$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer File: B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer (raw, json) Hash identifier: gTyM3UGd7avgQRLVG6RLO4nLrLNr4iwyGwWbMwlmSd0= Subject key identifier: B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 301B2C8C51BBEC444517EBBC309BA2B615A88B87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:03:47 +0000 Certificate not after: Sun 02 May 2027 01:08:47 +0000 Subordinate resources: IP: 101.0.4.0/22 IP: 103.12.28.0/22 IP: 2400:fb00::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:1b:2c:8c:51:bb:ec:44:45:17:eb:bc:30:9b:a2:b6:15:a8:8b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:03:47 2026 GMT Not After : May 2 01:08:47 2027 GMT Subject: CN=B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d4:c7:73:d6:4c:1a:a1:92:43:81:df:70:9d: ef:86:61:d4:6c:67:ba:3f:58:fb:bb:31:ab:41:15: 3a:59:04:49:a5:8a:5e:47:87:ea:5d:d4:cb:3e:aa: f2:cf:5f:56:fb:ee:70:00:b1:6f:f7:42:a5:93:f6: 5a:67:91:9d:05:f1:81:df:d8:ac:70:bd:af:85:77: ce:fe:71:18:d9:77:fd:46:00:73:cd:ba:d8:6f:1f: 30:c8:be:c9:cf:7d:f1:42:7f:b8:e1:a8:c8:35:98: 9f:6b:3e:63:3f:8a:2a:3f:6c:01:11:30:68:f4:7b: 7b:89:6d:b0:7d:90:d1:58:2d:f9:70:7f:06:ef:ec: f5:b0:c1:b4:31:02:b9:45:fe:2b:81:7b:1d:e8:60: 7a:f1:62:c8:bc:ee:c3:2f:4c:2a:52:9f:a5:c5:85: aa:83:f4:df:87:97:41:03:23:e6:a4:f3:22:63:2c: c4:9a:fe:82:3b:e5:e5:7a:f6:55:e9:ab:97:bb:ba: b4:4b:2f:1d:7e:e7:83:e7:62:73:0b:ef:ad:7e:08: 4a:2e:f6:71:2b:3b:bf:71:19:df:b2:b1:36:2e:2b: 43:ef:96:71:25:24:15:11:e1:b1:8b:b9:87:a8:4f: b0:3d:ad:5e:8f:e1:86:30:21:5d:6e:d6:e0:0e:aa: 63:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.0.4.0/22 103.12.28.0/22 IPv6: 2400:fb00::/32 Signature Algorithm: sha256WithRSAEncryption 92:2e:74:3d:29:4b:84:41:f2:84:33:f2:57:97:1c:92:a8:5d: b1:03:a3:2b:37:4a:48:59:00:a0:98:e0:58:df:95:0a:2b:a0: 50:eb:b0:d0:bd:5c:d4:49:67:6e:f7:e3:3c:b1:43:51:0e:d4: e4:31:64:8d:fa:e8:08:5a:1c:41:ff:1f:2a:9c:2b:50:a2:77: f1:57:0a:ae:45:65:a4:0b:c2:3f:27:91:af:d2:d3:15:f9:7c: 01:a6:d8:34:b8:ee:07:90:48:72:b9:bc:1a:de:fd:1e:67:8b: ea:55:19:2e:47:0a:be:1f:d9:0b:66:c7:2e:9c:ce:2f:53:c9: bc:8f:47:82:2b:77:93:d2:b5:0c:6a:6d:55:e9:ad:a2:e6:fa: bc:4c:17:cf:dd:3c:9d:6e:45:26:21:f2:95:91:38:5e:80:31: 6b:0c:bf:ab:07:0f:8e:7a:04:4b:c6:8b:63:5c:57:2e:c6:df: 02:b8:59:76:7c:8b:f6:db:5f:50:8f:cc:9d:15:c6:1b:d8:00: 68:77:e4:11:a9:78:ea:76:98:82:3a:f3:4c:45:1a:de:32:f1: e1:f5:43:fa:fe:92:3c:9b:28:f3:7c:f4:37:5e:51:91:90:ec: cb:66:cb:c4:e9:cb:94:37:bb:b6:80:ea:73:4f:52:6c:c0:68: fa:d9:c5:8b -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUMBssjFG77ERFF+u8MJuithWoi4cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDM0N1oX DTI3MDUwMjAxMDg0N1owMzExMC8GA1UEAxMoQjY0QUFENjJEOTAyRjYwOEJCOTVG RDBCRDNGMURBOEE4MDc3QjRFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPUx3PWTBqhkkOB33Cd74Zh1Gxnuj9Y+7sxq0EVOlkESaWKXkeH6l3Uyz6q 8s9fVvvucACxb/dCpZP2WmeRnQXxgd/YrHC9r4V3zv5xGNl3/UYAc8262G8fMMi+ yc998UJ/uOGoyDWYn2s+Yz+KKj9sAREwaPR7e4ltsH2Q0Vgt+XB/Bu/s9bDBtDEC uUX+K4F7HehgevFiyLzuwy9MKlKfpcWFqoP034eXQQMj5qTzImMsxJr+gjvl5Xr2 Vemrl7u6tEsvHX7ng+dicwvvrX4ISi72cSs7v3EZ37KxNi4rQ++WcSUkFRHhsYu5 h6hPsD2tXo/hhjAhXW7W4A6qY8cCAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLZKrWLZAvYIu5X9C9Px2oqAd7TvMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdkNmVhN2ZhLTk0ZDItNGRkYy1hOGU2LTVkYzYyNmMyOTFkNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83ZDZlYTdm YS05NGQyLTRkZGMtYThlNi01ZGM2MjZjMjkxZDQvMC9CNjRBQUQ2MkQ5MDJGNjA4 QkI5NUZEMEJEM0YxREE4QTgwNzdCNEVGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQCZQAEAwQCZwwcMA0EAgACMAcDBQAkAPsAMA0GCSqGSIb3DQEBCwUAA4IBAQCS LnQ9KUuEQfKEM/JXlxySqF2xA6MrN0pIWQCgmOBY35UKK6BQ67DQvVzUSWdu9+M8 sUNRDtTkMWSN+ugIWhxB/x8qnCtQonfxVwquRWWkC8I/J5Gv0tMV+XwBptg0uO4H kEhyubwa3v0eZ4vqVRkuRwq+H9kLZscunM4vU8m8j0eCK3eT0rUMam1V6a2i5vq8 TBfP3TydbkUmIfKVkThegDFrDL+rBw+OegRLxotjXFcuxt8CuFl2fIv2219Qj8yd FcYb2ABod+QRqXjqdpiCOvNMRRreMvHh9UP6/pI8myjzfPQ3XlGRkOzLZsvE6cuU N7u2gOpzT1JswGj62cWL -----END CERTIFICATE-----Generated at Tue May 5 17:51:37 2026 by rpki-client