$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer File: CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.cer (raw, json) Hash identifier: pMEHc7hu/+WM7kb5DkrM89aRrZSXv8SrC+MbCG/2rjk= Subject key identifier: CD:6A:ED:B0:29:FA:32:09:D5:BA:70:46:B7:B8:F5:24:75:FC:C1:0D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6B08C10E50F889E3ECDD77487984133E75A80AE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:50:52 +0000 Certificate not after: Sun 02 May 2027 00:55:52 +0000 Subordinate resources: IP: 103.175.236.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:08:c1:0e:50:f8:89:e3:ec:dd:77:48:79:84:13:3e:75:a8:0a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:50:52 2026 GMT Not After : May 2 00:55:52 2027 GMT Subject: CN=CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:84:8a:f9:86:eb:10:c0:26:0a:74:8d:ed:e2: 23:bd:e6:75:af:4a:f3:46:a9:54:33:d4:0e:12:4e: 55:11:02:90:d8:5b:11:68:8d:b1:1b:5d:fd:08:77: c2:37:b7:6e:ba:81:77:5d:f1:54:0f:5d:81:16:b4: e8:13:39:f3:a2:63:7c:13:5f:68:7a:f6:2f:23:c8: 4c:d6:8b:76:19:a9:2a:4a:de:6c:2c:a1:6d:6b:e0: 8f:9a:47:ce:e2:14:0c:6b:cc:1a:c3:21:97:46:16: 6e:6d:df:eb:1d:fe:10:db:77:79:95:42:27:14:7b: 03:82:b3:70:1d:b6:de:b3:59:f8:b0:b1:37:fe:fd: b0:a8:2c:96:09:5c:e0:ac:10:e3:8f:5d:73:f5:78: fe:6d:4c:64:5c:c3:72:f1:0d:eb:be:fd:6b:05:aa: 2d:fe:d8:a4:e0:ce:7b:9f:92:8a:b9:52:07:38:a7: 3b:58:6d:9c:a0:c6:27:40:05:d1:b8:35:33:20:bb: 55:1e:b9:b2:82:f4:d6:0a:bb:80:75:f0:7d:c9:e8: a9:88:3c:0a:69:98:5b:cf:a0:76:99:d1:15:e4:6b: 1b:77:6e:75:0d:a6:8f:ac:c1:bd:02:f6:69:35:79: c3:c7:ce:bf:c2:e8:45:13:93:57:ec:88:42:df:74: e7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:6A:ED:B0:29:FA:32:09:D5:BA:70:46:B7:B8:F5:24:75:FC:C1:0D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/CD6AEDB029FA3209D5BA7046B7B8F52475FCC10D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.236.0/23 Signature Algorithm: sha256WithRSAEncryption 86:e4:ea:98:95:85:57:84:ea:73:06:97:71:71:32:08:d9:0d: e7:2f:b6:19:3a:df:fd:ae:79:38:da:9a:d6:87:13:97:e3:56: b6:49:74:68:37:ff:83:ba:af:60:b9:86:55:dd:64:15:b1:45: e1:7f:e2:19:ff:a2:a2:28:38:5e:05:48:a1:a1:cb:36:ff:db: e6:e7:b1:7b:24:77:41:15:ed:39:d2:8d:38:5d:64:4f:18:95: a6:40:2a:89:7c:b1:99:0f:53:bb:7d:95:11:e4:b2:c6:1c:80: a4:96:19:f5:02:29:83:b9:05:dc:ca:ef:b8:39:cf:8f:70:e0: 53:b5:7f:11:79:c1:36:65:5c:eb:ed:1f:b1:a3:92:8f:bf:5e: c6:8a:9d:07:f0:bd:c0:d0:95:1c:f7:2c:59:50:90:13:33:a6: 53:29:32:02:42:19:92:5e:4f:5c:f2:e3:0c:e2:c5:d3:79:5a: 4f:cd:b6:41:75:a9:b3:17:d1:14:a7:5f:26:11:1d:d6:ab:ad: 47:c2:9c:1c:7d:5e:09:c4:65:08:4d:92:46:38:a7:0e:8c:dd: 9d:ad:d3:83:77:f1:73:8e:34:02:79:d5:0d:0b:71:6f:2f:b7: 90:c4:ae:50:ae:34:7f:e9:a3:ec:0b:05:33:3a:c9:5f:6f:21: 07:cc:9c:8b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUawjBDlD4iePs3XdIeYQTPnWoCugwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTA1MloX DTI3MDUwMjAwNTU1MlowMzExMC8GA1UEAxMoQ0Q2QUVEQjAyOUZBMzIwOUQ1QkE3 MDQ2QjdCOEY1MjQ3NUZDQzEwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO2EivmG6xDAJgp0je3iI73mda9K80apVDPUDhJOVRECkNhbEWiNsRtd/Qh3 wje3brqBd13xVA9dgRa06BM586JjfBNfaHr2LyPITNaLdhmpKkrebCyhbWvgj5pH zuIUDGvMGsMhl0YWbm3f6x3+ENt3eZVCJxR7A4KzcB223rNZ+LCxN/79sKgslglc 4KwQ449dc/V4/m1MZFzDcvEN6779awWqLf7YpODOe5+SirlSBzinO1htnKDGJ0AF 0bg1MyC7VR65soL01gq7gHXwfcnoqYg8CmmYW8+gdpnRFeRrG3dudQ2mj6zBvQL2 aTV5w8fOv8LoRROTV+yIQt905+UCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM1q7bAp+jIJ1bpwRre49SR1/MENMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZiNGM3MGExLTUwMzYtNDUwYi1iOTM2LTUwODRmNzhmODFlZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82YjRjNzBh MS01MDM2LTQ1MGItYjkzNi01MDg0Zjc4ZjgxZWYvMC9DRDZBRURCMDI5RkEzMjA5 RDVCQTcwNDZCN0I4RjUyNDc1RkNDMTBELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6/sMA0GCSqGSIb3DQEBCwUAA4IBAQCG5OqYlYVXhOpzBpdxcTII2Q3nL7YZ Ot/9rnk42prWhxOX41a2SXRoN/+Duq9guYZV3WQVsUXhf+IZ/6KiKDheBUihocs2 /9vm57F7JHdBFe050o04XWRPGJWmQCqJfLGZD1O7fZUR5LLGHICklhn1AimDuQXc yu+4Oc+PcOBTtX8RecE2ZVzr7R+xo5KPv17Gip0H8L3A0JUc9yxZUJATM6ZTKTIC QhmSXk9c8uMM4sXTeVpPzbZBdamzF9EUp18mER3Wq61HwpwcfV4JxGUITZJGOKcO jN2drdODd/FzjjQCedUNC3FvL7eQxK5QrjR/6aPsCwUzOslfbyEHzJyL -----END CERTIFICATE-----Generated at Tue May 12 22:03:37 2026 by rpki-client