$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer File: 8369683C9C4A77F4B5AB05185F01C3C810502D34.cer (raw, json) Hash identifier: ASTfQYMrPGASNzjESzrTwRg20ea1hCjOoF2TglERl4U= Subject key identifier: 83:69:68:3C:9C:4A:77:F4:B5:AB:05:18:5F:01:C3:C8:10:50:2D:34 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 04608FEDB6BD0CD378A5673CE006639DBDC32DE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:28:02 +0000 Certificate not after: Sun 02 May 2027 01:33:02 +0000 Subordinate resources: IP: 103.162.62.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:60:8f:ed:b6:bd:0c:d3:78:a5:67:3c:e0:06:63:9d:bd:c3:2d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:28:02 2026 GMT Not After : May 2 01:33:02 2027 GMT Subject: CN=8369683C9C4A77F4B5AB05185F01C3C810502D34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:92:36:cc:3f:f0:28:d6:36:a4:13:ac:4f:8c: bd:85:80:07:9d:60:00:2c:cc:ca:cf:b9:06:55:f2: 60:a6:d8:d4:67:77:0f:ab:b7:e5:8a:01:e6:e5:5a: be:8c:c3:a6:e7:00:1e:e3:40:37:8f:b8:9b:ab:ec: af:d2:8d:f5:65:d0:e3:3d:63:62:d6:fc:e2:a4:29: 14:2c:ba:47:02:dd:61:63:91:a5:c6:58:b8:cb:f7: 24:f0:66:94:a7:bf:a1:13:8e:72:f3:eb:91:10:21: 6a:5a:96:ac:ed:a9:12:ba:73:96:1e:35:2f:1e:95: ec:37:7d:75:6b:b1:25:3a:26:35:b8:38:54:60:d5: 9a:76:80:ce:c2:32:3c:5d:84:a5:79:6b:51:3b:be: 58:26:b0:56:df:d7:57:ac:b9:42:6d:28:29:fa:7a: 10:01:f9:ff:4d:ab:90:43:1d:74:be:8f:94:76:a6: e7:af:06:97:f1:a0:18:f6:24:31:30:aa:ad:7d:2c: 2d:69:62:fc:b9:40:fb:10:fb:5b:12:be:cb:e3:af: ef:b8:f8:4d:63:5a:46:14:09:0b:64:62:c8:35:b4: 81:0f:e1:72:1d:04:55:fd:a9:91:88:b1:09:70:5f: 34:b5:b6:1b:1f:40:4b:1b:ac:30:aa:0d:94:60:b3: 94:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 83:69:68:3C:9C:4A:77:F4:B5:AB:05:18:5F:01:C3:C8:10:50:2D:34 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.62.0/23 Signature Algorithm: sha256WithRSAEncryption 76:4d:45:9c:39:49:7d:16:33:f1:db:86:ce:39:e3:cf:d5:29: c2:f2:59:fe:8c:95:6e:d6:51:21:05:9b:68:75:42:25:9c:a7: 62:31:90:23:32:66:4a:5a:4d:52:7c:f8:5b:35:b1:68:6f:3a: a5:6c:2d:bc:c9:44:62:ad:57:01:be:20:a2:02:38:5e:ed:a4: c3:19:d8:b7:bc:c8:ab:40:47:e4:44:5a:2b:98:ec:a0:06:df: e6:06:53:60:08:3c:16:4b:87:c7:9c:b1:2f:47:51:71:ff:23: a7:94:47:61:e7:69:f2:fd:e4:cc:71:1e:15:f4:8b:6e:d8:04: 16:9a:3a:58:c7:82:f1:fd:81:10:07:8d:44:31:21:19:c9:e2: 8e:e1:47:d1:46:37:cb:c7:86:c3:a7:31:93:c7:52:46:9e:5f: a5:80:dc:89:0e:01:c9:52:c1:bf:21:50:48:95:e8:76:cf:24: 73:42:c3:8e:f8:18:15:6c:9c:c0:7f:30:99:0d:b3:82:27:87: aa:6d:f3:64:69:e8:7e:ad:58:0b:49:75:f4:67:41:20:65:63: 77:e8:15:56:71:f1:85:93:88:73:c0:3f:3f:ef:6f:c9:d5:67: 0e:fd:e8:f9:9f:80:13:9f:4a:ee:82:bd:45:54:cf:8c:b4:45: 27:8e:b9:0e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUBGCP7ba9DNN4pWc84AZjnb3DLekwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjgwMloX DTI3MDUwMjAxMzMwMlowMzExMC8GA1UEAxMoODM2OTY4M0M5QzRBNzdGNEI1QUIw NTE4NUYwMUMzQzgxMDUwMkQzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIqSNsw/8CjWNqQTrE+MvYWAB51gACzMys+5BlXyYKbY1Gd3D6u35YoB5uVa vozDpucAHuNAN4+4m6vsr9KN9WXQ4z1jYtb84qQpFCy6RwLdYWORpcZYuMv3JPBm lKe/oROOcvPrkRAhalqWrO2pErpzlh41Lx6V7Dd9dWuxJTomNbg4VGDVmnaAzsIy PF2EpXlrUTu+WCawVt/XV6y5Qm0oKfp6EAH5/02rkEMddL6PlHam568Gl/GgGPYk MTCqrX0sLWli/LlA+xD7WxK+y+Ov77j4TWNaRhQJC2RiyDW0gQ/hch0EVf2pkYix CXBfNLW2Gx9ASxusMKoNlGCzlPECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFINpaDycSnf0tasFGF8Bw8gQUC00MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ExY2E5NDM1LTcyMjQtNDdhOC05NTFiLWMxYjQyZWIwZTJmNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hMWNhOTQz NS03MjI0LTQ3YTgtOTUxYi1jMWI0MmViMGUyZjcvMC84MzY5NjgzQzlDNEE3N0Y0 QjVBQjA1MTg1RjAxQzNDODEwNTAyRDM0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6I+MA0GCSqGSIb3DQEBCwUAA4IBAQB2TUWcOUl9FjPx24bOOePP1SnC8ln+ jJVu1lEhBZtodUIlnKdiMZAjMmZKWk1SfPhbNbFobzqlbC28yURirVcBviCiAjhe 7aTDGdi3vMirQEfkRFormOygBt/mBlNgCDwWS4fHnLEvR1Fx/yOnlEdh52ny/eTM cR4V9Itu2AQWmjpYx4Lx/YEQB41EMSEZyeKO4UfRRjfLx4bDpzGTx1JGnl+lgNyJ DgHJUsG/IVBIleh2zyRzQsOO+BgVbJzAfzCZDbOCJ4eqbfNkaeh+rVgLSXX0Z0Eg ZWN36BVWcfGFk4hzwD8/72/J1WcO/ej5n4ATn0rugr1FVM+MtEUnjrkO -----END CERTIFICATE-----Generated at Tue May 12 22:03:27 2026 by rpki-client