$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer File: 8BE5D6878B464D9FA654023C63F4762E67599164.cer (raw, json) Hash identifier: tYUcCy1BASVmfyrplYDTcSG+GnMMkpcg7dsDwYFJuvM= Subject key identifier: 8B:E5:D6:87:8B:46:4D:9F:A6:54:02:3C:63:F4:76:2E:67:59:91:64 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3AA610B807415E170D0F98C538801BAD41862A2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:02:11 +0000 Certificate not after: Sun 02 May 2027 01:07:11 +0000 Subordinate resources: IP: 103.187.86.0/23 IP: 2001:df2:640::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a6:10:b8:07:41:5e:17:0d:0f:98:c5:38:80:1b:ad:41:86:2a:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:02:11 2026 GMT Not After : May 2 01:07:11 2027 GMT Subject: CN=8BE5D6878B464D9FA654023C63F4762E67599164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d7:e8:b1:38:88:db:90:51:20:08:b3:f5:b5: 96:fa:42:c1:96:0a:36:df:17:77:58:b3:32:dd:01: bc:cd:ac:e4:c0:f7:01:71:0f:6c:47:10:81:f9:f3: 09:b7:19:27:7e:70:b6:19:1c:8f:21:18:30:1a:bd: f2:41:58:4d:2f:05:da:79:1c:85:61:ab:4d:93:81: d7:ee:5c:4a:c8:4d:ee:e3:74:11:75:66:1a:87:17: 92:f7:aa:f3:d0:bf:28:55:78:60:76:96:ad:5b:96: 6d:a5:40:6f:6e:30:29:0c:5a:d7:ac:13:27:9d:de: 16:6c:74:fa:83:28:3a:ff:1f:9f:61:89:1c:e8:ad: 59:61:74:d0:6e:44:50:da:2e:e2:9f:4b:6b:7a:74: 38:b5:1b:ba:3c:85:2c:26:f8:42:95:39:8d:25:ba: cf:76:c2:69:0d:3e:df:e7:87:4c:e1:2b:f7:bc:07: 36:20:c5:77:34:70:db:d2:a3:35:7a:6f:e5:55:a9: aa:84:80:94:fb:e4:90:d7:7d:58:8d:37:b9:5d:86: 2c:09:7f:49:69:a5:0c:c1:8c:8b:3e:8f:cb:b7:a9: 74:e9:ad:b4:a1:45:c4:ac:c1:c8:a5:5a:04:03:c3: 42:fc:ce:59:df:3b:2b:3a:ad:e9:de:a2:84:79:d1: 4c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:E5:D6:87:8B:46:4D:9F:A6:54:02:3C:63:F4:76:2E:67:59:91:64 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.187.86.0/23 IPv6: 2001:df2:640::/48 Signature Algorithm: sha256WithRSAEncryption 16:76:e7:f6:ca:6c:7d:88:c1:1f:b2:eb:4a:91:c9:6c:d9:28: a9:81:62:44:8e:3a:4a:1f:13:c8:1e:7d:fb:31:47:98:a0:29: 25:a0:c6:c2:c4:ef:9f:ce:10:b7:79:d3:d3:35:52:a2:43:b3: 3c:70:86:0a:51:c3:10:d1:cf:0b:3c:2e:a6:b2:4f:3c:6c:32: e5:c0:75:ad:c0:01:c0:d3:58:ee:ea:8f:aa:09:22:66:ee:a6: fd:b1:d8:5f:b9:0c:0c:63:6a:a3:e3:ad:2b:e4:01:21:ca:b0: 51:74:f8:98:0a:8a:4c:e2:46:e3:a6:07:cf:52:78:d7:10:85: 7c:30:29:61:7e:9b:40:5d:f6:cf:f7:36:91:1d:f0:fe:46:1f: 78:cf:f4:1b:8e:2c:fc:85:f0:22:d7:49:64:fc:74:0c:18:dd: 86:d2:fa:de:bf:3a:90:ca:78:07:41:56:7b:e1:b8:9a:b5:6a: 28:36:b9:2a:73:04:65:9f:61:f4:74:35:84:66:60:bf:8d:10: 3f:58:ce:8a:c6:21:8f:99:2c:65:b1:6a:ea:e8:22:24:8b:8c: 4c:84:91:76:7e:cd:e5:4a:d5:91:92:64:60:ce:57:59:e4:fb: 89:de:27:f3:1c:79:82:5e:8e:26:31:0e:d7:40:4e:8f:ef:96: 9b:87:54:c5 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUOqYQuAdBXhcND5jFOIAbrUGGKi8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDIxMVoX DTI3MDUwMjAxMDcxMVowMzExMC8GA1UEAxMoOEJFNUQ2ODc4QjQ2NEQ5RkE2NTQw MjNDNjNGNDc2MkU2NzU5OTE2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKbX6LE4iNuQUSAIs/W1lvpCwZYKNt8Xd1izMt0BvM2s5MD3AXEPbEcQgfnz CbcZJ35wthkcjyEYMBq98kFYTS8F2nkchWGrTZOB1+5cSshN7uN0EXVmGocXkveq 89C/KFV4YHaWrVuWbaVAb24wKQxa16wTJ53eFmx0+oMoOv8fn2GJHOitWWF00G5E UNou4p9La3p0OLUbujyFLCb4QpU5jSW6z3bCaQ0+3+eHTOEr97wHNiDFdzRw29Kj NXpv5VWpqoSAlPvkkNd9WI03uV2GLAl/SWmlDMGMiz6Py7epdOmttKFFxKzByKVa BAPDQvzOWd87Kzqt6d6ihHnRTOECAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIvl1oeLRk2fplQCPGP0di5nWZFkMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdiN2VmNTE1LTg1NjQtNDFlOC05ZDIwLTJkMzNkNDVjY2JkNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83YjdlZjUx NS04NTY0LTQxZTgtOWQyMC0yZDMzZDQ1Y2NiZDYvMC84QkU1RDY4NzhCNDY0RDlG QTY1NDAyM0M2M0Y0NzYyRTY3NTk5MTY0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ7tWMA8EAgACMAkDBwAgAQ3yBkAwDQYJKoZIhvcNAQELBQADggEBABZ25/bK bH2IwR+y60qRyWzZKKmBYkSOOkofE8geffsxR5igKSWgxsLE75/OELd509M1UqJD szxwhgpRwxDRzws8LqayTzxsMuXAda3AAcDTWO7qj6oJImbupv2x2F+5DAxjaqPj rSvkASHKsFF0+JgKikziRuOmB89SeNcQhXwwKWF+m0Bd9s/3NpEd8P5GH3jP9BuO LPyF8CLXSWT8dAwY3YbS+t6/OpDKeAdBVnvhuJq1aig2uSpzBGWfYfR0NYRmYL+N ED9YzorGIY+ZLGWxauroIiSLjEyEkXZ+zeVK1ZGSZGDOV1nk+4neJ/MceYJejiYx DtdATo/vlpuHVMU= -----END CERTIFICATE-----Generated at Tue May 5 14:06:58 2026 by rpki-client