$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer File: C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer (raw, json) Hash identifier: TYNw9LUFXT+E849ZxRHaIQIPJQ66x9kNHOtBTFzj8Ks= Subject key identifier: C1:D5:CA:CB:28:69:A4:50:74:AA:2E:EF:0A:AF:44:0A:04:3D:57:8A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 610F6D6CE7BFC5963CDD08C5BA4DD2824CD394F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:56:25 +0000 Certificate not after: Sun 02 May 2027 01:01:25 +0000 Subordinate resources: IP: 103.180.194.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:0f:6d:6c:e7:bf:c5:96:3c:dd:08:c5:ba:4d:d2:82:4c:d3:94:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:56:25 2026 GMT Not After : May 2 01:01:25 2027 GMT Subject: CN=C1D5CACB2869A45074AA2EEF0AAF440A043D578A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4a:c1:03:22:14:61:8e:76:49:51:eb:76:98: a3:8c:1f:50:7e:d7:35:8d:63:21:ba:cd:1e:35:b5: 4d:31:e6:ef:ae:fd:4b:6e:09:43:78:9e:30:80:6a: b8:07:b6:f0:48:80:1c:92:13:0c:fb:79:dd:6b:7c: 25:5e:fb:79:15:8e:14:6d:d5:ad:3a:90:54:ce:c1: 34:b3:11:95:6f:58:c2:bc:13:fa:7d:4e:c9:59:bd: 0b:cf:af:14:7d:58:6c:66:e9:e5:60:99:5b:b4:97: 89:62:55:2d:49:7d:b6:c2:f7:ac:ee:a9:e6:59:47: c4:f0:fd:80:cb:aa:af:fa:7a:ff:29:e3:ff:48:ce: de:82:e7:08:84:89:02:24:4b:54:a2:a6:3c:24:96: ec:9c:a4:9d:ef:a4:23:45:dd:68:3d:37:26:eb:0a: 48:17:4c:f9:87:c1:58:74:ab:16:30:cf:f1:a9:c1: 5b:50:98:b1:5c:db:d6:be:91:36:65:ce:19:77:66: e1:77:a0:93:95:f7:6f:3f:75:2b:c9:c9:d1:b9:fd: ea:ad:1c:9f:2c:9e:4c:8c:9f:8c:bd:e8:c6:24:d3: 01:1f:fc:46:78:4e:16:08:fc:b6:e8:a2:11:7c:25: b8:8d:c6:76:78:a5:a9:e8:5f:94:27:b6:e9:5b:5d: bc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C1:D5:CA:CB:28:69:A4:50:74:AA:2E:EF:0A:AF:44:0A:04:3D:57:8A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.194.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:65:b1:dc:2c:3e:95:81:75:70:28:7d:dd:8a:06:2f:39:14: 81:f9:93:62:f3:e5:5c:83:22:e3:93:ed:5c:7b:cc:0f:be:02: 98:21:d2:ea:04:38:fd:1d:d4:83:e1:ac:18:b7:07:12:47:20: 0f:d0:8d:51:8e:4d:67:43:55:b6:22:0a:78:fa:b2:e8:29:3c: 2c:50:19:67:5f:06:8a:cc:ac:5c:e7:c3:a8:f6:21:4d:c3:1d: 05:ff:d6:b1:31:06:dd:a7:a2:98:31:2e:e6:b1:85:1c:9c:56: ff:d5:e1:be:61:a8:49:bb:ea:ad:06:a7:ea:f0:01:ce:e1:c5: 90:6d:aa:f6:01:7e:d4:86:38:af:34:84:b3:be:00:5e:c1:10: 1c:a1:22:93:a1:a1:d0:ad:f9:8b:ed:b2:2d:fb:c0:b2:7f:4e: f0:e3:c7:93:26:b6:ae:5f:4e:b0:22:d2:9f:bc:2e:cc:f7:86: fb:b5:21:41:bc:d1:a0:aa:4e:3d:b3:40:ac:8d:37:2b:a4:6a: ea:33:77:54:b7:6c:33:77:b1:d9:f2:06:2a:0c:f3:2f:a1:c7: 20:6c:13:6f:ef:54:26:d6:13:a3:b6:a8:86:41:4b:c1:a6:5e: 0b:44:bb:1f:8f:0d:2f:fe:10:b2:4c:86:ec:7d:94:69:c8:1b: 8a:d9:88:0e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUYQ9tbOe/xZY83QjFuk3SgkzTlPQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTYyNVoX DTI3MDUwMjAxMDEyNVowMzExMC8GA1UEAxMoQzFENUNBQ0IyODY5QTQ1MDc0QUEy RUVGMEFBRjQ0MEEwNDNENTc4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJVKwQMiFGGOdklR63aYo4wfUH7XNY1jIbrNHjW1TTHm7679S24JQ3ieMIBq uAe28EiAHJITDPt53Wt8JV77eRWOFG3VrTqQVM7BNLMRlW9YwrwT+n1OyVm9C8+v FH1YbGbp5WCZW7SXiWJVLUl9tsL3rO6p5llHxPD9gMuqr/p6/ynj/0jO3oLnCISJ AiRLVKKmPCSW7Jykne+kI0XdaD03JusKSBdM+YfBWHSrFjDP8anBW1CYsVzb1r6R NmXOGXdm4Xegk5X3bz91K8nJ0bn96q0cnyyeTIyfjL3oxiTTAR/8RnhOFgj8tuii EXwluI3GdnilqehflCe26VtdvK0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMHVyssoaaRQdKou7wqvRAoEPVeKMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzczZjc1MDg4LTA4OGUtNDFjMC1iZmNlLWVkYzY5YmVhZmQ0YS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83M2Y3NTA4 OC0wODhlLTQxYzAtYmZjZS1lZGM2OWJlYWZkNGEvMC9DMUQ1Q0FDQjI4NjlBNDUw NzRBQTJFRUYwQUFGNDQwQTA0M0Q1NzhBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7TCMA0GCSqGSIb3DQEBCwUAA4IBAQB9ZbHcLD6VgXVwKH3digYvORSB+ZNi 8+VcgyLjk+1ce8wPvgKYIdLqBDj9HdSD4awYtwcSRyAP0I1Rjk1nQ1W2Igp4+rLo KTwsUBlnXwaKzKxc58Oo9iFNwx0F/9axMQbdp6KYMS7msYUcnFb/1eG+YahJu+qt Bqfq8AHO4cWQbar2AX7UhjivNISzvgBewRAcoSKToaHQrfmL7bIt+8Cyf07w48eT JrauX06wItKfvC7M94b7tSFBvNGgqk49s0CsjTcrpGrqM3dUt2wzd7HZ8gYqDPMv occgbBNv71Qm1hOjtqiGQUvBpl4LRLsfjw0v/hCyTIbsfZRpyBuK2YgO -----END CERTIFICATE-----Generated at Tue May 5 14:19:47 2026 by rpki-client