$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer File: B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer (raw, json) Hash identifier: VrGupw0uIkaEBDG6cYzx3w9AlIkcBxXopZQ/2HnsJfQ= Subject key identifier: B8:48:BD:BD:F9:F9:96:7C:01:0E:DF:6D:8A:36:57:37:C1:6E:07:E5 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7B975454B10723D9628829A9B7685C72D2AD8E14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:20:47 +0000 Certificate not after: Sun 02 May 2027 01:25:47 +0000 Subordinate resources: IP: 160.25.152.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:97:54:54:b1:07:23:d9:62:88:29:a9:b7:68:5c:72:d2:ad:8e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:20:47 2026 GMT Not After : May 2 01:25:47 2027 GMT Subject: CN=B848BDBDF9F9967C010EDF6D8A365737C16E07E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a3:d7:d6:61:3b:26:3e:55:b7:4b:10:b3:91: a0:9d:fb:b5:14:2e:4d:c9:99:d7:63:ac:c5:20:70: 9a:aa:3f:da:a7:67:74:6d:43:bf:c3:a7:b3:69:0f: 79:8d:fe:f2:f0:46:5d:d3:fc:fc:c1:0a:d8:17:3e: b4:88:b2:61:5a:0d:ca:51:0e:fc:5c:d1:41:64:4d: 6c:5d:36:d0:c6:34:e7:a9:c5:1f:fa:1e:68:f4:15: a9:e5:08:3d:f7:00:40:3f:14:90:5a:8b:85:6d:22: 71:31:69:22:a7:24:80:ef:00:81:1a:59:66:3c:f9: 80:f2:1c:02:6b:ac:92:2d:c7:93:25:3b:12:e5:aa: c6:42:bd:ee:a3:4f:ab:b7:5d:b1:c4:05:09:35:20: 72:83:e9:d2:1d:d4:a4:b5:ff:80:97:3c:ca:96:2d: ec:08:c5:13:85:58:10:45:b8:0b:93:4d:4d:47:2e: 9c:ea:eb:de:06:71:5d:68:18:ce:95:26:0f:d8:bc: 09:19:e7:73:e6:b0:c6:f7:7f:73:a0:eb:c5:bf:8e: 86:32:c6:60:e8:a3:de:64:e8:93:82:29:34:ed:7c: a8:a1:fe:9c:30:e7:0e:7d:b7:88:48:be:b2:39:a8: 64:40:19:3b:6b:89:89:64:39:10:59:23:a4:74:3a: 30:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:48:BD:BD:F9:F9:96:7C:01:0E:DF:6D:8A:36:57:37:C1:6E:07:E5 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.152.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:02:82:59:5f:38:59:f0:56:18:21:5c:7a:80:0e:2a:56:86: df:ab:15:f6:79:08:5f:d3:c7:ca:18:74:7c:60:32:08:ac:cb: 51:af:39:72:ee:d1:e2:ed:f2:4c:a2:f7:74:a7:39:8c:00:19: 54:13:12:71:20:cb:85:c4:9b:91:f4:41:7b:98:0d:6a:11:f9: 90:62:77:2c:3f:df:30:7f:20:01:33:2c:fd:f1:7b:5e:37:47: 0a:4b:cc:92:3f:c6:41:ae:2b:a2:40:b7:30:40:3d:96:87:02: 74:8e:2f:43:85:45:1b:7a:e8:fd:89:c4:c5:8d:31:99:e9:12: c7:57:cd:23:86:51:26:be:cd:85:cd:5d:ea:b0:7b:f2:d2:3f: 0a:3b:36:8b:e0:1e:9f:dc:c2:a2:ac:13:2a:f9:2f:6f:5b:c6: 59:90:96:e9:56:fd:6a:6e:08:13:c2:58:53:e7:60:8f:ad:75: 2a:3e:5d:d7:ac:1e:a0:6f:8e:73:eb:1e:82:eb:96:67:70:f5: 96:cb:44:97:f5:42:f9:ab:05:bb:6f:9c:b0:bc:c7:28:f6:bc: 5a:f9:6e:81:df:11:a0:68:68:96:34:ad:a3:5d:55:31:e7:95: 81:3b:94:67:63:d5:80:58:47:51:8b:9f:d9:76:de:59:e7:4e: 75:e7:a9:35 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUe5dUVLEHI9liiCmpt2hcctKtjhQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMjA0N1oX DTI3MDUwMjAxMjU0N1owMzExMC8GA1UEAxMoQjg0OEJEQkRGOUY5OTY3QzAxMEVE RjZEOEEzNjU3MzdDMTZFMDdFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ6j19ZhOyY+VbdLELORoJ37tRQuTcmZ12OsxSBwmqo/2qdndG1Dv8Ons2kP eY3+8vBGXdP8/MEK2Bc+tIiyYVoNylEO/FzRQWRNbF020MY056nFH/oeaPQVqeUI PfcAQD8UkFqLhW0icTFpIqckgO8AgRpZZjz5gPIcAmuski3HkyU7EuWqxkK97qNP q7ddscQFCTUgcoPp0h3UpLX/gJc8ypYt7AjFE4VYEEW4C5NNTUcunOrr3gZxXWgY zpUmD9i8CRnnc+awxvd/c6Drxb+OhjLGYOij3mTok4IpNO18qKH+nDDnDn23iEi+ sjmoZEAZO2uJiWQ5EFkjpHQ6MO0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLhIvb35+ZZ8AQ7fbYo2VzfBbgflMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzk2Y2QwMzI1LTMxYWYtNGZmZS04YmViLWU3Nzk5N2U2YzNlMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85NmNkMDMy NS0zMWFmLTRmZmUtOGJlYi1lNzc5OTdlNmMzZTEvMC9CODQ4QkRCREY5Rjk5NjdD MDEwRURGNkQ4QTM2NTczN0MxNkUwN0U1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoBmYMA0GCSqGSIb3DQEBCwUAA4IBAQA+AoJZXzhZ8FYYIVx6gA4qVobfqxX2 eQhf08fKGHR8YDIIrMtRrzly7tHi7fJMovd0pzmMABlUExJxIMuFxJuR9EF7mA1q EfmQYncsP98wfyABMyz98XteN0cKS8ySP8ZBriuiQLcwQD2WhwJ0ji9DhUUbeuj9 icTFjTGZ6RLHV80jhlEmvs2FzV3qsHvy0j8KOzaL4B6f3MKirBMq+S9vW8ZZkJbp Vv1qbggTwlhT52CPrXUqPl3XrB6gb45z6x6C65ZncPWWy0SX9UL5qwW7b5ywvMco 9rxa+W6B3xGgaGiWNK2jXVUx55WBO5RnY9WAWEdRi5/Zdt5Z505156k1 -----END CERTIFICATE-----Generated at Tue May 12 22:45:47 2026 by rpki-client