$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer File: D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer (raw, json) Hash identifier: XMwPf5Mkx9i228Y9/LZnnNDuL90o+44E3oMPSGUxH6c= Subject key identifier: D8:CB:7F:8B:56:66:E0:7E:57:CB:EF:C0:23:C6:F6:03:46:F2:9D:7F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3CD51EDE5B43AB6FBBD620994BA8C6C04DD3928B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:58:33 +0000 Certificate not after: Sun 02 May 2027 02:03:33 +0000 Subordinate resources: IP: 103.107.176.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d5:1e:de:5b:43:ab:6f:bb:d6:20:99:4b:a8:c6:c0:4d:d3:92:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:58:33 2026 GMT Not After : May 2 02:03:33 2027 GMT Subject: CN=D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2a:9c:cb:b2:aa:d8:9d:6d:25:46:c9:1a:e1: af:74:4b:62:8f:93:35:d3:fa:a2:e5:04:9c:95:41: 39:c0:ff:f0:a0:5c:64:e0:63:78:d9:9a:ae:1f:ba: 4e:16:57:58:b2:07:8a:74:be:ad:ac:cb:ef:5e:03: 11:18:ec:c6:41:62:b0:01:6d:ec:2d:ad:39:15:08: c6:75:48:d6:22:2f:cc:83:2e:ee:ea:2e:6a:f3:8e: 19:04:d6:b6:3b:31:ae:35:79:68:5c:79:9d:c0:5b: f5:84:88:c1:e8:10:05:b8:6a:5b:51:04:ba:c6:53: 97:be:39:2f:4d:22:71:f9:57:a6:f2:51:bf:95:33: be:6c:6f:e7:64:e3:e3:96:7b:43:3c:cc:28:36:2d: 19:04:fc:5c:bc:d3:e9:eb:2f:b2:26:6a:3e:59:6b: 07:2a:6d:f4:b9:f5:a3:e9:5d:0a:05:1f:df:68:50: e7:e7:4b:a6:36:8b:da:72:67:e2:f8:3d:04:c3:c4: c6:47:98:2a:62:30:19:3c:56:26:e6:31:3d:5d:69: a3:e1:8d:8d:85:86:be:08:dc:e9:73:8f:78:7f:a4: 11:ba:81:7e:bf:8b:5f:f1:27:0b:ae:ff:d0:bc:8f: 84:6e:3e:9c:14:f8:a4:48:b1:49:da:bb:f1:75:fd: b2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:CB:7F:8B:56:66:E0:7E:57:CB:EF:C0:23:C6:F6:03:46:F2:9D:7F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.107.176.0/23 Signature Algorithm: sha256WithRSAEncryption 94:b2:86:d8:f8:e2:97:4f:a1:29:03:ba:65:ae:18:91:89:68: 6f:30:1a:9a:62:79:d6:bd:a4:87:ec:af:60:87:cd:22:1e:88: d1:91:7d:b2:57:9f:ff:dd:0d:be:d2:c3:4a:37:03:81:8f:18: ac:b6:c3:02:b7:ad:e0:f4:83:9e:aa:de:b9:11:b0:ae:03:8f: c5:2b:26:65:bb:eb:d8:c1:b8:d7:c0:db:d4:07:af:e5:22:8d: 53:d7:d1:cf:d6:f7:22:a5:7b:27:e3:41:f7:5b:0f:60:6e:6f: 3e:81:01:37:d1:eb:35:b1:d1:ec:05:41:32:c0:96:68:05:5d: 94:62:b8:4e:9f:ff:b1:94:84:99:b9:2a:a3:1d:41:8b:3e:70: cc:7c:d8:56:28:7f:0e:01:a6:c4:64:9a:6c:d1:16:06:d3:c4: 5a:21:c0:67:72:6b:38:62:c7:5f:93:49:e4:1e:42:f7:77:06: c7:ec:34:e5:5f:48:5a:45:6b:38:b1:99:cb:7f:40:7e:2d:78: 2f:2b:f8:b6:6e:59:b5:bd:2b:ea:ce:30:df:bc:f5:d8:37:4a: 0d:bf:f4:33:ee:0f:e2:10:79:67:d3:40:fd:0f:21:dc:23:99: ed:7a:a8:1a:65:80:95:37:b2:a6:32:8c:5d:4a:6b:e6:15:95: 19:60:a7:5d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUPNUe3ltDq2+71iCZS6jGwE3TkoswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTgzM1oX DTI3MDUwMjAyMDMzM1owMzExMC8GA1UEAxMoRDhDQjdGOEI1NjY2RTA3RTU3Q0JF RkMwMjNDNkY2MDM0NkYyOUQ3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKoqnMuyqtidbSVGyRrhr3RLYo+TNdP6ouUEnJVBOcD/8KBcZOBjeNmarh+6 ThZXWLIHinS+razL714DERjsxkFisAFt7C2tORUIxnVI1iIvzIMu7uouavOOGQTW tjsxrjV5aFx5ncBb9YSIwegQBbhqW1EEusZTl745L00icflXpvJRv5Uzvmxv52Tj 45Z7QzzMKDYtGQT8XLzT6esvsiZqPllrBypt9Ln1o+ldCgUf32hQ5+dLpjaL2nJn 4vg9BMPExkeYKmIwGTxWJuYxPV1po+GNjYWGvgjc6XOPeH+kEbqBfr+LX/EnC67/ 0LyPhG4+nBT4pEixSdq78XX9sr0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNjLf4tWZuB+V8vvwCPG9gNG8p1/MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2QzNmFiMDRkLTY4YzctNDI0OS1iMTA5LTQ2YjI4Y2Y4MDNmMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kMzZhYjA0 ZC02OGM3LTQyNDktYjEwOS00NmIyOGNmODAzZjMvMC9EOENCN0Y4QjU2NjZFMDdF NTdDQkVGQzAyM0M2RjYwMzQ2RjI5RDdGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ2uwMA0GCSqGSIb3DQEBCwUAA4IBAQCUsobY+OKXT6EpA7plrhiRiWhvMBqa YnnWvaSH7K9gh80iHojRkX2yV5//3Q2+0sNKNwOBjxistsMCt63g9IOeqt65EbCu A4/FKyZlu+vYwbjXwNvUB6/lIo1T19HP1vcipXsn40H3Ww9gbm8+gQE30es1sdHs BUEywJZoBV2UYrhOn/+xlISZuSqjHUGLPnDMfNhWKH8OAabEZJps0RYG08RaIcBn cms4Ysdfk0nkHkL3dwbH7DTlX0haRWs4sZnLf0B+LXgvK/i2blm1vSvqzjDfvPXY N0oNv/Qz7g/iEHln00D9DyHcI5nteqgaZYCVN7KmMoxdSmvmFZUZYKdd -----END CERTIFICATE-----Generated at Tue May 12 22:04:08 2026 by rpki-client