$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8452DA0E5C0E92F8DBB2845824D032330956238B.cer File: 8452DA0E5C0E92F8DBB2845824D032330956238B.cer (raw, json) Hash identifier: 8Rk11qYlrfTHeqPbSb+QuB4uxMYzgdUdJyTokYpgXmM= Subject key identifier: 84:52:DA:0E:5C:0E:92:F8:DB:B2:84:58:24:D0:32:33:09:56:23:8B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5F84073F6C3E0C1A82339274B530F7B697DA22FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:43:06 +0000 Certificate not after: Sun 02 May 2027 00:48:06 +0000 Subordinate resources: IP: 103.149.80.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:84:07:3f:6c:3e:0c:1a:82:33:92:74:b5:30:f7:b6:97:da:22:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:43:06 2026 GMT Not After : May 2 00:48:06 2027 GMT Subject: CN=8452DA0E5C0E92F8DBB2845824D032330956238B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:10:36:d6:28:ec:0f:75:f5:cf:89:ee:68:f0: 08:e8:7e:1d:c2:39:5f:09:dc:38:73:52:e1:80:78: 95:54:37:4b:53:a6:4a:9c:68:a6:87:e4:a0:6b:f7: b7:b6:39:31:5f:a2:29:4f:86:50:ed:96:d7:9a:6e: d9:9d:78:58:6d:92:74:c2:f2:81:d0:27:03:93:bf: c9:1c:35:f8:d8:65:fa:d9:95:e5:d4:78:6d:78:e6: 20:63:64:09:21:1e:fa:eb:d1:9e:eb:e0:da:29:53: ac:15:2c:33:1d:76:7b:d3:19:75:f2:1e:b1:49:a5: a3:d0:a0:5e:5b:56:5a:03:58:cd:79:aa:6b:8f:74: c6:3a:eb:98:c8:b8:2a:3b:c7:b5:62:c4:90:e2:5b: 08:dc:67:f6:03:cd:39:8b:f8:23:b7:91:7a:de:a1: d2:9e:c3:a9:55:04:0a:d6:dd:0c:7b:b2:4d:23:e7: 08:e1:c1:5d:76:52:a9:75:c1:b4:e0:5f:08:a5:e5: 24:01:da:0b:2b:e3:24:68:0e:d9:57:fd:d9:87:4b: 85:bb:db:db:60:4e:32:5e:bd:9e:5d:64:c4:f7:f1: dc:f6:3b:43:7a:7f:45:a5:0b:e5:da:4b:11:8a:ac: d1:5b:4a:bf:32:5f:e1:c9:e2:70:e7:68:cc:a6:ba: 45:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 84:52:DA:0E:5C:0E:92:F8:DB:B2:84:58:24:D0:32:33:09:56:23:8B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/8452DA0E5C0E92F8DBB2845824D032330956238B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.80.0/23 Signature Algorithm: sha256WithRSAEncryption a3:b0:8d:1f:93:02:f6:5d:b9:46:11:c4:cc:81:02:c9:c8:da: 07:e2:04:67:0c:e5:c1:e4:c9:e9:ed:b1:8b:7c:0b:d5:d3:3b: 63:bf:85:7c:54:d3:f0:19:ff:47:8e:b4:82:1b:81:20:b9:d7: fb:93:a0:ae:a4:a4:77:46:a0:b2:fa:2c:00:84:d6:75:fd:3e: e6:43:99:68:e0:b6:bf:0a:22:a1:50:da:67:26:85:75:ed:66: f3:d5:c0:df:a2:2f:78:28:f8:2d:57:19:b9:d1:2a:cc:4f:22: e9:d6:81:5f:fb:6a:40:49:60:dc:75:25:eb:f9:0c:6c:dc:c9: 12:fc:51:02:86:a1:0c:ef:62:94:3e:ac:18:f0:71:9d:d0:0f: 31:1f:bc:6a:d8:11:6a:f4:9c:3f:13:a0:70:61:b2:d7:60:ae: 67:7a:3c:40:2f:76:aa:d7:11:04:87:28:c2:eb:9a:64:e6:cc: 44:cc:f6:09:f1:11:ed:b3:b5:5f:5c:15:79:41:b2:67:af:45: 16:50:90:09:3e:f0:8c:2b:d7:60:99:bd:da:31:b3:29:73:9a: 7f:7b:bd:ff:4c:5f:b6:f7:ce:b0:77:26:db:58:d8:92:d5:76: 60:88:aa:b5:86:8d:bb:3e:cb:54:5c:fe:05:b2:3a:f6:2e:f3: 53:0d:42:0b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUX4QHP2w+DBqCM5J0tTD3tpfaIv0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDMwNloX DTI3MDUwMjAwNDgwNlowMzExMC8GA1UEAxMoODQ1MkRBMEU1QzBFOTJGOERCQjI4 NDU4MjREMDMyMzMwOTU2MjM4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMAQNtYo7A919c+J7mjwCOh+HcI5XwncOHNS4YB4lVQ3S1OmSpxopofkoGv3 t7Y5MV+iKU+GUO2W15pu2Z14WG2SdMLygdAnA5O/yRw1+Nhl+tmV5dR4bXjmIGNk CSEe+uvRnuvg2ilTrBUsMx12e9MZdfIesUmlo9CgXltWWgNYzXmqa490xjrrmMi4 KjvHtWLEkOJbCNxn9gPNOYv4I7eRet6h0p7DqVUECtbdDHuyTSPnCOHBXXZSqXXB tOBfCKXlJAHaCyvjJGgO2Vf92YdLhbvb22BOMl69nl1kxPfx3PY7Q3p/RaUL5dpL EYqs0VtKvzJf4cnicOdozKa6RaMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIRS2g5cDpL427KEWCTQMjMJViOLMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVlOTNmODc2LWQ1MWUtNDg1Ny1hNmNlLWM4ZDg3Y2I0MGUxNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81ZTkzZjg3 Ni1kNTFlLTQ4NTctYTZjZS1jOGQ4N2NiNDBlMTcvMC84NDUyREEwRTVDMEU5MkY4 REJCMjg0NTgyNEQwMzIzMzA5NTYyMzhCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ5VQMA0GCSqGSIb3DQEBCwUAA4IBAQCjsI0fkwL2XblGEcTMgQLJyNoH4gRn DOXB5Mnp7bGLfAvV0ztjv4V8VNPwGf9HjrSCG4Egudf7k6CupKR3RqCy+iwAhNZ1 /T7mQ5lo4La/CiKhUNpnJoV17Wbz1cDfoi94KPgtVxm50SrMTyLp1oFf+2pASWDc dSXr+Qxs3MkS/FEChqEM72KUPqwY8HGd0A8xH7xq2BFq9Jw/E6BwYbLXYK5nejxA L3aq1xEEhyjC65pk5sxEzPYJ8RHts7VfXBV5QbJnr0UWUJAJPvCMK9dgmb3aMbMp c5p/e73/TF+2986wdybbWNiS1XZgiKq1ho27PstUXP4Fsjr2LvNTDUIL -----END CERTIFICATE-----Generated at Tue May 12 22:47:38 2026 by rpki-client