$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.cer File: 08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.cer (raw, json) Hash identifier: juarQnio6rASNxQX+eKI57MIPp745S/X7yG8H0C+0QM= Subject key identifier: 08:46:5F:A1:5C:F4:94:2C:9C:4C:E0:9B:FD:3D:A0:43:8F:ED:BB:38 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3B1ABE690D967E30B58E134DF05D8A25B98C1280 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.mft caRepository: rsync://rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:55:20 +0000 Certificate not after: Sun 02 May 2027 01:00:20 +0000 Subordinate resources: IP: 103.120.232.0/24 IP: 2001:df6:2700::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:1a:be:69:0d:96:7e:30:b5:8e:13:4d:f0:5d:8a:25:b9:8c:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:55:20 2026 GMT Not After : May 2 01:00:20 2027 GMT Subject: CN=08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:51:82:37:6d:34:f7:67:15:40:ed:b7:fa:e8: 3f:37:76:8d:b4:e5:6c:05:65:55:49:4b:00:90:65: f1:df:8a:16:b4:cd:8c:6d:66:47:77:50:d3:67:07: a4:a5:10:82:38:93:7e:ef:6e:e2:84:91:38:75:cf: fd:77:16:ef:f2:f5:99:33:d1:80:48:8a:51:c3:78: 78:73:99:24:c6:36:ac:16:5b:06:4b:e1:52:95:65: 41:ca:71:d6:46:9b:e4:52:dc:3c:c0:d1:81:d9:fc: 6e:dc:4e:33:7f:c0:c8:59:28:8a:89:27:10:aa:a0: 31:c5:ed:88:89:02:20:32:73:f6:e6:e1:97:cb:3d: 57:cf:2a:bd:35:0e:d8:82:1b:95:0d:0a:0b:93:8f: 4d:3f:44:a9:5f:4f:de:32:ab:83:bc:50:9d:67:1b: 3e:55:b2:f5:a6:5e:4c:b4:63:ab:b8:d9:dd:c3:b7: 75:b7:e5:5a:42:17:2c:d7:48:1e:10:62:85:7d:27: da:57:19:47:21:f9:e5:43:af:f7:7a:5d:44:22:a6: 23:0d:c7:54:ee:32:76:2c:ad:ab:ae:6e:20:bc:65: c8:77:8a:7e:d6:eb:87:fe:2f:a5:64:09:77:34:f7: fd:30:65:2f:c6:74:f8:60:db:af:6b:ae:fb:84:7e: 90:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:46:5F:A1:5C:F4:94:2C:9C:4C:E0:9B:FD:3D:A0:43:8F:ED:BB:38 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.232.0/24 IPv6: 2001:df6:2700::/48 Signature Algorithm: sha256WithRSAEncryption 05:78:ee:5b:5d:1f:5c:b6:40:8d:b4:4d:2b:25:03:d3:0d:c1: 4b:34:01:70:c1:4b:89:87:c3:27:24:09:5f:7c:6f:a1:04:5b: bd:28:91:f1:c8:47:20:79:bd:90:4c:3e:01:d3:10:51:b7:af: 11:76:a7:a2:97:02:e5:15:b4:e5:1d:4c:42:99:2f:18:02:be: 7e:d5:a5:42:1c:3e:c5:eb:05:11:3a:b3:3f:17:6e:71:4e:77: e6:a1:64:46:53:f0:37:28:c7:69:c4:ef:00:0c:aa:5f:8a:b1: 27:a1:04:34:01:5b:29:eb:fd:0f:20:0f:d1:3e:ce:53:28:56: 10:cb:fe:72:50:9b:44:47:12:54:67:ef:06:15:24:bd:64:1b: 28:79:ab:3f:46:40:11:ac:0a:2f:03:32:f8:41:d3:bc:d0:2a: 0b:30:95:cc:5a:6f:b6:51:27:f8:2e:3c:62:6e:3f:dc:47:4b: 4a:31:ff:80:b2:a5:01:56:e5:9e:84:82:ea:43:97:ae:f7:70: a1:dd:23:5a:13:c2:38:d9:12:1b:f9:f4:f4:40:0d:68:05:43: 09:4a:1a:91:c9:df:6d:2c:1d:0b:17:22:48:59:06:34:30:02: 1e:34:5e:9d:58:f9:70:63:b1:0c:14:16:51:c6:5f:b1:1f:66: ef:75:10:fe -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUOxq+aQ2WfjC1jhNN8F2KJbmMEoAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTUyMFoX DTI3MDUwMjAxMDAyMFowMzExMC8GA1UEAxMoMDg0NjVGQTE1Q0Y0OTQyQzlDNENF MDlCRkQzREEwNDM4RkVEQkIzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALBRgjdtNPdnFUDtt/roPzd2jbTlbAVlVUlLAJBl8d+KFrTNjG1mR3dQ02cH pKUQgjiTfu9u4oSROHXP/XcW7/L1mTPRgEiKUcN4eHOZJMY2rBZbBkvhUpVlQcpx 1kab5FLcPMDRgdn8btxOM3/AyFkoioknEKqgMcXtiIkCIDJz9ubhl8s9V88qvTUO 2IIblQ0KC5OPTT9EqV9P3jKrg7xQnWcbPlWy9aZeTLRjq7jZ3cO3dbflWkIXLNdI HhBihX0n2lcZRyH55UOv93pdRCKmIw3HVO4ydiytq65uILxlyHeKftbrh/4vpWQJ dzT3/TBlL8Z0+GDbr2uu+4R+kLsCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAhGX6Fc9JQsnEzgm/09oEOP7bs4MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzcyYzAwZjc5LTQ5ZWItNDUyNS05MDI2LWEyMzhmZjQ0ODA3MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83MmMwMGY3 OS00OWViLTQ1MjUtOTAyNi1hMjM4ZmY0NDgwNzAvMC8wODQ2NUZBMTVDRjQ5NDJD OUM0Q0UwOUJGRDNEQTA0MzhGRURCQjM4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ3joMA8EAgACMAkDBwAgAQ32JwAwDQYJKoZIhvcNAQELBQADggEBAAV47ltd H1y2QI20TSslA9MNwUs0AXDBS4mHwyckCV98b6EEW70okfHIRyB5vZBMPgHTEFG3 rxF2p6KXAuUVtOUdTEKZLxgCvn7VpUIcPsXrBRE6sz8XbnFOd+ahZEZT8Dcox2nE 7wAMql+KsSehBDQBWynr/Q8gD9E+zlMoVhDL/nJQm0RHElRn7wYVJL1kGyh5qz9G QBGsCi8DMvhB07zQKgswlcxab7ZRJ/guPGJuP9xHS0ox/4CypQFW5Z6EgupDl673 cKHdI1oTwjjZEhv59PRADWgFQwlKGpHJ320sHQsXIkhZBjQwAh40Xp1Y+XBjsQwU FlHGX7EfZu91EP4= -----END CERTIFICATE-----Generated at Tue May 12 22:09:58 2026 by rpki-client