$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer File: CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.cer (raw, json) Hash identifier: SRnfE4g8BZ6Uct7wP6qKLzOEc8jQqlvI/uGuMIrsMcc= Subject key identifier: CB:FD:B1:F1:8B:A4:34:13:CE:BC:5B:93:78:CA:3F:A3:D8:A2:5B:FB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4935D52A50BBB1B83FDD6F18C9E861BCB6C6846C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:09:06 +0000 Certificate not after: Sun 02 May 2027 02:14:06 +0000 Subordinate resources: IP: 103.147.142.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:35:d5:2a:50:bb:b1:b8:3f:dd:6f:18:c9:e8:61:bc:b6:c6:84:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:09:06 2026 GMT Not After : May 2 02:14:06 2027 GMT Subject: CN=CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1d:64:68:59:de:ac:71:5a:5a:cc:01:26:2b: 43:b3:86:07:e8:60:d6:50:5e:a2:a2:17:15:66:8e: 19:f5:e3:48:0b:29:49:ee:0d:59:96:65:f7:25:93: c7:11:c2:2e:8b:cd:c5:bf:30:73:67:69:5b:4e:13: 2f:e1:d3:f3:11:aa:9f:16:30:e5:b8:c0:8e:2c:11: f1:a1:0d:24:24:fc:60:cd:78:d9:57:84:aa:bf:29: e2:93:81:25:0e:05:d3:a6:cb:bf:d9:07:af:2d:af: 10:59:93:7c:05:f5:fe:7b:ee:c0:2e:ed:d5:83:7f: 2d:a9:68:d5:2b:72:f5:fd:63:4c:d9:da:68:47:fd: a7:57:d4:60:f8:ba:99:96:5c:7a:9b:d5:79:91:e9: ba:f2:79:db:8b:f7:2e:dc:9b:55:4c:63:69:a9:c8: 69:7d:54:91:b6:92:c8:81:c9:b8:15:8d:7a:6b:a6: 7f:e7:2d:a0:15:a4:e1:52:66:75:27:6b:c9:c3:b5: ef:59:19:f3:f6:bf:69:c7:c1:d7:26:bd:83:35:da: 35:ed:7c:a8:8b:f3:93:67:07:aa:fc:3e:af:8d:e9: ba:95:fc:33:7f:23:cc:fa:d3:e5:b0:81:3f:04:7a: a0:2c:35:04:e3:02:dc:2a:ad:f9:db:91:c1:49:b5: 56:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:FD:B1:F1:8B:A4:34:13:CE:BC:5B:93:78:CA:3F:A3:D8:A2:5B:FB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/CBFDB1F18BA43413CEBC5B9378CA3FA3D8A25BFB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.142.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:9a:0a:85:ee:0d:fc:09:5d:6e:fb:9c:fb:a3:31:c1:2a:14: 87:3c:b9:1c:23:f7:27:7e:53:8a:68:95:6b:20:1e:83:41:12: 92:95:7d:98:34:9f:e6:1d:85:d2:a0:da:d1:5c:f1:a3:79:c5: 23:37:a8:d1:39:66:e9:2a:85:e8:e8:b2:42:aa:16:cf:e7:f8: 55:2c:ed:f5:ab:d2:d8:ac:65:1e:97:ea:69:42:f8:2a:5f:3f: bb:03:31:cd:36:c8:89:27:5b:1f:77:99:d2:5c:9b:1f:08:4f: c3:38:cf:cc:c4:ff:60:44:5e:13:4e:94:4d:96:cb:dc:ea:77: 26:3f:d4:db:8a:ce:ec:19:49:bd:e6:40:6c:be:22:85:c5:95: 66:32:af:d1:6b:44:53:92:20:be:2b:28:aa:4e:26:6c:96:26: b1:36:b4:74:73:0a:2b:e6:32:f3:87:57:44:53:63:5a:65:22: b5:59:b2:b0:e2:18:c6:52:e1:02:7c:12:17:cb:fb:3c:68:a8: 5a:69:ab:1e:0f:87:ad:50:2a:cf:6f:b6:e0:47:b3:26:e2:c0: 54:47:01:13:03:6e:df:93:1c:ed:eb:2b:d8:f3:53:77:41:07: 29:6c:51:e4:2f:4a:6a:c5:6f:7c:d6:b6:5b:04:25:4f:bb:9b: 0a:2f:87:42 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUSTXVKlC7sbg/3W8YyehhvLbGhGwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDkwNloX DTI3MDUwMjAyMTQwNlowMzExMC8GA1UEAxMoQ0JGREIxRjE4QkE0MzQxM0NFQkM1 QjkzNzhDQTNGQTNEOEEyNUJGQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsdZGhZ3qxxWlrMASYrQ7OGB+hg1lBeoqIXFWaOGfXjSAspSe4NWZZl9yWT xxHCLovNxb8wc2dpW04TL+HT8xGqnxYw5bjAjiwR8aENJCT8YM142VeEqr8p4pOB JQ4F06bLv9kHry2vEFmTfAX1/nvuwC7t1YN/Lalo1Sty9f1jTNnaaEf9p1fUYPi6 mZZcepvVeZHpuvJ524v3LtybVUxjaanIaX1UkbaSyIHJuBWNemumf+ctoBWk4VJm dSdrycO171kZ8/a/acfB1ya9gzXaNe18qIvzk2cHqvw+r43pupX8M38jzPrT5bCB PwR6oCw1BOMC3Cqt+duRwUm1VhcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMv9sfGLpDQTzrxbk3jKP6PYolv7MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RmZjBhZjZhLWM2ODAtNDczMS05YjkyLTlhYTkzZDljMDE2Yy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kZmYwYWY2 YS1jNjgwLTQ3MzEtOWI5Mi05YWE5M2Q5YzAxNmMvMC9DQkZEQjFGMThCQTQzNDEz Q0VCQzVCOTM3OENBM0ZBM0Q4QTI1QkZCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ5OOMA0GCSqGSIb3DQEBCwUAA4IBAQBqmgqF7g38CV1u+5z7ozHBKhSHPLkc I/cnflOKaJVrIB6DQRKSlX2YNJ/mHYXSoNrRXPGjecUjN6jROWbpKoXo6LJCqhbP 5/hVLO31q9LYrGUel+ppQvgqXz+7AzHNNsiJJ1sfd5nSXJsfCE/DOM/MxP9gRF4T TpRNlsvc6ncmP9Tbis7sGUm95kBsviKFxZVmMq/Ra0RTkiC+KyiqTiZsliaxNrR0 cwor5jLzh1dEU2NaZSK1WbKw4hjGUuECfBIXy/s8aKhaaaseD4etUCrPb7bgR7Mm 4sBURwETA27fkxzt6yvY81N3QQcpbFHkL0pqxW981rZbBCVPu5sKL4dC -----END CERTIFICATE-----Generated at Tue May 12 22:45:35 2026 by rpki-client