$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.cer File: 087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.cer (raw, json) Hash identifier: MnUGtEkJ0+lDbFCCtfiONhTFHUv2vaz1ffHJG6Cw0/Y= Subject key identifier: 08:72:80:BD:A2:BB:97:42:B0:39:8E:4B:6A:7E:5B:48:F9:CC:16:6A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 48550892C9A2FD19A744589C173D9D8CCCEA8CB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:02:55 +0000 Certificate not after: Sun 02 May 2027 00:07:55 +0000 Subordinate resources: IP: 103.122.0.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:55:08:92:c9:a2:fd:19:a7:44:58:9c:17:3d:9d:8c:cc:ea:8c:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:02:55 2026 GMT Not After : May 2 00:07:55 2027 GMT Subject: CN=087280BDA2BB9742B0398E4B6A7E5B48F9CC166A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:52:35:08:b1:80:9d:bc:2f:1c:e2:ee:0a:fc: eb:d1:99:7a:ee:7f:37:ce:1a:b9:1d:46:fe:66:2d: 87:16:56:43:98:f8:43:37:c3:2c:b3:a2:ee:21:aa: ad:71:97:f6:fe:8d:19:8f:94:e4:a9:61:3f:a8:e1: dc:87:eb:ea:b4:fd:c6:bd:9a:bd:db:9f:9e:67:26: d2:bd:5f:10:e3:99:71:c2:4c:ee:5b:12:f7:20:db: 2c:a9:4f:d3:27:58:cb:0c:f8:0e:fc:a2:23:55:1f: ec:01:29:10:f4:bf:14:90:3b:5e:0c:7a:26:f0:24: e4:66:aa:88:1a:f1:7a:22:f3:c5:48:0c:57:76:cf: 64:4e:7c:27:8b:be:23:bd:66:15:9a:2b:26:14:9e: f7:14:ca:a9:09:0c:6a:22:72:b0:5b:5f:a1:19:99: 7e:19:63:8b:82:42:fa:df:b6:6e:38:72:e2:46:c8: 5e:e1:55:45:29:0b:eb:38:19:d3:a3:33:be:51:c7: de:f0:4e:a7:08:2d:86:19:08:2c:35:1b:2e:24:24: 73:e7:de:0d:7e:eb:79:11:5e:10:4b:e2:e4:e8:d4: 4c:91:b6:f3:b5:49:77:6c:48:97:c5:01:0d:1e:28: 6b:54:bc:ac:e5:c8:36:51:5c:b3:52:f3:0d:1d:16: 8b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:72:80:BD:A2:BB:97:42:B0:39:8E:4B:6A:7E:5B:48:F9:CC:16:6A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.122.0.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:f7:9b:47:3e:2b:61:3a:b5:fe:28:fa:45:c5:d5:0d:3e:b5: 69:81:89:92:d4:c6:c6:83:c9:0e:cf:3d:63:11:b7:64:49:73: 39:5e:d5:13:6d:c3:8b:54:96:54:9b:c0:ae:5b:4a:e0:b9:b8: e3:a3:1b:61:a6:64:c5:82:d7:7f:bc:61:45:17:58:b6:e3:b2: 79:75:6f:fd:b7:4b:b2:23:74:a7:57:5d:25:30:6e:bb:32:a0: 0d:d9:19:23:d0:ac:9f:0f:75:e0:32:0c:ca:16:a1:a0:69:0e: 89:57:c8:4a:25:03:33:01:a4:89:5e:20:0e:62:3a:bf:42:e4: f8:c8:34:ee:72:aa:ca:99:67:09:76:ba:29:cb:96:42:d0:36: 32:61:98:3d:b9:fa:08:97:79:dd:0d:69:ab:97:33:12:5b:7c: a5:ee:aa:d0:3d:b8:0c:b7:15:25:ad:06:50:e9:ec:46:25:9b: d7:7c:b3:75:de:33:ca:92:83:3e:fe:db:2b:40:4a:3e:05:1d: 57:c2:f4:ec:14:3d:12:fd:fa:ce:64:64:63:85:d4:2f:87:70: 71:24:fc:20:02:5b:17:63:b9:70:7b:84:9f:7f:57:b0:62:0c: 30:96:eb:2d:00:e9:d0:3d:65:c2:14:55:1f:45:c0:9e:7c:f6: a2:b0:f9:fa -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUSFUIksmi/RmnRFicFz2djMzqjLQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDI1NVoX DTI3MDUwMjAwMDc1NVowMzExMC8GA1UEAxMoMDg3MjgwQkRBMkJCOTc0MkIwMzk4 RTRCNkE3RTVCNDhGOUNDMTY2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFSNQixgJ28Lxzi7gr869GZeu5/N84auR1G/mYthxZWQ5j4QzfDLLOi7iGq rXGX9v6NGY+U5KlhP6jh3Ifr6rT9xr2avdufnmcm0r1fEOOZccJM7lsS9yDbLKlP 0ydYywz4DvyiI1Uf7AEpEPS/FJA7Xgx6JvAk5GaqiBrxeiLzxUgMV3bPZE58J4u+ I71mFZorJhSe9xTKqQkMaiJysFtfoRmZfhlji4JC+t+2bjhy4kbIXuFVRSkL6zgZ 06MzvlHH3vBOpwgthhkILDUbLiQkc+feDX7reRFeEEvi5OjUTJG287VJd2xIl8UB DR4oa1S8rOXINlFcs1LzDR0Wi2UCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAhygL2iu5dCsDmOS2p+W0j5zBZqMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzIzMTJhMTQ2LWY5NTQtNDdlMy1iOTNmLTkyYzJmZTZkODllYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yMzEyYTE0 Ni1mOTU0LTQ3ZTMtYjkzZi05MmMyZmU2ZDg5ZWEvMC8wODcyODBCREEyQkI5NzQy QjAzOThFNEI2QTdFNUI0OEY5Q0MxNjZBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ3oAMA0GCSqGSIb3DQEBCwUAA4IBAQA795tHPithOrX+KPpFxdUNPrVpgYmS 1MbGg8kOzz1jEbdkSXM5XtUTbcOLVJZUm8CuW0rgubjjoxthpmTFgtd/vGFFF1i2 47J5dW/9t0uyI3SnV10lMG67MqAN2Rkj0KyfD3XgMgzKFqGgaQ6JV8hKJQMzAaSJ XiAOYjq/QuT4yDTucqrKmWcJdropy5ZC0DYyYZg9ufoIl3ndDWmrlzMSW3yl7qrQ PbgMtxUlrQZQ6exGJZvXfLN13jPKkoM+/tsrQEo+BR1XwvTsFD0S/frOZGRjhdQv h3BxJPwgAlsXY7lwe4Sff1ewYgwwlustAOnQPWXCFFUfRcCefPaisPn6 -----END CERTIFICATE-----Generated at Tue May 12 22:52:44 2026 by rpki-client