$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer File: CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer (raw, json) Hash identifier: W/dQfk4R4Qo2780JoFo/i2FOYjsdBZB+HU/E8JIl4JY= Subject key identifier: CF:BC:18:16:79:58:68:D3:AD:54:A9:A7:60:FF:30:5D:0B:62:C5:B4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3EEE7D181E75D17F0046B508839CBADD6A8C0E3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:43:15 +0000 Certificate not after: Sat 01 May 2027 23:48:15 +0000 Subordinate resources: IP: 103.186.212.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ee:7d:18:1e:75:d1:7f:00:46:b5:08:83:9c:ba:dd:6a:8c:0e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:43:15 2026 GMT Not After : May 1 23:48:15 2027 GMT Subject: CN=CFBC1816795868D3AD54A9A760FF305D0B62C5B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d0:d4:d4:3a:2c:1d:4a:09:21:a3:97:1c:f5: 83:a6:90:17:e6:93:b1:f6:2c:a5:c3:5b:fe:4f:98: 7d:d7:ce:16:36:09:0f:42:09:44:1c:4f:9c:d5:59: 5d:d4:20:90:d5:88:fb:16:a6:23:a7:03:c6:4a:9b: e1:16:98:4e:40:63:f4:31:e7:2b:eb:d2:c8:8c:0c: 05:87:ab:2c:a3:29:e0:c0:17:b0:40:9d:10:6a:e3: 09:22:4c:3c:09:70:7b:ca:b7:39:73:4e:78:cd:0f: f7:09:9d:cc:6d:0d:16:08:c5:6e:47:f4:3a:25:ee: 15:86:f5:2f:65:94:e0:18:89:6a:48:0e:6b:b6:9e: 0d:eb:8c:60:a1:9d:fc:06:46:c8:8e:61:d4:bb:76: ec:bf:f3:5e:29:a9:47:88:49:41:95:a1:ca:64:9a: a4:d1:07:f9:9f:c0:fe:0a:fe:c4:74:7c:51:f1:11: 85:a8:cd:fd:ab:55:53:c7:6b:3c:0a:93:0c:62:5c: 84:eb:56:9d:05:b6:1d:13:12:b6:87:6d:bd:ca:0f: 22:5b:0d:4f:3a:47:eb:19:62:bf:48:77:0a:83:40: bb:c0:83:cb:c9:2a:b9:ae:75:c3:19:a3:6a:80:1e: 79:ad:14:78:eb:44:31:0a:60:e7:fe:a4:f9:36:8e: 82:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:BC:18:16:79:58:68:D3:AD:54:A9:A7:60:FF:30:5D:0B:62:C5:B4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.212.0/23 Signature Algorithm: sha256WithRSAEncryption 00:a6:2a:78:68:7a:df:d2:9a:f5:b5:00:3c:4a:af:73:b1:b1: 35:1d:3c:9e:06:3d:0e:a9:d5:27:fe:4c:c7:d3:b5:30:dd:5b: 55:0a:00:b9:cf:00:74:6c:ca:77:d6:3a:99:f9:70:7b:23:6d: e8:a8:ee:84:9f:d0:1f:04:fc:bf:e8:d1:2c:35:be:60:fc:e6: 18:6d:33:08:99:36:3c:c7:a2:d6:68:0c:b7:fa:09:24:6a:5f: 1e:5e:76:f3:1d:09:b9:ed:ac:28:00:1d:89:89:8c:3f:d9:b9: a3:1f:38:97:c8:c0:0d:20:91:4e:b6:2b:0c:e2:a0:0d:f3:38: 76:18:a7:3e:36:c4:af:40:fc:ac:aa:e1:10:f4:e5:df:6c:61: 0a:d2:ce:74:e2:01:db:15:d6:8e:b9:62:8e:96:11:cf:be:9c: fd:44:fd:2e:e8:1a:c0:c2:97:c4:b4:3b:36:21:4c:a0:fa:57: 7f:a2:0a:21:4f:a9:db:45:65:27:a9:2c:9a:e4:6c:5f:55:1b: f5:de:ed:5c:d3:11:08:8c:b8:ed:a1:77:c9:17:f7:0c:c2:2a: ec:49:6f:7d:fa:63:82:6f:81:68:ef:1e:b6:4e:1a:b8:fe:38: e4:3f:df:a0:8e:d9:43:14:f8:dd:ee:f9:26:d3:2a:a6:ff:d1: 39:78:7c:bd -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUPu59GB510X8ARrUIg5y63WqMDjwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDMxNVoX DTI3MDUwMTIzNDgxNVowMzExMC8GA1UEAxMoQ0ZCQzE4MTY3OTU4NjhEM0FENTRB OUE3NjBGRjMwNUQwQjYyQzVCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALvQ1NQ6LB1KCSGjlxz1g6aQF+aTsfYspcNb/k+YfdfOFjYJD0IJRBxPnNVZ XdQgkNWI+xamI6cDxkqb4RaYTkBj9DHnK+vSyIwMBYerLKMp4MAXsECdEGrjCSJM PAlwe8q3OXNOeM0P9wmdzG0NFgjFbkf0OiXuFYb1L2WU4BiJakgOa7aeDeuMYKGd /AZGyI5h1Lt27L/zXimpR4hJQZWhymSapNEH+Z/A/gr+xHR8UfERhajN/atVU8dr PAqTDGJchOtWnQW2HRMStodtvcoPIlsNTzpH6xliv0h3CoNAu8CDy8kqua51wxmj aoAeea0UeOtEMQpg5/6k+TaOgl0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM+8GBZ5WGjTrVSpp2D/MF0LYsW0MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzA0ZjI4MjM1LTBiYTgtNGUxNC04Yjg1LTI5YzNhNGE3NmVhYi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wNGYyODIz NS0wYmE4LTRlMTQtOGI4NS0yOWMzYTRhNzZlYWIvMC9DRkJDMTgxNjc5NTg2OEQz QUQ1NEE5QTc2MEZGMzA1RDBCNjJDNUI0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7rUMA0GCSqGSIb3DQEBCwUAA4IBAQAApip4aHrf0pr1tQA8Sq9zsbE1HTye Bj0OqdUn/kzH07Uw3VtVCgC5zwB0bMp31jqZ+XB7I23oqO6En9AfBPy/6NEsNb5g /OYYbTMImTY8x6LWaAy3+gkkal8eXnbzHQm57awoAB2JiYw/2bmjHziXyMANIJFO tisM4qAN8zh2GKc+NsSvQPysquEQ9OXfbGEK0s504gHbFdaOuWKOlhHPvpz9RP0u 6BrAwpfEtDs2IUyg+ld/ogohT6nbRWUnqSya5GxfVRv13u1c0xEIjLjtoXfJF/cM wirsSW99+mOCb4Fo7x62Thq4/jjkP9+gjtlDFPjd7vkm0yqm/9E5eHy9 -----END CERTIFICATE-----Generated at Tue May 12 22:32:44 2026 by rpki-client