$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer File: 65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer (raw, json) Hash identifier: 8o6zybHT/5Lc1wH+CXL8d0BzEhVScdiyFcBAuuJLmy8= Subject key identifier: 65:BD:8B:DB:0F:06:88:47:9A:17:41:E2:BD:66:24:40:8D:A5:67:AB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3A6AFF52759219A954E50314F7247D6DF0B0E28F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:54:31 +0000 Certificate not after: Sat 01 May 2027 23:59:31 +0000 Subordinate resources: IP: 103.180.58.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:6a:ff:52:75:92:19:a9:54:e5:03:14:f7:24:7d:6d:f0:b0:e2:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:54:31 2026 GMT Not After : May 1 23:59:31 2027 GMT Subject: CN=65BD8BDB0F0688479A1741E2BD6624408DA567AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:41:4a:1e:71:50:44:36:52:fd:ff:ba:c4: 50:50:57:69:8a:7c:f0:8e:b7:d3:27:e5:e6:1d:65: 1a:b2:3a:49:30:31:80:10:72:b8:b8:58:09:59:bd: 38:d8:92:ce:7d:a9:9a:f8:2b:44:67:fe:3f:d7:26: 2c:24:a5:75:a9:d2:7c:74:ea:ce:62:20:3a:7b:e3: e8:a7:0d:47:5e:f4:93:d6:09:d8:8c:70:95:a0:e2: 84:c9:85:03:65:0d:65:1e:6a:38:52:90:c6:f8:86: 76:57:97:b1:1f:cf:32:81:13:a4:e1:d6:1b:6b:82: b3:84:68:6c:af:ee:7c:23:19:ba:f5:b2:29:e2:ac: 5b:ca:56:5a:77:d5:cc:ce:cb:2d:8f:00:a6:a0:1e: 25:13:cb:88:66:97:94:9e:3a:66:b6:0e:9b:17:d8: 24:41:cc:01:83:17:7c:f9:06:62:02:09:55:5c:e8: 10:a1:2c:00:09:c5:e4:82:23:dc:47:82:aa:c6:d4: 55:93:2e:5a:09:b2:8a:3e:30:91:56:82:b6:8f:26: ab:cd:8b:9b:54:88:fa:51:f5:cb:20:31:1e:8a:0f: cc:9a:77:cf:1f:15:5b:83:a7:22:f3:13:03:19:a4: c4:4a:68:5c:bc:8f:d7:0f:e7:b7:fd:4d:14:85:f7: 5d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 65:BD:8B:DB:0F:06:88:47:9A:17:41:E2:BD:66:24:40:8D:A5:67:AB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.58.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:e9:75:5c:61:23:43:54:8a:7d:7b:91:68:d7:c3:bb:93:de: 0a:1e:d2:47:6a:18:62:23:48:5e:61:2f:85:73:c6:55:79:79: e7:ad:52:a0:ae:5b:b5:47:6a:56:1e:dd:6f:5a:6c:b5:21:b8: f0:7f:bb:5b:2e:56:2d:0d:5d:31:1c:92:d3:c7:be:47:e5:f2: d6:6f:4e:6d:82:de:2b:33:1f:85:be:b1:ca:01:22:bc:1e:75: a3:0b:ae:c2:03:3e:54:4f:05:de:28:00:a5:7e:d0:43:74:d2: c2:c3:a0:42:30:be:c4:65:a5:a2:df:d6:1f:66:48:ed:52:de: 37:01:4a:41:8a:74:ae:50:cb:8f:32:89:cd:cb:84:f3:33:0b: ae:79:2d:56:aa:bf:07:4c:ec:d5:a9:60:0f:8b:16:c7:65:25: 6b:44:5c:14:27:6c:6f:a9:d7:ca:60:25:58:58:c0:34:15:c8: 5e:89:d8:62:a8:b2:41:67:9e:bb:f9:15:96:a1:18:2d:7f:3e: 2c:cc:e8:81:7e:49:49:75:57:98:c2:d6:cc:85:fe:64:6a:c8: fd:c5:97:e0:04:cd:e6:cd:0d:a2:67:6a:6b:3f:85:fb:64:85: 9e:a9:91:f2:1e:9c:44:09:94:73:78:7b:3a:47:77:ed:d3:41: a9:3c:bb:34 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUOmr/UnWSGalU5QMU9yR9bfCw4o8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTQzMVoX DTI3MDUwMTIzNTkzMVowMzExMC8GA1UEAxMoNjVCRDhCREIwRjA2ODg0NzlBMTc0 MUUyQkQ2NjI0NDA4REE1NjdBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMF5QUoecVBENlL9/7rEUFBXaYp88I630yfl5h1lGrI6STAxgBByuLhYCVm9 ONiSzn2pmvgrRGf+P9cmLCSldanSfHTqzmIgOnvj6KcNR170k9YJ2IxwlaDihMmF A2UNZR5qOFKQxviGdleXsR/PMoETpOHWG2uCs4RobK/ufCMZuvWyKeKsW8pWWnfV zM7LLY8ApqAeJRPLiGaXlJ46ZrYOmxfYJEHMAYMXfPkGYgIJVVzoEKEsAAnF5IIj 3EeCqsbUVZMuWgmyij4wkVaCto8mq82Lm1SI+lH1yyAxHooPzJp3zx8VW4OnIvMT AxmkxEpoXLyP1w/nt/1NFIX3XU0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGW9i9sPBohHmhdB4r1mJECNpWerMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE3MWE4NDdkLTI1MzEtNGQ3Zi05MjQxLTk3Nzc4NTA2MDVkNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xNzFhODQ3 ZC0yNTMxLTRkN2YtOTI0MS05Nzc3ODUwNjA1ZDYvMC82NUJEOEJEQjBGMDY4ODQ3 OUExNzQxRTJCRDY2MjQ0MDhEQTU2N0FCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7Q6MA0GCSqGSIb3DQEBCwUAA4IBAQCa6XVcYSNDVIp9e5Fo18O7k94KHtJH ahhiI0heYS+Fc8ZVeXnnrVKgrlu1R2pWHt1vWmy1Ibjwf7tbLlYtDV0xHJLTx75H 5fLWb05tgt4rMx+FvrHKASK8HnWjC67CAz5UTwXeKAClftBDdNLCw6BCML7EZaWi 39YfZkjtUt43AUpBinSuUMuPMonNy4TzMwuueS1Wqr8HTOzVqWAPixbHZSVrRFwU J2xvqdfKYCVYWMA0FcheidhiqLJBZ567+RWWoRgtfz4szOiBfklJdVeYwtbMhf5k asj9xZfgBM3mzQ2iZ2prP4X7ZIWeqZHyHpxECZRzeHs6R3ft00GpPLs0 -----END CERTIFICATE-----Generated at Tue May 5 14:19:47 2026 by rpki-client