$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer File: CECA8630C7AA85489AEB7B75C1B81723E0F98B00.cer (raw, json) Hash identifier: yTldeBNjiRNc7rtvBzBtRVl2SMoeBLXDulLq/IzhbhM= Subject key identifier: CE:CA:86:30:C7:AA:85:48:9A:EB:7B:75:C1:B8:17:23:E0:F9:8B:00 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 637F7A6FA52E28F5E805C9E1B1A8C1F49D388B70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:41:38 +0000 Certificate not after: Sun 02 May 2027 00:46:38 +0000 Subordinate resources: IP: 103.149.118.0/23 IP: 2001:df3:2380::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:7f:7a:6f:a5:2e:28:f5:e8:05:c9:e1:b1:a8:c1:f4:9d:38:8b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:41:38 2026 GMT Not After : May 2 00:46:38 2027 GMT Subject: CN=CECA8630C7AA85489AEB7B75C1B81723E0F98B00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:08:65:ca:8f:e3:cc:b9:bf:ba:89:b7:7f:c6: 06:e2:02:b4:b9:ec:0b:ff:b7:df:09:00:0b:dd:96: ed:bb:9b:aa:2b:95:72:43:2c:ef:ab:89:04:5c:65: c5:06:40:6c:e7:26:26:2f:f1:58:c6:69:c4:a5:0a: d5:e9:11:0a:02:0f:17:76:be:63:85:b1:1a:1f:93: 0c:8b:5e:14:28:99:e5:1f:4b:3c:1c:70:0b:b6:09: 2a:a9:90:e5:b8:7f:f0:85:07:fa:a5:c4:07:92:e2: 63:23:31:5f:c2:b9:68:fd:49:32:ac:34:2b:00:81: 87:bf:41:fb:10:8d:b5:d7:fb:f4:d3:65:40:09:f5: 6d:af:b4:23:93:9d:4b:eb:0a:e7:4d:11:96:a5:6f: ca:be:9d:37:2d:92:82:f5:1a:fa:e8:bd:1e:60:c1: d0:62:7a:43:ac:37:82:18:24:20:62:00:9b:67:b2: b4:d3:ea:df:e7:f8:30:74:6d:4d:c2:ac:dc:3f:5f: 0a:9a:07:04:0e:89:fc:2f:1f:7c:d8:05:1f:4e:8d: 52:ff:d2:56:92:af:ef:6a:06:6e:ab:f9:34:39:ad: 31:83:86:52:1a:c3:5f:a3:9b:c8:83:1c:aa:a0:fa: f9:e2:c9:0b:78:c0:cb:de:d5:7a:b0:5a:11:58:d5: ad:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:CA:86:30:C7:AA:85:48:9A:EB:7B:75:C1:B8:17:23:E0:F9:8B:00 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/CECA8630C7AA85489AEB7B75C1B81723E0F98B00.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.118.0/23 IPv6: 2001:df3:2380::/48 Signature Algorithm: sha256WithRSAEncryption 3d:c7:76:51:d5:79:06:d1:68:59:d5:78:2d:a6:dd:26:d4:34: 67:fd:e8:9f:85:77:e2:6a:67:da:97:f9:7a:51:89:8e:6a:91: ff:8d:7e:2a:80:b6:f5:b5:28:fb:1d:fc:86:c9:62:dc:8f:0e: 47:07:6b:9b:93:06:92:8d:fe:a0:c9:d5:94:64:e4:0c:6c:d6: 82:f8:c8:44:10:f3:65:c6:c1:7b:b3:23:a2:12:ac:83:17:63: ea:8b:a3:75:f1:d0:fa:0e:b3:21:d4:70:05:1d:87:26:8f:38: 7d:55:9c:8c:99:34:aa:0e:07:dd:83:fd:34:4d:37:b0:a0:3c: 05:08:49:3b:fa:e2:d5:2e:bc:93:03:31:bf:fd:e8:0e:d5:4e: b1:d7:3c:71:65:0f:bd:1e:5f:07:d4:2c:1d:f2:f3:d9:b9:70: 29:ae:a2:05:de:d8:4c:f6:cf:3d:52:48:0d:29:4b:04:0e:44: e1:2f:bc:b3:7c:1a:ba:68:fd:82:10:50:7f:ee:08:b5:91:91: 2a:e2:05:a1:26:d2:09:79:c7:30:2e:4f:ec:db:91:ed:ba:92: 48:61:0e:fa:34:01:38:4d:4e:e4:7c:57:0e:af:04:3d:b7:bd: 91:fb:32:04:af:c5:cf:24:ce:1f:c0:a0:89:b4:f5:f1:e6:b6: 23:0a:1c:da -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUY396b6UuKPXoBcnhsajB9J04i3AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDEzOFoX DTI3MDUwMjAwNDYzOFowMzExMC8GA1UEAxMoQ0VDQTg2MzBDN0FBODU0ODlBRUI3 Qjc1QzFCODE3MjNFMEY5OEIwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL8IZcqP48y5v7qJt3/GBuICtLnsC/+33wkAC92W7bubqiuVckMs76uJBFxl xQZAbOcmJi/xWMZpxKUK1ekRCgIPF3a+Y4WxGh+TDIteFCiZ5R9LPBxwC7YJKqmQ 5bh/8IUH+qXEB5LiYyMxX8K5aP1JMqw0KwCBh79B+xCNtdf79NNlQAn1ba+0I5Od S+sK500RlqVvyr6dNy2SgvUa+ui9HmDB0GJ6Q6w3ghgkIGIAm2eytNPq3+f4MHRt TcKs3D9fCpoHBA6J/C8ffNgFH06NUv/SVpKv72oGbqv5NDmtMYOGUhrDX6ObyIMc qqD6+eLJC3jAy97VerBaEVjVrR8CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM7KhjDHqoVImut7dcG4FyPg+YsAMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVjYzcwZjdkLTMzZmUtNGRmMi04MWU1LWRjMGQ1NWFjNTE3MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81Y2M3MGY3 ZC0zM2ZlLTRkZjItODFlNS1kYzBkNTVhYzUxNzAvMC9DRUNBODYzMEM3QUE4NTQ4 OUFFQjdCNzVDMUI4MTcyM0UwRjk4QjAwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ5V2MA8EAgACMAkDBwAgAQ3zI4AwDQYJKoZIhvcNAQELBQADggEBAD3HdlHV eQbRaFnVeC2m3SbUNGf96J+Fd+JqZ9qX+XpRiY5qkf+NfiqAtvW1KPsd/IbJYtyP DkcHa5uTBpKN/qDJ1ZRk5Axs1oL4yEQQ82XGwXuzI6ISrIMXY+qLo3Xx0PoOsyHU cAUdhyaPOH1VnIyZNKoOB92D/TRNN7CgPAUISTv64tUuvJMDMb/96A7VTrHXPHFl D70eXwfULB3y89m5cCmuogXe2Ez2zz1SSA0pSwQOROEvvLN8Grpo/YIQUH/uCLWR kSriBaEm0gl5xzAuT+zbke26kkhhDvo0AThNTuR8Vw6vBD23vZH7MgSvxc8kzh/A oIm09fHmtiMKHNo= -----END CERTIFICATE-----Generated at Wed May 13 02:37:01 2026 by rpki-client