$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.cer File: 8B41D7B9301EF96118A556755116D8E36ADA3D71.cer (raw, json) Hash identifier: TzO9jrChhY5iv1I64dzto+JQJz+kwD5c9hovqe+FqeY= Subject key identifier: 8B:41:D7:B9:30:1E:F9:61:18:A5:56:75:51:16:D8:E3:6A:DA:3D:71 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 15BDA6759E20274731E7069CAFECB6FDE7FF548C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:03:37 +0000 Certificate not after: Sun 02 May 2027 01:08:37 +0000 Subordinate resources: IP: 160.25.200.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:bd:a6:75:9e:20:27:47:31:e7:06:9c:af:ec:b6:fd:e7:ff:54:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:03:37 2026 GMT Not After : May 2 01:08:37 2027 GMT Subject: CN=8B41D7B9301EF96118A556755116D8E36ADA3D71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a4:63:e5:95:bd:8d:71:3f:72:fc:44:a2:8d: 36:62:41:03:4c:95:f0:8c:27:46:9e:53:75:9d:8e: b0:82:e8:87:25:c2:b9:de:3d:73:44:48:35:c1:e2: 8c:28:15:f1:09:cf:49:fc:5e:33:09:06:6d:5f:95: ad:5f:3a:eb:b0:93:27:3a:96:18:7d:9e:5a:0d:15: 0f:e3:9e:6b:81:f4:41:a8:ae:3e:63:84:18:30:a4: 63:be:2d:fa:bc:16:20:14:9b:e4:f2:34:ae:ca:74: 23:60:df:35:01:a1:ad:cd:a7:ac:c4:9c:66:bb:f7: 64:29:52:a0:7c:4a:d2:63:c3:65:d2:98:14:51:4a: 8c:d8:c9:7e:47:c3:c6:5d:18:2d:5b:e8:8d:f0:ce: d5:51:46:0e:d7:df:80:cc:6b:fc:5f:eb:d1:96:d6: 46:0c:0e:69:f7:99:3a:f8:ca:21:33:53:41:44:f4: b9:b1:4d:b5:fc:1c:da:4f:10:69:c0:5e:a1:45:ae: 1a:93:db:68:fa:58:e8:f6:a6:b6:50:d8:ad:0e:ec: ac:b8:db:17:1e:c8:51:08:1e:b2:91:d0:7c:8b:88: a2:b6:65:cd:22:23:87:19:d5:b4:f1:71:52:f4:f9: 79:0c:d5:09:54:6c:24:85:4e:c2:63:b2:cc:75:d1: d5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:41:D7:B9:30:1E:F9:61:18:A5:56:75:51:16:D8:E3:6A:DA:3D:71 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/8B41D7B9301EF96118A556755116D8E36ADA3D71.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.200.0/24 Signature Algorithm: sha256WithRSAEncryption 23:81:9b:e8:67:5c:43:9d:4f:cf:c4:14:00:52:91:7d:2a:8b: 38:7f:a1:e9:15:b7:8c:e9:e8:91:84:85:6d:64:5e:bd:b0:6f: 06:b1:59:1c:50:24:47:0b:c6:3a:66:09:17:8e:58:e3:2e:76: 12:0a:96:1f:99:99:96:7b:90:1f:27:ed:62:46:9e:38:31:b6: 6b:5d:90:b6:f3:cb:f5:33:5f:dd:a8:89:39:68:c2:ad:60:a6: 59:c4:75:bf:f0:3b:0a:c1:10:ef:4c:10:11:e3:e3:d4:0a:a0: c9:c9:38:5e:d6:cc:72:a3:22:29:1a:6e:ee:dc:4e:cc:2b:b5: 4b:cb:cb:ed:41:1e:c4:56:f5:f5:7d:bc:66:5d:9a:06:f7:27: 5c:a2:66:92:ff:ae:d7:c1:a3:eb:77:b6:68:c4:a7:0e:cc:13: c3:db:5a:2b:d9:36:60:00:20:b3:43:fd:fa:6f:28:c8:dc:c3: ca:e4:ac:cd:fd:83:fb:a5:26:2c:19:30:4d:2a:95:67:40:08: 42:2c:52:c3:09:e3:74:6a:7e:4f:8c:3c:3c:d4:67:0e:51:d8: 45:51:d5:49:2e:91:59:3e:ab:44:6c:52:fb:6a:ae:57:c1:eb: 3d:5b:2c:6d:ee:9b:77:2a:4e:88:54:b8:5b:8f:92:6a:a5:93: 3b:cf:ea:89 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUFb2mdZ4gJ0cx5wacr+y2/ef/VIwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMDMzN1oX DTI3MDUwMjAxMDgzN1owMzExMC8GA1UEAxMoOEI0MUQ3QjkzMDFFRjk2MTE4QTU1 Njc1NTExNkQ4RTM2QURBM0Q3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALikY+WVvY1xP3L8RKKNNmJBA0yV8IwnRp5TdZ2OsILohyXCud49c0RINcHi jCgV8QnPSfxeMwkGbV+VrV8667CTJzqWGH2eWg0VD+Oea4H0QaiuPmOEGDCkY74t +rwWIBSb5PI0rsp0I2DfNQGhrc2nrMScZrv3ZClSoHxK0mPDZdKYFFFKjNjJfkfD xl0YLVvojfDO1VFGDtffgMxr/F/r0ZbWRgwOafeZOvjKITNTQUT0ubFNtfwc2k8Q acBeoUWuGpPbaPpY6PamtlDYrQ7srLjbFx7IUQgespHQfIuIorZlzSIjhxnVtPFx UvT5eQzVCVRsJIVOwmOyzHXR1dUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFItB17kwHvlhGKVWdVEW2ONq2j1xMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdkNjNhNmU2LWNhYjMtNGYwYy04NWM3LWUwMmJkNjQxZTNjZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83ZDYzYTZl Ni1jYWIzLTRmMGMtODVjNy1lMDJiZDY0MWUzY2UvMC84QjQxRDdCOTMwMUVGOTYx MThBNTU2NzU1MTE2RDhFMzZBREEzRDcxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoBnIMA0GCSqGSIb3DQEBCwUAA4IBAQAjgZvoZ1xDnU/PxBQAUpF9Kos4f6Hp FbeM6eiRhIVtZF69sG8GsVkcUCRHC8Y6ZgkXjljjLnYSCpYfmZmWe5AfJ+1iRp44 MbZrXZC288v1M1/dqIk5aMKtYKZZxHW/8DsKwRDvTBAR4+PUCqDJyThe1sxyoyIp Gm7u3E7MK7VLy8vtQR7EVvX1fbxmXZoG9ydcomaS/67XwaPrd7ZoxKcOzBPD21or 2TZgACCzQ/36byjI3MPK5KzN/YP7pSYsGTBNKpVnQAhCLFLDCeN0an5PjDw81GcO UdhFUdVJLpFZPqtEbFL7aq5Xwes9Wyxt7pt3Kk6IVLhbj5JqpZM7z+qJ -----END CERTIFICATE-----Generated at Tue May 12 22:33:20 2026 by rpki-client