$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer File: DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer (raw, json) Hash identifier: 88VfZwNSXMkMARYKA821hKKS67TvWq3g1ZEfNZPUv04= Subject key identifier: DC:2E:00:B2:12:67:A4:6B:D6:95:F6:DB:BE:C2:98:9F:48:30:C8:B0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 208AA2E665C6BB7C29C6055BBE738BE4B94A18E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:42:53 +0000 Certificate not after: Sun 02 May 2027 01:47:53 +0000 Subordinate resources: IP: 103.44.19.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:8a:a2:e6:65:c6:bb:7c:29:c6:05:5b:be:73:8b:e4:b9:4a:18:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:42:53 2026 GMT Not After : May 2 01:47:53 2027 GMT Subject: CN=DC2E00B21267A46BD695F6DBBEC2989F4830C8B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b7:d9:f1:78:1e:f2:f6:46:fb:72:6e:d2:9f: ee:10:da:11:90:88:24:cc:7b:63:58:66:05:4d:3a: ea:d7:38:53:24:8c:b4:5a:3b:81:b5:27:b9:fe:c1: 93:bc:9e:f8:17:84:ba:04:16:32:60:ed:19:77:b9: ab:d8:b9:02:23:d8:08:b1:fc:75:25:d3:3b:6d:05: 67:c2:ca:e8:7e:ed:72:78:49:43:d9:6f:74:a5:29: 87:f8:b4:e3:94:bb:0c:3b:d2:09:b1:49:98:76:f9: b7:22:d3:36:c4:78:f9:d2:ea:bf:a7:6c:bd:1a:f9: 70:e7:af:29:63:7c:4c:c8:b8:44:3b:87:f2:3e:8b: a6:ac:8c:2d:a8:26:41:3e:55:48:2e:5a:f3:41:45: 05:7b:2c:47:57:16:46:5d:a1:c3:a1:79:a1:84:ff: 48:70:1c:bf:60:bd:6b:1a:d9:74:22:2b:5a:cc:8e: 49:d5:12:e9:3c:5c:b5:77:cf:70:d5:02:95:52:b2: 6b:40:da:db:cb:58:6b:97:58:9e:6a:fd:64:c4:43: f7:9f:41:f6:0d:2f:48:49:00:58:db:a8:18:98:ac: 65:63:04:0a:2a:ad:20:b4:03:f3:f0:14:18:7d:fa: 28:74:08:c2:28:69:72:1e:cb:b2:f3:99:e0:1f:3e: 92:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DC:2E:00:B2:12:67:A4:6B:D6:95:F6:DB:BE:C2:98:9F:48:30:C8:B0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.44.19.0/24 Signature Algorithm: sha256WithRSAEncryption 67:41:72:5e:fd:ce:8d:c7:eb:c0:15:2c:9a:de:e6:7c:4a:08: 10:4b:58:6a:7e:ad:8c:f9:4c:9f:b5:44:e3:8b:c3:16:17:3a: 2f:ed:6e:d2:98:fd:f9:65:f4:b6:3a:d1:62:7b:1b:a0:71:e0: 1a:2d:c4:f1:ce:28:4f:98:01:a1:55:1b:a1:3a:7b:35:18:26: 11:02:c1:9c:e3:05:3b:71:dc:5a:7a:1e:f3:b2:19:5d:27:b3: 7d:df:6d:0c:f0:42:c5:b6:cb:73:8e:21:d0:89:7a:88:60:7c: b5:0f:56:14:1c:e5:85:58:24:20:04:83:b2:c9:db:fa:ed:5b: 3b:19:b6:ff:14:4a:ad:4c:65:91:e3:ab:60:9a:ed:3b:d4:13: 14:fb:37:b7:16:6a:58:5f:c2:9f:e0:46:39:30:ae:90:8c:28: 6e:b4:22:09:4a:99:3b:9d:4a:0a:9c:1a:0c:40:b6:dd:6b:06: ce:05:2b:21:3f:9c:9c:63:36:ed:32:b0:15:40:46:96:86:b6: c8:e8:e8:44:d6:95:45:19:88:73:bc:cb:18:6a:30:0e:0f:f9: 26:71:29:01:c3:17:43:b3:44:1f:ad:a5:85:76:13:4d:a3:a0: e4:1d:aa:23:65:75:d2:c1:c9:d2:07:dd:ab:1d:88:d5:31:8c: c1:8c:c4:9a -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUIIqi5mXGu3wpxgVbvnOL5LlKGOgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDI1M1oX DTI3MDUwMjAxNDc1M1owMzExMC8GA1UEAxMoREMyRTAwQjIxMjY3QTQ2QkQ2OTVG NkRCQkVDMjk4OUY0ODMwQzhCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIq32fF4HvL2RvtybtKf7hDaEZCIJMx7Y1hmBU066tc4UySMtFo7gbUnuf7B k7ye+BeEugQWMmDtGXe5q9i5AiPYCLH8dSXTO20FZ8LK6H7tcnhJQ9lvdKUph/i0 45S7DDvSCbFJmHb5tyLTNsR4+dLqv6dsvRr5cOevKWN8TMi4RDuH8j6LpqyMLagm QT5VSC5a80FFBXssR1cWRl2hw6F5oYT/SHAcv2C9axrZdCIrWsyOSdUS6TxctXfP cNUClVKya0Da28tYa5dYnmr9ZMRD959B9g0vSEkAWNuoGJisZWMECiqtILQD8/AU GH36KHQIwihpch7LsvOZ4B8+kpcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNwuALISZ6Rr1pX2277CmJ9IMMiwMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2I4MTE3Y2E4LWI0ZTUtNDY3YS04OGE4LWE0YjYzZTQwYzNlZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iODExN2Nh OC1iNGU1LTQ2N2EtODhhOC1hNGI2M2U0MGMzZWQvMC9EQzJFMDBCMjEyNjdBNDZC RDY5NUY2REJCRUMyOTg5RjQ4MzBDOEIwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZywTMA0GCSqGSIb3DQEBCwUAA4IBAQBnQXJe/c6Nx+vAFSya3uZ8SggQS1hq fq2M+UyftUTji8MWFzov7W7SmP35ZfS2OtFiexugceAaLcTxzihPmAGhVRuhOns1 GCYRAsGc4wU7cdxaeh7zshldJ7N9320M8ELFtstzjiHQiXqIYHy1D1YUHOWFWCQg BIOyydv67Vs7Gbb/FEqtTGWR46tgmu071BMU+ze3FmpYX8Kf4EY5MK6QjChutCIJ Spk7nUoKnBoMQLbdawbOBSshP5ycYzbtMrAVQEaWhrbI6OhE1pVFGYhzvMsYajAO D/kmcSkBwxdDs0QfraWFdhNNo6DkHaojZXXSwcnSB92rHYjVMYzBjMSa -----END CERTIFICATE-----Generated at Tue May 12 22:10:28 2026 by rpki-client