$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer File: CFFA51727FC1136A4D915DE16E8A55299F98C5E1.cer (raw, json) Hash identifier: a5WtFKVVJxxzoNwcVPcgYnLM0i5iwWkZ3BIdYC2s4sY= Subject key identifier: CF:FA:51:72:7F:C1:13:6A:4D:91:5D:E1:6E:8A:55:29:9F:98:C5:E1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 39C2CD0C14EC2D2EA9772B2040B0507917AAB8E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:18:40 +0000 Certificate not after: Sun 02 May 2027 01:23:40 +0000 Subordinate resources: IP: 103.181.244.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:c2:cd:0c:14:ec:2d:2e:a9:77:2b:20:40:b0:50:79:17:aa:b8:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:18:40 2026 GMT Not After : May 2 01:23:40 2027 GMT Subject: CN=CFFA51727FC1136A4D915DE16E8A55299F98C5E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ac:0c:1d:ff:e6:74:c2:83:20:fb:5a:ed:e7: eb:39:38:17:55:b6:4f:37:b1:a6:d7:4a:4c:aa:4f: e6:60:6a:e5:95:75:b1:1b:e9:6f:dd:2e:be:d0:68: 4b:44:c6:5e:82:4c:99:f3:27:be:b1:5f:5a:e5:40: ac:a0:02:99:a1:d7:bc:eb:14:6b:06:6a:48:08:76: 32:d3:3c:23:de:83:83:61:8a:51:f0:ac:0c:65:a1: a7:d8:b8:0d:dd:48:8f:21:23:81:8e:5c:a5:c0:5b: e3:c1:8b:b2:7c:c8:ba:2e:62:94:df:70:df:81:fc: 3d:0b:2d:66:45:64:8c:08:be:1d:ce:57:90:f9:89: 33:c8:e3:db:c1:75:38:84:67:28:23:f5:17:ca:ea: 9e:0f:1a:3d:e3:8a:cc:07:04:73:c8:69:59:22:58: d3:28:e9:0c:ac:40:b4:f2:1b:5a:3b:a1:75:f5:ce: 50:2a:38:f3:61:8d:d1:c7:a8:01:89:d8:0d:74:e7: a0:ab:f1:a5:46:ca:c0:ff:bf:0e:b7:7f:28:80:89: ba:e0:8d:3a:25:9e:2e:1c:2e:69:67:f6:87:df:6d: 5c:3d:2f:d8:e4:94:f1:c5:6d:13:13:fb:3c:99:12: f2:da:38:71:85:d5:2e:52:e6:51:5d:f8:82:ba:22: 6a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:FA:51:72:7F:C1:13:6A:4D:91:5D:E1:6E:8A:55:29:9F:98:C5:E1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/CFFA51727FC1136A4D915DE16E8A55299F98C5E1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.181.244.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:e0:de:15:f0:e2:fc:ee:a5:88:8a:50:26:a0:c6:4a:fc:6a: e3:08:fc:55:5b:7d:c3:c8:c5:f3:be:ad:3b:49:e6:7e:14:2a: 06:f3:ea:fa:ef:11:87:82:bb:b9:ae:06:ab:f8:8b:1b:37:08: c4:0c:4d:39:a1:71:cc:2a:e5:73:47:eb:89:57:76:35:f3:8d: 19:9d:3c:e1:17:94:a5:63:64:37:1e:96:52:6b:5f:56:cb:a8: 01:3e:af:4d:e8:4b:d5:2c:20:50:25:4c:2b:b5:4f:5f:ff:0e: f3:e1:7e:a3:d5:83:39:94:3a:fc:bd:5a:40:66:12:08:a3:8d: 98:88:9f:86:72:af:18:7b:67:d9:38:12:0a:aa:85:e8:6c:3d: a9:c5:05:15:38:26:85:88:f8:48:ca:25:87:c1:c3:49:55:7c: 88:21:37:4e:fe:00:13:3c:93:27:64:27:d4:15:47:09:86:24: a3:a5:da:4e:d0:b9:2a:10:d9:f7:b9:ad:1b:51:0a:91:dd:b5: e3:2c:df:39:6f:8d:f8:b0:72:be:13:2e:a8:f2:fb:8b:b3:53: 2a:f9:96:52:ba:d5:a5:a5:67:0b:36:52:8a:e1:23:4d:d6:92: f0:03:11:dc:15:7f:63:43:70:9b:94:98:28:68:e4:bd:d8:94: 2f:1e:56:f9 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUOcLNDBTsLS6pdysgQLBQeRequOMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTg0MFoX DTI3MDUwMjAxMjM0MFowMzExMC8GA1UEAxMoQ0ZGQTUxNzI3RkMxMTM2QTREOTE1 REUxNkU4QTU1Mjk5Rjk4QzVFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ6sDB3/5nTCgyD7Wu3n6zk4F1W2TzexptdKTKpP5mBq5ZV1sRvpb90uvtBo S0TGXoJMmfMnvrFfWuVArKACmaHXvOsUawZqSAh2MtM8I96Dg2GKUfCsDGWhp9i4 Dd1IjyEjgY5cpcBb48GLsnzIui5ilN9w34H8PQstZkVkjAi+Hc5XkPmJM8jj28F1 OIRnKCP1F8rqng8aPeOKzAcEc8hpWSJY0yjpDKxAtPIbWjuhdfXOUCo482GN0ceo AYnYDXTnoKvxpUbKwP+/Drd/KICJuuCNOiWeLhwuaWf2h99tXD0v2OSU8cVtExP7 PJkS8to4cYXVLlLmUV34groiatsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM/6UXJ/wRNqTZFd4W6KVSmfmMXhMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzkzMzhiZGFkLWQyZGQtNGYwNy1hZTg0LWM1NDA2MTJiYWY2YS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85MzM4YmRh ZC1kMmRkLTRmMDctYWU4NC1jNTQwNjEyYmFmNmEvMC9DRkZBNTE3MjdGQzExMzZB NEQ5MTVERTE2RThBNTUyOTlGOThDNUUxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7X0MA0GCSqGSIb3DQEBCwUAA4IBAQB64N4V8OL87qWIilAmoMZK/GrjCPxV W33DyMXzvq07SeZ+FCoG8+r67xGHgru5rgar+IsbNwjEDE05oXHMKuVzR+uJV3Y1 840ZnTzhF5SlY2Q3HpZSa19Wy6gBPq9N6EvVLCBQJUwrtU9f/w7z4X6j1YM5lDr8 vVpAZhIIo42YiJ+Gcq8Ye2fZOBIKqoXobD2pxQUVOCaFiPhIyiWHwcNJVXyIITdO /gATPJMnZCfUFUcJhiSjpdpO0LkqENn3ua0bUQqR3bXjLN85b434sHK+Ey6o8vuL s1Mq+ZZSutWlpWcLNlKK4SNN1pLwAxHcFX9jQ3CblJgoaOS92JQvHlb5 -----END CERTIFICATE-----Generated at Wed May 13 02:16:35 2026 by rpki-client