$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/851B60F64AE44DA53ED7359592F434C5A590686C.cer File: 851B60F64AE44DA53ED7359592F434C5A590686C.cer (raw, json) Hash identifier: LUHpxHzcB9MEIymSUK1MDUjf5Wg9Fh+yZPQ/V5nE0uA= Subject key identifier: 85:1B:60:F6:4A:E4:4D:A5:3E:D7:35:95:92:F4:34:C5:A5:90:68:6C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7ADD592FA0CB9BF423CE58DE59B31E844856110F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:27:43 +0000 Certificate not after: Sun 02 May 2027 01:32:43 +0000 Subordinate resources: IP: 103.189.112.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:dd:59:2f:a0:cb:9b:f4:23:ce:58:de:59:b3:1e:84:48:56:11:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:27:43 2026 GMT Not After : May 2 01:32:43 2027 GMT Subject: CN=851B60F64AE44DA53ED7359592F434C5A590686C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b6:71:6f:3b:85:70:f0:1b:19:58:27:58:b5: f7:77:35:c5:cb:30:63:4a:7b:1d:8c:9e:36:f9:6f: 73:85:b5:1a:74:26:da:e0:cf:22:75:b2:a7:37:49: bf:a4:3d:03:22:79:5f:c6:7a:5a:a7:ab:fa:41:a9: 22:b4:97:47:b9:9d:03:f2:8a:41:a0:8a:d3:7c:cd: e9:4f:e0:67:8a:f8:33:54:57:4f:05:7b:fa:66:ed: ee:eb:8b:71:e2:3b:b9:9c:ed:66:87:3c:5b:75:f9: 5f:da:c2:cb:29:58:17:ef:89:77:cd:bb:c1:2f:ef: 73:6a:4e:73:15:66:13:e1:0b:6b:28:9b:56:f0:83: fe:2b:43:94:a8:f0:51:c5:02:8b:8e:8f:21:fc:3e: 46:74:3c:51:ac:ac:c8:f1:94:bb:44:39:a1:0c:28: 8a:89:17:20:c7:28:76:4b:7a:bd:5e:00:4c:2c:53: b7:b8:0f:3a:2a:74:2c:6b:d1:bc:bb:c8:85:83:0a: 98:87:c6:94:9b:f3:64:52:47:5a:4b:7e:39:64:83: ab:26:6b:91:f8:9c:f6:79:4f:07:74:94:0a:f3:90: 96:ea:f2:6a:6c:da:c5:78:b5:9e:62:9c:30:f6:f1: 91:5a:46:44:2e:90:04:1b:ce:b4:c7:88:7c:be:9a: ee:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 85:1B:60:F6:4A:E4:4D:A5:3E:D7:35:95:92:F4:34:C5:A5:90:68:6C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/851B60F64AE44DA53ED7359592F434C5A590686C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.112.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:7c:1e:5c:eb:05:13:c3:79:42:5d:66:95:e9:b8:b2:5e:a3: 48:bb:bd:ad:d3:7d:4a:b6:8b:cb:d4:5b:45:d6:5e:5a:f1:2a: 3c:c1:5c:28:c0:28:e8:b8:f2:e2:47:7c:62:4b:fd:da:a3:36: 9f:1a:ba:97:d3:2b:73:c6:a3:d8:61:e1:c0:c5:d5:d0:b6:b6: 16:24:81:93:dd:d1:07:fa:8c:2a:3c:74:9f:f9:17:04:4f:73: b0:16:f7:36:fd:cd:de:71:4f:9a:e8:1e:c9:11:73:12:a0:57: 9d:f7:1c:0a:9e:0f:6d:9b:6b:d9:f4:7a:15:47:9c:22:f5:78: 74:b6:83:b7:39:1e:7f:c3:f3:80:e3:11:4f:bb:58:a4:8c:24: cf:33:57:e2:51:eb:d5:8a:03:6d:d2:57:38:fd:f4:bd:27:9f: 19:e5:46:1b:69:fd:d5:0c:85:ad:6f:34:e4:c3:a7:e1:cf:b1: f2:98:6e:72:34:7a:80:eb:5a:1e:86:b6:26:31:19:a2:2f:76: 62:aa:d3:08:07:0a:aa:c1:59:a6:37:48:5d:c0:e0:03:49:f0: 37:34:f8:3a:25:c7:cd:f2:e6:87:23:20:06:ed:f0:f3:d3:8f: fb:33:5f:83:7c:1b:6a:f4:b2:3c:86:d0:9e:d4:8f:9d:c5:26: 8c:84:bf:5d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUet1ZL6DLm/QjzljeWbMehEhWEQ8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjc0M1oX DTI3MDUwMjAxMzI0M1owMzExMC8GA1UEAxMoODUxQjYwRjY0QUU0NERBNTNFRDcz NTk1OTJGNDM0QzVBNTkwNjg2QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKK2cW87hXDwGxlYJ1i193c1xcswY0p7HYyeNvlvc4W1GnQm2uDPInWypzdJ v6Q9AyJ5X8Z6Wqer+kGpIrSXR7mdA/KKQaCK03zN6U/gZ4r4M1RXTwV7+mbt7uuL ceI7uZztZoc8W3X5X9rCyylYF++Jd827wS/vc2pOcxVmE+ELayibVvCD/itDlKjw UcUCi46PIfw+RnQ8UaysyPGUu0Q5oQwoiokXIMcodkt6vV4ATCxTt7gPOip0LGvR vLvIhYMKmIfGlJvzZFJHWkt+OWSDqyZrkfic9nlPB3SUCvOQluryamzaxXi1nmKc MPbxkVpGRC6QBBvOtMeIfL6a7pMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIUbYPZK5E2lPtc1lZL0NMWlkGhsMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ExNDg2Y2NkLTBjOTUtNDkxYS1iOWU2LTY2N2NlZTQ0NTk0Zi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hMTQ4NmNj ZC0wYzk1LTQ5MWEtYjllNi02NjdjZWU0NDU5NGYvMC84NTFCNjBGNjRBRTQ0REE1 M0VENzM1OTU5MkY0MzRDNUE1OTA2ODZDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ71wMA0GCSqGSIb3DQEBCwUAA4IBAQAMfB5c6wUTw3lCXWaV6biyXqNIu72t 031KtovL1FtF1l5a8So8wVwowCjouPLiR3xiS/3aozafGrqX0ytzxqPYYeHAxdXQ trYWJIGT3dEH+owqPHSf+RcET3OwFvc2/c3ecU+a6B7JEXMSoFed9xwKng9tm2vZ 9HoVR5wi9Xh0toO3OR5/w/OA4xFPu1ikjCTPM1fiUevVigNt0lc4/fS9J58Z5UYb af3VDIWtbzTkw6fhz7HymG5yNHqA61oehrYmMRmiL3ZiqtMIBwqqwVmmN0hdwOAD SfA3NPg6JcfN8uaHIyAG7fDz04/7M1+DfBtq9LI8htCe1I+dxSaMhL9d -----END CERTIFICATE-----Generated at Tue May 12 22:03:31 2026 by rpki-client