$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.cer File: CE866CA7A48F4270D861141E8DB83F09E2EF39F6.cer (raw, json) Hash identifier: XtXXI0tgrhjS3oN6Nfq/PMthVu2A60le04uqsAqNIEc= Subject key identifier: CE:86:6C:A7:A4:8F:42:70:D8:61:14:1E:8D:B8:3F:09:E2:EF:39:F6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5633622A3B9484B207C966BBE0E93F702FC020A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:11:06 +0000 Certificate not after: Sun 02 May 2027 01:16:06 +0000 Subordinate resources: IP: 103.51.103.0/24 IP: 103.225.97.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:33:62:2a:3b:94:84:b2:07:c9:66:bb:e0:e9:3f:70:2f:c0:20:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:11:06 2026 GMT Not After : May 2 01:16:06 2027 GMT Subject: CN=CE866CA7A48F4270D861141E8DB83F09E2EF39F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f8:57:9b:6a:3b:17:20:52:6f:8a:e6:22:77: d6:bf:76:e9:1a:73:f4:e7:21:7b:7a:0d:c3:4d:24: 2f:1b:a3:e2:f5:9c:a7:ac:9c:6d:c9:aa:b0:bd:df: 43:20:0c:27:c4:66:14:e6:74:59:b7:a7:f2:bb:1e: 89:6d:bd:e7:8d:8c:ae:28:b2:e9:68:ce:d3:ef:19: 28:6b:a0:39:8b:52:2b:fa:ca:11:1f:38:86:04:bc: 15:14:20:4f:5e:97:bc:d7:e2:25:4e:46:b5:b8:e4: 1a:3d:d7:10:a2:95:99:d5:be:97:37:e7:8c:0b:89: 31:cd:45:29:13:c4:d1:35:13:29:fd:2b:4e:d6:1a: ac:c2:73:9e:56:31:46:8f:97:93:12:eb:e8:30:74: 4e:a5:ca:46:b7:77:30:79:df:4c:e2:1e:34:3a:3c: d1:25:0f:0b:9a:87:67:dd:4d:97:6b:86:57:e5:b8: f7:66:65:ca:2f:aa:fb:ba:c3:64:3b:c4:3a:0a:9d: a0:3e:5d:a3:ca:fc:a7:ce:4e:88:46:52:82:d2:2a: f6:ca:ec:62:5e:7b:f8:9e:bb:59:e0:8c:b8:c1:c0: 1d:8a:a5:7e:0c:20:23:bf:81:eb:17:6d:f8:b5:c3: ce:43:52:78:27:f7:6f:b4:9c:73:15:17:a4:ba:e5: e3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:86:6C:A7:A4:8F:42:70:D8:61:14:1E:8D:B8:3F:09:E2:EF:39:F6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.51.103.0/24 103.225.97.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:aa:27:e6:c9:9b:b0:d6:9f:31:35:1a:34:0f:d7:bb:58:eb: ef:45:27:bb:80:35:0e:03:52:c9:4e:bd:21:b2:16:24:dc:6b: 5e:53:ef:3a:9c:12:f9:93:82:d7:1c:19:e5:a5:32:cd:a3:ba: 4d:ce:18:92:6e:8c:b9:d2:dd:ad:19:42:b7:29:36:9e:36:1e: 76:f2:3b:4b:cf:86:3f:c7:38:10:fb:11:a2:89:14:af:52:d8: e9:a9:07:2e:9f:e8:e1:f7:0e:cf:ac:87:aa:77:02:dd:e4:ea: 3b:1d:81:32:ef:1b:5f:7b:14:f2:8c:4a:11:0a:1b:b3:2b:ba: ae:f1:53:ee:29:f9:e2:82:4b:94:07:8f:a4:5e:79:e0:1a:99: 99:55:26:ca:b6:17:04:d3:b4:cc:c0:e2:27:84:82:8e:00:f2: 6f:a5:a1:71:d4:40:a8:39:9a:5a:49:f0:4e:71:cb:5c:d7:73: 1d:ab:60:3e:1d:92:30:d0:19:92:c6:77:23:04:43:4b:b7:6f: 85:97:1e:c8:8d:b4:23:71:ba:23:6a:37:d1:19:53:bd:ca:3b: bf:a2:70:d7:a6:72:b3:80:1f:90:e1:62:25:d0:b6:e5:0c:4b: 47:8b:83:41:b2:10:bf:05:89:af:b8:0e:f5:d5:b7:d6:ff:93: c0:ad:78:05 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUVjNiKjuUhLIHyWa74Ok/cC/AIKcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTEwNloX DTI3MDUwMjAxMTYwNlowMzExMC8GA1UEAxMoQ0U4NjZDQTdBNDhGNDI3MEQ4NjEx NDFFOERCODNGMDlFMkVGMzlGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMH4V5tqOxcgUm+K5iJ31r926Rpz9Oche3oNw00kLxuj4vWcp6ycbcmqsL3f QyAMJ8RmFOZ0Wben8rseiW29542Mriiy6WjO0+8ZKGugOYtSK/rKER84hgS8FRQg T16XvNfiJU5GtbjkGj3XEKKVmdW+lzfnjAuJMc1FKRPE0TUTKf0rTtYarMJznlYx Ro+XkxLr6DB0TqXKRrd3MHnfTOIeNDo80SUPC5qHZ91Nl2uGV+W492Zlyi+q+7rD ZDvEOgqdoD5do8r8p85OiEZSgtIq9srsYl57+J67WeCMuMHAHYqlfgwgI7+B6xdt +LXDzkNSeCf3b7SccxUXpLrl45ECAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM6GbKekj0Jw2GEUHo24Pwni7zn2MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg3ODNlZDI4LTU4ODEtNDdkYS1hZTY2LWUxZGI2Nzk0MmViMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84NzgzZWQy OC01ODgxLTQ3ZGEtYWU2Ni1lMWRiNjc5NDJlYjEvMC9DRTg2NkNBN0E0OEY0Mjcw RDg2MTE0MUU4REI4M0YwOUUyRUYzOUY2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQAZzNnAwQAZ+FhMA0GCSqGSIb3DQEBCwUAA4IBAQCLqifmyZuw1p8xNRo0D9e7 WOvvRSe7gDUOA1LJTr0hshYk3GteU+86nBL5k4LXHBnlpTLNo7pNzhiSboy50t2t GUK3KTaeNh528jtLz4Y/xzgQ+xGiiRSvUtjpqQcun+jh9w7PrIeqdwLd5Oo7HYEy 7xtfexTyjEoRChuzK7qu8VPuKfnigkuUB4+kXnngGpmZVSbKthcE07TMwOInhIKO APJvpaFx1ECoOZpaSfBOcctc13Mdq2A+HZIw0BmSxncjBENLt2+Flx7IjbQjcboj ajfRGVO9yju/onDXpnKzgB+Q4WIl0LblDEtHi4NBshC/BYmvuA711bfW/5PArXgF -----END CERTIFICATE-----Generated at Tue May 12 22:17:11 2026 by rpki-client