$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8B18B819BC010B4A4EC66777543486E34AF52ED4.cer File: 8B18B819BC010B4A4EC66777543486E34AF52ED4.cer (raw, json) Hash identifier: GHtGIra17mPvOdbKc8UxjK7DvQysxcUKQnbow56qpVc= Subject key identifier: 8B:18:B8:19:BC:01:0B:4A:4E:C6:67:77:54:34:86:E3:4A:F5:2E:D4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 05D1F6DD10935C1476C4EDBD54102F1CA8F449C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:13:30 +0000 Certificate not after: Sun 02 May 2027 00:18:30 +0000 Subordinate resources: IP: 43.248.212.0/22 IP: 103.28.56.0/22 IP: 2404:fb00::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 May 2026 12:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d1:f6:dd:10:93:5c:14:76:c4:ed:bd:54:10:2f:1c:a8:f4:49:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:13:30 2026 GMT Not After : May 2 00:18:30 2027 GMT Subject: CN=8B18B819BC010B4A4EC66777543486E34AF52ED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4e:36:02:67:3c:58:64:78:f2:f4:4b:9c:f2: f9:e5:8e:5a:1d:c5:96:c2:98:3f:60:f6:d3:18:3c: 63:09:78:be:24:2e:c3:89:71:54:03:a7:97:47:c2: 57:dd:05:1b:f2:ac:f6:63:a8:83:e0:df:58:19:95: d7:1a:df:01:ee:ac:2a:c2:6d:5e:d3:1c:62:f0:fd: d1:2d:4d:85:a8:cf:ef:7b:01:19:8d:53:9c:aa:58: 7d:a8:2f:58:03:db:b9:81:84:10:a1:63:4b:71:c9: 89:9d:ce:a9:c5:1a:f6:a9:e3:ef:b6:97:b8:61:77: bb:3f:75:87:72:00:b2:4d:93:65:75:47:6a:27:34: 43:6e:f8:4f:0e:6a:6f:67:e0:26:98:d3:90:94:9a: 28:0a:ee:9d:ea:ef:70:94:ca:8c:dc:d1:b4:5a:96: 3a:e0:9d:2f:f8:06:27:27:83:5c:2f:63:df:cb:e1: 70:25:38:cd:d5:c7:54:1c:a3:68:14:d5:98:7d:be: 60:df:d7:2d:f8:fc:32:7b:c4:93:f2:8a:22:da:17: a5:5f:a0:c9:de:5c:9f:e8:ca:85:af:2a:e3:74:ae: 2d:50:12:21:76:ba:80:7f:a6:b8:e2:04:05:31:c4: 21:45:87:df:d6:b8:65:9c:b9:0d:ee:08:bf:33:59: 6b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:18:B8:19:BC:01:0B:4A:4E:C6:67:77:54:34:86:E3:4A:F5:2E:D4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/8B18B819BC010B4A4EC66777543486E34AF52ED4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.212.0/22 103.28.56.0/22 IPv6: 2404:fb00::/32 Signature Algorithm: sha256WithRSAEncryption 48:ff:5d:b6:bb:ae:6b:0b:d4:4e:41:a5:c9:90:b3:8a:d9:19: f2:d2:a8:aa:59:6b:ab:03:23:d4:a2:98:24:1c:c3:5a:d7:98: 59:6d:35:86:6c:c1:a6:d8:f9:6c:22:81:6f:f6:4a:16:65:69: 2c:13:e8:80:6a:f5:68:42:83:c1:bd:b7:78:5c:c9:d8:3c:f4: 5e:1b:40:83:49:45:59:b5:62:be:b2:96:97:e3:70:56:7a:0a: 20:5c:77:14:ba:14:f3:83:6b:e5:3b:70:6f:ac:a5:71:87:e7: 81:31:c1:a5:31:d8:a8:cf:bc:26:04:86:37:5a:b3:2a:73:7c: ad:a4:d4:ec:3e:29:a6:37:87:a2:39:e6:0d:1f:b9:ef:ac:bf: bb:b0:95:a9:1a:8a:e0:96:f3:df:e5:90:9e:34:9c:e3:64:4e: 21:5e:66:ee:af:9d:4f:34:7f:18:62:ec:d7:39:e6:29:78:79: 31:5d:c9:4a:bc:9e:c1:e3:9b:98:52:c5:b5:c4:6c:9a:61:12: 97:6e:42:6c:f3:6d:9b:92:9f:45:27:43:b8:13:10:d5:f0:df: 09:cf:88:c2:95:d5:91:99:50:80:12:c8:65:6c:18:f0:6f:5b: 6b:c3:8b:47:ce:c3:cb:94:87:ca:3d:af:41:0f:be:db:92:c7: 5f:3f:64:f0 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUBdH23RCTXBR2xO29VBAvHKj0ScIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTMzMFoX DTI3MDUwMjAwMTgzMFowMzExMC8GA1UEAxMoOEIxOEI4MTlCQzAxMEI0QTRFQzY2 Nzc3NTQzNDg2RTM0QUY1MkVENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMBONgJnPFhkePL0S5zy+eWOWh3FlsKYP2D20xg8Ywl4viQuw4lxVAOnl0fC V90FG/Ks9mOog+DfWBmV1xrfAe6sKsJtXtMcYvD90S1NhajP73sBGY1TnKpYfagv WAPbuYGEEKFjS3HJiZ3OqcUa9qnj77aXuGF3uz91h3IAsk2TZXVHaic0Q274Tw5q b2fgJpjTkJSaKArunervcJTKjNzRtFqWOuCdL/gGJyeDXC9j38vhcCU4zdXHVByj aBTVmH2+YN/XLfj8MnvEk/KKItoXpV+gyd5cn+jKha8q43SuLVASIXa6gH+muOIE BTHEIUWH39a4ZZy5De4IvzNZa30CAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIsYuBm8AQtKTsZnd1Q0huNK9S7UMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzMzMDUxNzdhLWE1MDAtNDk5Ni1iM2ZmLTcwYzE0NGVkZmVjZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zMzA1MTc3 YS1hNTAwLTQ5OTYtYjNmZi03MGMxNDRlZGZlY2UvMC84QjE4QjgxOUJDMDEwQjRB NEVDNjY3Nzc1NDM0ODZFMzRBRjUyRUQ0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQCK/jUAwQCZxw4MA0EAgACMAcDBQAkBPsAMA0GCSqGSIb3DQEBCwUAA4IBAQBI /122u65rC9ROQaXJkLOK2Rny0qiqWWurAyPUopgkHMNa15hZbTWGbMGm2PlsIoFv 9koWZWksE+iAavVoQoPBvbd4XMnYPPReG0CDSUVZtWK+spaX43BWegogXHcUuhTz g2vlO3BvrKVxh+eBMcGlMdioz7wmBIY3WrMqc3ytpNTsPimmN4eiOeYNH7nvrL+7 sJWpGorglvPf5ZCeNJzjZE4hXmbur51PNH8YYuzXOeYpeHkxXclKvJ7B45uYUsW1 xGyaYRKXbkJs822bkp9FJ0O4ExDV8N8Jz4jCldWRmVCAEshlbBjwb1trw4tHzsPL lIfKPa9BD77bksdfP2Tw -----END CERTIFICATE-----Generated at Mon May 4 13:59:59 2026 by rpki-client