$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/CDAD8AE64850B7306026A1B46FF84D08284104C9.cer File: CDAD8AE64850B7306026A1B46FF84D08284104C9.cer (raw, json) Hash identifier: RJ34ImcV5VaiuENoSVQqN3si4oXphtrVWgPiDy0XGVE= Subject key identifier: CD:AD:8A:E6:48:50:B7:30:60:26:A1:B4:6F:F8:4D:08:28:41:04:C9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4FE7EF7C3C0F6BC9427696838A5148088C5B7DB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:40:43 +0000 Certificate not after: Sun 02 May 2027 00:45:43 +0000 Subordinate resources: IP: 103.169.252.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 05:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:e7:ef:7c:3c:0f:6b:c9:42:76:96:83:8a:51:48:08:8c:5b:7d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:40:43 2026 GMT Not After : May 2 00:45:43 2027 GMT Subject: CN=CDAD8AE64850B7306026A1B46FF84D08284104C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b3:2e:17:06:98:37:d0:db:0b:8f:a3:48:f9: 62:ba:73:fa:d2:4c:d4:78:24:04:d3:dc:bc:5b:6b: 0e:42:d3:83:f3:ab:d9:8b:3d:05:70:02:ec:7e:3f: 11:32:a4:2b:f6:0e:04:fa:1b:1a:a7:1e:0c:06:70: d8:de:ba:d0:61:dd:ec:9e:7f:48:7c:d6:8c:34:ac: 20:5b:73:e5:17:ee:99:d2:31:6f:9c:ad:aa:67:a2: 47:b2:6f:7a:fe:ec:52:8a:6c:19:b8:2f:56:47:e2: fb:4d:40:37:a3:1d:77:7e:00:6d:d4:b3:62:ad:43: b9:6e:b6:02:2e:8d:c7:45:1a:6b:1f:1f:02:4f:a4: d9:0a:f4:94:7d:ee:8e:b9:a1:00:45:ab:f7:2e:15: 1b:e2:41:bb:fc:1d:1b:a7:0d:9c:ed:61:f4:de:9d: f9:c2:ec:2e:8c:6f:91:3d:04:fa:75:f5:a8:5a:fa: 3b:b9:97:df:a5:c6:b1:04:6e:dc:c7:69:15:53:e0: 4b:68:77:90:46:b9:34:e2:78:58:fc:a9:5f:5d:c7: b7:e9:70:a0:62:21:9d:f5:19:e5:83:7a:c6:3c:ba: 38:6d:3c:52:4a:21:90:f3:9d:3a:5e:55:dd:b0:75: 61:e6:c4:f7:27:d0:0a:ea:09:68:4d:e4:72:28:df: f0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:AD:8A:E6:48:50:B7:30:60:26:A1:B4:6F:F8:4D:08:28:41:04:C9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.252.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:10:fa:b6:26:c4:ea:30:f2:39:37:1c:7c:d7:e4:24:ba:24: 65:64:56:b4:de:76:3f:2e:c9:18:c8:95:be:da:9f:c3:ee:a4: f5:6d:9a:f9:7c:78:43:eb:92:d5:cf:f3:82:b9:53:ad:1d:ef: 3e:32:4b:2f:5b:56:be:99:21:fc:c3:5c:c1:bc:e3:dc:6b:9e: 51:df:7f:09:db:7f:a7:3e:0d:5c:97:f9:c3:5b:45:55:2a:92: d7:45:77:5f:12:d1:6c:38:77:5b:4d:72:15:1c:d8:06:f9:af: 67:10:f6:91:58:2f:37:e9:27:e6:b9:62:e2:5a:51:22:2b:fb: 99:97:f8:bd:30:6b:0e:18:fe:80:5f:31:47:70:41:7d:d7:a9: 03:c6:a1:5f:00:28:3b:05:37:8a:96:15:c4:79:ba:61:a3:ea: 0d:7f:04:ad:fc:35:b9:66:ac:56:b5:83:5a:35:01:27:87:16: e4:b6:7d:2c:d1:7d:8e:59:a9:66:2a:bd:b0:20:4a:8b:f2:eb: f7:e3:14:d1:6a:0a:e4:a9:7b:ce:b7:3c:22:fe:bb:76:c8:d3: 83:74:02:e7:92:61:85:d8:be:a2:86:58:d4:e1:7d:67:7f:7d: 11:32:06:ba:9d:a7:75:b5:91:6d:8f:fb:0e:92:35:b4:a7:d5: 33:87:4a:e4 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUT+fvfDwPa8lCdpaDilFICIxbfbYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDA0M1oX DTI3MDUwMjAwNDU0M1owMzExMC8GA1UEAxMoQ0RBRDhBRTY0ODUwQjczMDYwMjZB MUI0NkZGODREMDgyODQxMDRDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALGzLhcGmDfQ2wuPo0j5Yrpz+tJM1HgkBNPcvFtrDkLTg/Or2Ys9BXAC7H4/ ETKkK/YOBPobGqceDAZw2N660GHd7J5/SHzWjDSsIFtz5RfumdIxb5ytqmeiR7Jv ev7sUopsGbgvVkfi+01AN6Mdd34AbdSzYq1DuW62Ai6Nx0Uaax8fAk+k2Qr0lH3u jrmhAEWr9y4VG+JBu/wdG6cNnO1h9N6d+cLsLoxvkT0E+nX1qFr6O7mX36XGsQRu 3MdpFVPgS2h3kEa5NOJ4WPypX13Ht+lwoGIhnfUZ5YN6xjy6OG08UkohkPOdOl5V 3bB1YebE9yfQCuoJaE3kcijf8McCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM2tiuZIULcwYCahtG/4TQgoQQTJMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzViOGM1NDNjLWRlMWYtNGVmNC05MmIxLTY4NTU2ZmYxMzFhMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81YjhjNTQz Yy1kZTFmLTRlZjQtOTJiMS02ODU1NmZmMTMxYTMvMC9DREFEOEFFNjQ4NTBCNzMw NjAyNkExQjQ2RkY4NEQwODI4NDEwNEM5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6n8MA0GCSqGSIb3DQEBCwUAA4IBAQBfEPq2JsTqMPI5Nxx81+QkuiRlZFa0 3nY/LskYyJW+2p/D7qT1bZr5fHhD65LVz/OCuVOtHe8+MksvW1a+mSH8w1zBvOPc a55R338J23+nPg1cl/nDW0VVKpLXRXdfEtFsOHdbTXIVHNgG+a9nEPaRWC836Sfm uWLiWlEiK/uZl/i9MGsOGP6AXzFHcEF916kDxqFfACg7BTeKlhXEebpho+oNfwSt /DW5ZqxWtYNaNQEnhxbktn0s0X2OWalmKr2wIEqL8uv34xTRagrkqXvOtzwi/rt2 yNODdALnkmGF2L6ihljU4X1nf30RMga6nad1tZFtj/sOkjW0p9Uzh0rk -----END CERTIFICATE-----Generated at Fri May 8 07:30:02 2026 by rpki-client