$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/CF5CA5E302311CD0DB0FEA840E7450370C063135.cer File: CF5CA5E302311CD0DB0FEA840E7450370C063135.cer (raw, json) Hash identifier: tZEBmEaB4bBccsDtbBol5MIv2US8CKXjEHll1v6xakk= Subject key identifier: CF:5C:A5:E3:02:31:1C:D0:DB:0F:EA:84:0E:74:50:37:0C:06:31:35 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0D3EBF38955BE3FBD2589249DFBEDD18D728E1A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft caRepository: rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:50:32 +0000 Certificate not after: Sat 01 May 2027 23:55:32 +0000 Subordinate resources: IP: 103.106.145.0/24 IP: 2001:df3:a900::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:3e:bf:38:95:5b:e3:fb:d2:58:92:49:df:be:dd:18:d7:28:e1:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:50:32 2026 GMT Not After : May 1 23:55:32 2027 GMT Subject: CN=CF5CA5E302311CD0DB0FEA840E7450370C063135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:82:04:ba:0d:3b:00:ea:70:c9:d9:d3:ec:ea: d9:07:c8:fb:b5:0d:5c:4e:7a:0c:13:02:06:ee:f3: 93:4d:c5:ab:a1:e6:6f:a8:60:07:90:2c:a1:7c:18: 24:b9:12:89:e4:17:40:51:a1:ca:8a:2d:b8:aa:3a: 1a:2d:ba:be:73:14:69:d5:47:d7:a7:b9:ad:fe:06: 71:60:05:4b:97:0b:d8:ad:de:5f:3b:dc:97:55:be: 67:5c:03:3c:64:16:cf:13:71:eb:dc:f4:b5:79:91: 2c:53:2a:1c:46:76:1c:41:db:f6:af:41:34:9f:25: 43:6b:3b:38:e4:35:af:87:58:9c:ea:a4:c8:98:e1: f3:99:36:5f:18:04:9c:b8:4a:77:26:96:74:56:82: f9:5c:38:18:c5:3d:77:be:44:35:aa:f9:bd:58:02: d0:1f:7d:5e:68:a4:c7:a8:5b:a4:71:04:dd:c5:7d: 5b:b4:27:69:17:b1:6a:73:cf:87:90:89:f9:64:eb: 17:44:8d:b5:e8:06:6e:2b:12:6a:cd:e1:52:91:ac: 12:fa:44:97:4b:18:c7:26:9c:4f:49:e7:f4:b6:79: f6:ee:20:45:11:0c:6d:22:4b:1f:ad:57:55:b1:05: 75:07:f3:e7:ce:79:ba:ca:21:b9:b1:60:a4:a3:e5: a7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:5C:A5:E3:02:31:1C:D0:DB:0F:EA:84:0E:74:50:37:0C:06:31:35 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/CF5CA5E302311CD0DB0FEA840E7450370C063135.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.106.145.0/24 IPv6: 2001:df3:a900::/48 Signature Algorithm: sha256WithRSAEncryption 69:71:b5:cf:96:24:a7:32:81:e3:f9:4c:2b:b0:bc:88:5b:b6: 9d:52:35:aa:45:a1:64:8a:9a:81:8e:c8:00:4f:a8:13:e7:55: e1:92:fb:e1:0e:ba:9e:e0:93:7b:55:b7:bb:6e:56:c6:2f:f2: 28:f2:02:79:2a:f4:e2:cc:3f:ce:0a:86:9f:e8:c3:dd:bd:4c: e0:13:3c:60:25:08:d0:7f:9a:f3:42:17:24:c7:0a:14:67:2e: fd:d5:5e:56:be:20:ef:61:8a:b0:dc:fe:3c:93:c3:7e:b0:29: 72:65:05:34:cb:f2:8c:e7:a1:0d:0d:58:e3:8e:fd:d6:e0:f7: ac:ab:8a:c7:68:8f:13:85:de:63:88:3d:13:c3:45:91:8f:b0: 50:f3:30:61:6e:1f:b0:b5:0a:d5:cd:46:2c:ec:f0:82:3d:d5: 45:4a:c3:77:30:c6:99:f5:c4:10:be:8c:c1:79:cd:ae:80:ce: 65:58:58:7a:e6:c0:81:03:9c:cc:8e:87:d4:1a:a4:54:96:13: 1c:52:3d:8c:27:11:42:c9:71:4a:15:04:17:1d:2b:cd:71:d1: fe:94:3b:32:6c:58:da:e5:64:77:f3:7c:2a:c7:41:cd:e2:39: 7c:44:6c:66:dc:a6:91:eb:11:04:f7:1e:21:48:56:b2:90:73: 57:97:61:a2 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUDT6/OJVb4/vSWJJJ377dGNco4acwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTAzMloX DTI3MDUwMTIzNTUzMlowMzExMC8GA1UEAxMoQ0Y1Q0E1RTMwMjMxMUNEMERCMEZF QTg0MEU3NDUwMzcwQzA2MzEzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALyCBLoNOwDqcMnZ0+zq2QfI+7UNXE56DBMCBu7zk03Fq6Hmb6hgB5AsoXwY JLkSieQXQFGhyootuKo6Gi26vnMUadVH16e5rf4GcWAFS5cL2K3eXzvcl1W+Z1wD PGQWzxNx69z0tXmRLFMqHEZ2HEHb9q9BNJ8lQ2s7OOQ1r4dYnOqkyJjh85k2XxgE nLhKdyaWdFaC+Vw4GMU9d75ENar5vVgC0B99Xmikx6hbpHEE3cV9W7QnaRexanPP h5CJ+WTrF0SNtegGbisSas3hUpGsEvpEl0sYxyacT0nn9LZ59u4gRREMbSJLH61X VbEFdQfz5855usohubFgpKPlp6kCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM9cpeMCMRzQ2w/qhA50UDcMBjE1MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzExNzkxYjczLWJiMDgtNGE4My1hMTk3LWI2MzYwZjFkNDdkZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xMTc5MWI3 My1iYjA4LTRhODMtYTE5Ny1iNjM2MGYxZDQ3ZGUvMC9DRjVDQTVFMzAyMzExQ0Qw REIwRkVBODQwRTc0NTAzNzBDMDYzMTM1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ2qRMA8EAgACMAkDBwAgAQ3zqQAwDQYJKoZIhvcNAQELBQADggEBAGlxtc+W JKcygeP5TCuwvIhbtp1SNapFoWSKmoGOyABPqBPnVeGS++EOup7gk3tVt7tuVsYv 8ijyAnkq9OLMP84Khp/ow929TOATPGAlCNB/mvNCFyTHChRnLv3VXla+IO9hirDc /jyTw36wKXJlBTTL8oznoQ0NWOOO/dbg96yrisdojxOF3mOIPRPDRZGPsFDzMGFu H7C1CtXNRizs8II91UVKw3cwxpn1xBC+jMF5za6AzmVYWHrmwIEDnMyOh9QapFSW ExxSPYwnEULJcUoVBBcdK81x0f6UOzJsWNrlZHfzfCrHQc3iOXxEbGbcppHrEQT3 HiFIVrKQc1eXYaI= -----END CERTIFICATE-----Generated at Tue May 12 22:10:48 2026 by rpki-client