$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer File: 8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer (raw, json) Hash identifier: FOcpK9Zbzthtqq/T4KCoNcycPR/2kdXLi/X8w1TGwsY= Subject key identifier: 8B:46:39:84:C1:65:22:A3:5F:AA:B6:07:08:D3:4C:89:D9:D9:F1:E7 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 058855FB819924D1AE94C8C36A1BC628976D003D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:58:57 +0000 Certificate not after: Sun 02 May 2027 00:03:57 +0000 Subordinate resources: IP: 157.66.56.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:88:55:fb:81:99:24:d1:ae:94:c8:c3:6a:1b:c6:28:97:6d:00:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 23:58:57 2026 GMT Not After : May 2 00:03:57 2027 GMT Subject: CN=8B463984C16522A35FAAB60708D34C89D9D9F1E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bb:ef:40:fa:37:16:ef:d8:a4:a9:0b:3a:64: 39:ab:12:81:a7:dc:ff:dd:e0:48:fd:ed:7f:e0:1a: 93:b9:d4:d0:fa:38:60:7f:78:92:c3:07:33:9a:db: a6:1a:fd:4d:32:a3:24:7f:b5:83:8f:9b:8f:c3:cb: d9:86:be:2f:8d:68:18:6e:4b:74:8c:5f:65:a1:cf: 05:4e:84:b5:99:d8:9d:12:fc:45:8d:78:3e:07:54: 33:34:e4:14:1a:93:be:fb:e4:03:ee:ba:c9:25:46: 43:90:04:4a:cf:9b:dc:50:2b:1a:3c:0b:80:d7:f7: 51:f6:43:79:60:c3:3e:32:a2:31:aa:80:34:e7:4c: c3:1c:00:29:db:ed:da:0d:34:f8:11:7e:eb:84:b5: 65:ba:de:27:70:39:51:4f:73:90:28:35:10:bb:15: 0b:24:75:77:b8:25:11:d6:0b:bf:b4:e5:c1:e9:95: 2e:b3:ed:8d:a2:6f:b7:0f:a2:02:4a:87:13:0c:0b: 2d:c6:39:f7:c9:ef:53:b9:70:d1:5c:65:d0:1c:f4: 74:66:cc:33:2b:fa:47:bf:c7:ff:a0:ba:16:e8:ca: ed:3d:f4:a1:af:91:44:46:1e:9f:2c:46:57:b7:d6: ec:a6:21:e1:0b:71:20:d0:1c:88:11:cf:ab:b2:3f: 0f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:46:39:84:C1:65:22:A3:5F:AA:B6:07:08:D3:4C:89:D9:D9:F1:E7 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.56.0/24 Signature Algorithm: sha256WithRSAEncryption 09:35:a9:a2:50:19:c5:fd:65:cc:75:43:d1:34:e4:69:00:28: 25:d5:3e:af:72:d0:aa:89:7c:d1:f2:bf:1c:68:82:45:3e:4f: 33:d5:eb:9c:d4:39:2a:7f:03:64:bc:68:e7:d3:1c:58:4c:fa: 8e:b2:0a:1f:ee:4a:f2:66:0e:26:3c:9c:77:c9:86:32:c9:67: e7:bb:34:3f:02:a0:1c:16:01:89:a4:e5:49:6c:9b:99:30:d7: c5:71:d4:3a:07:81:60:96:9e:0b:12:04:e9:ef:e0:a1:f7:f9: b5:55:06:64:e5:25:fd:58:66:03:18:e2:94:3a:fd:1c:5b:93: 88:02:5b:37:87:a1:b6:21:6d:30:bf:b6:97:a0:9d:a6:30:ec: 9a:42:19:04:db:40:53:3c:36:17:bb:da:e5:ac:71:f5:82:a7: 13:b5:9f:f4:5d:2c:bd:ec:b3:2d:20:27:af:16:b1:34:d8:3e: 15:7d:85:49:9b:56:48:ce:5d:24:4e:ef:f1:82:7e:3e:c5:75: 88:ea:ee:2d:e5:41:79:48:c3:d0:e5:be:19:1c:04:d7:3b:ad: 23:73:d2:6a:c4:f8:e3:1f:c0:ba:06:c6:3f:56:ef:4b:24:f7: c9:f7:88:35:bb:cb:23:44:24:d9:fc:5a:43:6f:4d:a6:c1:05: c3:89:99:9b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUBYhV+4GZJNGulMjDahvGKJdtAD0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjIzNTg1N1oX DTI3MDUwMjAwMDM1N1owMzExMC8GA1UEAxMoOEI0NjM5ODRDMTY1MjJBMzVGQUFC NjA3MDhEMzRDODlEOUQ5RjFFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALO770D6Nxbv2KSpCzpkOasSgafc/93gSP3tf+Aak7nU0Po4YH94ksMHM5rb phr9TTKjJH+1g4+bj8PL2Ya+L41oGG5LdIxfZaHPBU6EtZnYnRL8RY14PgdUMzTk FBqTvvvkA+66ySVGQ5AESs+b3FArGjwLgNf3UfZDeWDDPjKiMaqANOdMwxwAKdvt 2g00+BF+64S1ZbreJ3A5UU9zkCg1ELsVCyR1d7glEdYLv7TlwemVLrPtjaJvtw+i AkqHEwwLLcY598nvU7lw0Vxl0Bz0dGbMMyv6R7/H/6C6FujK7T30oa+RREYenyxG V7fW7KYh4QtxINAciBHPq7I/DyMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFItGOYTBZSKjX6q2BwjTTInZ2fHnMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzFkNzU1MzQ3LTZiMWMtNDJjMS05ZjU0LWQ3ZWFiMjJlMTgyYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xZDc1NTM0 Ny02YjFjLTQyYzEtOWY1NC1kN2VhYjIyZTE4MmMvMC84QjQ2Mzk4NEMxNjUyMkEz NUZBQUI2MDcwOEQzNEM4OUQ5RDlGMUU3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAnUI4MA0GCSqGSIb3DQEBCwUAA4IBAQAJNamiUBnF/WXMdUPRNORpACgl1T6v ctCqiXzR8r8caIJFPk8z1euc1DkqfwNkvGjn0xxYTPqOsgof7kryZg4mPJx3yYYy yWfnuzQ/AqAcFgGJpOVJbJuZMNfFcdQ6B4Fglp4LEgTp7+Ch9/m1VQZk5SX9WGYD GOKUOv0cW5OIAls3h6G2IW0wv7aXoJ2mMOyaQhkE20BTPDYXu9rlrHH1gqcTtZ/0 XSy97LMtICevFrE02D4VfYVJm1ZIzl0kTu/xgn4+xXWI6u4t5UF5SMPQ5b4ZHATX O60jc9JqxPjjH8C6BsY/Vu9LJPfJ94g1u8sjRCTZ/FpDb02mwQXDiZmb -----END CERTIFICATE-----Generated at Tue May 12 22:16:34 2026 by rpki-client