$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer File: BFD6A628A7E3273D48388984344C37C51116C61B.cer (raw, json) Hash identifier: 4kUfvMRbNggJMgGA1r/3zhDyNV/WByCGhp3+TyuszRo= Subject key identifier: BF:D6:A6:28:A7:E3:27:3D:48:38:89:84:34:4C:37:C5:11:16:C6:1B Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 30DC18A3051FD9B0C3DBCAEA9398364BDEF44C4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:01:51 +0000 Certificate not after: Sun 02 May 2027 00:06:51 +0000 Subordinate resources: IP: 160.187.150.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:dc:18:a3:05:1f:d9:b0:c3:db:ca:ea:93:98:36:4b:de:f4:4c:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:01:51 2026 GMT Not After : May 2 00:06:51 2027 GMT Subject: CN=BFD6A628A7E3273D48388984344C37C51116C61B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:84:8c:7b:b7:50:44:c6:da:93:7a:9f:1d:76: 85:5f:3e:5e:27:24:37:6e:0b:96:14:2a:40:47:97: 99:af:6c:68:fe:0a:f5:b5:02:3a:da:8c:89:18:16: 00:5c:46:aa:d7:a2:aa:5b:d6:eb:d0:b7:8f:a2:e6: 13:bc:98:45:1a:cb:67:ef:7f:11:81:74:9d:15:16: d7:cd:8c:3c:67:bc:2d:9d:10:56:e8:c5:e0:3b:da: d8:12:4c:24:0e:4d:21:b3:01:c4:c4:e6:4c:84:de: b8:fa:69:0f:1a:98:39:6f:09:18:92:ff:5a:2e:c1: 07:82:89:72:f1:f9:94:f5:85:b4:04:41:f6:a8:36: c6:85:7d:93:58:d7:80:18:65:f2:4a:69:b6:2f:9b: d5:62:90:0f:14:cb:f8:a4:d2:4c:49:7e:7d:32:67: 40:cc:b9:7a:f8:ae:de:4b:ad:20:13:db:7b:bf:69: 2f:e6:6c:8a:34:bd:5c:42:f2:84:c3:2f:08:75:f8: 4c:cd:37:79:90:c7:21:f0:b5:b8:c9:63:12:75:a3: 79:e0:da:8b:91:5e:95:5f:88:2e:0e:47:03:6d:af: b0:72:e1:72:ec:18:d1:24:2f:20:56:6b:b9:13:44: 82:dd:26:b0:d0:31:79:77:00:32:8c:bb:5d:84:a2: 4c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BF:D6:A6:28:A7:E3:27:3D:48:38:89:84:34:4C:37:C5:11:16:C6:1B X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.150.0/23 Signature Algorithm: sha256WithRSAEncryption 26:22:56:3a:25:cc:61:e4:ae:a9:0c:d8:4c:82:cf:a7:8c:9d: ea:0b:40:05:bb:39:56:b2:6e:2e:19:4c:17:5b:b2:47:74:83: 40:22:00:3b:e7:28:26:87:4e:1c:78:14:82:ff:49:19:16:3e: e1:79:cc:7d:a5:b8:6f:2d:a8:ef:37:8f:80:9b:40:5f:73:92: 78:ba:ff:f1:75:c5:6c:1c:a7:84:c9:95:e7:ee:71:39:5b:b4: cf:e2:0a:4f:4c:f3:da:02:66:31:d5:4f:b9:45:89:6e:9c:26: d9:53:26:b1:12:2f:ca:7e:e6:f6:a8:de:e5:bd:67:2c:23:56: 6b:32:2b:d8:e9:fe:f4:9d:87:e9:f9:24:2a:67:e4:57:b6:1d: 44:fa:2b:55:32:23:d5:ec:87:2e:9c:3f:fc:a6:a2:34:9a:df: 5b:c8:03:82:6e:40:f2:48:b6:2b:05:2b:ae:2d:36:d0:be:dd: 64:72:27:bf:de:a0:12:1d:59:ce:17:39:76:7d:77:63:c9:95: 9e:1f:bc:a7:34:1b:12:42:bb:71:88:c8:4b:6c:f0:0c:32:6e: e5:db:7f:a2:5f:27:e7:ff:8e:f0:72:94:80:9a:64:10:ab:5c: f7:4f:4b:57:f2:d5:67:98:e4:43:ff:3c:bd:21:a3:ca:36:8b: 94:1b:2c:e4 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUMNwYowUf2bDD28rqk5g2S970TEowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMDE1MVoX DTI3MDUwMjAwMDY1MVowMzExMC8GA1UEAxMoQkZENkE2MjhBN0UzMjczRDQ4Mzg4 OTg0MzQ0QzM3QzUxMTE2QzYxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqEjHu3UETG2pN6nx12hV8+XickN24LlhQqQEeXma9saP4K9bUCOtqMiRgW AFxGqteiqlvW69C3j6LmE7yYRRrLZ+9/EYF0nRUW182MPGe8LZ0QVujF4Dva2BJM JA5NIbMBxMTmTITeuPppDxqYOW8JGJL/Wi7BB4KJcvH5lPWFtARB9qg2xoV9k1jX gBhl8kppti+b1WKQDxTL+KTSTEl+fTJnQMy5eviu3kutIBPbe79pL+ZsijS9XELy hMMvCHX4TM03eZDHIfC1uMljEnWjeeDai5FelV+ILg5HA22vsHLhcuwY0SQvIFZr uRNEgt0msNAxeXcAMoy7XYSiTBkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL/Wpiin4yc9SDiJhDRMN8URFsYbMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzIxZDk3YjQwLWMwMzEtNGU1Yi05YjQyLWQyYWUxYzljZjk4Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yMWQ5N2I0 MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMC9CRkQ2QTYyOEE3RTMyNzNE NDgzODg5ODQzNDRDMzdDNTExMTZDNjFCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoLuWMA0GCSqGSIb3DQEBCwUAA4IBAQAmIlY6Jcxh5K6pDNhMgs+njJ3qC0AF uzlWsm4uGUwXW7JHdINAIgA75ygmh04ceBSC/0kZFj7hecx9pbhvLajvN4+Am0Bf c5J4uv/xdcVsHKeEyZXn7nE5W7TP4gpPTPPaAmYx1U+5RYlunCbZUyaxEi/Kfub2 qN7lvWcsI1ZrMivY6f70nYfp+SQqZ+RXth1E+itVMiPV7IcunD/8pqI0mt9byAOC bkDySLYrBSuuLTbQvt1kcie/3qASHVnOFzl2fXdjyZWeH7ynNBsSQrtxiMhLbPAM Mm7l23+iXyfn/47wcpSAmmQQq1z3T0tX8tVnmORD/zy9IaPKNouUGyzk -----END CERTIFICATE-----Generated at Tue May 12 22:03:38 2026 by rpki-client