$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer File: CEC7223DC3162D68B5B173F5479670C6ED7E854B.cer (raw, json) Hash identifier: TILgy4f5LG+khikSwenUBlA7Naed54672k7T2n+9AL4= Subject key identifier: CE:C7:22:3D:C3:16:2D:68:B5:B1:73:F5:47:96:70:C6:ED:7E:85:4B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 55CCBEE2B2610EB3D77DF6DD4BCB4148F216434A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:24:50 +0000 Certificate not after: Sun 02 May 2027 00:29:50 +0000 Subordinate resources: AS: 136102 AS: 137286 IP: 49.128.188.0/22 IP: 103.10.148.0/22 IP: 103.90.248.0/22 IP: 2001:df0:e900::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:cc:be:e2:b2:61:0e:b3:d7:7d:f6:dd:4b:cb:41:48:f2:16:43:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:24:50 2026 GMT Not After : May 2 00:29:50 2027 GMT Subject: CN=CEC7223DC3162D68B5B173F5479670C6ED7E854B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:73:52:13:b2:c7:4f:bd:df:e0:50:43:a7:f1: a6:e8:5b:0b:3e:db:3b:d4:5c:92:42:96:94:70:f9: 06:19:72:46:a5:39:67:12:00:7d:ad:c5:a0:ad:1f: 6d:c9:aa:77:26:e5:e3:33:ed:ab:ab:70:cc:bc:b8: e0:00:32:83:16:75:66:1a:d1:d1:1d:88:f1:0c:0b: 5b:a7:a4:e6:2b:b1:11:83:01:30:a5:29:98:72:09: 3f:8a:7a:0e:04:10:98:3f:72:68:16:ff:28:2f:4a: d5:7f:f9:49:7e:0e:55:e4:a1:1e:78:4a:11:1f:2b: 99:76:40:79:3c:88:d2:a4:86:4b:c1:4a:b5:dd:52: 3f:61:a9:36:64:8c:c7:32:1d:45:cf:f0:94:e3:f2: b2:83:eb:c7:c3:d3:13:65:c8:7b:a5:b2:88:46:7e: 67:fd:02:71:ff:88:a5:e8:e0:92:b6:28:f7:e2:33: c9:c6:b9:93:7e:2f:e0:5a:6e:b8:88:4e:9a:f3:85: 7f:9a:34:c8:de:c1:48:dd:74:a6:5d:9a:20:2a:2a: c8:73:b3:00:3e:fd:f0:20:85:f7:0f:13:a0:53:f1: c0:19:a4:b5:ab:6e:0d:18:6c:07:ed:78:98:7f:dd: 63:0e:4c:63:10:bf:d3:bb:37:32:60:fc:79:68:7c: 3d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:C7:22:3D:C3:16:2D:68:B5:B1:73:F5:47:96:70:C6:ED:7E:85:4B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/CEC7223DC3162D68B5B173F5479670C6ED7E854B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.128.188.0/22 103.10.148.0/22 103.90.248.0/22 IPv6: 2001:df0:e900::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 136102 137286 Signature Algorithm: sha256WithRSAEncryption 79:69:1c:ae:b2:c2:48:58:10:6d:f1:63:69:8d:c6:56:0b:63: 48:d6:f3:68:c5:35:8a:d9:73:df:ef:2b:8f:44:f8:0a:af:8d: 23:e8:a5:4f:10:36:ae:39:89:42:22:dd:2d:06:a5:21:3c:42: b1:ea:d7:ca:79:6a:cb:ca:d2:ad:cc:0b:23:26:da:5c:c3:6a: 2e:7b:96:17:b9:d5:c9:c6:d1:a5:c7:35:1a:0c:1e:71:37:14: 3a:49:2d:e5:2c:1c:31:d0:2b:f2:cb:fd:35:44:07:23:0e:48: cb:d3:b3:ab:6f:19:b5:39:56:34:e7:b9:21:aa:d9:59:16:00: 18:1b:52:b5:72:8e:a2:19:74:e4:71:f3:0a:8c:ad:e0:b3:31: 21:0d:11:aa:81:de:ee:98:f2:06:de:d5:de:af:77:40:74:a6: e0:bc:3d:31:c7:6b:fa:10:1d:ac:29:7b:6c:7f:60:2a:8a:71: 21:d1:7a:e4:1d:27:0e:47:20:b1:be:6a:04:f8:83:7d:2c:6b: c6:d0:87:78:63:ad:47:e9:d7:ef:54:80:a3:9f:f4:33:97:1c: a5:b1:ad:85:d7:97:ad:1d:31:73:31:0b:ca:ea:56:4c:4f:b8: a4:0f:9f:19:2b:f6:3b:e0:b0:25:a6:12:d4:98:d0:81:27:77: 4c:05:95:b5 -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIUVcy+4rJhDrPXffbdS8tBSPIWQ0owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjQ1MFoX DTI3MDUwMjAwMjk1MFowMzExMC8GA1UEAxMoQ0VDNzIyM0RDMzE2MkQ2OEI1QjE3 M0Y1NDc5NjcwQzZFRDdFODU0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANhzUhOyx0+93+BQQ6fxpuhbCz7bO9RckkKWlHD5BhlyRqU5ZxIAfa3FoK0f bcmqdybl4zPtq6twzLy44AAygxZ1ZhrR0R2I8QwLW6ek5iuxEYMBMKUpmHIJP4p6 DgQQmD9yaBb/KC9K1X/5SX4OVeShHnhKER8rmXZAeTyI0qSGS8FKtd1SP2GpNmSM xzIdRc/wlOPysoPrx8PTE2XIe6WyiEZ+Z/0Ccf+IpejgkrYo9+Izyca5k34v4Fpu uIhOmvOFf5o0yN7BSN10pl2aICoqyHOzAD798CCF9w8ToFPxwBmktatuDRhsB+14 mH/dYw5MYxC/07s3MmD8eWh8PY8CAwEAAaOCAvcwggLzMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM7HIj3DFi1otbFz9UeWcMbtfoVLMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQ0MDJkYWE1LWZiMGMtNGEyNC05ODg5LTMzYmQ1MGRiNGZlMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80NDAyZGFh NS1mYjBjLTRhMjQtOTg4OS0zM2JkNTBkYjRmZTAvMC9DRUM3MjIzREMzMTYyRDY4 QjVCMTczRjU0Nzk2NzBDNkVEN0U4NTRCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATAS AwQCMYC8AwQCZwqUAwQCZ1r4MA8EAgACMAkDBwAgAQ3w6QAwHwYIKwYBBQUHAQgB Af8EEDAOoAwwCgIDAhOmAgMCGEYwDQYJKoZIhvcNAQELBQADggEBAHlpHK6ywkhY EG3xY2mNxlYLY0jW82jFNYrZc9/vK49E+AqvjSPopU8QNq45iUIi3S0GpSE8QrHq 18p5asvK0q3MCyMm2lzDai57lhe51cnG0aXHNRoMHnE3FDpJLeUsHDHQK/LL/TVE ByMOSMvTs6tvGbU5VjTnuSGq2VkWABgbUrVyjqIZdORx8wqMreCzMSENEaqB3u6Y 8gbe1d6vd0B0puC8PTHHa/oQHawpe2x/YCqKcSHReuQdJw5HILG+agT4g30sa8bQ h3hjrUfp1+9UgKOf9DOXHKWxrYXXl60dMXMxC8rqVkxPuKQPnxkr9jvgsCWmEtSY 0IEnd0wFlbU= -----END CERTIFICATE-----Generated at Tue May 12 22:16:53 2026 by rpki-client