$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.cer File: BCE01C08E8E67E88147644DD138C0632C10BECF7.cer (raw, json) Hash identifier: 2FrKeEd0FaaCRdsj1Dz9zqTBXzJZ9GQEvW+HfynqaBQ= Subject key identifier: BC:E0:1C:08:E8:E6:7E:88:14:76:44:DD:13:8C:06:32:C1:0B:EC:F7 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 602CC4F9454360DD0C172B50D81620D95F55C7A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft caRepository: rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:55:58 +0000 Certificate not after: Sun 02 May 2027 02:00:58 +0000 Subordinate resources: IP: 160.187.164.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:2c:c4:f9:45:43:60:dd:0c:17:2b:50:d8:16:20:d9:5f:55:c7:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:55:58 2026 GMT Not After : May 2 02:00:58 2027 GMT Subject: CN=BCE01C08E8E67E88147644DD138C0632C10BECF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0a:5d:d9:b4:5c:82:0d:95:06:5c:e0:f3:bb: e9:3f:8d:8e:07:6b:b3:e3:15:9b:27:8d:46:13:e5: 1f:8f:ae:ba:40:b3:3d:eb:a9:ea:db:34:ca:a6:2c: fc:06:03:d4:d1:dc:a1:43:84:77:55:98:62:22:6a: 15:c2:d4:41:ad:84:71:94:80:29:0e:15:32:fa:2b: 11:d5:aa:52:d5:ff:60:5d:21:e9:e9:88:de:7e:c8: 24:dd:52:12:5f:d0:85:34:e2:0c:a7:32:78:23:00: a7:80:16:28:c2:9c:c8:8d:a4:f8:f8:b2:36:8e:78: ee:17:52:6e:32:93:83:20:c7:7a:27:21:1e:b2:f1: 64:6f:ce:62:af:43:97:4a:cc:d8:4f:8d:23:b2:7d: 43:ca:06:09:36:94:7d:e3:17:3f:a8:87:04:55:b4: 3b:ff:99:bd:98:5f:d1:bb:fa:54:22:27:b3:e3:2a: 5a:83:e7:a9:ee:92:10:53:8e:01:d7:7e:69:15:7a: 57:8c:ea:ff:19:e6:e4:cb:8e:40:f8:3a:46:1a:32: 60:df:97:d9:c3:fc:48:76:34:f9:3b:10:4c:5b:be: 2a:af:70:94:92:fb:b5:1b:ba:9f:7d:1a:49:8a:2c: 34:d7:24:65:6b:27:c4:99:a2:60:c7:1f:8b:ec:65: 1a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BC:E0:1C:08:E8:E6:7E:88:14:76:44:DD:13:8C:06:32:C1:0B:EC:F7 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.164.0/24 Signature Algorithm: sha256WithRSAEncryption 80:dd:9c:e3:52:f3:1c:29:12:0f:3c:bc:35:7b:4e:3f:01:32: e8:89:8d:91:7f:24:e5:93:32:6f:be:8d:ec:fd:13:ed:4e:f0: 4d:62:3e:64:26:84:c2:2b:0d:38:5c:93:83:6e:0d:98:18:05: d4:4c:9d:06:19:6a:76:63:f3:bd:ec:e1:60:1a:05:af:ed:bb: 31:d8:a9:ee:95:6c:66:8f:12:a7:a7:25:13:38:f4:b5:32:3c: ff:b1:47:7e:11:fc:e6:65:98:8f:b2:e7:7d:a0:1f:96:a4:57: b8:60:89:d3:1c:73:91:b0:6f:98:af:76:95:50:63:45:59:3f: 80:36:bd:fb:93:c8:92:35:6f:8f:ee:a0:22:09:8a:47:d0:55: e1:bd:c8:1b:85:ab:33:f4:64:1f:61:1d:3f:20:31:47:35:38: 3e:96:10:35:3c:79:39:da:cd:c6:49:a8:73:09:4e:22:0c:18: 03:a8:e8:72:ec:36:ff:ce:f6:52:51:7f:c0:cc:bb:04:2a:b2: 9c:39:d3:f2:6d:dc:67:d7:20:cd:f0:9d:09:92:9a:e3:29:c7: ef:bc:cf:97:b4:79:5d:03:0b:54:18:16:0f:d1:42:ae:71:dc: cc:ff:26:c8:17:67:3d:3d:d6:f0:51:62:58:56:3b:fa:11:1b: 99:3f:04:88 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUYCzE+UVDYN0MFytQ2BYg2V9Vx6YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxNTU1OFoX DTI3MDUwMjAyMDA1OFowMzExMC8GA1UEAxMoQkNFMDFDMDhFOEU2N0U4ODE0NzY0 NEREMTM4QzA2MzJDMTBCRUNGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsKXdm0XIINlQZc4PO76T+Njgdrs+MVmyeNRhPlH4+uukCzPeup6ts0yqYs /AYD1NHcoUOEd1WYYiJqFcLUQa2EcZSAKQ4VMvorEdWqUtX/YF0h6emI3n7IJN1S El/QhTTiDKcyeCMAp4AWKMKcyI2k+PiyNo547hdSbjKTgyDHeichHrLxZG/OYq9D l0rM2E+NI7J9Q8oGCTaUfeMXP6iHBFW0O/+ZvZhf0bv6VCIns+MqWoPnqe6SEFOO Add+aRV6V4zq/xnm5MuOQPg6RhoyYN+X2cP8SHY0+TsQTFu+Kq9wlJL7tRu6n30a SYosNNckZWsnxJmiYMcfi+xlGkcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLzgHAjo5n6IFHZE3ROMBjLBC+z3MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NmMjk3NWQ1LWY5OTAtNDg0ZS05NDYwLWYxMzZiNDU1MWY4ZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jZjI5NzVk NS1mOTkwLTQ4NGUtOTQ2MC1mMTM2YjQ1NTFmOGQvMC9CQ0UwMUMwOEU4RTY3RTg4 MTQ3NjQ0REQxMzhDMDYzMkMxMEJFQ0Y3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoLukMA0GCSqGSIb3DQEBCwUAA4IBAQCA3ZzjUvMcKRIPPLw1e04/ATLoiY2R fyTlkzJvvo3s/RPtTvBNYj5kJoTCKw04XJODbg2YGAXUTJ0GGWp2Y/O97OFgGgWv 7bsx2KnulWxmjxKnpyUTOPS1Mjz/sUd+EfzmZZiPsud9oB+WpFe4YInTHHORsG+Y r3aVUGNFWT+ANr37k8iSNW+P7qAiCYpH0FXhvcgbhasz9GQfYR0/IDFHNTg+lhA1 PHk52s3GSahzCU4iDBgDqOhy7Db/zvZSUX/AzLsEKrKcOdPybdxn1yDN8J0Jkprj KcfvvM+XtHldAwtUGBYP0UKucdzM/ybIF2c9PdbwUWJYVjv6ERuZPwSI -----END CERTIFICATE-----Generated at Tue May 12 22:03:12 2026 by rpki-client