$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer File: BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer (raw, json) Hash identifier: xTkNuUFs98J/c96dG3yFOhr7JQ0+0GIHkEu0+JXyrmE= Subject key identifier: BD:C7:DB:49:44:7E:34:D3:CF:07:4E:82:FC:C5:B9:42:79:9C:B1:9B Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 64DCCA039D72EA4F19E46D5FBE462384EAB691D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:43:59 +0000 Certificate not after: Sun 02 May 2027 01:48:59 +0000 Subordinate resources: IP: 160.187.144.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:dc:ca:03:9d:72:ea:4f:19:e4:6d:5f:be:46:23:84:ea:b6:91:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:43:59 2026 GMT Not After : May 2 01:48:59 2027 GMT Subject: CN=BDC7DB49447E34D3CF074E82FCC5B942799CB19B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a1:3d:ea:09:30:95:a7:d9:14:b2:16:c4:bc: 5d:9b:c4:70:e3:c0:04:7c:60:b5:85:4e:89:4d:2f: f4:8c:78:44:b3:9a:89:38:5f:8a:bd:f9:f0:13:9c: 1e:24:ed:de:f1:c8:3c:6c:8c:f9:5a:e2:a9:f3:d3: 8d:7b:e9:c1:db:3c:96:8e:d6:4a:30:c9:1a:03:64: 31:8f:90:d4:ae:8c:a8:cf:e8:4a:c2:5b:bc:72:6f: 5b:b2:2e:23:a7:5a:4a:d9:3c:f6:d4:e6:aa:c2:af: bc:06:ac:b4:2c:26:75:f9:a0:c9:31:a8:41:0f:1b: 33:d2:21:a0:80:ab:a1:d9:c7:2c:a6:5a:f5:c7:b0: 36:24:e5:95:8a:8c:f7:ce:c0:28:2d:26:77:27:4d: ce:b5:09:53:f0:c0:12:33:cd:ee:00:0f:bd:84:1d: 78:21:0d:62:60:84:64:53:1a:98:08:ef:c7:0b:f0: 46:7d:61:59:17:35:a8:80:1e:90:a8:f7:ce:8f:c1: 46:58:b0:de:81:90:7d:c2:88:94:cd:52:e3:25:f1: b8:9e:84:85:4b:cf:70:52:42:08:97:a1:cd:85:dd: d9:71:e0:3e:f3:40:12:f3:5b:05:c9:0b:7e:08:a3: 30:0a:45:e6:97:22:67:7d:f0:64:5e:8f:e0:9c:9c: 59:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:C7:DB:49:44:7E:34:D3:CF:07:4E:82:FC:C5:B9:42:79:9C:B1:9B X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.144.0/23 Signature Algorithm: sha256WithRSAEncryption 07:c0:37:72:91:a0:b9:2a:a3:fb:08:b8:ce:46:e3:bb:43:9c: 86:88:17:cf:83:d8:ea:7f:0e:b5:a5:d6:9d:30:1d:9c:99:2a: 91:65:3d:8a:bc:67:fc:5d:cb:be:98:54:05:7d:40:ce:18:42: 46:4b:65:33:b8:54:9d:14:84:bf:14:96:d8:ad:13:c9:c8:37: c8:a6:21:14:ec:8e:f9:40:43:65:23:07:7f:31:43:54:c4:a6: e1:42:25:87:56:52:de:e3:6a:5a:df:ce:52:5e:c2:95:72:e9: 57:50:35:3d:b0:9a:c0:96:78:ae:02:c8:35:62:ad:b3:f4:1a: 79:fd:17:d9:a9:f3:b8:fc:b5:c1:68:7e:3a:7c:83:de:8e:68: f5:f3:f9:88:6e:e0:06:c3:86:b9:89:15:e7:a0:39:07:9e:1d: ad:ea:cb:0c:d1:d3:96:e1:63:ae:06:48:28:71:52:80:bf:1b: 3c:fb:24:7c:ea:e3:cc:1d:36:80:5f:39:8b:53:f1:2e:7d:aa: 3f:92:2c:b7:c3:ba:a4:47:99:30:c2:16:f7:81:c1:12:00:c4: 8d:ac:46:08:53:ef:9a:2a:63:d7:ea:8b:06:5d:84:7a:bb:1e: c8:91:56:8f:dd:a9:7e:99:41:11:46:d4:27:52:26:7e:76:a6: ac:30:94:c1 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUZNzKA51y6k8Z5G1fvkYjhOq2kdkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxNDM1OVoX DTI3MDUwMjAxNDg1OVowMzExMC8GA1UEAxMoQkRDN0RCNDk0NDdFMzREM0NGMDc0 RTgyRkNDNUI5NDI3OTlDQjE5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALChPeoJMJWn2RSyFsS8XZvEcOPABHxgtYVOiU0v9Ix4RLOaiThfir358BOc HiTt3vHIPGyM+VriqfPTjXvpwds8lo7WSjDJGgNkMY+Q1K6MqM/oSsJbvHJvW7Iu I6daStk89tTmqsKvvAastCwmdfmgyTGoQQ8bM9IhoICrodnHLKZa9cewNiTllYqM 987AKC0mdydNzrUJU/DAEjPN7gAPvYQdeCENYmCEZFMamAjvxwvwRn1hWRc1qIAe kKj3zo/BRliw3oGQfcKIlM1S4yXxuJ6EhUvPcFJCCJehzYXd2XHgPvNAEvNbBckL fgijMApF5pciZ33wZF6P4JycWfMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL3H20lEfjTTzwdOgvzFuUJ5nLGbMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2JhODliN2RkLTk5YTctNDUwZS1iZTg0LWIzYmZjNzM0MGYxZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iYTg5Yjdk ZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMC9CREM3REI0OTQ0N0UzNEQz Q0YwNzRFODJGQ0M1Qjk0Mjc5OUNCMTlCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoLuQMA0GCSqGSIb3DQEBCwUAA4IBAQAHwDdykaC5KqP7CLjORuO7Q5yGiBfP g9jqfw61pdadMB2cmSqRZT2KvGf8Xcu+mFQFfUDOGEJGS2UzuFSdFIS/FJbYrRPJ yDfIpiEU7I75QENlIwd/MUNUxKbhQiWHVlLe42pa385SXsKVculXUDU9sJrAlniu Asg1Yq2z9Bp5/RfZqfO4/LXBaH46fIPejmj18/mIbuAGw4a5iRXnoDkHnh2t6ssM 0dOW4WOuBkgocVKAvxs8+yR86uPMHTaAXzmLU/Eufao/kiy3w7qkR5kwwhb3gcES AMSNrEYIU++aKmPX6osGXYR6ux7IkVaP3al+mUERRtQnUiZ+dqasMJTB -----END CERTIFICATE-----Generated at Tue May 12 22:45:52 2026 by rpki-client