$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer File: 8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer (raw, json) Hash identifier: BEb/eYcWzRXEApR9xGlY0xo6aJx6Vqzt/84E3gZJOjU= Subject key identifier: 86:44:EF:5C:AF:D6:FF:2C:75:38:33:B5:88:D6:D5:E4:0A:D9:C0:77 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5B29E208175319521DFA6608AC02E37924409077 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft caRepository: rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:41:38 +0000 Certificate not after: Sat 01 May 2027 23:46:38 +0000 Subordinate resources: IP: 103.140.188.0/23 IP: 2405:c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:29:e2:08:17:53:19:52:1d:fa:66:08:ac:02:e3:79:24:40:90:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:41:38 2026 GMT Not After : May 1 23:46:38 2027 GMT Subject: CN=8644EF5CAFD6FF2C753833B588D6D5E40AD9C077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6c:2e:fc:34:73:47:a2:ad:0e:9e:7e:17:1b: 06:b6:ec:ce:2e:6f:4f:84:90:e5:50:d6:97:a3:8f: e8:19:bc:b9:0d:46:79:ce:f5:36:f5:fd:1f:ef:54: 3a:1e:8d:b9:36:fe:04:67:1f:cc:86:ce:1e:4d:ff: 1b:64:18:4e:e4:68:3f:4f:ff:3f:cf:f8:ab:b9:bb: b9:50:64:82:1a:7d:59:c8:53:a0:4b:1e:db:4a:c7: 2e:91:00:bf:14:ce:81:ec:15:59:18:46:ad:10:df: aa:98:78:3b:60:0a:09:df:ee:24:78:8c:bf:b0:13: 25:0e:ad:be:b4:e5:d5:23:3c:db:8f:c0:5a:2c:80: 9d:51:12:9f:ce:20:76:4b:a3:80:38:4f:fc:ac:41: ee:46:d2:52:99:af:ba:99:e3:cf:c2:45:bd:42:b3: f2:0d:74:d7:9e:70:a0:38:f6:76:76:4d:cb:9e:a8: b6:a8:5e:3a:87:68:74:a1:30:e6:d4:42:1b:f1:57: 45:b3:ae:df:bb:e0:ac:17:0c:60:30:04:f1:d5:91: d8:41:7e:39:26:34:15:43:a6:dd:29:79:31:b6:13: 61:02:0f:d4:73:a5:a1:ae:3a:2a:f8:8e:32:02:8e: 97:33:fa:84:e0:8d:b5:26:18:4d:11:2c:9e:54:77: 50:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 86:44:EF:5C:AF:D6:FF:2C:75:38:33:B5:88:D6:D5:E4:0A:D9:C0:77 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.188.0/23 IPv6: 2405:c0::/32 Signature Algorithm: sha256WithRSAEncryption 29:20:cf:11:65:c6:d4:17:d6:a9:59:a4:8d:a1:e4:d4:4f:2d: 54:f2:91:77:d4:3c:08:f4:41:dc:fb:04:f1:98:ae:b3:86:c3: 94:49:3e:0c:b9:55:09:ae:5e:9c:99:2b:1b:10:30:01:de:73: a3:48:2f:ff:b9:57:2c:c9:b8:70:8b:78:cb:b9:af:62:46:4a: db:72:aa:fc:15:c5:d7:a3:27:3c:21:da:29:94:7e:9f:0f:cf: 10:45:82:d9:77:c0:f3:94:77:23:57:17:f3:51:1a:3a:ee:d5: de:2e:e4:2d:27:62:7c:d0:4c:6d:b8:8d:64:a3:c3:ea:4e:95: 0c:27:a0:be:ad:ad:7a:c5:9f:3d:83:de:e9:e3:e0:ae:b3:12: 23:67:fa:fe:e5:90:4e:92:fe:63:d1:dc:e7:2c:17:b0:70:12: 8f:ea:5f:85:f8:ea:fd:1c:ce:47:f7:78:fc:d5:96:33:ee:4c: 0c:65:92:18:dc:d3:24:ce:9e:ba:97:b6:b8:ac:0c:84:a6:f5: fe:9e:0c:2f:5e:c4:96:2e:87:00:23:2d:83:ee:cb:71:fe:c2: 1f:ae:4b:cf:31:fb:f9:5c:bd:29:8a:f5:94:1f:5a:79:61:e1: 4d:a0:8d:5a:83:9b:bf:92:68:f7:27:2e:29:f0:ad:0f:89:49: 86:7c:52:4b -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUWyniCBdTGVId+mYIrALjeSRAkHcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDEzOFoX DTI3MDUwMTIzNDYzOFowMzExMC8GA1UEAxMoODY0NEVGNUNBRkQ2RkYyQzc1Mzgz M0I1ODhENkQ1RTQwQUQ5QzA3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMFsLvw0c0eirQ6efhcbBrbszi5vT4SQ5VDWl6OP6Bm8uQ1Gec71NvX9H+9U Oh6NuTb+BGcfzIbOHk3/G2QYTuRoP0//P8/4q7m7uVBkghp9WchToEse20rHLpEA vxTOgewVWRhGrRDfqph4O2AKCd/uJHiMv7ATJQ6tvrTl1SM824/AWiyAnVESn84g dkujgDhP/KxB7kbSUpmvupnjz8JFvUKz8g10155woDj2dnZNy56otqheOododKEw 5tRCG/FXRbOu37vgrBcMYDAE8dWR2EF+OSY0FUOm3Sl5MbYTYQIP1HOloa46KviO MgKOlzP6hOCNtSYYTREsnlR3UNsCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIZE71yv1v8sdTgztYjW1eQK2cB3MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzAyY2IwYjNhLTY5MmQtNDQyZS05MzA4LTkwM2MwMmQ1NzE4Zi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wMmNiMGIz YS02OTJkLTQ0MmUtOTMwOC05MDNjMDJkNTcxOGYvMC84NjQ0RUY1Q0FGRDZGRjJD NzUzODMzQjU4OEQ2RDVFNDBBRDlDMDc3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ4y8MA0EAgACMAcDBQAkBQDAMA0GCSqGSIb3DQEBCwUAA4IBAQApIM8RZcbU F9apWaSNoeTUTy1U8pF31DwI9EHc+wTxmK6zhsOUST4MuVUJrl6cmSsbEDAB3nOj SC//uVcsybhwi3jLua9iRkrbcqr8FcXXoyc8IdoplH6fD88QRYLZd8DzlHcjVxfz URo67tXeLuQtJ2J80ExtuI1ko8PqTpUMJ6C+ra16xZ89g97p4+CusxIjZ/r+5ZBO kv5j0dznLBewcBKP6l+F+Or9HM5H93j81ZYz7kwMZZIY3NMkzp66l7a4rAyEpvX+ ngwvXsSWLocAIy2D7stx/sIfrkvPMfv5XL0pivWUH1p5YeFNoI1ag5u/kmj3Jy4p 8K0PiUmGfFJL -----END CERTIFICATE-----Generated at Tue May 12 22:47:37 2026 by rpki-client