$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer File: DCC142E4BC0A93D222744D764BA31B31C5F721F4.cer (raw, json) Hash identifier: MH4GHz77IgxE7hQS4CQPIL/7BemoIbC3wDJZkZYC9O4= Subject key identifier: DC:C1:42:E4:BC:0A:93:D2:22:74:4D:76:4B:A3:1B:31:C5:F7:21:F4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 416F01E24F15DE4FA9D31775DB1BFEB7A19A3CD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:42:07 +0000 Certificate not after: Sun 02 May 2027 02:47:07 +0000 Subordinate resources: IP: 103.166.26.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:6f:01:e2:4f:15:de:4f:a9:d3:17:75:db:1b:fe:b7:a1:9a:3c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:42:07 2026 GMT Not After : May 2 02:47:07 2027 GMT Subject: CN=DCC142E4BC0A93D222744D764BA31B31C5F721F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9d:47:e8:ae:25:70:b4:b8:de:5e:52:a3:0f: ce:c8:85:1e:90:c6:ac:46:7b:c6:9e:ac:de:7c:08: 4d:f2:a1:52:41:18:c0:50:c3:4a:40:a9:33:82:ca: ec:8d:d5:db:4e:86:3d:97:30:70:11:3f:38:56:13: 83:f0:de:b5:35:4d:e1:10:da:d3:69:0a:33:8c:81: f4:4e:e0:25:44:e0:77:a6:e1:98:49:d1:63:a9:aa: 6b:0d:94:89:10:33:36:d6:4f:84:17:d9:51:aa:da: 13:5e:14:35:21:d1:fe:46:f9:6b:05:4b:ad:ad:59: 16:42:ef:2a:3f:1c:04:29:0f:4a:f3:ff:39:db:db: dc:e3:92:99:b5:9a:52:e6:b0:30:76:1a:07:c1:5d: c2:6e:9a:72:17:8a:ab:f9:ca:0e:85:c9:1d:8f:7b: 2d:a4:ea:f1:47:2c:5a:5e:e5:6d:7c:10:fd:54:8c: 17:ad:06:29:8c:54:1f:e6:59:e4:92:26:c6:c7:ea: 96:f6:c4:0b:cb:ad:4f:b6:75:70:31:0d:21:06:d3: 22:cc:95:d4:9b:5f:7f:79:8c:d3:2b:a7:02:f0:34: 70:da:dd:5b:03:0f:e3:5d:d6:14:44:21:52:b7:d7: ae:28:1a:5c:86:02:05:61:7d:68:4f:e9:4c:74:c7: 2a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DC:C1:42:E4:BC:0A:93:D2:22:74:4D:76:4B:A3:1B:31:C5:F7:21:F4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/DCC142E4BC0A93D222744D764BA31B31C5F721F4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.26.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:ce:82:a5:35:23:15:56:64:95:33:28:11:e2:08:ac:7b:30: f0:08:f9:f0:9c:84:06:bf:4e:7f:68:2e:b6:60:fa:fb:9b:03: 9c:f4:74:07:44:06:1b:dd:84:ee:1b:0b:60:3c:05:17:5f:2c: c6:ab:c9:0a:3a:fb:b8:53:f6:e8:b6:c7:d6:77:ea:e1:e0:5f: 02:c9:67:29:7a:5e:b7:88:c8:7c:7e:38:d4:03:30:10:04:78: 03:17:ca:4d:d7:31:d0:ae:43:5e:91:5a:bb:64:fc:81:b7:81: 33:ce:ac:d2:c5:2b:7a:0e:52:53:e9:30:66:67:35:f0:98:e6: c9:a2:15:61:65:ce:6d:6b:e0:ad:c7:5d:89:e8:98:5d:77:1d: 28:18:6f:84:9a:6d:5c:0a:90:45:30:6c:a7:56:ed:e6:a7:ac: a9:af:d1:3c:6c:fd:1b:08:f1:67:de:e9:7e:66:99:7a:c3:54: 69:f9:4b:a1:b7:f3:ea:18:de:45:a5:8c:36:b3:eb:71:75:42: dc:ac:a8:4a:2a:b0:c3:a4:b9:db:3a:d1:a1:b8:8c:05:1b:3a: 69:6a:e9:1e:57:30:45:3f:56:cc:4a:18:8c:cd:76:12:42:16: 3a:60:1e:1c:6f:b5:81:b3:7d:e3:e2:9f:32:d5:cc:cc:13:68: 15:c6:ea:ac -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUQW8B4k8V3k+p0xd12xv+t6GaPNQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyNDIwN1oX DTI3MDUwMjAyNDcwN1owMzExMC8GA1UEAxMoRENDMTQyRTRCQzBBOTNEMjIyNzQ0 RDc2NEJBMzFCMzFDNUY3MjFGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2dR+iuJXC0uN5eUqMPzsiFHpDGrEZ7xp6s3nwITfKhUkEYwFDDSkCpM4LK 7I3V206GPZcwcBE/OFYTg/DetTVN4RDa02kKM4yB9E7gJUTgd6bhmEnRY6mqaw2U iRAzNtZPhBfZUaraE14UNSHR/kb5awVLra1ZFkLvKj8cBCkPSvP/Odvb3OOSmbWa UuawMHYaB8Fdwm6acheKq/nKDoXJHY97LaTq8UcsWl7lbXwQ/VSMF60GKYxUH+ZZ 5JImxsfqlvbEC8utT7Z1cDENIQbTIsyV1Jtff3mM0yunAvA0cNrdWwMP413WFEQh UrfXrigaXIYCBWF9aE/pTHTHKjcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNzBQuS8CpPSInRNdkujGzHF9yH0MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ZhNDE1NDM4LWFkMDEtNDJkYy04YzkyLTE1MWJjOGMyNzIxZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mYTQxNTQz OC1hZDAxLTQyZGMtOGM5Mi0xNTFiYzhjMjcyMWYvMC9EQ0MxNDJFNEJDMEE5M0Qy MjI3NDRENzY0QkEzMUIzMUM1RjcyMUY0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6YaMA0GCSqGSIb3DQEBCwUAA4IBAQCczoKlNSMVVmSVMygR4gisezDwCPnw nIQGv05/aC62YPr7mwOc9HQHRAYb3YTuGwtgPAUXXyzGq8kKOvu4U/botsfWd+rh 4F8CyWcpel63iMh8fjjUAzAQBHgDF8pN1zHQrkNekVq7ZPyBt4EzzqzSxSt6DlJT 6TBmZzXwmObJohVhZc5ta+Ctx12J6Jhddx0oGG+Emm1cCpBFMGynVu3mp6ypr9E8 bP0bCPFn3ul+Zpl6w1Rp+Uuht/PqGN5FpYw2s+txdULcrKhKKrDDpLnbOtGhuIwF GzppaukeVzBFP1bMShiMzXYSQhY6YB4cb7WBs33j4p8y1czME2gVxuqs -----END CERTIFICATE-----Generated at Tue May 12 22:03:51 2026 by rpki-client