$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer File: 860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer (raw, json) Hash identifier: Etir/8uVtcDEcvKbNZuDsFfqC8yyh1qPBsuLtEwvIXo= Subject key identifier: 86:0E:BB:20:3F:FC:23:89:4F:0B:1A:C6:F4:59:24:CD:1B:A5:F0:8D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 40E1A4843718DD0496E354070406D67C50560A6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:26:24 +0000 Certificate not after: Sun 02 May 2027 01:31:24 +0000 Subordinate resources: IP: 103.6.166.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:e1:a4:84:37:18:dd:04:96:e3:54:07:04:06:d6:7c:50:56:0a:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:26:24 2026 GMT Not After : May 2 01:31:24 2027 GMT Subject: CN=860EBB203FFC23894F0B1AC6F45924CD1BA5F08D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a3:10:14:89:96:b8:2d:29:cc:41:9a:41:f8: d6:30:01:98:67:93:9b:c4:48:3e:f7:bc:97:0e:46: 91:0f:90:04:c1:01:39:f3:c1:1e:cc:4a:f8:2c:ad: bc:64:c4:76:fc:2c:df:ec:ff:1b:1a:97:4a:47:85: 94:bc:22:f2:30:53:0f:74:85:73:52:26:e2:bd:a7: 50:d8:de:98:9c:93:56:23:f5:b8:94:c5:47:e7:13: e3:35:16:12:1c:a1:61:f1:4f:68:b5:d8:a2:b9:67: 4f:78:da:07:0d:b8:2f:a4:4e:50:4f:e5:2c:04:0a: bc:dd:93:5c:1c:6c:87:41:ec:32:d0:4d:43:13:12: 3d:ca:30:83:f1:be:b5:62:cb:05:50:fd:a5:b4:25: d1:aa:56:01:83:90:b2:01:60:c0:5a:8f:3c:a0:e7: d7:a9:e9:a6:5b:33:26:aa:98:9f:d8:e1:bb:27:70: 10:30:37:02:ab:f6:53:67:b6:41:ae:e9:ba:92:86: 00:d4:a5:02:f7:6e:c2:ff:f0:5d:69:b5:be:8e:bb: 2e:d8:66:3f:e4:d0:7e:d0:bd:0c:6b:e7:60:0e:b9: 3c:b7:7c:a2:5c:c8:6c:9d:4c:e8:93:95:61:4b:aa: e5:5e:d6:b3:9f:06:fc:5e:a3:81:a7:29:b6:cb:da: a4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 86:0E:BB:20:3F:FC:23:89:4F:0B:1A:C6:F4:59:24:CD:1B:A5:F0:8D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.6.166.0/24 Signature Algorithm: sha256WithRSAEncryption 59:ae:c7:a5:24:4f:78:39:31:65:cf:2f:9d:2d:92:e0:26:c7: fb:50:67:d6:0d:7c:6c:75:64:86:8e:99:e9:b8:4a:57:93:fc: dd:6a:df:a0:bc:29:0a:58:79:22:33:c6:f9:eb:74:2d:b1:76: 49:d8:5e:cc:c2:ed:be:1f:2a:2f:a4:c0:5f:34:37:65:5e:b0: b9:b3:ed:c1:1c:4c:30:72:bd:5f:1e:84:56:8d:38:86:59:56: aa:4e:fe:55:b1:ea:77:37:5f:1c:fe:0a:83:6c:c5:88:f3:cc: ff:2e:b0:b4:d5:06:1b:04:19:93:6f:c7:10:5f:5f:21:1b:e8: d4:f4:09:7a:0f:64:ea:a4:f3:91:f1:9f:50:39:f0:b8:45:2a: b5:f5:2d:57:3a:48:89:37:2a:9b:7a:06:db:4a:b7:20:d5:0a: d3:22:d9:9f:f0:ad:aa:5b:d5:b2:03:1e:e5:a6:88:56:6e:32: 1e:ec:fb:b0:af:f4:af:3c:5b:11:d4:86:b2:05:5a:52:d2:f2: 93:89:9e:26:03:4f:4c:44:13:0e:d7:08:af:ca:75:1c:b0:90: bc:c0:ad:8e:d5:42:53:98:f8:aa:ef:8f:9b:4b:7f:7d:63:02: d0:9c:8c:d0:0c:05:04:0f:b5:01:38:37:4b:3e:4c:6a:69:2f: 60:9b:4b:6d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUQOGkhDcY3QSW41QHBAbWfFBWCm8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjYyNFoX DTI3MDUwMjAxMzEyNFowMzExMC8GA1UEAxMoODYwRUJCMjAzRkZDMjM4OTRGMEIx QUM2RjQ1OTI0Q0QxQkE1RjA4RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJGjEBSJlrgtKcxBmkH41jABmGeTm8RIPve8lw5GkQ+QBMEBOfPBHsxK+Cyt vGTEdvws3+z/GxqXSkeFlLwi8jBTD3SFc1Im4r2nUNjemJyTViP1uJTFR+cT4zUW EhyhYfFPaLXYorlnT3jaBw24L6ROUE/lLAQKvN2TXBxsh0HsMtBNQxMSPcowg/G+ tWLLBVD9pbQl0apWAYOQsgFgwFqPPKDn16npplszJqqYn9jhuydwEDA3Aqv2U2e2 Qa7pupKGANSlAvduwv/wXWm1vo67LthmP+TQftC9DGvnYA65PLd8olzIbJ1M6JOV YUuq5V7Ws58G/F6jgacptsvapLUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIYOuyA//COJTwsaxvRZJM0bpfCNMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzllZWI0NWRlLTUxODMtNGEzYS1iMDZkLThiYjhkNDUwNmIwNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85ZWViNDVk ZS01MTgzLTRhM2EtYjA2ZC04YmI4ZDQ1MDZiMDYvMC84NjBFQkIyMDNGRkMyMzg5 NEYwQjFBQzZGNDU5MjRDRDFCQTVGMDhELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZwamMA0GCSqGSIb3DQEBCwUAA4IBAQBZrselJE94OTFlzy+dLZLgJsf7UGfW DXxsdWSGjpnpuEpXk/zdat+gvCkKWHkiM8b563QtsXZJ2F7Mwu2+HyovpMBfNDdl XrC5s+3BHEwwcr1fHoRWjTiGWVaqTv5Vsep3N18c/gqDbMWI88z/LrC01QYbBBmT b8cQX18hG+jU9Al6D2TqpPOR8Z9QOfC4RSq19S1XOkiJNyqbegbbSrcg1QrTItmf 8K2qW9WyAx7lpohWbjIe7Puwr/SvPFsR1IayBVpS0vKTiZ4mA09MRBMO1wivynUc sJC8wK2O1UJTmPiq74+bS399YwLQnIzQDAUED7UBODdLPkxqaS9gm0tt -----END CERTIFICATE-----Generated at Tue May 12 22:10:19 2026 by rpki-client