$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.cer File: CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.cer (raw, json) Hash identifier: XwwI3FBiPVzZW/FG2CuO/co9IynaHsoQx2cfsekH8Gc= Subject key identifier: CF:90:D3:23:4B:26:E6:43:DE:29:E7:8B:2A:3D:03:73:FA:DC:BA:A0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3FA0862F4F3204D8B8FE990CE89AC8F817541365 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:51:49 +0000 Certificate not after: Sun 02 May 2027 01:56:49 +0000 Subordinate resources: IP: 103.42.241.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a0:86:2f:4f:32:04:d8:b8:fe:99:0c:e8:9a:c8:f8:17:54:13:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:51:49 2026 GMT Not After : May 2 01:56:49 2027 GMT Subject: CN=CF90D3234B26E643DE29E78B2A3D0373FADCBAA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:65:4f:b9:e6:74:02:45:7e:94:29:8e:17:ff: e1:e1:7f:a4:82:a7:a0:f2:37:57:78:c5:7c:f6:18: e2:9f:03:e8:af:04:aa:50:51:89:bc:b2:85:66:50: 79:6d:b4:01:ee:4d:22:3f:09:47:b4:32:af:65:28: 33:50:27:84:1b:18:ee:de:db:18:a1:31:c1:54:ad: ec:1d:88:8c:b8:6d:a1:bd:27:96:d4:67:3f:49:30: 54:74:5b:e3:61:39:41:f0:1a:a9:d4:2d:87:2e:e4: 78:a8:6f:85:39:0a:66:b4:ca:2d:70:3e:a0:97:0f: 4c:1c:e9:90:44:6f:e7:c2:a0:f3:0b:c2:c3:50:36: e4:ac:69:d9:7d:7d:e1:dc:2a:47:ed:f1:d3:e6:e0: 5a:9d:0a:4d:fb:38:ef:9c:6a:64:ea:e7:8b:81:5f: 1f:7e:cd:0f:60:38:72:42:ff:5a:54:02:ab:34:98: da:23:91:23:b0:88:3d:a9:e6:86:1a:2b:45:d0:8b: 17:02:cf:a5:d9:03:88:03:e6:e7:3e:79:5c:5f:3a: f6:50:f6:82:23:de:84:63:f4:ad:36:96:f2:77:57: ca:a1:b6:b3:8a:87:77:7c:88:ab:fb:b0:d3:a8:b5: 6c:75:2b:11:4e:3b:cc:f8:11:ce:42:7d:c9:58:e6: ec:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:90:D3:23:4B:26:E6:43:DE:29:E7:8B:2A:3D:03:73:FA:DC:BA:A0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/CF90D3234B26E643DE29E78B2A3D0373FADCBAA0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.42.241.0/24 Signature Algorithm: sha256WithRSAEncryption 33:96:37:e0:3b:67:a1:42:6e:f9:ec:77:3f:56:a4:4b:ef:2f: fe:6d:21:18:9b:6b:ee:97:27:c7:72:24:48:80:d7:00:7e:1e: b8:ef:2c:de:9f:c0:6e:4d:86:26:3f:57:67:97:9c:e3:e4:2c: 36:70:4e:f9:55:9b:31:2c:98:84:36:b9:ff:19:27:62:f1:ec: ea:02:57:64:c8:44:84:2b:22:79:a7:45:73:ec:2a:b8:2d:42: 28:e6:76:d1:8a:89:29:47:9a:68:2b:20:08:7a:3d:50:b3:c4: 10:e9:b1:37:b8:38:f5:1c:2d:89:d2:57:b6:f5:bc:4f:b6:4a: c6:5c:c5:af:34:c4:97:65:e3:c8:0c:61:3c:07:62:1a:02:fe: 01:84:b4:91:ed:a8:06:c4:0d:80:3f:5e:7e:11:f5:e4:8c:03: af:a9:93:fb:05:7d:0a:8a:3a:0f:1b:a8:14:a4:8e:c8:d7:51: fc:49:30:4c:f1:0c:d7:d1:33:0d:59:6b:14:18:70:fc:52:67: 1b:c4:4b:82:09:33:1e:dd:48:e1:6e:dc:48:85:f2:96:ec:37: e7:4b:2f:f0:de:93:83:fa:0c:cd:8d:21:ae:19:e8:90:9d:95: ca:4c:6c:c5:38:a9:93:9d:7a:48:86:72:48:66:99:46:e5:26: ff:62:16:6b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUP6CGL08yBNi4/pkM6JrI+BdUE2UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTE0OVoX DTI3MDUwMjAxNTY0OVowMzExMC8GA1UEAxMoQ0Y5MEQzMjM0QjI2RTY0M0RFMjlF NzhCMkEzRDAzNzNGQURDQkFBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN1lT7nmdAJFfpQpjhf/4eF/pIKnoPI3V3jFfPYY4p8D6K8EqlBRibyyhWZQ eW20Ae5NIj8JR7Qyr2UoM1AnhBsY7t7bGKExwVSt7B2IjLhtob0nltRnP0kwVHRb 42E5QfAaqdQthy7keKhvhTkKZrTKLXA+oJcPTBzpkERv58Kg8wvCw1A25Kxp2X19 4dwqR+3x0+bgWp0KTfs475xqZOrni4FfH37ND2A4ckL/WlQCqzSY2iORI7CIPanm hhorRdCLFwLPpdkDiAPm5z55XF869lD2giPehGP0rTaW8ndXyqG2s4qHd3yIq/uw 06i1bHUrEU47zPgRzkJ9yVjm7GkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM+Q0yNLJuZD3inniyo9A3P63LqgMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2M3NjNlNzFhLTljODUtNDE3Ni04ZmE0LWI3YTI5YWZiOTc3ZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jNzYzZTcx YS05Yzg1LTQxNzYtOGZhNC1iN2EyOWFmYjk3N2QvMC9DRjkwRDMyMzRCMjZFNjQz REUyOUU3OEIyQTNEMDM3M0ZBRENCQUEwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZyrxMA0GCSqGSIb3DQEBCwUAA4IBAQAzljfgO2ehQm757Hc/VqRL7y/+bSEY m2vulyfHciRIgNcAfh647yzen8BuTYYmP1dnl5zj5Cw2cE75VZsxLJiENrn/GSdi 8ezqAldkyESEKyJ5p0Vz7Cq4LUIo5nbRiokpR5poKyAIej1Qs8QQ6bE3uDj1HC2J 0le29bxPtkrGXMWvNMSXZePIDGE8B2IaAv4BhLSR7agGxA2AP15+EfXkjAOvqZP7 BX0KijoPG6gUpI7I11H8STBM8QzX0TMNWWsUGHD8UmcbxEuCCTMe3UjhbtxIhfKW 7DfnSy/w3pOD+gzNjSGuGeiQnZXKTGzFOKmTnXpIhnJIZplG5Sb/YhZr -----END CERTIFICATE-----Generated at Tue May 12 22:15:58 2026 by rpki-client