$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/DDF88B435837261B13DE2248E2A856AB45CECC0B.cer File: DDF88B435837261B13DE2248E2A856AB45CECC0B.cer (raw, json) Hash identifier: WjxYmq9lqqT9PRHVoF0I+Vm7CC/Pf3B++78z1ZeQe2o= Subject key identifier: DD:F8:8B:43:58:37:26:1B:13:DE:22:48:E2:A8:56:AB:45:CE:CC:0B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 704421C9438815A1B5C1D2361D376C85CD1775E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:36:37 +0000 Certificate not after: Sun 02 May 2027 01:41:37 +0000 Subordinate resources: IP: 103.191.60.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:44:21:c9:43:88:15:a1:b5:c1:d2:36:1d:37:6c:85:cd:17:75:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:36:37 2026 GMT Not After : May 2 01:41:37 2027 GMT Subject: CN=DDF88B435837261B13DE2248E2A856AB45CECC0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:b7:4a:7b:42:95:b9:8f:08:af:47:1b:1d: 92:f4:9d:9f:73:d4:a1:58:cb:0e:0d:d8:f7:f1:2d: af:1d:6c:8a:88:d7:cd:66:57:87:84:47:05:87:3f: 39:c6:52:78:ab:20:39:ec:77:cf:7d:b6:1a:bc:24: 0f:64:2c:10:65:12:55:97:a0:4d:03:1d:ff:48:44: b9:05:75:3f:51:9c:3b:3e:41:89:06:d3:0e:c0:b3: d9:c3:b4:66:20:19:10:fd:94:9f:18:7d:fa:bd:74: cd:06:93:d0:8a:53:0a:c0:ce:cf:d0:4b:4c:93:88: f9:d1:9a:52:4e:cf:d0:c8:99:96:c6:37:e4:b0:1f: e1:24:b2:90:98:e9:24:14:87:89:a5:d4:76:a2:d9: 04:82:74:88:dd:8c:6f:48:f3:34:46:e6:a6:34:b1: af:bb:3a:1d:a7:ff:1b:20:0f:c5:58:3f:88:55:5f: 7f:11:52:72:da:56:e6:b1:d5:bc:77:dc:4a:7d:b3: 70:5e:3d:88:ba:a2:a9:ed:4f:d6:a4:2a:b8:dd:13: cc:cf:17:29:63:a9:ae:9e:76:c4:50:b4:ca:67:3f: a0:a4:da:08:2c:6a:51:67:f8:a0:d6:a2:62:79:18: 56:08:eb:d5:48:db:4d:76:76:cd:f4:fe:8f:ce:63: ab:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DD:F8:8B:43:58:37:26:1B:13:DE:22:48:E2:A8:56:AB:45:CE:CC:0B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/DDF88B435837261B13DE2248E2A856AB45CECC0B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.60.0/23 Signature Algorithm: sha256WithRSAEncryption 24:bb:29:d2:01:ed:d9:f1:1e:16:e8:9e:c2:85:f9:1f:99:a4: 75:af:60:cf:78:4f:ef:3f:39:2d:d0:ed:42:86:cd:70:bd:2d: 18:ea:81:2f:da:58:65:3d:a6:23:59:5f:8b:64:11:55:c6:1d: e6:f3:c7:67:c0:42:75:08:bc:33:71:13:cb:1a:30:e0:66:70: a1:8d:a0:78:41:31:75:aa:68:27:99:15:bc:e5:1a:17:2b:42: 17:b2:eb:d6:60:e9:82:b2:62:7e:ee:b4:8d:66:2f:86:0a:30: 1c:12:87:53:e8:b3:81:59:3b:eb:f0:eb:c0:33:f0:ab:75:77: 39:0e:28:93:ae:d0:a4:4a:c0:b4:ba:90:df:b8:58:af:53:0b: 9f:bd:6d:17:f4:01:08:ca:54:f5:71:1e:e7:8d:30:69:45:b8: 21:61:3b:3e:1e:f6:63:c1:11:b9:db:52:65:7c:a5:90:6f:4d: 75:e5:31:99:a2:8b:93:ab:b9:59:7e:d2:e7:f4:c9:c9:f0:d5: 49:03:b1:42:5c:a5:6a:96:24:1a:b9:41:1e:d2:7d:55:98:4b: e5:2f:3d:15:a1:9e:2a:45:07:e4:e1:2d:f8:ed:f9:64:da:d9: e6:4b:e6:38:63:8b:7d:8b:33:66:35:ee:e0:26:6b:d5:31:89: 72:c7:d7:26 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUcEQhyUOIFaG1wdI2HTdshc0XdekwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzYzN1oX DTI3MDUwMjAxNDEzN1owMzExMC8GA1UEAxMoRERGODhCNDM1ODM3MjYxQjEzREUy MjQ4RTJBODU2QUI0NUNFQ0MwQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCZt0p7QpW5jwivRxsdkvSdn3PUoVjLDg3Y9/Etrx1siojXzWZXh4RHBYc/ OcZSeKsgOex3z322GrwkD2QsEGUSVZegTQMd/0hEuQV1P1GcOz5BiQbTDsCz2cO0 ZiAZEP2Unxh9+r10zQaT0IpTCsDOz9BLTJOI+dGaUk7P0MiZlsY35LAf4SSykJjp JBSHiaXUdqLZBIJ0iN2Mb0jzNEbmpjSxr7s6Haf/GyAPxVg/iFVffxFSctpW5rHV vHfcSn2zcF49iLqiqe1P1qQquN0TzM8XKWOprp52xFC0ymc/oKTaCCxqUWf4oNai YnkYVgjr1UjbTXZ2zfT+j85jq0MCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFN34i0NYNyYbE94iSOKoVqtFzswLMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FlMzRkMmQ4LTM0YWYtNDc1Ny04YWQ5LTkyZGEzNWQ5MjE2OC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hZTM0ZDJk OC0zNGFmLTQ3NTctOGFkOS05MmRhMzVkOTIxNjgvMC9EREY4OEI0MzU4MzcyNjFC MTNERTIyNDhFMkE4NTZBQjQ1Q0VDQzBCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ788MA0GCSqGSIb3DQEBCwUAA4IBAQAkuynSAe3Z8R4W6J7ChfkfmaR1r2DP eE/vPzkt0O1Chs1wvS0Y6oEv2lhlPaYjWV+LZBFVxh3m88dnwEJ1CLwzcRPLGjDg ZnChjaB4QTF1qmgnmRW85RoXK0IXsuvWYOmCsmJ+7rSNZi+GCjAcEodT6LOBWTvr 8OvAM/CrdXc5DiiTrtCkSsC0upDfuFivUwufvW0X9AEIylT1cR7njTBpRbghYTs+ HvZjwRG521JlfKWQb0115TGZoouTq7lZftLn9MnJ8NVJA7FCXKVqliQauUEe0n1V mEvlLz0VoZ4qRQfk4S347flk2tnmS+Y4Y4t9izNmNe7gJmvVMYlyx9cm -----END CERTIFICATE-----Generated at Tue May 12 22:46:04 2026 by rpki-client