$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer File: CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.cer (raw, json) Hash identifier: lzWda2UzB1iM54fvqIQVOOrLlFqk/sdqd0kmeJOn7U4= Subject key identifier: CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 648FDE73487BDFF36729F759993C2603A68A51BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:43:25 +0000 Certificate not after: Sun 02 May 2027 00:48:25 +0000 Subordinate resources: IP: 103.98.121.0/24 IP: 103.103.175.0/24 IP: 103.103.192.0/23 IP: 2001:df2:2500::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8f:de:73:48:7b:df:f3:67:29:f7:59:99:3c:26:03:a6:8a:51:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:43:25 2026 GMT Not After : May 2 00:48:25 2027 GMT Subject: CN=CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7d:ba:b8:69:3b:81:7c:36:4d:bb:1a:25:1c: 27:db:ae:51:c4:02:24:e7:a6:ea:92:a8:58:1e:b7: fe:8f:c3:fe:bb:be:4c:92:da:98:52:01:2f:48:73: 27:25:b1:32:e2:be:a4:d5:3f:98:65:52:9e:4c:7c: 01:86:ab:ec:15:82:4f:f2:a4:54:39:62:4a:dd:3d: 1b:f7:f0:33:52:3a:5a:de:bd:30:0e:8e:ce:99:1d: b0:6d:30:9e:4c:7d:82:bb:3c:0e:9a:da:1c:f8:aa: 12:f8:e8:7d:87:90:a7:29:32:84:f9:14:fb:e0:36: 63:35:b2:30:bd:8e:b6:63:90:71:18:92:65:3a:bc: bf:40:50:b6:90:9b:d6:99:48:f8:c9:ba:66:e7:37: b2:aa:0d:dd:8a:3e:df:8e:36:75:08:a6:97:6b:62: 7f:6f:5d:ad:49:7c:87:c7:e4:2d:df:86:5c:96:b8: 55:de:9d:ee:0d:81:47:40:c7:cd:39:03:6e:e5:14: 88:02:ef:f8:6b:be:30:d5:55:b0:e0:22:51:ed:71: a9:41:3d:04:14:d7:59:f8:20:ff:3f:e9:b7:3a:7f: 94:67:27:7e:e7:74:9a:4c:23:58:0f:e3:5f:a6:3b: d4:9a:de:b7:ec:f6:6a:53:9e:46:8e:41:b7:01:bd: b0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:F2:F9:FB:1D:BD:DE:75:7E:11:AC:59:2B:3E:34:10:ED:7D:67:7A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/CEF2F9FB1DBDDE757E11AC592B3E3410ED7D677A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.98.121.0/24 103.103.175.0/24 103.103.192.0/23 IPv6: 2001:df2:2500::/48 Signature Algorithm: sha256WithRSAEncryption 7d:f3:ba:de:01:35:88:ec:09:79:85:e4:a7:63:07:fd:9f:ca: e6:23:74:ba:4a:a8:70:4f:5c:9a:5e:7e:19:bb:f2:b1:35:f8: 9d:ea:0d:8f:c4:47:98:b5:e7:8c:9d:14:11:d1:84:52:65:65: a4:2f:14:e0:c9:20:6d:7f:e5:6f:e5:98:03:50:35:50:89:60: 6d:ba:3a:80:a3:da:39:3d:f8:a0:ed:ba:f4:2d:8b:72:b2:55: 00:2a:da:0c:76:de:23:68:e6:d2:1f:f6:63:d0:90:b0:78:ec: 09:cf:2e:05:8c:8e:f4:a6:db:b6:69:20:f8:15:d3:b7:79:44: 95:77:7f:f9:64:4b:58:14:f5:d6:66:e3:5d:f1:42:fd:23:5c: f9:ab:52:74:5e:aa:6d:56:bd:05:a1:bd:88:61:93:31:e9:fc: b9:5d:81:7d:f8:83:2a:9b:30:77:90:6c:2c:3e:6a:d6:08:4c: e6:89:5d:19:d1:b9:4c:8e:95:08:51:9b:71:0b:55:b6:0c:f0: 54:a7:e2:3d:3d:17:16:5e:b5:5d:2d:f4:28:e0:d4:27:f9:36: b0:c5:4c:00:08:77:ac:b5:89:79:3a:0e:9b:81:c7:26:fc:02: c9:dd:8e:77:8f:91:ec:b6:3e:70:4b:3c:cc:ad:9c:50:bb:40: 50:96:6b:a5 -----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgIUZI/ec0h73/NnKfdZmTwmA6aKUb0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDMyNVoX DTI3MDUwMjAwNDgyNVowMzExMC8GA1UEAxMoQ0VGMkY5RkIxREJEREU3NTdFMTFB QzU5MkIzRTM0MTBFRDdENjc3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALV9urhpO4F8Nk27GiUcJ9uuUcQCJOem6pKoWB63/o/D/ru+TJLamFIBL0hz JyWxMuK+pNU/mGVSnkx8AYar7BWCT/KkVDliSt09G/fwM1I6Wt69MA6OzpkdsG0w nkx9grs8DpraHPiqEvjofYeQpykyhPkU++A2YzWyML2OtmOQcRiSZTq8v0BQtpCb 1plI+Mm6Zuc3sqoN3Yo+3442dQiml2tif29drUl8h8fkLd+GXJa4Vd6d7g2BR0DH zTkDbuUUiALv+Gu+MNVVsOAiUe1xqUE9BBTXWfgg/z/ptzp/lGcnfud0mkwjWA/j X6Y71Jret+z2alOeRo5BtwG9sO8CAwEAAaOCAtYwggLSMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM7y+fsdvd51fhGsWSs+NBDtfWd6MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVlYmJhZGIzLTlhYzgtNDZkZi1hYjkxLWJmMzlkZmVlMWJkMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81ZWJiYWRi My05YWM4LTQ2ZGYtYWI5MS1iZjM5ZGZlZTFiZDAvMC9DRUYyRjlGQjFEQkRERTc1 N0UxMUFDNTkyQjNFMzQxMEVEN0Q2NzdBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATAS AwQAZ2J5AwQAZ2evAwQBZ2fAMA8EAgACMAkDBwAgAQ3yJQAwDQYJKoZIhvcNAQEL BQADggEBAH3zut4BNYjsCXmF5KdjB/2fyuYjdLpKqHBPXJpefhm78rE1+J3qDY/E R5i154ydFBHRhFJlZaQvFODJIG1/5W/lmANQNVCJYG26OoCj2jk9+KDtuvQti3Ky VQAq2gx23iNo5tIf9mPQkLB47AnPLgWMjvSm27ZpIPgV07d5RJV3f/lkS1gU9dZm 413xQv0jXPmrUnReqm1WvQWhvYhhkzHp/LldgX34gyqbMHeQbCw+atYITOaJXRnR uUyOlQhRm3ELVbYM8FSn4j09FxZetV0t9Cjg1Cf5NrDFTAAId6y1iXk6DpuBxyb8 AsndjnePkey2PnBLPMytnFC7QFCWa6U= -----END CERTIFICATE-----Generated at Tue May 12 22:47:34 2026 by rpki-client