$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.cer File: 84EE64DA51082B30948D12F6E14B8EBCF1D658D1.cer (raw, json) Hash identifier: X15mNxRJ3Sv5p481FJqk9DqGYCdoC9n2FbzUOjCoC3s= Subject key identifier: 84:EE:64:DA:51:08:2B:30:94:8D:12:F6:E1:4B:8E:BC:F1:D6:58:D1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 067C5F48D45818B29B3B9C1C8CCB26BB075E51F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:52:17 +0000 Certificate not after: Sun 02 May 2027 00:57:17 +0000 Subordinate resources: IP: 103.178.174.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:7c:5f:48:d4:58:18:b2:9b:3b:9c:1c:8c:cb:26:bb:07:5e:51:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:52:17 2026 GMT Not After : May 2 00:57:17 2027 GMT Subject: CN=84EE64DA51082B30948D12F6E14B8EBCF1D658D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:91:04:81:be:2b:96:13:fa:66:26:15:96:7a: 58:fe:05:43:32:dc:86:b7:dd:a4:74:aa:c3:40:40: ca:31:ed:1d:0c:ef:11:b9:50:b0:14:fd:b6:75:22: 92:1f:9a:4f:76:f5:82:f7:1a:1d:db:fc:03:8c:d2: 3f:1c:46:1e:ca:73:4c:64:bf:dd:9d:63:ec:f7:90: 6b:8e:26:0c:d8:8e:52:d0:d9:1f:a7:f9:88:93:3b: d7:85:33:7b:e8:72:26:f5:93:49:b7:49:af:a0:c0: e6:ee:8c:5b:f9:7c:4f:7a:20:b0:b9:df:73:77:cc: 0e:c4:45:b8:77:75:21:f9:ef:92:68:59:53:0c:a8: 1a:9d:a0:0e:ac:e7:4c:21:e3:6a:64:86:38:c8:1d: 9c:72:f2:df:5a:6a:2d:62:13:29:1d:20:e2:9a:a4: d8:43:e9:a6:fb:d0:50:d6:e8:f7:a6:3e:ca:08:50: 85:50:8a:e1:c8:72:44:7e:0d:57:59:14:2c:e3:b2: e1:30:4a:f8:a2:6e:a9:03:37:5e:21:f8:bc:b7:5a: f3:3d:d6:76:17:c1:f9:08:bc:fc:e1:3b:37:9f:cb: 81:84:97:ec:32:dd:99:0a:ce:1e:8a:51:e7:31:f6: e2:0e:dd:84:9f:d9:f7:00:45:36:f5:b8:d9:4c:23: 61:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 84:EE:64:DA:51:08:2B:30:94:8D:12:F6:E1:4B:8E:BC:F1:D6:58:D1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.174.0/23 Signature Algorithm: sha256WithRSAEncryption 35:cb:1f:78:a6:04:af:cf:79:87:8b:45:74:1c:06:2f:3d:a4: 36:75:c0:b5:51:42:d2:3d:20:de:41:89:d5:39:0d:c5:fa:ee: bb:6a:37:d5:ed:40:10:ec:4f:ae:55:00:0e:d6:eb:ab:ae:4c: 0f:fe:4d:8d:33:36:1c:f0:41:21:a7:e7:96:80:93:31:d3:68: 0b:be:f2:21:6d:d1:83:19:ba:6f:08:0a:c0:4e:06:07:47:95: 77:6a:d5:39:b7:15:38:f0:f0:eb:4b:82:63:f0:ae:ed:da:36: a9:bd:ea:44:0e:c8:bf:38:1f:d6:d0:73:51:47:b6:f0:ea:ea: 17:5a:d0:60:7a:9b:4a:24:fb:56:6f:55:6e:1a:42:d5:2c:6a: 96:67:cd:33:a4:2b:46:00:23:ff:36:07:1f:12:d0:0d:8e:2f: ce:06:60:31:f3:13:f5:05:81:85:2f:4e:ec:ce:f7:d9:80:98: 72:cb:98:fe:2b:fc:3c:cb:a2:b5:bf:be:e7:0e:24:b4:0a:53: 21:a5:03:bb:d4:1f:40:c9:24:b3:03:66:cf:2c:43:c0:86:a2: 81:a4:e6:ac:43:9e:24:be:0b:8e:f1:8e:4e:58:89:49:37:54: ce:69:12:df:a3:20:88:8d:e1:28:a2:a5:d0:ff:3c:10:ca:8d: 97:a8:ba:b9 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUBnxfSNRYGLKbO5wcjMsmuwdeUfYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTIxN1oX DTI3MDUwMjAwNTcxN1owMzExMC8GA1UEAxMoODRFRTY0REE1MTA4MkIzMDk0OEQx MkY2RTE0QjhFQkNGMUQ2NThEMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJyRBIG+K5YT+mYmFZZ6WP4FQzLchrfdpHSqw0BAyjHtHQzvEblQsBT9tnUi kh+aT3b1gvcaHdv8A4zSPxxGHspzTGS/3Z1j7PeQa44mDNiOUtDZH6f5iJM714Uz e+hyJvWTSbdJr6DA5u6MW/l8T3ogsLnfc3fMDsRFuHd1IfnvkmhZUwyoGp2gDqzn TCHjamSGOMgdnHLy31pqLWITKR0g4pqk2EPppvvQUNbo96Y+yghQhVCK4chyRH4N V1kULOOy4TBK+KJuqQM3XiH4vLda8z3WdhfB+Qi8/OE7N5/LgYSX7DLdmQrOHopR 5zH24g7dhJ/Z9wBFNvW42UwjYQMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFITuZNpRCCswlI0S9uFLjrzx1ljRMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZkN2Y5ZWY0LWY5OWYtNDRmZi1iOTY4LTcwZDQ1MjRkNzIwNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82ZDdmOWVm NC1mOTlmLTQ0ZmYtYjk2OC03MGQ0NTI0ZDcyMDcvMC84NEVFNjREQTUxMDgyQjMw OTQ4RDEyRjZFMTRCOEVCQ0YxRDY1OEQxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7KuMA0GCSqGSIb3DQEBCwUAA4IBAQA1yx94pgSvz3mHi0V0HAYvPaQ2dcC1 UULSPSDeQYnVOQ3F+u67ajfV7UAQ7E+uVQAO1uurrkwP/k2NMzYc8EEhp+eWgJMx 02gLvvIhbdGDGbpvCArATgYHR5V3atU5txU48PDrS4Jj8K7t2japvepEDsi/OB/W 0HNRR7bw6uoXWtBgeptKJPtWb1VuGkLVLGqWZ80zpCtGACP/NgcfEtANji/OBmAx 8xP1BYGFL07szvfZgJhyy5j+K/w8y6K1v77nDiS0ClMhpQO71B9AySSzA2bPLEPA hqKBpOasQ54kvguO8Y5OWIlJN1TOaRLfoyCIjeEooqXQ/zwQyo2XqLq5 -----END CERTIFICATE-----Generated at Tue May 5 17:58:08 2026 by rpki-client