$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.cer File: 85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.cer (raw, json) Hash identifier: hX0x7cn4GiCqvt2sm5hhlyfY2DSjnqg1TgiX2jfDQRo= Subject key identifier: 85:B9:A2:B4:A4:F3:73:9C:8F:C0:3E:51:02:5A:2B:68:BC:76:AB:F2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5DD279F38DF5A4C20AFE69B5D1FCCFA2838524CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft caRepository: rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:16:41 +0000 Certificate not after: Sun 02 May 2027 00:21:41 +0000 Subordinate resources: IP: 103.105.92.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d2:79:f3:8d:f5:a4:c2:0a:fe:69:b5:d1:fc:cf:a2:83:85:24:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:16:41 2026 GMT Not After : May 2 00:21:41 2027 GMT Subject: CN=85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:66:28:c9:d8:c8:40:2a:93:ed:b7:8b:2e:c0: 82:16:01:0f:46:56:97:ef:12:c7:09:21:37:ba:b0: e3:a3:28:35:b6:e9:d3:2a:6b:f7:07:82:08:83:b1: 5a:61:58:3d:c7:90:07:3a:a4:f5:8f:e9:00:5a:59: 5e:6e:84:59:2b:b1:c1:30:b6:d2:c2:b2:91:ec:70: c9:f1:e4:0c:cf:63:2a:8d:cb:15:21:e3:f0:30:cb: dc:10:25:ef:bb:74:ab:ed:ee:b4:9a:fd:b1:87:b0: 80:a6:a9:f4:3b:df:c1:13:65:c3:ae:da:dc:f8:db: c5:9b:df:24:03:09:74:d7:7e:12:8c:33:55:4d:82: 6f:f4:02:11:15:61:ff:2a:aa:80:e1:ec:d7:6a:85: fe:4d:68:fc:a5:63:07:1f:f5:9a:ed:44:95:ab:8a: 77:e6:85:d8:63:5a:3c:df:e7:f0:8c:3b:7a:4a:96: 00:de:fa:6a:10:e4:0d:5d:f7:b9:75:9f:9f:55:70: e7:e5:a6:0e:36:0d:7f:9c:29:c4:ba:40:53:78:e8: 35:46:84:19:b6:17:bc:47:b6:ff:4d:94:7f:4d:b5: 1f:f6:9f:b7:91:4a:46:ad:00:3c:20:63:0f:c9:0f: 3e:fc:fa:04:7d:41:54:94:1c:51:35:17:d5:7a:86: de:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 85:B9:A2:B4:A4:F3:73:9C:8F:C0:3E:51:02:5A:2B:68:BC:76:AB:F2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.92.0/23 Signature Algorithm: sha256WithRSAEncryption 77:03:30:bb:c6:2a:57:d7:a3:c1:4a:a4:7a:b0:cf:fd:70:ed: 2b:c7:01:fb:6d:59:86:2e:9d:f9:b8:8c:96:0e:d6:2d:d6:6c: 8e:c8:b3:b8:3a:23:2e:ec:95:32:d5:36:0a:15:9e:9c:b4:24: f2:33:6d:6f:c5:12:54:5b:4a:fe:58:0c:76:a3:d6:e1:36:8c: f7:a4:c1:48:61:ac:e5:de:b8:29:fb:28:55:11:9d:97:a0:ff: 3c:15:e5:f8:c0:00:3e:72:6b:14:6d:d3:74:16:0f:68:6c:b4: 55:8d:65:22:ea:f3:92:59:90:9b:63:6b:31:62:21:7b:40:28: 9e:8f:8a:df:cf:64:2c:aa:a6:2c:3e:8f:de:18:fa:43:f2:73: 14:14:e2:c9:5c:b6:14:9b:f3:d6:7d:d5:fe:f1:eb:a1:99:40: d1:53:02:30:d0:89:8a:87:e3:d8:38:c6:4e:e6:37:41:a0:9f: a6:cf:7e:00:dd:b9:5a:62:9e:a9:ae:e1:d8:db:df:cb:7a:fc: 34:bc:36:31:cd:fa:50:a4:56:61:0b:77:bb:60:b0:91:2d:5b: c1:9b:c3:04:2a:69:db:cf:b5:8f:ac:6d:05:9f:a4:c3:6d:1b: 39:80:5b:3b:35:bd:4a:db:7a:75:17:0d:62:e8:d0:89:c0:88: e1:68:4e:ff -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUXdJ58431pMIK/mm10fzPooOFJMowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTY0MVoX DTI3MDUwMjAwMjE0MVowMzExMC8GA1UEAxMoODVCOUEyQjRBNEYzNzM5QzhGQzAz RTUxMDI1QTJCNjhCQzc2QUJGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJhmKMnYyEAqk+23iy7AghYBD0ZWl+8SxwkhN7qw46MoNbbp0ypr9weCCIOx WmFYPceQBzqk9Y/pAFpZXm6EWSuxwTC20sKykexwyfHkDM9jKo3LFSHj8DDL3BAl 77t0q+3utJr9sYewgKap9DvfwRNlw67a3PjbxZvfJAMJdNd+EowzVU2Cb/QCERVh /yqqgOHs12qF/k1o/KVjBx/1mu1ElauKd+aF2GNaPN/n8Iw7ekqWAN76ahDkDV33 uXWfn1Vw5+WmDjYNf5wpxLpAU3joNUaEGbYXvEe2/02Uf021H/aft5FKRq0APCBj D8kPPvz6BH1BVJQcUTUX1XqG3okCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIW5orSk83Ocj8A+UQJaK2i8dqvyMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM3MmI4ZDI4LWZmN2MtNDY5Mi05MDE4LTk3NTViYTUwOTE2OC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zNzJiOGQy OC1mZjdjLTQ2OTItOTAxOC05NzU1YmE1MDkxNjgvMC84NUI5QTJCNEE0RjM3MzlD OEZDMDNFNTEwMjVBMkI2OEJDNzZBQkYyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ2lcMA0GCSqGSIb3DQEBCwUAA4IBAQB3AzC7xipX16PBSqR6sM/9cO0rxwH7 bVmGLp35uIyWDtYt1myOyLO4OiMu7JUy1TYKFZ6ctCTyM21vxRJUW0r+WAx2o9bh Noz3pMFIYazl3rgp+yhVEZ2XoP88FeX4wAA+cmsUbdN0Fg9obLRVjWUi6vOSWZCb Y2sxYiF7QCiej4rfz2QsqqYsPo/eGPpD8nMUFOLJXLYUm/PWfdX+8euhmUDRUwIw 0ImKh+PYOMZO5jdBoJ+mz34A3blaYp6pruHY29/Levw0vDYxzfpQpFZhC3e7YLCR LVvBm8MEKmnbz7WPrG0Fn6TDbRs5gFs7Nb1K23p1Fw1i6NCJwIjhaE7/ -----END CERTIFICATE-----Generated at Wed May 13 01:06:59 2026 by rpki-client