$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer File: 8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer (raw, json) Hash identifier: Mck/XnrLQ1lvFR8fQ2qDQnqMbIuez8HpRpKk4FzC7A4= Subject key identifier: 80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 53B24803D16C17D15EC56DA93A07B8BE51C48227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:29:53 +0000 Certificate not after: Sun 02 May 2027 00:34:53 +0000 Subordinate resources: IP: 27.111.48.0/20 IP: 103.3.220.0/22 IP: 112.215.0.0/16 IP: 121.52.0.0/17 IP: 202.152.224.0/19 IP: 203.78.112.0/20 IP: 2400:9800::/32 IP: 2407:7600::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b2:48:03:d1:6c:17:d1:5e:c5:6d:a9:3a:07:b8:be:51:c4:82:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:29:53 2026 GMT Not After : May 2 00:34:53 2027 GMT Subject: CN=8076C56477B8FD54606E8F7BB95C1BCD953296A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:38:4b:af:19:87:f9:67:16:62:3c:af:dd:02: 88:52:fc:4c:fe:e7:1f:34:c8:e7:87:1d:42:ba:b9: fc:fb:bc:ac:81:60:6d:2b:91:7f:f1:e6:c3:31:74: 38:34:c8:4a:08:3a:0e:45:87:b2:78:d5:ff:9c:1d: d0:6b:e8:08:5b:4c:52:cc:ec:d9:aa:31:c6:93:95: 7a:e5:70:9b:72:36:35:45:ec:7e:6e:93:a9:e4:06: 29:91:dd:50:32:84:a5:6a:04:b0:84:77:0d:b7:ac: f2:16:70:fd:ae:ba:3d:bf:9a:c9:81:38:bb:00:8c: 15:31:e9:a1:ee:41:c5:6f:0d:ac:0b:67:5c:37:2d: 07:b8:31:8e:6a:69:6e:ae:b8:36:a8:b2:db:19:3d: ca:ca:20:1b:e7:af:6e:ee:18:a8:33:57:b6:eb:41: ff:b7:80:6f:1f:c9:6d:85:5d:92:7c:8c:06:7b:02: ec:37:51:34:3d:df:3d:0b:fa:cc:63:3e:eb:4c:92: a6:c6:e4:1a:27:3e:b7:d3:67:44:46:4d:38:f9:6a: 10:e9:b0:7f:2e:1f:9d:49:7a:f6:65:85:91:3e:75: 13:1e:b3:60:a7:c3:94:f4:54:71:db:c5:f9:13:97: c5:5b:e2:7c:53:36:9f:1d:31:c2:2c:47:42:b5:89: f3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.111.48.0/20 103.3.220.0/22 112.215.0.0/16 121.52.0.0/17 202.152.224.0/19 203.78.112.0/20 IPv6: 2400:9800::/32 2407:7600::/32 Signature Algorithm: sha256WithRSAEncryption 1d:24:9e:7e:76:9b:f8:ec:c9:7d:c0:53:60:55:1f:50:10:f1: 55:f3:28:cd:02:bc:3b:9f:d8:46:3d:30:1a:88:eb:9e:8c:22: 24:12:42:83:12:75:fb:c0:4c:24:d7:c8:7b:0e:4f:a4:a8:ce: 01:f6:f6:33:21:8a:e7:86:44:69:86:e5:75:68:81:4e:6a:6b: 8c:df:0d:2c:72:43:8f:e9:09:b1:9f:9a:37:66:4e:e0:40:64: 2e:50:22:e1:f1:68:4f:5f:43:fc:7f:bd:59:ac:59:81:f9:91: 49:c9:dc:c6:92:e4:08:84:64:5a:0f:22:83:6d:79:8c:10:47: d9:16:80:d6:7c:00:0a:17:65:b0:b5:3b:ea:3c:e6:3f:9f:d6: 86:a4:c0:f9:72:f2:cf:05:2f:99:ad:08:6c:23:5e:9a:a0:44: 3d:bf:1f:35:d6:aa:92:d2:47:63:31:b5:cc:5c:f8:92:51:18: fe:73:ff:12:de:0c:24:1f:d5:de:4c:eb:ac:0b:fc:a6:3a:d5: 59:d1:b6:d5:06:61:1c:7b:ff:c4:e6:87:96:ae:93:a1:3f:0b: f1:4d:e1:d2:22:c9:a3:c0:6b:61:9a:bc:5a:d6:7c:f6:33:92: 91:b9:c8:32:fe:af:4c:dc:bb:0b:8d:98:88:28:fd:8e:80:16: 94:3b:40:05 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUU7JIA9FsF9FexW2pOge4vlHEgicwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjk1M1oX DTI3MDUwMjAwMzQ1M1owMzExMC8GA1UEAxMoODA3NkM1NjQ3N0I4RkQ1NDYwNkU4 RjdCQjk1QzFCQ0Q5NTMyOTZBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMY4S68Zh/lnFmI8r90CiFL8TP7nHzTI54cdQrq5/Pu8rIFgbSuRf/HmwzF0 ODTISgg6DkWHsnjV/5wd0GvoCFtMUszs2aoxxpOVeuVwm3I2NUXsfm6TqeQGKZHd UDKEpWoEsIR3Dbes8hZw/a66Pb+ayYE4uwCMFTHpoe5BxW8NrAtnXDctB7gxjmpp bq64Nqiy2xk9ysogG+evbu4YqDNXtutB/7eAbx/JbYVdknyMBnsC7DdRND3fPQv6 zGM+60ySpsbkGic+t9NnREZNOPlqEOmwfy4fnUl69mWFkT51Ex6zYKfDlPRUcdvF +ROXxVvifFM2nx0xwixHQrWJ8+sCAwEAAaOCAuwwggLoMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIB2xWR3uP1UYG6Pe7lcG82VMpamMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzRiZGIxZTBhLWE0ZWMtNDlkYi1iZTg5LThkN2U3ZmMyYzIyNy8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80YmRiMWUw YS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS84MDc2QzU2NDc3QjhGRDU0 NjA2RThGN0JCOTVDMUJDRDk1MzI5NkE2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTApBAIAATAj AwQEG28wAwQCZwPcAwMAcNcDBAd5NAADBAXKmOADBATLTnAwFAQCAAIwDgMFACQA mAADBQAkB3YAMA0GCSqGSIb3DQEBCwUAA4IBAQAdJJ5+dpv47Ml9wFNgVR9QEPFV 8yjNArw7n9hGPTAaiOuejCIkEkKDEnX7wEwk18h7Dk+kqM4B9vYzIYrnhkRphuV1 aIFOamuM3w0sckOP6Qmxn5o3Zk7gQGQuUCLh8WhPX0P8f71ZrFmB+ZFJydzGkuQI hGRaDyKDbXmMEEfZFoDWfAAKF2WwtTvqPOY/n9aGpMD5cvLPBS+ZrQhsI16aoEQ9 vx811qqS0kdjMbXMXPiSURj+c/8S3gwkH9XeTOusC/ymOtVZ0bbVBmEce//E5oeW rpOhPwvxTeHSIsmjwGthmrxa1nz2M5KRucgy/q9M3LsLjZiIKP2OgBaUO0AF -----END CERTIFICATE-----Generated at Tue May 12 22:16:28 2026 by rpki-client