$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer File: BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer (raw, json) Hash identifier: 9vtzo3Kd4QpQ+CWTb4vppn8r1/gDio+OIHHMRx01cw0= Subject key identifier: BC:8F:0F:9F:71:05:90:73:ED:E2:3B:9C:AD:97:D9:AF:50:7F:55:D6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 25FB3203878C5B71B4A23FE09CA5B02AB6B65736 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:52:28 +0000 Certificate not after: Sat 01 May 2027 23:57:28 +0000 Subordinate resources: IP: 103.146.188.0/23 IP: 2405:9d40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 01:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:fb:32:03:87:8c:5b:71:b4:a2:3f:e0:9c:a5:b0:2a:b6:b6:57:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:52:28 2026 GMT Not After : May 1 23:57:28 2027 GMT Subject: CN=BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:92:c1:bc:f4:90:96:fe:87:cf:b5:97:0b:ea: 0f:6f:04:6f:af:6f:ef:7c:c9:f9:f0:db:6f:63:e7: f4:98:da:e1:66:2a:17:e6:c0:b3:8e:c9:57:12:f0: ce:08:58:b4:74:11:1d:83:60:b6:37:5f:53:be:f5: f7:ac:c0:54:67:c3:49:06:bf:c1:0d:17:91:9d:2f: b1:bf:db:aa:42:80:40:f4:89:9a:16:a0:83:a5:42: af:7c:3e:c9:d7:6b:7b:c8:01:06:b2:2a:67:c9:88: e3:b4:a1:ab:7b:5d:8b:96:de:82:df:32:26:bf:bd: 73:9b:c6:d3:b6:12:0d:90:5d:78:b0:20:96:cf:53: 5f:bd:8c:09:dc:97:b9:78:c4:de:db:be:53:5b:dd: f7:60:f9:e2:1d:12:48:5e:ce:f1:08:15:18:af:f0: 3a:e9:a4:f3:c3:38:e6:02:dc:1f:1b:0a:bd:90:a2: c1:a4:fb:4a:af:df:66:83:d5:3f:ec:82:0f:47:a2: 14:b9:19:1d:5a:ef:a2:f4:18:c2:cd:a3:75:ed:02: c6:46:52:97:8f:0a:13:c2:1c:ae:38:47:76:d9:07: 35:f5:be:a6:85:47:aa:1c:f9:32:36:00:1d:96:98: 93:6d:bc:66:50:1c:1c:ba:b3:1b:f3:e6:11:e1:ba: 6d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BC:8F:0F:9F:71:05:90:73:ED:E2:3B:9C:AD:97:D9:AF:50:7F:55:D6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.188.0/23 IPv6: 2405:9d40::/32 Signature Algorithm: sha256WithRSAEncryption 87:bd:dd:da:fd:f3:a0:50:85:77:e8:92:8f:fb:a1:79:e3:dd: 5c:c2:23:bf:db:70:b3:23:ec:a3:f4:2a:23:1f:3c:e5:73:c6: 00:5b:dc:2b:18:34:be:69:44:3c:37:b4:d6:96:be:6f:bb:a0: 30:f0:8e:49:4c:df:88:a2:0d:95:a0:fb:ee:22:e0:81:b9:9d: 11:4c:96:c9:fc:d4:32:4e:1a:eb:cd:c9:72:dd:71:a9:12:a8: a1:ab:24:ec:32:75:e2:f7:00:b8:93:34:26:d8:e8:1b:7d:54: a3:a9:40:d3:70:ee:a5:84:33:4b:56:a0:2e:df:50:b3:a7:4b: 83:c0:21:10:db:3a:d9:24:6f:e9:36:27:82:08:90:f8:98:13: 18:2d:5a:eb:89:c6:fe:6c:88:f8:76:41:ac:55:01:10:ad:56: ae:91:f3:ed:18:7e:e3:16:d4:8c:08:f1:76:f9:93:99:07:03: e9:e8:bd:99:5c:fb:a4:f8:02:a4:12:ed:56:af:b8:9e:00:76: 09:5a:ba:74:40:82:8c:79:ad:82:b7:66:e3:ef:0c:eb:1c:dc: 84:ad:f8:76:bd:87:ec:aa:13:ab:35:b8:83:c3:af:a9:67:c9: 12:be:fb:d2:7c:b7:60:35:93:94:b1:dc:22:0c:dc:da:e5:ec: f4:ca:21:4b -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUJfsyA4eMW3G0oj/gnKWwKra2VzYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTIyOFoX DTI3MDUwMTIzNTcyOFowMzExMC8GA1UEAxMoQkM4RjBGOUY3MTA1OTA3M0VERTIz QjlDQUQ5N0Q5QUY1MDdGNTVENjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALeSwbz0kJb+h8+1lwvqD28Eb69v73zJ+fDbb2Pn9Jja4WYqF+bAs47JVxLw zghYtHQRHYNgtjdfU77196zAVGfDSQa/wQ0XkZ0vsb/bqkKAQPSJmhagg6VCr3w+ yddre8gBBrIqZ8mI47Shq3tdi5begt8yJr+9c5vG07YSDZBdeLAgls9TX72MCdyX uXjE3tu+U1vd92D54h0SSF7O8QgVGK/wOumk88M45gLcHxsKvZCiwaT7Sq/fZoPV P+yCD0eiFLkZHVrvovQYws2jde0CxkZSl48KE8IcrjhHdtkHNfW+poVHqhz5MjYA HZaYk228ZlAcHLqzG/PmEeG6bYECAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLyPD59xBZBz7eI7nK2X2a9Qf1XWMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE0NjRjYmVlLWM1MTMtNDZjNi1hMWQwLTNlYzAxZDdhNjYyNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xNDY0Y2Jl ZS1jNTEzLTQ2YzYtYTFkMC0zZWMwMWQ3YTY2MjYvMC9CQzhGMEY5RjcxMDU5MDcz RURFMjNCOUNBRDk3RDlBRjUwN0Y1NUQ2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5K8MA0EAgACMAcDBQAkBZ1AMA0GCSqGSIb3DQEBCwUAA4IBAQCHvd3a/fOg UIV36JKP+6F5491cwiO/23CzI+yj9CojHzzlc8YAW9wrGDS+aUQ8N7TWlr5vu6Aw 8I5JTN+Iog2VoPvuIuCBuZ0RTJbJ/NQyThrrzcly3XGpEqihqyTsMnXi9wC4kzQm 2OgbfVSjqUDTcO6lhDNLVqAu31Czp0uDwCEQ2zrZJG/pNieCCJD4mBMYLVrricb+ bIj4dkGsVQEQrVaukfPtGH7jFtSMCPF2+ZOZBwPp6L2ZXPuk+AKkEu1Wr7ieAHYJ Wrp0QIKMea2Ct2bj7wzrHNyErfh2vYfsqhOrNbiDw6+pZ8kSvvvSfLdgNZOUsdwi DNza5ez0yiFL -----END CERTIFICATE-----Generated at Thu May 7 03:53:36 2026 by rpki-client