$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.cer File: 8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.cer (raw, json) Hash identifier: 1EcsKNZlKqbgA1OpFjPMhjWkvuy2c9EqhQYOcpMgFCg= Subject key identifier: 8E:7D:29:B8:B2:E6:F2:F0:9B:50:7F:C3:6B:31:73:16:2A:43:16:E9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4C8D740FA587900B65986A05F1BB4A47367410DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:34:01 +0000 Certificate not after: Sun 02 May 2027 00:39:01 +0000 Subordinate resources: IP: 103.186.194.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:8d:74:0f:a5:87:90:0b:65:98:6a:05:f1:bb:4a:47:36:74:10:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:34:01 2026 GMT Not After : May 2 00:39:01 2027 GMT Subject: CN=8E7D29B8B2E6F2F09B507FC36B3173162A4316E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:63:ec:8b:f4:60:88:f5:4e:f5:f5:ac:f6:e3: 11:8e:73:49:39:e6:5e:42:4e:b1:bd:18:69:0a:b1: ea:3f:37:e1:14:83:4c:41:d7:ac:8e:b2:16:5a:42: e3:83:d5:2f:32:e5:84:12:8e:82:28:00:62:26:03: 8c:c0:83:ac:66:03:f9:8c:08:ab:45:e7:b7:51:dd: 2e:a2:05:ff:ec:bf:5f:4c:15:0f:1e:7c:0a:39:40: 31:f6:74:2f:bf:20:f4:e0:b5:83:18:a8:f2:dd:5d: 6e:1f:b6:78:99:bd:65:37:67:70:b4:e2:1b:da:fa: 8f:c7:ad:cf:d6:00:17:84:6c:80:0f:cc:8a:b0:e9: 16:61:8e:21:02:aa:e1:78:a4:79:2b:34:aa:e2:91: 8a:89:d5:bd:4e:ca:e3:50:7e:e1:c3:01:c6:9a:3e: d3:61:ce:52:32:16:a3:6b:a7:a9:5c:71:03:b9:67: c6:11:f7:cd:22:c1:6b:2c:40:10:6e:78:25:5a:00: 10:7a:2e:34:28:39:e0:12:86:eb:95:b5:44:5a:ac: 91:78:fd:ad:09:97:0f:d4:7d:79:93:36:df:a4:d0: 57:57:64:28:ae:a7:9a:c9:36:8b:02:02:e6:59:6c: 88:a0:cc:09:2e:ff:f8:20:1b:54:29:c7:24:e4:72: a6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8E:7D:29:B8:B2:E6:F2:F0:9B:50:7F:C3:6B:31:73:16:2A:43:16:E9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.194.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:c3:a6:7d:80:dc:76:a1:5a:61:74:c6:e3:10:7a:77:c9:d1: 4b:3f:a8:36:ae:e0:62:d1:64:5e:82:a8:ef:3c:62:1a:c0:cf: be:00:71:48:73:e4:09:f8:f4:3b:a1:ab:8e:b8:e7:1a:50:0e: 72:4a:be:9a:8e:b3:98:b1:93:46:d5:1c:06:aa:25:99:fa:8c: d4:d8:98:f1:89:6c:3c:82:bc:33:f7:3f:0d:1f:bd:d7:05:ce: 6e:14:4e:45:af:41:c4:f5:d8:c7:4d:60:a7:93:9a:0f:84:12: 79:95:67:13:9f:e2:0b:c5:ba:20:8b:05:eb:31:6a:1b:e3:ca: 7d:a3:99:1e:08:11:d2:b3:fa:64:d6:03:d0:15:2f:2b:fd:81: bf:dd:b0:38:6e:a5:36:ba:86:70:be:4d:75:d5:20:8f:85:38: cd:ba:a0:4c:b9:0b:d4:46:b6:2a:59:1e:24:ee:af:a3:6a:c1: 6b:a9:4e:81:2e:0a:f7:9b:de:1e:52:68:be:8f:c1:89:ea:5d: 7e:c8:f5:5c:61:1a:94:e3:ad:e1:04:ef:8d:6b:50:12:ff:1a: 92:82:db:1d:01:bf:81:3a:00:5a:2f:c3:30:8f:ae:2a:ec:4e: 17:82:31:93:10:d2:85:c2:6b:d3:4d:8f:86:95:d1:25:45:6b: 21:9e:61:19 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUTI10D6WHkAtlmGoF8btKRzZ0ENowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzQwMVoX DTI3MDUwMjAwMzkwMVowMzExMC8GA1UEAxMoOEU3RDI5QjhCMkU2RjJGMDlCNTA3 RkMzNkIzMTczMTYyQTQzMTZFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKVj7Iv0YIj1TvX1rPbjEY5zSTnmXkJOsb0YaQqx6j834RSDTEHXrI6yFlpC 44PVLzLlhBKOgigAYiYDjMCDrGYD+YwIq0Xnt1HdLqIF/+y/X0wVDx58CjlAMfZ0 L78g9OC1gxio8t1dbh+2eJm9ZTdncLTiG9r6j8etz9YAF4RsgA/MirDpFmGOIQKq 4XikeSs0quKRionVvU7K41B+4cMBxpo+02HOUjIWo2unqVxxA7lnxhH3zSLBayxA EG54JVoAEHouNCg54BKG65W1RFqskXj9rQmXD9R9eZM236TQV1dkKK6nmsk2iwIC 5llsiKDMCS7/+CAbVCnHJORyplkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI59Kbiy5vLwm1B/w2sxcxYqQxbpMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzUyNTJlYWQzLWRjOGYtNGQ4Ni1hZmNmLWExNDBlNWI4NzUzMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81MjUyZWFk My1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMC84RTdEMjlCOEIyRTZGMkYw OUI1MDdGQzM2QjMxNzMxNjJBNDMxNkU5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7rCMA0GCSqGSIb3DQEBCwUAA4IBAQAPw6Z9gNx2oVphdMbjEHp3ydFLP6g2 ruBi0WRegqjvPGIawM++AHFIc+QJ+PQ7oauOuOcaUA5ySr6ajrOYsZNG1RwGqiWZ +ozU2JjxiWw8grwz9z8NH73XBc5uFE5Fr0HE9djHTWCnk5oPhBJ5lWcTn+ILxbog iwXrMWob48p9o5keCBHSs/pk1gPQFS8r/YG/3bA4bqU2uoZwvk111SCPhTjNuqBM uQvURrYqWR4k7q+jasFrqU6BLgr3m94eUmi+j8GJ6l1+yPVcYRqU463hBO+Na1AS /xqSgtsdAb+BOgBaL8Mwj64q7E4XgjGTENKFwmvTTY+GldElRWshnmEZ -----END CERTIFICATE-----Generated at Tue May 5 18:14:35 2026 by rpki-client