$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/CDE6C05A893420EB6585B4E0E27BB14D54043614.cer File: CDE6C05A893420EB6585B4E0E27BB14D54043614.cer (raw, json) Hash identifier: cb4WWp03bJ80sD3bM232UsQi1OeT7iI6dE4f6WS3EDE= Subject key identifier: CD:E6:C0:5A:89:34:20:EB:65:85:B4:E0:E2:7B:B1:4D:54:04:36:14 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6CD3B36A1E677549B9F54D005BF087EB865EBB3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:51:39 +0000 Certificate not after: Sun 02 May 2027 00:56:39 +0000 Subordinate resources: IP: 103.124.4.0/22 IP: 2403:d640::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:d3:b3:6a:1e:67:75:49:b9:f5:4d:00:5b:f0:87:eb:86:5e:bb:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:51:39 2026 GMT Not After : May 2 00:56:39 2027 GMT Subject: CN=CDE6C05A893420EB6585B4E0E27BB14D54043614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:90:17:d8:78:97:e4:bb:29:2d:c2:c5:64:d4: 85:f8:28:d3:db:8d:7a:a1:93:f8:56:8b:53:ba:71: 45:10:df:cc:53:5e:46:83:1f:3f:a0:fa:95:85:ea: 29:72:3a:9d:de:b6:db:f2:6d:ee:0a:50:bf:4e:e0: ee:f6:eb:f3:96:51:90:40:76:6c:ce:8f:97:3e:3e: c4:d6:83:35:88:93:5c:e2:99:69:a4:d5:28:ce:40: 21:67:90:d8:ea:76:a1:9a:ba:98:3f:3e:e2:9d:da: 8a:94:57:a2:46:eb:22:21:55:a8:14:8c:c8:54:f8: 57:be:66:bc:9b:08:8b:67:7d:02:9a:22:b1:f9:27: af:c6:ea:28:a1:54:d2:d2:02:ce:2d:95:b0:9d:9c: a2:f7:0a:c3:30:09:f0:1d:d9:1d:d9:e1:66:90:69: 4a:63:97:4b:62:bd:05:cd:76:7b:28:b1:7f:40:83: 6e:87:2b:65:1e:87:bb:62:14:00:74:36:1e:2f:a9: cf:74:5d:80:49:c1:88:d7:1d:06:da:90:3b:76:05: 6d:f0:b8:34:1b:52:82:ff:45:91:5a:fb:12:c1:0d: 19:2b:0e:49:20:6f:3b:07:d8:40:88:f2:4d:fd:a0: a8:bc:c9:9f:e5:43:33:45:1e:eb:de:60:e3:02:3b: 49:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:E6:C0:5A:89:34:20:EB:65:85:B4:E0:E2:7B:B1:4D:54:04:36:14 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/CDE6C05A893420EB6585B4E0E27BB14D54043614.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.124.4.0/22 IPv6: 2403:d640::/32 Signature Algorithm: sha256WithRSAEncryption 29:26:b4:1d:55:65:06:52:70:cc:74:c8:51:0e:d7:ee:6c:91: a4:be:9a:18:85:7a:e3:b4:f6:a0:85:c3:c1:7b:5b:70:32:2c: a5:b5:ee:84:06:a7:76:bb:18:51:5e:99:f8:53:9d:a7:9b:68: e1:2e:68:00:28:f3:e7:d2:35:13:02:d9:76:7d:92:70:2b:ae: 1d:a7:5f:56:fe:f1:c8:7f:3d:f9:70:9f:d4:86:9b:78:1e:65: cf:a1:15:81:76:06:24:c2:cf:01:f2:27:57:ac:e1:c6:a0:da: 38:fc:bf:8c:a5:b0:df:41:26:6a:1f:e6:85:2c:77:b5:46:e9: 93:a0:26:ef:d5:37:80:f7:41:88:b4:9d:ac:5c:ba:56:24:95: 59:c5:af:80:32:87:94:f8:21:82:9d:c5:a5:5d:f4:35:eb:9e: de:a0:bc:d4:9b:cc:64:b7:c0:5b:e4:96:c5:3d:93:43:6c:3c: ad:3b:32:48:5b:70:00:c6:1b:0f:3b:e2:f5:3d:1d:a7:4b:20: 34:5b:a2:b7:e9:47:30:e5:11:69:fe:17:e9:15:66:5f:42:9c: 6b:37:33:9b:eb:32:be:30:55:35:4a:45:1c:02:55:c0:cc:f8: 4c:e2:2b:b4:f7:c3:00:88:6e:a7:8e:d8:00:a7:0f:65:34:10: d6:4b:5d:22 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUbNOzah5ndUm59U0AW/CH64ZeuzswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTEzOVoX DTI3MDUwMjAwNTYzOVowMzExMC8GA1UEAxMoQ0RFNkMwNUE4OTM0MjBFQjY1ODVC NEUwRTI3QkIxNEQ1NDA0MzYxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANKQF9h4l+S7KS3CxWTUhfgo09uNeqGT+FaLU7pxRRDfzFNeRoMfP6D6lYXq KXI6nd622/Jt7gpQv07g7vbr85ZRkEB2bM6Plz4+xNaDNYiTXOKZaaTVKM5AIWeQ 2Op2oZq6mD8+4p3aipRXokbrIiFVqBSMyFT4V75mvJsIi2d9Apoisfknr8bqKKFU 0tICzi2VsJ2covcKwzAJ8B3ZHdnhZpBpSmOXS2K9Bc12eyixf0CDbocrZR6Hu2IU AHQ2Hi+pz3RdgEnBiNcdBtqQO3YFbfC4NBtSgv9FkVr7EsENGSsOSSBvOwfYQIjy Tf2gqLzJn+VDM0Ue695g4wI7SX0CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM3mwFqJNCDrZYW04OJ7sU1UBDYUMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZjYjI5MjhlLTliMzktNGE5MC05N2QyLTA0Y2Y2NWZlOTU3OC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82Y2IyOTI4 ZS05YjM5LTRhOTAtOTdkMi0wNGNmNjVmZTk1NzgvMC9DREU2QzA1QTg5MzQyMEVC NjU4NUI0RTBFMjdCQjE0RDU0MDQzNjE0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ3wEMA0EAgACMAcDBQAkA9ZAMA0GCSqGSIb3DQEBCwUAA4IBAQApJrQdVWUG UnDMdMhRDtfubJGkvpoYhXrjtPaghcPBe1twMiylte6EBqd2uxhRXpn4U52nm2jh LmgAKPPn0jUTAtl2fZJwK64dp19W/vHIfz35cJ/Uhpt4HmXPoRWBdgYkws8B8idX rOHGoNo4/L+MpbDfQSZqH+aFLHe1RumToCbv1TeA90GItJ2sXLpWJJVZxa+AMoeU +CGCncWlXfQ1657eoLzUm8xkt8Bb5JbFPZNDbDytOzJIW3AAxhsPO+L1PR2nSyA0 W6K36Ucw5RFp/hfpFWZfQpxrNzOb6zK+MFU1SkUcAlXAzPhM4iu098MAiG6njtgA pw9lNBDWS10i -----END CERTIFICATE-----Generated at Wed May 13 06:56:12 2026 by rpki-client