$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.cer File: 8A8B155E8335C028549D2BF6B54C25E4A78B8C92.cer (raw, json) Hash identifier: W0s8/nRgsyQUspcyH+C0iLpiEab0r6Pog1pVdHqUGDk= Subject key identifier: 8A:8B:15:5E:83:35:C0:28:54:9D:2B:F6:B5:4C:25:E4:A7:8B:8C:92 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 59721689AE91F761878AFADB9413159BCE36F75E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:28:19 +0000 Certificate not after: Sun 02 May 2027 02:33:19 +0000 Subordinate resources: IP: 103.162.146.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 05:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:72:16:89:ae:91:f7:61:87:8a:fa:db:94:13:15:9b:ce:36:f7:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:28:19 2026 GMT Not After : May 2 02:33:19 2027 GMT Subject: CN=8A8B155E8335C028549D2BF6B54C25E4A78B8C92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:77:da:38:34:ab:8d:69:dc:fd:dd:90:ef:95: 1e:fe:e3:f6:e1:44:b8:e0:f5:36:3e:d2:34:d2:4d: 27:c7:94:38:99:e2:5b:33:95:91:4d:33:d9:42:d5: 16:0a:94:1a:dc:8b:f6:ee:e5:52:39:2b:ff:c0:01: 94:29:2c:fb:2b:f6:29:bd:75:6b:bb:e8:ad:3a:9f: b0:3c:96:22:81:31:40:97:62:b8:bf:84:6f:3a:74: 38:70:ee:ed:33:93:48:6c:01:53:0c:59:7f:3c:3d: ad:dc:89:86:25:d5:8b:f9:2c:cb:88:55:18:3a:15: a6:04:b7:b0:a6:fd:a5:70:d6:a4:b6:89:fe:50:c3: 93:0d:cb:32:c1:e8:66:18:65:07:1f:86:81:3c:d8: cb:85:a6:f5:ab:00:89:79:b4:84:36:2f:e9:7c:3f: b6:17:ba:7b:fd:e9:ca:73:6c:76:c7:50:a3:c2:ed: 8d:6e:3c:31:77:23:c9:1d:d5:30:a4:04:a2:32:e1: 21:4c:7d:c6:fb:6c:45:0a:7a:37:fb:fc:cd:f0:b2: 2b:31:fe:1b:41:01:a1:08:9b:27:67:6a:41:b2:7a: c7:38:b8:a2:7f:b8:ef:d7:e9:0f:66:8a:93:f1:0c: f8:0f:c7:9a:ac:42:0c:d9:42:72:98:b5:72:f3:96: a9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:8B:15:5E:83:35:C0:28:54:9D:2B:F6:B5:4C:25:E4:A7:8B:8C:92 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.146.0/23 Signature Algorithm: sha256WithRSAEncryption 31:0e:93:40:52:12:0c:00:b7:a9:69:21:25:e9:69:07:06:58: be:c2:b6:b2:e9:69:38:77:2c:7d:a1:e0:b9:19:a1:ea:51:1c: b4:75:38:e2:d2:ac:ee:0d:12:8d:ce:4b:e8:f9:51:d8:66:74: a5:d0:de:fb:81:03:cb:9a:f5:dd:85:d2:6c:f9:9f:57:57:b1: 76:14:df:0f:a0:0c:22:cf:77:1f:11:0f:20:ca:c2:22:3c:64: 97:2e:3c:3c:f3:fb:af:5e:d7:d7:be:7d:b6:50:da:7f:62:29: b7:30:de:a3:aa:4d:9f:97:23:8c:00:05:8e:0a:e4:8e:ba:09: 8d:8b:54:6e:bc:2e:bb:81:7c:b5:da:d0:a2:dd:1b:9d:7c:38: 0d:b3:4e:af:fb:ae:d5:f8:67:82:03:88:18:ba:d0:b3:20:8d: 20:2a:f6:c0:66:3b:6a:ac:8e:f7:ce:45:f4:47:f8:14:9a:4e: 72:53:56:40:86:81:0f:a5:0b:67:25:bd:4e:d6:e1:81:53:c8: f4:be:ba:d7:b1:18:7b:d8:94:20:59:9e:a1:dd:7a:de:53:99: 4d:78:de:0f:08:08:1b:9e:5c:71:92:91:34:4e:b8:ee:a5:88: e2:70:70:77:fd:97:03:99:7c:57:d7:96:96:16:21:3f:db:36: e7:76:b0:e4 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUWXIWia6R92GHivrblBMVm842914wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjgxOVoX DTI3MDUwMjAyMzMxOVowMzExMC8GA1UEAxMoOEE4QjE1NUU4MzM1QzAyODU0OUQy QkY2QjU0QzI1RTRBNzhCOEM5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM132jg0q41p3P3dkO+VHv7j9uFEuOD1Nj7SNNJNJ8eUOJniWzOVkU0z2ULV FgqUGtyL9u7lUjkr/8ABlCks+yv2Kb11a7vorTqfsDyWIoExQJdiuL+Ebzp0OHDu 7TOTSGwBUwxZfzw9rdyJhiXVi/ksy4hVGDoVpgS3sKb9pXDWpLaJ/lDDkw3LMsHo ZhhlBx+GgTzYy4Wm9asAiXm0hDYv6Xw/the6e/3pynNsdsdQo8LtjW48MXcjyR3V MKQEojLhIUx9xvtsRQp6N/v8zfCyKzH+G0EBoQibJ2dqQbJ6xzi4on+479fpD2aK k/EM+A/HmqxCDNlCcpi1cvOWqZUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIqLFV6DNcAoVJ0r9rVMJeSni4ySMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2YwNTIwYjU0LTNiYTctNDYzMS1hZjBiLTU1OTg0YjBiYTdmMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mMDUyMGI1 NC0zYmE3LTQ2MzEtYWYwYi01NTk4NGIwYmE3ZjIvMC84QThCMTU1RTgzMzVDMDI4 NTQ5RDJCRjZCNTRDMjVFNEE3OEI4QzkyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6KSMA0GCSqGSIb3DQEBCwUAA4IBAQAxDpNAUhIMALepaSEl6WkHBli+wray 6Wk4dyx9oeC5GaHqURy0dTji0qzuDRKNzkvo+VHYZnSl0N77gQPLmvXdhdJs+Z9X V7F2FN8PoAwiz3cfEQ8gysIiPGSXLjw88/uvXtfXvn22UNp/Yim3MN6jqk2flyOM AAWOCuSOugmNi1RuvC67gXy12tCi3RudfDgNs06v+67V+GeCA4gYutCzII0gKvbA ZjtqrI73zkX0R/gUmk5yU1ZAhoEPpQtnJb1O1uGBU8j0vrrXsRh72JQgWZ6h3Xre U5lNeN4PCAgbnlxxkpE0TrjupYjicHB3/ZcDmXxX15aWFiE/2zbndrDk -----END CERTIFICATE-----Generated at Fri May 8 07:30:05 2026 by rpki-client