$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/CF55E7412871AB0F42347E2FEE1F6815035C7C39.cer File: CF55E7412871AB0F42347E2FEE1F6815035C7C39.cer (raw, json) Hash identifier: 215rFWjDEjdKZKx9AGHMO0aE7i3onrJtpTICR8HM01g= Subject key identifier: CF:55:E7:41:28:71:AB:0F:42:34:7E:2F:EE:1F:68:15:03:5C:7C:39 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 66A750AB7E0A5601CAE04F3425DE06FD30CEE0F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:25:33 +0000 Certificate not after: Sun 02 May 2027 01:30:33 +0000 Subordinate resources: IP: 103.117.10.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a7:50:ab:7e:0a:56:01:ca:e0:4f:34:25:de:06:fd:30:ce:e0:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:25:33 2026 GMT Not After : May 2 01:30:33 2027 GMT Subject: CN=CF55E7412871AB0F42347E2FEE1F6815035C7C39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:38:68:f3:67:8d:91:c2:2e:4d:18:19:a8:07: 5c:af:a2:e2:f2:a0:2b:55:4d:43:68:bf:15:65:25: 75:38:f3:60:59:54:e7:73:de:17:e4:20:03:15:d8: e1:55:db:bc:9f:33:61:ac:67:9e:a5:46:21:e9:84: db:01:b5:1e:1a:fd:d2:7b:89:6c:32:bc:82:f9:be: 12:b6:fd:27:e9:15:58:79:06:0e:ec:cf:8b:b6:e4: 1e:81:aa:bf:44:2a:46:3a:98:fb:9d:f2:07:fe:bf: 22:0e:00:3b:d1:dd:b7:1a:56:9a:e6:35:d3:1b:d2: f3:2a:b2:c9:a0:da:45:24:c2:27:a9:2a:00:3c:55: 34:81:cb:ed:56:bf:a4:d1:71:e6:d7:ac:2a:70:6c: dd:6a:02:11:f4:e4:4f:2e:df:71:60:ba:4e:b2:4a: 8a:ae:2b:68:04:00:e5:19:91:03:e5:59:57:ae:bf: 7f:4b:84:d7:1e:22:5b:57:14:03:97:13:b4:1d:8b: 6a:7c:a2:84:a2:13:14:93:41:e9:fe:e9:f0:7a:54: a3:d1:25:5a:c1:0a:a1:4f:2f:12:65:eb:72:a9:c4: d0:68:1e:e0:9a:b0:57:96:21:1d:9e:17:77:f5:df: 1a:59:7a:59:83:a3:ad:21:ed:a4:90:09:26:3d:f9: 8f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:55:E7:41:28:71:AB:0F:42:34:7E:2F:EE:1F:68:15:03:5C:7C:39 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/CF55E7412871AB0F42347E2FEE1F6815035C7C39.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.117.10.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:8e:fe:be:8f:63:d6:61:3c:db:b5:ca:ba:45:7b:1d:b1:8a: 7b:b6:32:48:25:cd:f2:4b:9b:2c:86:39:3f:52:83:71:18:e0: eb:49:86:d0:40:7f:d4:d5:44:7e:fe:3f:2b:08:ee:b2:04:be: 0c:1f:2d:0b:a5:86:30:09:b3:e5:ff:a0:bc:8b:0f:b2:d2:b3: e3:b9:11:3a:e9:12:ed:e4:c5:21:c0:fa:6e:fe:c2:fa:2b:e6: ae:0b:2b:47:09:50:5f:43:da:9c:35:8b:dc:92:25:e2:17:9c: c2:db:87:a4:98:af:af:20:22:b6:71:ec:0d:f2:9c:ed:83:1e: 7f:cf:41:be:12:04:61:6d:02:39:18:62:d7:ac:72:aa:60:a0: 3e:2f:b2:8d:b8:22:e6:cc:c4:95:38:c0:77:c5:06:3d:17:4a: e3:e8:da:94:5d:11:d5:01:be:24:b4:a2:e1:fb:f3:16:73:88: 78:e7:90:e6:31:d5:50:b8:fe:b3:3c:d8:79:db:a4:20:03:9d: 83:b2:e5:7f:35:ff:69:3c:82:79:6e:8c:52:ca:1c:82:b2:12: 0f:f0:26:26:45:9e:42:40:11:e8:b0:ba:43:3c:63:8c:28:ab: 6e:86:f2:8d:8f:89:4b:f6:50:5a:b7:2c:58:ea:d7:f3:a4:bd: 1f:0f:5e:4d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUZqdQq34KVgHK4E80Jd4G/TDO4PgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjUzM1oX DTI3MDUwMjAxMzAzM1owMzExMC8GA1UEAxMoQ0Y1NUU3NDEyODcxQUIwRjQyMzQ3 RTJGRUUxRjY4MTUwMzVDN0MzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALo4aPNnjZHCLk0YGagHXK+i4vKgK1VNQ2i/FWUldTjzYFlU53PeF+QgAxXY 4VXbvJ8zYaxnnqVGIemE2wG1Hhr90nuJbDK8gvm+Erb9J+kVWHkGDuzPi7bkHoGq v0QqRjqY+53yB/6/Ig4AO9HdtxpWmuY10xvS8yqyyaDaRSTCJ6kqADxVNIHL7Va/ pNFx5tesKnBs3WoCEfTkTy7fcWC6TrJKiq4raAQA5RmRA+VZV66/f0uE1x4iW1cU A5cTtB2LanyihKITFJNB6f7p8HpUo9ElWsEKoU8vEmXrcqnE0Gge4JqwV5YhHZ4X d/XfGll6WYOjrSHtpJAJJj35j6MCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM9V50EocasPQjR+L+4faBUDXHw5MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzlkYzZjY2QyLTg4OTctNGE0ZS04MWNlLWMzNjFhNWU2OGRkNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85ZGM2Y2Nk Mi04ODk3LTRhNGUtODFjZS1jMzYxYTVlNjhkZDYvMC9DRjU1RTc0MTI4NzFBQjBG NDIzNDdFMkZFRTFGNjgxNTAzNUM3QzM5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ3UKMA0GCSqGSIb3DQEBCwUAA4IBAQCbjv6+j2PWYTzbtcq6RXsdsYp7tjJI Jc3yS5sshjk/UoNxGODrSYbQQH/U1UR+/j8rCO6yBL4MHy0LpYYwCbPl/6C8iw+y 0rPjuRE66RLt5MUhwPpu/sL6K+auCytHCVBfQ9qcNYvckiXiF5zC24ekmK+vICK2 cewN8pztgx5/z0G+EgRhbQI5GGLXrHKqYKA+L7KNuCLmzMSVOMB3xQY9F0rj6NqU XRHVAb4ktKLh+/MWc4h455DmMdVQuP6zPNh526QgA52DsuV/Nf9pPIJ5boxSyhyC shIP8CYmRZ5CQBHosLpDPGOMKKtuhvKNj4lL9lBatyxY6tfzpL0fD15N -----END CERTIFICATE-----Generated at Tue May 12 22:47:51 2026 by rpki-client