$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8638D28E3BD2280125963C7B30C34A226398A39F.cer File: 8638D28E3BD2280125963C7B30C34A226398A39F.cer (raw, json) Hash identifier: 9/IGvJFY9Q0Ax8Stn6laANswNXvkOoyZxsL/huLm3x0= Subject key identifier: 86:38:D2:8E:3B:D2:28:01:25:96:3C:7B:30:C3:4A:22:63:98:A3:9F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 21D9B8EE8ECA842D5B5920E63B151B5F0867671A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:01:27 +0000 Certificate not after: Sun 02 May 2027 02:06:27 +0000 Subordinate resources: IP: 103.166.158.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d9:b8:ee:8e:ca:84:2d:5b:59:20:e6:3b:15:1b:5f:08:67:67:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:01:27 2026 GMT Not After : May 2 02:06:27 2027 GMT Subject: CN=8638D28E3BD2280125963C7B30C34A226398A39F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ee:26:d7:17:d9:93:fc:f9:23:9b:02:19:c3: 3e:f7:05:a3:5d:9a:73:56:0d:3d:95:57:f6:3c:72: dc:b2:14:83:39:ee:46:b0:93:5c:31:1a:2a:b2:0d: 68:ad:2a:a5:85:1a:d0:2a:e7:e7:e2:48:b2:21:d7: 6e:e5:05:1c:be:09:49:82:33:7f:65:67:87:da:c4: b1:a1:48:87:c6:fa:3e:69:ba:95:e0:1f:89:9e:c5: 69:f5:0e:f8:45:71:b7:d7:b5:cf:84:b9:1d:81:75: fe:4e:90:40:a7:1b:e3:60:45:a4:38:ae:03:77:67: 38:44:e7:f1:0e:3f:b8:28:83:23:1e:d1:50:22:b0: 77:6f:04:22:4f:85:6a:11:ce:ad:27:2f:96:96:cb: 0d:e1:18:10:4c:54:ca:ed:1a:e3:76:50:cc:3d:87: d8:07:58:8e:b2:4d:cb:14:50:95:1b:35:e3:31:ba: 7f:41:84:f0:08:4a:5b:c8:85:32:e5:02:1c:61:3a: 4d:4c:36:db:86:14:3d:17:69:ac:65:f2:9c:97:87: 87:8c:62:45:c5:57:53:77:11:2f:f5:0c:70:4f:2c: c5:62:81:11:a4:c1:87:8d:77:03:ae:72:7e:ba:cd: 4d:1d:2a:a5:57:91:22:92:4e:81:14:7c:fc:b2:94: 21:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 86:38:D2:8E:3B:D2:28:01:25:96:3C:7B:30:C3:4A:22:63:98:A3:9F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.158.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:66:82:ee:2c:50:0b:77:71:a7:57:9e:1b:07:aa:ca:2a:ef: ca:33:fc:13:1a:89:cb:28:38:e4:ef:e6:37:4c:37:c1:8b:8d: 13:a8:ec:5b:31:67:f5:42:14:1b:b2:cc:be:0b:72:cb:93:90: e7:ad:2d:23:e9:c9:84:42:be:35:55:17:43:18:a1:3d:c5:fb: bd:f0:ca:d5:2f:9c:66:63:9c:38:32:53:95:c0:bf:93:70:33: 27:a8:61:e1:c5:89:7a:90:c1:b8:7f:af:07:eb:f2:7e:20:74: d7:67:30:bd:42:01:32:ee:0d:78:80:ae:8b:0c:21:d1:09:25: ae:97:d2:77:48:bf:b8:ab:ef:10:ca:1a:88:b1:53:e3:47:d7: 50:9d:bd:82:9b:2b:04:32:e4:11:f1:77:8b:ca:5f:35:6c:80: b2:58:f4:f7:1a:03:c7:47:9b:4a:94:60:fe:46:d6:36:2e:79: e1:69:0a:ab:20:2a:76:c6:65:7b:d9:d3:64:f9:94:4f:b9:4e: f1:95:3e:2a:48:f9:3e:d6:d1:d5:62:75:5d:e9:fb:68:fa:08: ba:1e:11:1b:35:7e:58:12:7f:11:73:d1:e1:99:eb:66:fb:fa: 0c:5a:0a:e1:3c:3a:fa:ca:54:fe:0f:a2:7a:24:d8:c1:16:3d: 56:43:75:c2 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUIdm47o7KhC1bWSDmOxUbXwhnZxowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDEyN1oX DTI3MDUwMjAyMDYyN1owMzExMC8GA1UEAxMoODYzOEQyOEUzQkQyMjgwMTI1OTYz QzdCMzBDMzRBMjI2Mzk4QTM5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALzuJtcX2ZP8+SObAhnDPvcFo12ac1YNPZVX9jxy3LIUgznuRrCTXDEaKrIN aK0qpYUa0Crn5+JIsiHXbuUFHL4JSYIzf2Vnh9rEsaFIh8b6Pmm6leAfiZ7FafUO +EVxt9e1z4S5HYF1/k6QQKcb42BFpDiuA3dnOETn8Q4/uCiDIx7RUCKwd28EIk+F ahHOrScvlpbLDeEYEExUyu0a43ZQzD2H2AdYjrJNyxRQlRs14zG6f0GE8AhKW8iF MuUCHGE6TUw224YUPRdprGXynJeHh4xiRcVXU3cRL/UMcE8sxWKBEaTBh413A65y frrNTR0qpVeRIpJOgRR8/LKUIcUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIY40o470igBJZY8ezDDSiJjmKOfMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q3ZmYwMWQwLTI2ZjktNGIyMC1hMzE4LWMzMTFjMjY3ZjJhZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kN2ZmMDFk MC0yNmY5LTRiMjAtYTMxOC1jMzExYzI2N2YyYWYvMC84NjM4RDI4RTNCRDIyODAx MjU5NjNDN0IzMEMzNEEyMjYzOThBMzlGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6aeMA0GCSqGSIb3DQEBCwUAA4IBAQA9ZoLuLFALd3GnV54bB6rKKu/KM/wT GonLKDjk7+Y3TDfBi40TqOxbMWf1QhQbssy+C3LLk5DnrS0j6cmEQr41VRdDGKE9 xfu98MrVL5xmY5w4MlOVwL+TcDMnqGHhxYl6kMG4f68H6/J+IHTXZzC9QgEy7g14 gK6LDCHRCSWul9J3SL+4q+8QyhqIsVPjR9dQnb2CmysEMuQR8XeLyl81bICyWPT3 GgPHR5tKlGD+RtY2LnnhaQqrICp2xmV72dNk+ZRPuU7xlT4qSPk+1tHVYnVd6fto +gi6HhEbNX5YEn8Rc9Hhmetm+/oMWgrhPDr6ylT+D6J6JNjBFj1WQ3XC -----END CERTIFICATE-----Generated at Wed May 13 00:33:54 2026 by rpki-client