$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer File: D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer (raw, json) Hash identifier: k3V6qpVXi+geIMyK9Xt/H9WmJYJ3uN6Y9W6E/4oGwxg= Subject key identifier: D0:F0:C8:D1:50:FE:AE:B3:B2:62:AE:26:0E:ED:6E:FA:46:C4:C6:25 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 027EE8ECBF3CBD3268D29C528A75F4C4465C9C92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:36:33 +0000 Certificate not after: Sun 02 May 2027 02:41:33 +0000 Subordinate resources: IP: 103.180.196.0/23 IP: 2001:df0:60c0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:7e:e8:ec:bf:3c:bd:32:68:d2:9c:52:8a:75:f4:c4:46:5c:9c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:36:33 2026 GMT Not After : May 2 02:41:33 2027 GMT Subject: CN=D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:28:3f:07:2e:23:cb:11:d3:fb:ee:42:6c:62: c4:88:fe:6b:62:bd:2a:ff:c7:02:a5:84:24:d1:32: 1f:ce:77:cc:66:4f:2a:6b:d4:47:e0:44:c0:77:fe: 35:08:fe:03:f8:0a:f8:32:09:36:8b:88:12:cb:fa: c2:73:44:64:3f:ed:43:4c:fe:ce:75:9f:b9:2a:e6: 96:81:9a:cd:b3:7b:f4:27:ab:32:6d:94:d7:0d:b8: 2b:5f:e9:d8:4c:c4:92:ba:c0:18:04:72:34:a4:19: aa:6e:23:46:f8:d6:e6:e7:72:91:35:c2:fd:b3:cb: a9:4f:a5:9e:50:7a:e0:fe:fc:4a:56:0a:30:e5:c5: 73:f4:fa:49:09:76:18:7a:32:37:9a:a0:77:64:89: 24:3a:ae:43:54:42:6f:73:ee:fb:24:5e:6c:32:15: b5:5f:68:9c:7b:f8:56:5f:db:1d:a9:5e:81:a4:56: 28:87:c6:08:8f:7c:cd:3c:e5:f6:b4:b5:e3:0c:9f: 60:c3:c0:5e:25:11:c9:dc:b1:38:64:d9:90:2b:36: 60:37:5a:07:1f:1b:a5:72:39:9a:0d:c2:c9:5b:75: 35:65:86:4c:ed:8b:d8:5a:eb:aa:32:4a:92:c7:fc: 30:11:97:fb:5c:0b:4c:7a:b6:c8:02:5a:15:8a:eb: 1c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D0:F0:C8:D1:50:FE:AE:B3:B2:62:AE:26:0E:ED:6E:FA:46:C4:C6:25 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.196.0/23 IPv6: 2001:df0:60c0::/48 Signature Algorithm: sha256WithRSAEncryption 63:d3:5b:83:4a:67:fd:09:81:d0:c7:a8:88:cb:fa:87:c8:d1: 8b:a0:99:c3:b3:1c:3a:b8:5f:af:9c:a2:ba:bf:b6:01:ac:11: 2e:c6:6d:d2:18:75:56:3f:9c:33:3c:d6:82:98:04:5f:6a:a2: 16:bb:d0:08:ea:34:47:73:8f:a4:de:53:42:9c:80:85:f6:a7: 6c:bf:d4:0c:be:45:8c:62:44:c8:2c:a7:b9:5b:63:45:04:56: fd:ea:cf:f6:14:f9:7f:f5:43:a8:d1:db:e6:22:5a:05:25:2a: 78:3c:c6:f0:34:35:9b:e0:38:cb:1c:d2:79:b9:0e:60:a4:b9: f8:92:60:d1:6d:77:87:da:a0:64:68:52:e9:37:c9:96:62:a5: a5:3a:4f:77:62:6b:dd:0c:ad:4c:19:cf:c2:cb:c4:98:c1:f9: e6:45:d9:35:74:3d:da:32:ae:56:e6:b8:38:32:98:f8:e0:cb: 63:3a:ee:cf:f9:59:66:08:be:ae:b3:bd:dc:46:66:03:13:54: 84:e0:a9:df:ba:f8:dc:1e:a9:21:60:d9:e1:05:f9:47:36:10: 7d:62:84:f7:bc:10:24:6a:06:80:86:56:01:ba:44:dd:66:b0: 95:d6:fd:5e:bb:e2:56:22:fd:04:3a:34:c7:c6:f8:70:e7:8d: e1:e7:b2:90 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUAn7o7L88vTJo0pxSinX0xEZcnJIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzYzM1oX DTI3MDUwMjAyNDEzM1owMzExMC8GA1UEAxMoRDBGMEM4RDE1MEZFQUVCM0IyNjJB RTI2MEVFRDZFRkE0NkM0QzYyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK4oPwcuI8sR0/vuQmxixIj+a2K9Kv/HAqWEJNEyH853zGZPKmvUR+BEwHf+ NQj+A/gK+DIJNouIEsv6wnNEZD/tQ0z+znWfuSrmloGazbN79CerMm2U1w24K1/p 2EzEkrrAGARyNKQZqm4jRvjW5udykTXC/bPLqU+lnlB64P78SlYKMOXFc/T6SQl2 GHoyN5qgd2SJJDquQ1RCb3Pu+yRebDIVtV9onHv4Vl/bHalegaRWKIfGCI98zTzl 9rS14wyfYMPAXiURydyxOGTZkCs2YDdaBx8bpXI5mg3CyVt1NWWGTO2L2FrrqjJK ksf8MBGX+1wLTHq2yAJaFYrrHMECAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNDwyNFQ/q6zsmKuJg7tbvpGxMYlMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y1MWQ2YzljLWVhZDctNDVmZS1hMTlhLTQyMjM1ZmM1Mzc4MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mNTFkNmM5 Yy1lYWQ3LTQ1ZmUtYTE5YS00MjIzNWZjNTM3ODAvMC9EMEYwQzhEMTUwRkVBRUIz QjI2MkFFMjYwRUVENkVGQTQ2QzRDNjI1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ7TEMA8EAgACMAkDBwAgAQ3wYMAwDQYJKoZIhvcNAQELBQADggEBAGPTW4NK Z/0JgdDHqIjL+ofI0YugmcOzHDq4X6+corq/tgGsES7GbdIYdVY/nDM81oKYBF9q oha70AjqNEdzj6TeU0KcgIX2p2y/1Ay+RYxiRMgsp7lbY0UEVv3qz/YU+X/1Q6jR 2+YiWgUlKng8xvA0NZvgOMsc0nm5DmCkufiSYNFtd4faoGRoUuk3yZZipaU6T3di a90MrUwZz8LLxJjB+eZF2TV0PdoyrlbmuDgymPjgy2M67s/5WWYIvq6zvdxGZgMT VITgqd+6+NweqSFg2eEF+Uc2EH1ihPe8ECRqBoCGVgG6RN1msJXW/V674lYi/QQ6 NMfG+HDnjeHnspA= -----END CERTIFICATE-----Generated at Tue May 12 22:16:58 2026 by rpki-client