$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.cer File: BCC48E1350B2535426C09D2EA539390BBE1FEC6B.cer (raw, json) Hash identifier: POJ38MnNMvhLG/Igc/nNbEX98CHIiUOqc2Tc5WtDdLY= Subject key identifier: BC:C4:8E:13:50:B2:53:54:26:C0:9D:2E:A5:39:39:0B:BE:1F:EC:6B Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 4F2D9D9DC7C5CF6A947F093A1AC9D678CE73CC15 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:46:04 +0000 Certificate not after: Sun 02 May 2027 01:51:04 +0000 Subordinate resources: IP: 157.66.9.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:2d:9d:9d:c7:c5:cf:6a:94:7f:09:3a:1a:c9:d6:78:ce:73:cc:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:46:04 2026 GMT Not After : May 2 01:51:04 2027 GMT Subject: CN=BCC48E1350B2535426C09D2EA539390BBE1FEC6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:85:71:25:b5:3d:b8:7f:d1:80:f1:41:d8:60: 47:ed:62:25:a8:1f:34:96:90:3f:08:d9:6f:3c:01: 86:6c:81:2c:2f:4f:a8:76:51:47:96:b1:f8:7a:35: 90:b3:d5:95:db:ec:f2:65:ea:70:6f:c2:e5:4f:82: 6f:a1:28:db:09:de:3d:36:15:8f:8b:7d:ae:58:1c: b4:bc:0c:8a:06:72:16:2c:b0:a3:59:29:fc:40:96: 2a:b2:67:64:38:d8:a2:41:52:90:bb:32:22:40:a8: 85:f5:60:fa:83:e9:47:ed:2e:4f:a1:aa:ea:d7:e6: ff:cd:6b:b2:28:ec:6d:bc:81:b0:ac:d9:00:d1:ab: a6:ca:02:43:c8:fd:20:6b:29:fc:89:d4:e7:8a:64: ab:d9:b5:8e:28:09:ae:28:a0:95:6e:80:9d:aa:71: 3d:99:b8:24:d1:66:da:c8:7a:7a:a9:44:32:9a:78: 87:02:30:ab:c7:bc:56:8d:fb:e8:31:94:3e:15:42: 8d:d0:a2:c6:b9:7f:78:ae:45:bf:1e:db:e3:b6:bc: bb:5a:e9:53:55:97:25:d9:af:a8:c9:a0:46:70:6e: 4b:e2:59:c8:65:7d:64:d2:7c:23:16:90:ef:0f:0d: be:56:f6:04:9a:2e:73:03:bf:ab:a9:af:e4:bf:ee: d2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BC:C4:8E:13:50:B2:53:54:26:C0:9D:2E:A5:39:39:0B:BE:1F:EC:6B X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.9.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:68:92:18:e5:f2:cc:23:98:c2:90:cd:99:f3:e7:85:1d:70: 27:ab:c5:f9:1b:96:24:c3:22:b3:fb:c7:4e:76:62:5f:81:b5: f2:eb:be:59:23:57:a3:52:23:ec:ee:20:29:f2:63:0e:36:31: 95:82:8e:fe:59:f8:9b:a9:7a:69:22:27:96:8a:bf:1d:30:89: ab:cc:26:0c:36:9c:9d:44:49:a2:95:a0:bf:3d:33:b7:1a:26: 9a:d4:ab:a7:2c:39:0b:ea:b3:66:30:9c:ac:75:d3:01:9f:0c: ce:27:b3:44:03:08:cb:d9:0c:df:55:46:cd:55:a8:02:1c:54: bf:5d:05:26:b5:d4:81:77:c1:51:54:e7:7e:92:d2:5a:2d:70: 75:5d:06:7e:4e:8a:9a:2a:fd:87:bd:a7:9a:7e:d1:1a:1d:d9: 74:45:59:79:7a:5b:40:9b:2d:32:3e:ab:f2:54:6b:52:de:f3: 4d:f0:11:68:69:93:47:45:a3:49:8d:89:ab:1d:87:a6:20:07: b2:97:65:82:9d:be:42:45:a4:c9:d5:1d:f7:91:ec:c3:95:98: 12:48:2d:6f:0f:38:63:20:fd:da:da:8f:52:07:e9:80:60:f3: 46:28:56:3f:d1:ca:c5:59:12:ab:4c:c0:37:87:6f:07:e1:04: 54:ea:d5:ca -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUTy2dncfFz2qUfwk6GsnWeM5zzBUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxNDYwNFoX DTI3MDUwMjAxNTEwNFowMzExMC8GA1UEAxMoQkNDNDhFMTM1MEIyNTM1NDI2QzA5 RDJFQTUzOTM5MEJCRTFGRUM2QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKuFcSW1Pbh/0YDxQdhgR+1iJagfNJaQPwjZbzwBhmyBLC9PqHZRR5ax+Ho1 kLPVldvs8mXqcG/C5U+Cb6Eo2wnePTYVj4t9rlgctLwMigZyFiywo1kp/ECWKrJn ZDjYokFSkLsyIkCohfVg+oPpR+0uT6Gq6tfm/81rsijsbbyBsKzZANGrpsoCQ8j9 IGsp/InU54pkq9m1jigJriiglW6AnapxPZm4JNFm2sh6eqlEMpp4hwIwq8e8Vo37 6DGUPhVCjdCixrl/eK5Fvx7b47a8u1rpU1WXJdmvqMmgRnBuS+JZyGV9ZNJ8IxaQ 7w8Nvlb2BJoucwO/q6mv5L/u0mMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLzEjhNQslNUJsCdLqU5OQu+H+xrMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2JlYmY1NWNhLWQ3ODMtNGEzYi05NWNjLTczY2MzNDZkYjQ2ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iZWJmNTVj YS1kNzgzLTRhM2ItOTVjYy03M2NjMzQ2ZGI0NmUvMC9CQ0M0OEUxMzUwQjI1MzU0 MjZDMDlEMkVBNTM5MzkwQkJFMUZFQzZCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAnUIJMA0GCSqGSIb3DQEBCwUAA4IBAQCeaJIY5fLMI5jCkM2Z8+eFHXAnq8X5 G5YkwyKz+8dOdmJfgbXy675ZI1ejUiPs7iAp8mMONjGVgo7+WfibqXppIieWir8d MImrzCYMNpydREmilaC/PTO3Giaa1KunLDkL6rNmMJysddMBnwzOJ7NEAwjL2Qzf VUbNVagCHFS/XQUmtdSBd8FRVOd+ktJaLXB1XQZ+ToqaKv2HvaeaftEaHdl0RVl5 eltAmy0yPqvyVGtS3vNN8BFoaZNHRaNJjYmrHYemIAeyl2WCnb5CRaTJ1R33kezD lZgSSC1vDzhjIP3a2o9SB+mAYPNGKFY/0crFWRKrTMA3h28H4QRU6tXK -----END CERTIFICATE-----Generated at Tue May 12 22:16:13 2026 by rpki-client