$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer File: CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer (raw, json) Hash identifier: sevb1mxOrALvzqhb4iaZRqp3IEYYLll21W0pwa7ogSM= Subject key identifier: CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7A29D6794282974830CA6B88B398F04553487D84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:24:53 +0000 Certificate not after: Sun 02 May 2027 02:29:53 +0000 Subordinate resources: IP: 103.185.44.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:29:d6:79:42:82:97:48:30:ca:6b:88:b3:98:f0:45:53:48:7d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:24:53 2026 GMT Not After : May 2 02:29:53 2027 GMT Subject: CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:23:db:35:4d:2c:a0:0a:af:5a:af:40:60:e5: b9:53:d7:87:e8:03:3a:53:bd:86:11:e9:b0:0f:23: 24:8b:dd:45:a8:cb:63:e4:4b:b0:3e:43:d9:be:53: de:37:8e:aa:88:c6:15:8d:3f:15:b1:4c:27:b7:4f: bd:f1:4f:02:05:ed:65:53:db:6b:75:1a:cb:0c:47: 7a:5c:a5:b9:54:ae:7e:9d:9a:23:dd:d0:ea:7e:8a: 92:98:c7:49:e1:79:d0:c1:6d:0e:82:2e:22:f8:a3: 6d:23:03:48:ea:b0:5d:8d:cc:cc:fb:ca:b2:10:69: 4d:39:4d:10:8d:a8:c8:0e:ed:50:ac:62:55:85:00: 03:ac:28:aa:97:84:1e:07:4e:d3:26:d0:90:11:94: 53:97:41:ef:dd:d3:ca:a6:b0:6f:b0:f3:f4:f9:fb: 8b:ef:bd:c3:d5:5c:11:fc:29:06:5c:87:6d:03:23: e5:89:85:b5:60:61:f0:22:04:67:02:aa:37:57:31: 30:ac:96:fb:d9:a5:ea:68:60:ea:71:a5:b7:9b:91: ca:05:a7:db:b3:6b:cb:0d:63:50:8b:59:a4:cc:85: 7a:e6:f7:bd:8e:d8:5a:fb:fc:2a:48:c7:6f:bc:a7: 94:97:f1:c1:53:02:da:bd:61:d8:0f:ce:8b:8e:99: 78:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.185.44.0/23 Signature Algorithm: sha256WithRSAEncryption 54:0c:f5:50:3d:af:2d:42:34:44:ae:90:4c:14:48:47:6c:c0: 3c:98:b6:58:bb:a5:ba:6a:66:d2:78:fd:db:e5:3c:81:ed:81: d8:ad:30:18:62:e8:0e:61:fb:f8:b1:83:cb:1d:38:8b:92:26: c9:95:ac:b4:d3:2b:09:1d:9c:42:de:4d:59:02:db:07:a9:20: 7c:86:39:af:2d:ec:93:f8:e2:e5:e4:ac:72:a2:bc:71:11:c1: 4f:2e:50:0d:39:7f:42:f5:fa:a5:bf:59:d1:25:ce:73:67:b5: 53:0c:2f:18:6b:7d:c4:d4:92:cd:21:69:e6:ef:96:15:55:a0: b9:6f:62:ef:20:e1:79:1a:4d:27:81:2f:4d:4c:cd:5f:21:20: c3:be:f7:b6:11:e8:30:17:3a:b3:6c:d9:42:01:10:d0:58:41: 39:30:60:bf:e5:34:bf:3e:8a:b9:79:c8:3a:8a:cc:b9:d7:03: 45:5c:6d:d5:8e:f0:a6:d6:97:ee:21:7e:2b:9f:2b:79:51:d5: 81:37:18:84:3c:f6:93:bf:84:7d:b6:72:f1:86:94:61:64:cb: fc:28:0b:83:a0:1e:7e:60:95:58:1b:6a:0f:5a:e1:c0:02:59: 6d:61:9e:78:8f:12:5c:86:1c:02:b6:62:45:54:92:d7:56:6f: 5b:5c:2e:62 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUeinWeUKCl0gwymuIs5jwRVNIfYQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjQ1M1oX DTI3MDUwMjAyMjk1M1owMzExMC8GA1UEAxMoQ0JFODcyQzdGN0U4ODFFNzM4RkJC OTgzRkY1RDg0QTIwQTFCNEEzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKcj2zVNLKAKr1qvQGDluVPXh+gDOlO9hhHpsA8jJIvdRajLY+RLsD5D2b5T 3jeOqojGFY0/FbFMJ7dPvfFPAgXtZVPba3UaywxHelyluVSufp2aI93Q6n6KkpjH SeF50MFtDoIuIvijbSMDSOqwXY3MzPvKshBpTTlNEI2oyA7tUKxiVYUAA6woqpeE HgdO0ybQkBGUU5dB793Tyqawb7Dz9Pn7i++9w9VcEfwpBlyHbQMj5YmFtWBh8CIE ZwKqN1cxMKyW+9ml6mhg6nGlt5uRygWn27Nryw1jUItZpMyFeub3vY7YWvv8KkjH b7ynlJfxwVMC2r1h2A/Oi46ZeHMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMvocsf36IHnOPu5g/9dhKIKG0o1MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2VjNWYyZTRmLTQ1ZDQtNGQ2Mi05MmNmLWQ3OGI1YzU0MWExYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lYzVmMmU0 Zi00NWQ0LTRkNjItOTJjZi1kNzhiNWM1NDFhMWMvMC9DQkU4NzJDN0Y3RTg4MUU3 MzhGQkI5ODNGRjVEODRBMjBBMUI0QTM1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7ksMA0GCSqGSIb3DQEBCwUAA4IBAQBUDPVQPa8tQjRErpBMFEhHbMA8mLZY u6W6ambSeP3b5TyB7YHYrTAYYugOYfv4sYPLHTiLkibJlay00ysJHZxC3k1ZAtsH qSB8hjmvLeyT+OLl5KxyorxxEcFPLlANOX9C9fqlv1nRJc5zZ7VTDC8Ya33E1JLN IWnm75YVVaC5b2LvIOF5Gk0ngS9NTM1fISDDvve2EegwFzqzbNlCARDQWEE5MGC/ 5TS/Poq5ecg6isy51wNFXG3VjvCm1pfuIX4rnyt5UdWBNxiEPPaTv4R9tnLxhpRh ZMv8KAuDoB5+YJVYG2oPWuHAAlltYZ54jxJchhwCtmJFVJLXVm9bXC5i -----END CERTIFICATE-----Generated at Wed May 13 02:12:49 2026 by rpki-client