$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.cer File: 83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.cer (raw, json) Hash identifier: 35RoN/RqMZUicegfGaQNmNgRBHEJW9tTHdsWnlY+YOI= Subject key identifier: 83:B2:DB:74:7B:ED:1A:E0:1D:D0:B8:AF:08:DF:AE:9B:FF:90:09:17 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1DFDAAF6A5828E31EB930084398857C1502E237D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:23:57 +0000 Certificate not after: Sun 02 May 2027 00:28:57 +0000 Subordinate resources: IP: 202.47.160.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:fd:aa:f6:a5:82:8e:31:eb:93:00:84:39:88:57:c1:50:2e:23:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:23:57 2026 GMT Not After : May 2 00:28:57 2027 GMT Subject: CN=83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:91:6c:c8:6f:4e:f8:37:0a:9d:d0:45:a4:b8: 05:30:54:c9:e1:7b:da:4f:e1:9c:b5:7a:aa:46:db: 2b:7d:56:95:b4:73:87:07:14:94:6d:49:16:ac:ca: bb:5f:7d:39:b5:2f:ca:00:03:b7:49:b0:9c:29:83: 96:b3:a9:64:b2:4c:53:10:1c:45:36:84:15:d3:3e: 65:ba:cd:35:3b:77:09:b1:f5:36:93:c4:a4:56:c4: c0:0f:6e:b7:95:67:f1:8e:20:b3:34:3a:a0:d8:bd: 59:ad:a8:07:49:4d:d4:80:1f:56:37:15:96:56:fd: 1f:09:f9:0c:bd:c0:4b:bc:81:d0:5c:a0:dc:01:22: 30:c8:bb:ad:c3:38:ed:ad:24:e9:dd:57:35:bb:fd: 35:fa:7e:44:9f:26:cc:83:2f:0d:37:2b:f5:dd:09: e2:e8:46:5f:08:54:3b:bc:a4:b7:be:f1:5e:46:eb: 49:01:88:58:5d:71:67:ab:95:39:2a:dd:23:01:65: 4a:6c:de:af:c1:2d:ef:61:f4:f7:be:77:2f:be:94: 74:05:f0:f4:29:ed:03:8a:d4:10:88:f3:9b:4d:e8: db:36:90:75:54:91:04:80:bc:fb:9b:68:82:80:c2: e5:d5:b3:b3:8b:29:9d:67:7c:59:13:98:ab:01:d2: 5b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 83:B2:DB:74:7B:ED:1A:E0:1D:D0:B8:AF:08:DF:AE:9B:FF:90:09:17 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.160.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:04:f0:a0:1c:a8:5f:96:54:66:df:23:b4:df:71:b7:5b:3d: 98:72:d3:18:5f:27:fd:5a:46:ee:03:bc:f8:80:04:3f:3e:17: 02:60:6b:ac:09:54:ba:be:25:fa:87:06:d5:21:ac:a4:b6:71: 22:fc:d3:0d:9a:51:17:84:5f:6b:7c:18:0a:24:10:05:03:2a: eb:b9:87:c9:ae:9c:42:47:67:04:e1:18:98:b0:88:04:3c:53: 35:44:34:14:cd:3e:2c:c5:b3:13:e2:0a:c4:80:d2:1c:bb:22: fb:ea:0e:54:50:54:a3:fc:9c:6d:d1:92:43:4f:1d:16:d0:02: e3:73:64:bb:bd:b0:3d:27:00:f8:2c:93:48:bd:f3:e3:0a:4e: cd:62:2f:4f:46:a3:f7:3d:d4:53:c9:d6:bf:e3:5c:e5:f0:2d: 9c:3d:c8:ab:36:4d:16:04:03:47:b0:f2:51:0d:2a:f1:85:30: 22:09:9d:8a:a1:9c:61:69:57:4b:02:da:44:a4:dc:23:e5:e6: 7d:1b:bf:4b:f8:1f:8f:44:08:f5:77:69:87:45:39:16:40:7a: cf:a1:2f:b7:e3:37:b7:38:5d:02:c3:a5:23:3c:ba:46:4d:c0: 3b:f9:ca:80:f0:1f:f0:42:00:a6:de:d9:17:d0:3e:95:6e:c1: 31:16:4b:52 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUHf2q9qWCjjHrkwCEOYhXwVAuI30wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjM1N1oX DTI3MDUwMjAwMjg1N1owMzExMC8GA1UEAxMoODNCMkRCNzQ3QkVEMUFFMDFERDBC OEFGMDhERkFFOUJGRjkwMDkxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALGRbMhvTvg3Cp3QRaS4BTBUyeF72k/hnLV6qkbbK31WlbRzhwcUlG1JFqzK u199ObUvygADt0mwnCmDlrOpZLJMUxAcRTaEFdM+ZbrNNTt3CbH1NpPEpFbEwA9u t5Vn8Y4gszQ6oNi9Wa2oB0lN1IAfVjcVllb9Hwn5DL3AS7yB0Fyg3AEiMMi7rcM4 7a0k6d1XNbv9Nfp+RJ8mzIMvDTcr9d0J4uhGXwhUO7ykt77xXkbrSQGIWF1xZ6uV OSrdIwFlSmzer8Et72H09753L76UdAXw9CntA4rUEIjzm03o2zaQdVSRBIC8+5to goDC5dWzs4spnWd8WROYqwHSW40CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIOy23R77RrgHdC4rwjfrpv/kAkXMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQyODg3NjJjLTNmYzUtNDljYy05NDlhLTU5NGIzMzFhMTNhMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80Mjg4NzYy Yy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMC84M0IyREI3NDdCRUQxQUUw MUREMEI4QUYwOERGQUU5QkZGOTAwOTE3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAyi+gMA0GCSqGSIb3DQEBCwUAA4IBAQAcBPCgHKhfllRm3yO033G3Wz2YctMY Xyf9WkbuA7z4gAQ/PhcCYGusCVS6viX6hwbVIayktnEi/NMNmlEXhF9rfBgKJBAF AyrruYfJrpxCR2cE4RiYsIgEPFM1RDQUzT4sxbMT4grEgNIcuyL76g5UUFSj/Jxt 0ZJDTx0W0ALjc2S7vbA9JwD4LJNIvfPjCk7NYi9PRqP3PdRTyda/41zl8C2cPcir Nk0WBANHsPJRDSrxhTAiCZ2KoZxhaVdLAtpEpNwj5eZ9G79L+B+PRAj1d2mHRTkW QHrPoS+34ze3OF0Cw6UjPLpGTcA7+cqA8B/wQgCm3tkX0D6VbsExFktS -----END CERTIFICATE-----Generated at Tue May 12 22:32:26 2026 by rpki-client