$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/84D8D73F40AAC54FA5471C49D1B0B26082108594.cer File: 84D8D73F40AAC54FA5471C49D1B0B26082108594.cer (raw, json) Hash identifier: WnZPj6dBFpA3DkxAtJ8FN+Sg8W7A7YmuKSa+uUQ/aQM= Subject key identifier: 84:D8:D7:3F:40:AA:C5:4F:A5:47:1C:49:D1:B0:B2:60:82:10:85:94 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 589499954969C423A958C67474BA7B798353E461 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:24:46 +0000 Certificate not after: Sun 02 May 2027 01:29:46 +0000 Subordinate resources: IP: 103.197.188.0/22 IP: 202.146.32.0/19 IP: 2404:3680::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:94:99:95:49:69:c4:23:a9:58:c6:74:74:ba:7b:79:83:53:e4:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:24:46 2026 GMT Not After : May 2 01:29:46 2027 GMT Subject: CN=84D8D73F40AAC54FA5471C49D1B0B26082108594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:dd:e6:57:29:be:a4:71:6b:19:96:62:a8: b9:87:ff:e5:60:2c:d6:91:ea:ab:16:27:82:96:90: f9:a0:73:50:d8:b5:78:d1:8b:61:74:c3:a9:fe:9a: 84:16:5a:05:29:e0:e7:07:e4:fa:15:bc:58:a1:81: ac:f9:d6:df:bf:d8:2b:69:31:27:7d:1d:3a:d4:d4: 87:51:01:a7:bd:6c:23:cd:e8:74:86:6a:16:88:a4: a7:40:21:8b:e6:99:ea:3c:e0:0d:86:3c:08:b7:e2: 01:b4:92:27:e2:9a:ae:7a:0d:b3:b7:21:11:03:bf: 4f:da:7a:25:43:6e:84:ec:15:35:bd:09:17:bd:ea: 17:d8:73:cc:16:fd:62:2c:22:0b:96:ac:d6:c9:2b: 67:23:59:eb:69:ff:ae:ac:5b:68:0c:b0:59:d8:1d: 3f:10:40:dd:99:fa:3e:4f:ef:02:f1:45:32:22:ba: 2e:b6:07:7f:72:96:d0:03:8a:7f:f9:d7:af:3e:7f: d6:c3:67:f7:e9:13:2e:c7:17:55:0c:79:bf:d1:16: d6:88:18:fe:8e:6e:2a:45:56:55:a8:49:ad:a7:6b: 12:5d:8a:00:a7:24:8d:a3:f7:6e:5e:de:85:b9:c8: 05:19:04:f7:a5:9e:01:32:44:dd:a1:79:01:07:b8: 4a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 84:D8:D7:3F:40:AA:C5:4F:A5:47:1C:49:D1:B0:B2:60:82:10:85:94 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/84D8D73F40AAC54FA5471C49D1B0B26082108594.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.197.188.0/22 202.146.32.0/19 IPv6: 2404:3680::/32 Signature Algorithm: sha256WithRSAEncryption 90:ff:e3:c4:38:bd:d3:79:98:6d:a2:42:67:59:90:90:62:e9: ed:30:bf:62:00:54:88:2d:25:f4:ba:82:c9:62:f1:d2:8c:b0: 2c:1c:bd:86:12:d9:be:3a:84:ab:ed:c0:b7:6f:a6:fc:f4:b6: 20:d2:c2:7d:16:10:47:7f:61:78:4b:fe:ae:79:cf:c4:1a:2b: c1:cb:f4:23:5d:f9:fa:61:a4:2c:73:46:9f:f0:2c:84:a8:1d: 37:23:f6:5b:5a:b2:96:44:a6:68:05:ae:d5:80:f4:7e:bc:b6: 7d:94:9c:10:bf:4c:b9:ea:14:e8:d5:c7:31:6b:1d:f9:a6:c5: b6:c9:dc:35:08:81:62:4f:e2:56:84:c0:ac:1b:e5:14:8d:94: cf:59:23:04:ae:e6:36:cb:bc:95:6e:1a:5c:64:87:eb:2c:af: 57:69:d3:be:fc:d9:b9:d9:10:87:6b:93:d8:2f:ba:8d:03:a2: 1b:78:37:10:24:98:97:57:01:c0:dd:71:19:af:bd:03:fa:5b: ed:df:40:ff:7e:6c:91:6b:59:de:02:80:82:12:0f:3a:0e:00: cb:e8:db:cf:54:e4:4a:18:3a:54:47:1c:89:e3:9a:81:9c:6a: 8e:05:14:a2:33:28:cb:5b:7a:91:d3:52:84:81:28:de:fc:75: cb:13:3c:47 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUWJSZlUlpxCOpWMZ0dLp7eYNT5GEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjQ0NloX DTI3MDUwMjAxMjk0NlowMzExMC8GA1UEAxMoODREOEQ3M0Y0MEFBQzU0RkE1NDcx QzQ5RDFCMEIyNjA4MjEwODU5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKj13eZXKb6kcWsZlmKouYf/5WAs1pHqqxYngpaQ+aBzUNi1eNGLYXTDqf6a hBZaBSng5wfk+hW8WKGBrPnW37/YK2kxJ30dOtTUh1EBp71sI83odIZqFoikp0Ah i+aZ6jzgDYY8CLfiAbSSJ+KarnoNs7chEQO/T9p6JUNuhOwVNb0JF73qF9hzzBb9 YiwiC5as1skrZyNZ62n/rqxbaAywWdgdPxBA3Zn6Pk/vAvFFMiK6LrYHf3KW0AOK f/nXrz5/1sNn9+kTLscXVQx5v9EW1ogY/o5uKkVWVahJradrEl2KAKckjaP3bl7e hbnIBRkE96WeATJE3aF5AQe4StsCAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFITY1z9AqsVPpUccSdGwsmCCEIWUMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzljODA0NjdjLWFlYjItNDA5NS04ZjU0LTg1YjkwOTBkMzkwOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85YzgwNDY3 Yy1hZWIyLTQwOTUtOGY1NC04NWI5MDkwZDM5MDgvMC84NEQ4RDczRjQwQUFDNTRG QTU0NzFDNDlEMUIwQjI2MDgyMTA4NTk0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQCZ8W8AwQFypIgMA0EAgACMAcDBQAkBDaAMA0GCSqGSIb3DQEBCwUAA4IBAQCQ /+PEOL3TeZhtokJnWZCQYuntML9iAFSILSX0uoLJYvHSjLAsHL2GEtm+OoSr7cC3 b6b89LYg0sJ9FhBHf2F4S/6uec/EGivBy/QjXfn6YaQsc0af8CyEqB03I/ZbWrKW RKZoBa7VgPR+vLZ9lJwQv0y56hTo1ccxax35psW2ydw1CIFiT+JWhMCsG+UUjZTP WSMEruY2y7yVbhpcZIfrLK9XadO+/Nm52RCHa5PYL7qNA6IbeDcQJJiXVwHA3XEZ r70D+lvt30D/fmyRa1neAoCCEg86DgDL6NvPVORKGDpURxyJ45qBnGqOBRSiMyjL W3qR01KEgSje/HXLEzxH -----END CERTIFICATE-----Generated at Tue May 12 22:15:58 2026 by rpki-client