$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer File: 488A458129866D0E7DBFF7668D82664F584F8541.cer (raw, json) Hash identifier: PY2xieq6u2m+FOMNJsEiF8zXNtMTxNDyhXq0YydvY/o= Subject key identifier: 48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 08B0D38AA710195EFB313D00870997B38BD00ECA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:22:40 +0000 Certificate not after: Sun 02 May 2027 02:27:40 +0000 Subordinate resources: IP: 45.126.80.0/22 IP: 101.50.16.0/20 IP: 101.128.64.0/18 IP: 103.61.248.0/22 IP: 116.206.232.0 -- 116.206.243.255 IP: 125.208.128.0/18 IP: 202.158.0.0/17 IP: 210.210.128.0/18 IP: 2001:d10::/32 IP: 2405:8180::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b0:d3:8a:a7:10:19:5e:fb:31:3d:00:87:09:97:b3:8b:d0:0e:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:22:40 2026 GMT Not After : May 2 02:27:40 2027 GMT Subject: CN=488A458129866D0E7DBFF7668D82664F584F8541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4c:59:f8:9c:1e:aa:43:9e:bd:5a:11:ab:b1: 7a:12:79:66:51:f7:50:4f:0d:7e:e2:45:3b:1b:7e: 40:19:bf:92:78:2f:df:f5:47:54:fd:67:5a:ea:a6: de:a9:d2:47:84:c4:4f:45:27:0e:2b:fb:16:9b:40: 7f:db:aa:1f:e9:ad:cd:c6:24:c1:51:3e:01:20:74: 5b:61:c4:8e:9d:ef:41:00:a4:3d:75:c4:a7:e1:e8: 95:02:62:99:4b:11:0d:d8:d8:fc:0a:e9:e9:00:7d: b2:41:c2:79:80:f5:5e:b9:85:9a:78:04:7f:61:e8: d1:49:66:ca:4d:38:06:3b:84:91:c0:03:47:24:7d: 59:08:d7:a5:94:7e:63:ba:da:fb:dd:4c:28:d6:a2: 1b:ca:6b:16:ab:7e:6e:64:2e:ee:f0:7c:6e:9a:99: 52:ff:40:0c:35:db:d3:51:ec:87:18:44:81:ae:13: ba:e8:8e:79:29:f3:ed:c3:e1:a1:d4:5e:71:de:b3: 43:d6:48:f6:f6:ad:cf:af:d1:48:77:81:2a:20:ea: 64:5c:7b:70:a7:a7:32:7d:96:8e:28:eb:6e:e4:2e: df:e0:00:b7:3c:ea:c0:31:bd:80:14:f2:93:d9:5a: df:6b:ee:65:51:e7:55:75:7e:8a:f5:96:a0:0c:dd: b6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.126.80.0/22 101.50.16.0/20 101.128.64.0/18 103.61.248.0/22 116.206.232.0-116.206.243.255 125.208.128.0/18 202.158.0.0/17 210.210.128.0/18 IPv6: 2001:d10::/32 2405:8180::/32 Signature Algorithm: sha256WithRSAEncryption 8b:d3:db:9a:fc:71:3d:fc:55:1d:aa:85:89:5f:3f:8a:2b:be: 09:55:1e:df:f0:f1:b9:ff:ab:bf:e1:dd:cc:e2:77:25:98:76: 73:0d:13:18:70:4b:85:5c:58:1c:b7:a7:33:10:ec:c2:6d:a6: 77:88:67:73:14:2e:69:93:85:06:c9:b6:1a:d0:10:e8:42:96: 1f:ac:7e:03:07:a0:4a:aa:6a:db:b0:17:54:50:53:9a:e8:dd: a5:d7:c5:5c:cc:5f:3a:7f:ce:bd:8e:54:1c:f6:4e:4f:36:e0: 78:39:31:a4:9c:30:c1:20:8e:24:41:80:22:eb:bb:8c:6a:bc: 2e:0d:ef:dc:76:2c:4e:df:cc:da:0e:f5:ce:16:b2:e9:bd:24: 7f:76:9b:24:2f:0b:59:47:7d:32:d4:f6:3e:39:e1:3f:d1:30: c7:cc:43:6d:77:d3:0f:77:e8:b4:13:45:7f:83:64:83:6c:a5: 55:fc:18:6e:ea:d0:3e:5a:90:07:fc:7c:df:da:f0:6d:70:b5: f6:00:1c:fd:9e:e0:d1:9f:72:46:d1:4e:7c:0a:f9:23:8f:fd: 21:d2:81:88:59:81:11:fe:40:8f:20:45:28:2c:0d:29:dd:c8: c8:22:21:fc:77:04:60:53:63:89:25:51:5a:de:40:6f:9e:e5: 19:cf:b0:e3 -----BEGIN CERTIFICATE----- MIIGDjCCBPagAwIBAgIUCLDTiqcQGV77MT0AhwmXs4vQDsowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjI0MFoX DTI3MDUwMjAyMjc0MFowMzExMC8GA1UEAxMoNDg4QTQ1ODEyOTg2NkQwRTdEQkZG NzY2OEQ4MjY2NEY1ODRGODU0MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOtMWficHqpDnr1aEauxehJ5ZlH3UE8NfuJFOxt+QBm/kngv3/VHVP1nWuqm 3qnSR4TET0UnDiv7FptAf9uqH+mtzcYkwVE+ASB0W2HEjp3vQQCkPXXEp+HolQJi mUsRDdjY/Arp6QB9skHCeYD1XrmFmngEf2Ho0Ulmyk04BjuEkcADRyR9WQjXpZR+ Y7ra+91MKNaiG8prFqt+bmQu7vB8bpqZUv9ADDXb01HshxhEga4TuuiOeSnz7cPh odRecd6zQ9ZI9vatz6/RSHeBKiDqZFx7cKenMn2WjijrbuQu3+AAtzzqwDG9gBTy k9la32vuZVHnVXV+ivWWoAzdtnUCAwEAAaOCAwEwggL9MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEiKRYEphm0Ofb/3Zo2CZk9YT4VBMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2VhNzAyNzI2LWIyYzYtNDZmYy04Mjk3LTJkYmRlYzZkNmQ1ZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lYTcwMjcy Ni1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMC80ODhBNDU4MTI5ODY2RDBF N0RCRkY3NjY4RDgyNjY0RjU4NEY4NTQxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjA+BAIAATA4 AwQCLX5QAwQEZTIQAwQGZYBAAwQCZz34MAwDBAN0zugDBAJ0zvADBAZ90IADBAfK ngADBAbS0oAwFAQCAAIwDgMFACABDRADBQAkBYGAMA0GCSqGSIb3DQEBCwUAA4IB AQCL09ua/HE9/FUdqoWJXz+KK74JVR7f8PG5/6u/4d3M4nclmHZzDRMYcEuFXFgc t6czEOzCbaZ3iGdzFC5pk4UGybYa0BDoQpYfrH4DB6BKqmrbsBdUUFOa6N2l18Vc zF86f869jlQc9k5PNuB4OTGknDDBII4kQYAi67uMarwuDe/cdixO38zaDvXOFrLp vSR/dpskLwtZR30y1PY+OeE/0TDHzENtd9MPd+i0E0V/g2SDbKVV/Bhu6tA+WpAH /Hzf2vBtcLX2ABz9nuDRn3JG0U58Cvkjj/0h0oGIWYER/kCPIEUoLA0p3cjIIiH8 dwRgU2OJJVFa3kBvnuUZz7Dj -----END CERTIFICATE-----Generated at Tue May 12 22:04:07 2026 by rpki-client