$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer File: DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer (raw, json) Hash identifier: 7h12y2kpNjpdyBbjMGenPFTqBoEsxcfe2A39Yfnnhr8= Subject key identifier: DF:EB:E2:63:0C:C0:A4:45:30:A5:44:21:24:4D:4B:8C:ED:2C:8A:C4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 45F0C9B6981BBE00C40CE3789C386615BD1240D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:51:11 +0000 Certificate not after: Sun 02 May 2027 00:56:11 +0000 Subordinate resources: IP: 103.170.236.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f0:c9:b6:98:1b:be:00:c4:0c:e3:78:9c:38:66:15:bd:12:40:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:51:11 2026 GMT Not After : May 2 00:56:11 2027 GMT Subject: CN=DFEBE2630CC0A44530A54421244D4B8CED2C8AC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fa:39:be:76:3a:d1:d5:56:b7:3c:bd:ee:e8: b5:35:42:c5:10:ad:2b:23:1f:a8:fe:7d:53:b0:6d: de:cc:67:74:e2:df:e5:52:a2:eb:26:0a:3f:27:9f: cf:3d:9e:92:05:1a:03:5b:50:74:c7:a8:6d:5c:14: 49:80:de:25:ce:ed:20:f8:5e:e9:e0:e2:e8:8c:db: 08:76:d9:81:dd:b1:50:cf:37:b0:32:67:0a:bf:dd: f8:ca:fe:fa:65:0d:cc:11:f1:63:56:a9:7c:d0:9a: 27:5b:c1:9e:3d:60:1b:cd:d9:0c:68:d6:f7:a0:b3: 4f:71:40:3f:8b:f9:db:7a:ed:7b:82:82:a5:7c:1f: 42:9b:1b:97:fb:cb:1a:92:61:5e:a6:e6:30:9c:22: 8c:ad:8f:18:21:8c:cb:26:1a:79:4d:02:c0:4c:1b: c4:7a:60:28:0d:f9:2c:d4:f4:15:e1:9a:1b:37:32: 77:70:82:58:f0:ce:12:84:f8:74:49:a7:a4:19:ea: 85:9e:cc:c1:32:40:bc:d5:f3:a9:27:57:68:de:05: 7d:3f:36:e5:e2:4b:f0:a8:33:85:e7:9a:e9:cd:a7: f0:d5:1a:e9:b9:7f:f5:9e:a7:a8:d4:f7:63:a2:f9: ba:70:20:6a:ca:b4:67:2a:98:7a:0f:2b:a7:4e:30: e3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DF:EB:E2:63:0C:C0:A4:45:30:A5:44:21:24:4D:4B:8C:ED:2C:8A:C4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.236.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:5e:34:26:c4:77:e3:1c:15:8c:b9:97:b8:a5:4d:7e:2b:96: 09:d6:3a:73:c7:38:0c:d3:78:d4:87:a4:97:d1:4b:97:d8:b4: 13:6c:8f:bc:98:5c:1d:07:45:eb:85:f5:59:a0:02:05:b0:54: d7:6d:53:51:c6:23:17:95:ed:78:dc:ee:60:6e:22:8d:fe:c9: a6:ec:cc:bc:8b:09:b0:34:7f:8d:23:86:19:0d:b9:12:61:50: 31:19:aa:f7:2b:2e:f2:bc:0c:8e:e6:bd:e9:4a:99:23:82:c5: 5a:7b:ec:59:59:ab:f7:24:47:24:2a:14:da:fa:3d:b8:d2:49: aa:d9:5d:57:60:29:e0:85:2f:58:f4:94:1c:87:40:4f:8f:d8: 4a:61:c3:8c:2f:7f:e3:76:c8:eb:fc:13:18:01:e4:b6:77:77: 65:3d:c1:a9:8a:ab:60:e9:24:df:4b:42:32:d9:01:fb:4b:0b: f4:ef:fd:23:4f:25:0d:98:4c:c0:fc:50:fb:7e:4b:00:74:79: 88:b0:b6:29:9c:87:cc:19:92:ea:57:ac:26:b7:ea:db:2a:d8: c0:1f:49:c0:3c:fb:c9:c6:c9:84:ee:ef:0a:84:ea:d0:4f:f3: 6a:24:a2:0c:b2:10:fd:bf:15:f4:f1:b3:7a:10:eb:82:fe:f3: 08:19:35:22 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIURfDJtpgbvgDEDON4nDhmFb0SQNEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTExMVoX DTI3MDUwMjAwNTYxMVowMzExMC8GA1UEAxMoREZFQkUyNjMwQ0MwQTQ0NTMwQTU0 NDIxMjQ0RDRCOENFRDJDOEFDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJn6Ob52OtHVVrc8ve7otTVCxRCtKyMfqP59U7Bt3sxndOLf5VKi6yYKPyef zz2ekgUaA1tQdMeobVwUSYDeJc7tIPhe6eDi6IzbCHbZgd2xUM83sDJnCr/d+Mr+ +mUNzBHxY1apfNCaJ1vBnj1gG83ZDGjW96CzT3FAP4v523rte4KCpXwfQpsbl/vL GpJhXqbmMJwijK2PGCGMyyYaeU0CwEwbxHpgKA35LNT0FeGaGzcyd3CCWPDOEoT4 dEmnpBnqhZ7MwTJAvNXzqSdXaN4FfT825eJL8Kgzheea6c2n8NUa6bl/9Z6nqNT3 Y6L5unAgasq0ZyqYeg8rp04w44UCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFN/r4mMMwKRFMKVEISRNS4ztLIrEMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZiZmE0MjY1LWJiNTgtNDZlMi04MzA5LTNhZDM5ODFhMzUxNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82YmZhNDI2 NS1iYjU4LTQ2ZTItODMwOS0zYWQzOTgxYTM1MTYvMC9ERkVCRTI2MzBDQzBBNDQ1 MzBBNTQ0MjEyNDRENEI4Q0VEMkM4QUM0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6rsMA0GCSqGSIb3DQEBCwUAA4IBAQBNXjQmxHfjHBWMuZe4pU1+K5YJ1jpz xzgM03jUh6SX0UuX2LQTbI+8mFwdB0XrhfVZoAIFsFTXbVNRxiMXle143O5gbiKN /smm7My8iwmwNH+NI4YZDbkSYVAxGar3Ky7yvAyO5r3pSpkjgsVae+xZWav3JEck KhTa+j240kmq2V1XYCnghS9Y9JQch0BPj9hKYcOML3/jdsjr/BMYAeS2d3dlPcGp iqtg6STfS0Iy2QH7Swv07/0jTyUNmEzA/FD7fksAdHmIsLYpnIfMGZLqV6wmt+rb KtjAH0nAPPvJxsmE7u8KhOrQT/NqJKIMshD9vxX08bN6EOuC/vMIGTUi -----END CERTIFICATE-----Generated at Tue May 12 22:47:51 2026 by rpki-client