 GMT Subject: CN=CBCB35E23C07702B4DDE1E1E9E8015438F516E45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7a:0b:23:11:2c:3f:b2:c9:d0:72:ef:08:97: 79:b1:a5:f2:69:3c:e0:99:9c:65:e7:80:6c:b2:7c: a6:94:bc:f9:94:9d:3c:ee:2a:1f:4f:9d:53:d0:e0: 6b:ce:37:25:ff:94:06:1e:0e:55:f8:ed:1a:fc:c8: 33:e5:06:c7:18:58:ec:e5:1a:7a:49:7c:30:d2:c6: d4:c5:3e:ac:46:6e:d4:34:9f:5c:b7:6f:2e:09:55: 4e:d3:03:7d:da:80:ce:87:aa:fa:97:9e:6e:7f:4e: 54:64:f1:96:b4:c0:d8:99:93:89:7f:db:27:65:8d: 9a:aa:ca:f9:54:ee:de:55:4d:77:8f:94:cd:fc:c1: 9a:1a:68:33:a8:03:ec:e2:93:d2:1b:43:23:d8:76: 67:89:cf:4c:c6:7e:86:6b:81:e2:95:e7:a8:fb:50: bb:56:45:e9:d0:82:f4:e6:70:2f:7c:77:6c:f6:71: 77:19:b5:62:9c:5c:32:28:86:4c:e4:77:73:6c:18: 4a:1b:25:b6:43:62:34:82:1c:99:b1:1f:6e:f3:78: 3c:46:e1:f9:58:d7:8c:99:43:0e:ef:96:58:c4:79: 4d:a3:69:97:a4:b4:bc:4b:5a:a0:ff:c7:1f:21:70: bb:26:4c:5f:c4:90:33:5d:fe:f1:be:36:ff:86:49: 3c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:CB:35:E2:3C:07:70:2B:4D:DE:1E:1E:9E:80:15:43:8F:51:6E:45 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/CBCB35E23C07702B4DDE1E1E9E8015438F516E45.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.101.142.0/23 Signature Algorithm: sha256WithRSAEncryption 59:3e:d0:ec:ba:83:c6:07:98:40:ec:e2:6c:8e:87:16:38:28: 20:7d:0f:64:05:1e:26:7a:8b:9a:28:53:e2:76:dc:31:f2:a9: 75:87:2f:f8:fb:cd:c4:ad:87:22:3f:1f:f6:78:f2:db:4d:15: 3b:c8:53:c3:f1:21:43:03:be:f4:70:10:e5:c1:24:45:88:11: f7:31:9e:a5:7c:0e:67:4e:ec:52:85:34:70:70:75:05:c3:9c: 81:51:c4:fa:95:96:b7:dc:a9:1c:65:5b:75:90:b1:05:76:b6: f6:bc:0e:e1:c3:00:28:39:34:4d:99:6b:c7:f5:42:d0:56:c0: ef:5b:43:7d:ad:b6:06:b8:c6:26:f9:91:c0:88:54:4d:cf:ec: b3:63:d1:ef:18:d3:5f:2c:13:e7:7d:da:9a:9f:f4:05:89:d9: f3:32:aa:50:55:8a:80:b4:f1:3c:63:9e:3c:7b:c3:18:49:d1: 4a:54:ae:89:bf:27:2f:b9:46:3e:1a:1c:d1:1b:cd:42:83:68: 16:16:1e:36:df:fc:0e:49:4e:89:c2:43:d4:e9:43:ad:e4:06: a0:e6:94:a4:9a:4a:d5:3e:ee:e7:10:cc:b9:4a:df:a9:15:77: a9:99:6c:c3:93:5a:1e:ca:38:7c:a0:a8:f4:ac:82:ca:62:ac: 71:5e:0c:2b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUYv50GA9caiAi0Xg3oI0gMm2oQh0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTc0OFoX DTI3MDUwMjAxMjI0OFowMzExMC8GA1UEAxMoQ0JDQjM1RTIzQzA3NzAyQjREREUx RTFFOUU4MDE1NDM4RjUxNkU0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL56CyMRLD+yydBy7wiXebGl8mk84JmcZeeAbLJ8ppS8+ZSdPO4qH0+dU9Dg a843Jf+UBh4OVfjtGvzIM+UGxxhY7OUaekl8MNLG1MU+rEZu1DSfXLdvLglVTtMD fdqAzoeq+peebn9OVGTxlrTA2JmTiX/bJ2WNmqrK+VTu3lVNd4+UzfzBmhpoM6gD 7OKT0htDI9h2Z4nPTMZ+hmuB4pXnqPtQu1ZF6dCC9OZwL3x3bPZxdxm1YpxcMiiG TOR3c2wYShsltkNiNIIcmbEfbvN4PEbh+VjXjJlDDu+WWMR5TaNpl6S0vEtaoP/H HyFwuyZMX8SQM13+8b42/4ZJPNsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMvLNeI8B3ArTd4eHp6AFUOPUW5FMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzkxZGM3MWNkLWFjY2EtNDE1Yy1iMjgzLWI5MzcyYzBkNGNlOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85MWRjNzFj ZC1hY2NhLTQxNWMtYjI4My1iOTM3MmMwZDRjZTgvMC9DQkNCMzVFMjNDMDc3MDJC NERERTFFMUU5RTgwMTU0MzhGNTE2RTQ1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ2WOMA0GCSqGSIb3DQEBCwUAA4IBAQBZPtDsuoPGB5hA7OJsjocWOCggfQ9k BR4meouaKFPidtwx8ql1hy/4+83ErYciPx/2ePLbTRU7yFPD8SFDA770cBDlwSRF iBH3MZ6lfA5nTuxShTRwcHUFw5yBUcT6lZa33KkcZVt1kLEFdrb2vA7hwwAoOTRN mWvH9ULQVsDvW0N9rbYGuMYm+ZHAiFRNz+yzY9HvGNNfLBPnfdqan/QFidnzMqpQ VYqAtPE8Y548e8MYSdFKVK6JvycvuUY+GhzRG81Cg2gWFh423/wOSU6JwkPU6UOt 5Aag5pSkmkrVPu7nEMy5St+pFXepmWzDk1oeyjh8oKj0rILKYqxxXgwr -----END CERTIFICATE-----Generated at Tue May 12 22:31:56 2026 by rpki-client