$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer File: 8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer (raw, json) Hash identifier: syqLKXLSJi/wrgRNFMzEPxAOS1vcGPNw2/Ntxp36kbM= Subject key identifier: 81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 046F1CC6683477CDEDFA75E7F719B9156F545BC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:07:10 +0000 Certificate not after: Sun 02 May 2027 00:12:10 +0000 Subordinate resources: IP: 103.71.8.0/22 IP: 2400:9140::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:6f:1c:c6:68:34:77:cd:ed:fa:75:e7:f7:19:b9:15:6f:54:5b:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:07:10 2026 GMT Not After : May 2 00:12:10 2027 GMT Subject: CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8d:fb:3f:15:7a:65:4c:7c:07:51:39:51:5e: 75:7f:8b:eb:a1:bd:ee:e4:5e:a8:f9:bc:3d:aa:ec: 3d:eb:41:29:22:fc:ca:1c:e0:d6:f8:5e:17:e4:a1: 32:a0:78:f2:59:d6:f4:6e:d0:71:f9:55:31:92:78: d8:a1:99:4c:5f:27:14:28:bf:ae:78:71:79:f7:a6: 47:fe:68:0d:48:5c:33:f4:3d:ff:26:7e:45:d7:1b: 66:1d:c8:5d:6f:f3:1e:76:b0:5c:41:7e:9e:5c:55: 10:7d:1b:e9:aa:ae:50:9b:2d:df:f0:fe:d0:b2:7a: 50:8b:8d:b6:9c:37:df:93:14:37:f6:5f:42:b5:5b: 45:23:d4:a5:68:bc:9b:63:e2:09:8b:d1:fa:fc:52: 1e:20:1b:ec:6e:62:a8:c7:5d:e6:f1:9b:05:aa:5a: df:7d:30:84:f9:1b:96:fb:68:72:a5:26:a7:7c:49: 89:9a:fc:c9:fd:53:48:bc:64:4b:a0:90:a7:29:67: 5c:5b:8c:0d:83:7f:7d:e3:44:35:b4:22:46:92:a1: 62:35:4d:cd:e2:2f:a0:63:0f:86:24:7a:9b:aa:83: 0a:9d:9a:24:d3:fb:17:77:bf:dc:27:97:0a:c8:fa: bd:df:4d:60:d6:e5:61:e5:cc:d0:9f:b4:11:26:97: 96:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.71.8.0/22 IPv6: 2400:9140::/32 Signature Algorithm: sha256WithRSAEncryption 11:dd:e7:39:2c:9f:8d:48:f3:1e:6d:45:54:1f:3a:8d:2d:5d: e7:dd:18:cd:08:eb:c9:ee:ba:56:68:74:f4:c5:87:d2:23:1c: c6:e7:9d:18:fa:17:59:1c:e7:6e:96:c9:bb:0c:98:5e:86:12: 8c:07:41:16:51:fd:ba:df:00:31:2b:01:e1:41:99:2b:0e:35: 1a:b1:93:a1:5a:f4:da:cf:57:78:79:cf:64:44:91:c0:fc:33: af:a5:47:7c:cc:da:25:96:d2:68:f7:0e:eb:52:9c:18:5e:65: d3:95:3f:80:f0:68:80:8a:ec:53:eb:16:29:d9:d5:4a:4d:a9: fa:8e:d8:69:77:06:5a:91:50:e4:ee:39:ab:bf:11:19:e8:d3: 58:65:d5:b5:02:91:78:2a:61:f7:ef:f6:4c:72:92:14:87:ce: df:9b:10:2c:c8:b7:89:de:ce:37:d4:94:9b:c8:3f:41:35:ef: c4:bc:08:3f:b6:85:ab:bf:60:9a:9e:3d:99:95:32:89:68:61: 1f:b2:43:bf:0a:26:86:64:c9:d2:51:1e:92:23:26:74:7c:3d: ec:43:2b:9d:cb:0b:55:f3:9d:c8:a3:0f:0a:77:da:d1:6f:dd: 6e:d0:5d:ad:14:6a:79:96:fd:99:40:f7:35:38:d3:f8:ad:54: fb:33:52:3d -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUBG8cxmg0d83t+nXn9xm5FW9UW8kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDcxMFoX DTI3MDUwMjAwMTIxMFowMzExMC8GA1UEAxMoODExMDU3MENFNTVEODUxMkZDQkRG MDI4MTlGQjhBMEQzQkFEMUY5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6N+z8VemVMfAdROVFedX+L66G97uReqPm8ParsPetBKSL8yhzg1vheF+Sh MqB48lnW9G7QcflVMZJ42KGZTF8nFCi/rnhxefemR/5oDUhcM/Q9/yZ+RdcbZh3I XW/zHnawXEF+nlxVEH0b6aquUJst3/D+0LJ6UIuNtpw335MUN/ZfQrVbRSPUpWi8 m2PiCYvR+vxSHiAb7G5iqMdd5vGbBapa330whPkblvtocqUmp3xJiZr8yf1TSLxk S6CQpylnXFuMDYN/feNENbQiRpKhYjVNzeIvoGMPhiR6m6qDCp2aJNP7F3e/3CeX Csj6vd9NYNblYeXM0J+0ESaXlmECAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIEQVwzlXYUS/L3wKBn7ig07rR+UMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJhNDk2MDgyLWEwYWEtNDgzNi1iNTg3LTk3M2RkN2UyOTdhZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yYTQ5NjA4 Mi1hMGFhLTQ4MzYtYjU4Ny05NzNkZDdlMjk3YWYvMC84MTEwNTcwQ0U1NUQ4NTEy RkNCREYwMjgxOUZCOEEwRDNCQUQxRjk0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ0cIMA0EAgACMAcDBQAkAJFAMA0GCSqGSIb3DQEBCwUAA4IBAQAR3ec5LJ+N SPMebUVUHzqNLV3n3RjNCOvJ7rpWaHT0xYfSIxzG550Y+hdZHOdulsm7DJhehhKM B0EWUf263wAxKwHhQZkrDjUasZOhWvTaz1d4ec9kRJHA/DOvpUd8zNolltJo9w7r UpwYXmXTlT+A8GiAiuxT6xYp2dVKTan6jthpdwZakVDk7jmrvxEZ6NNYZdW1ApF4 KmH37/ZMcpIUh87fmxAsyLeJ3s431JSbyD9BNe/EvAg/toWrv2Canj2ZlTKJaGEf skO/CiaGZMnSUR6SIyZ0fD3sQyudywtV853Iow8Kd9rRb91u0F2tFGp5lv2ZQPc1 ONP4rVT7M1I9 -----END CERTIFICATE-----Generated at Tue May 12 22:45:47 2026 by rpki-client