$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer File: C685EF86C3EED3646B26DDA717952CDBC1AF938B.cer (raw, json) Hash identifier: jZka5IjCsVI6x2k5zmHu8OSp28QsgHoH+JCaovMLTMQ= Subject key identifier: C6:85:EF:86:C3:EE:D3:64:6B:26:DD:A7:17:95:2C:DB:C1:AF:93:8B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4B770B5FD336A6271CE0D917C95E7832265021EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:30:08 +0000 Certificate not after: Sun 02 May 2027 01:35:08 +0000 Subordinate resources: IP: 103.166.66.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 05:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:77:0b:5f:d3:36:a6:27:1c:e0:d9:17:c9:5e:78:32:26:50:21:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:30:08 2026 GMT Not After : May 2 01:35:08 2027 GMT Subject: CN=C685EF86C3EED3646B26DDA717952CDBC1AF938B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1f:7c:b8:9e:54:dd:a0:78:35:80:f0:8f:f4: 34:4a:21:bd:48:63:14:d3:7c:31:31:6b:ed:58:c9: f9:87:33:14:46:85:d7:87:a2:bb:0e:fd:6a:d8:cd: ee:42:98:7b:d1:8b:31:6a:1b:86:a4:a4:2d:c8:27: 3a:06:70:0e:d2:87:84:de:59:10:e8:37:b2:3f:90: b7:ac:00:65:ef:fe:a3:70:25:37:b7:31:7c:e5:13: ea:e0:f4:7c:44:b0:39:4e:fb:18:1f:61:be:ae:af: 7d:bd:0d:b0:16:6c:73:94:6d:c3:8e:68:e9:dc:50: 10:21:8a:1f:4f:b2:85:68:c4:15:ad:8c:b8:26:39: d3:d7:64:fd:44:35:c9:a9:fb:98:a5:5b:f1:f9:18: 21:b8:89:69:24:5e:7e:bc:c4:fe:36:44:ce:91:78: 0e:4a:b0:cd:30:7d:1b:e7:ef:51:90:e2:c2:ec:2d: 77:87:9d:8a:f5:76:a6:d0:74:cd:62:5a:cc:42:b2: 73:ca:e6:47:60:f6:cb:7f:54:a0:7b:58:6e:17:5d: bf:5e:4e:f9:75:3e:ba:c8:b4:7b:f4:84:bf:8e:b5: 1a:71:77:9b:c8:51:a7:66:81:74:29:fe:b1:f8:2a: aa:89:4d:b3:ea:e0:2d:c5:fb:9a:ea:a3:62:3b:95: 9d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C6:85:EF:86:C3:EE:D3:64:6B:26:DD:A7:17:95:2C:DB:C1:AF:93:8B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/C685EF86C3EED3646B26DDA717952CDBC1AF938B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.66.0/23 Signature Algorithm: sha256WithRSAEncryption 77:5b:9f:de:fd:48:f9:d8:96:d5:d4:e1:cd:8f:1b:7d:c0:be: ed:97:4e:e2:fc:0a:50:09:94:30:55:3e:52:84:ef:2c:25:21: 20:6f:62:e6:64:98:23:fc:53:1f:dc:90:f6:3f:1a:c6:0b:90: d2:d0:c0:84:38:c8:f1:df:61:12:a8:9a:07:1b:1e:67:c1:e8: b7:87:5b:8f:ed:85:74:c4:d5:eb:66:b4:75:b7:96:91:d7:ba: da:44:e8:8a:9b:94:e4:54:a4:1c:e3:75:e6:a3:d2:25:ce:47: 7f:7d:f6:8a:cb:0d:91:33:fe:61:80:55:53:31:8c:8c:83:d0: 8a:58:67:06:f6:01:bf:b2:97:ed:62:05:e6:b6:fc:a7:2e:9f: 99:6f:85:0b:c8:56:c5:ca:f9:41:9b:ce:48:bb:81:c7:d3:96: 66:ab:21:7e:e9:f5:54:27:83:2a:46:84:49:bf:b3:44:29:14: 1d:6c:53:a9:b6:ba:a9:87:3d:dc:4a:85:68:8f:15:1a:aa:97: 99:a3:c3:b5:a9:3c:d0:83:07:b0:0a:e9:60:96:33:eb:c9:f9: 1c:52:aa:e5:cc:8f:76:50:81:fd:e6:f2:95:36:a5:cb:5b:e5: 36:d7:51:ea:1b:53:0f:b1:02:4f:b4:62:99:1e:de:28:33:51: 6b:3a:f2:b1 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUS3cLX9M2picc4NkXyV54MiZQIe4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzAwOFoX DTI3MDUwMjAxMzUwOFowMzExMC8GA1UEAxMoQzY4NUVGODZDM0VFRDM2NDZCMjZE REE3MTc5NTJDREJDMUFGOTM4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJwffLieVN2geDWA8I/0NEohvUhjFNN8MTFr7VjJ+YczFEaF14eiuw79atjN 7kKYe9GLMWobhqSkLcgnOgZwDtKHhN5ZEOg3sj+Qt6wAZe/+o3AlN7cxfOUT6uD0 fESwOU77GB9hvq6vfb0NsBZsc5Rtw45o6dxQECGKH0+yhWjEFa2MuCY509dk/UQ1 yan7mKVb8fkYIbiJaSRefrzE/jZEzpF4DkqwzTB9G+fvUZDiwuwtd4edivV2ptB0 zWJazEKyc8rmR2D2y39UoHtYbhddv15O+XU+usi0e/SEv461GnF3m8hRp2aBdCn+ sfgqqolNs+rgLcX7muqjYjuVnc0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMaF74bD7tNkaybdpxeVLNvBr5OLMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E1N2U1YjBlLTU5NjQtNDYzZi04MDQxLTMzN2Y4MDU1NjQzYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hNTdlNWIw ZS01OTY0LTQ2M2YtODA0MS0zMzdmODA1NTY0M2MvMC9DNjg1RUY4NkMzRUVEMzY0 NkIyNkREQTcxNzk1MkNEQkMxQUY5MzhCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6ZCMA0GCSqGSIb3DQEBCwUAA4IBAQB3W5/e/Uj52JbV1OHNjxt9wL7tl07i /ApQCZQwVT5ShO8sJSEgb2LmZJgj/FMf3JD2PxrGC5DS0MCEOMjx32ESqJoHGx5n wei3h1uP7YV0xNXrZrR1t5aR17raROiKm5TkVKQc43Xmo9Ilzkd/ffaKyw2RM/5h gFVTMYyMg9CKWGcG9gG/spftYgXmtvynLp+Zb4ULyFbFyvlBm85Iu4HH05ZmqyF+ 6fVUJ4MqRoRJv7NEKRQdbFOptrqphz3cSoVojxUaqpeZo8O1qTzQgwewCulgljPr yfkcUqrlzI92UIH95vKVNqXLW+U211HqG1MPsQJPtGKZHt4oM1FrOvKx -----END CERTIFICATE-----Generated at Fri May 8 07:34:14 2026 by rpki-client