$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer File: 866AFE6346388B98BA78E4A5133074656D9B7AD1.cer (raw, json) Hash identifier: +I9t9wlns2NxMKornI4YZ8sIkW2yj94cYeDXoJIfVeY= Subject key identifier: 86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 78BCAD874B4A61DEDBF7638BEA6F3393D1AD9B18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:59:28 +0000 Certificate not after: Sun 02 May 2027 00:04:28 +0000 Subordinate resources: IP: 203.77.208.0/20 IP: 2406:2c00::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:bc:ad:87:4b:4a:61:de:db:f7:63:8b:ea:6f:33:93:d1:ad:9b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:59:28 2026 GMT Not After : May 2 00:04:28 2027 GMT Subject: CN=866AFE6346388B98BA78E4A5133074656D9B7AD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:36:c0:93:06:dd:79:1d:8e:df:69:79:27:6a: da:56:53:48:83:0a:c8:7e:ea:c8:f5:d6:1f:8d:96: cf:f6:c2:47:ca:d0:1b:e7:4f:10:1a:42:59:e0:68: 0c:fa:3c:9c:71:cf:1a:6f:7b:e2:40:32:01:4e:95: 0a:62:5a:be:fa:8d:89:de:63:ba:e4:6f:26:d1:96: 9c:9e:17:4e:fd:aa:6b:4b:f6:c9:e9:df:28:26:7d: df:9f:d8:c6:06:34:0a:b4:b2:61:93:2a:ff:9b:90: ae:d2:d2:0b:b6:21:a0:6b:b4:b8:5a:97:00:7f:d1: f6:41:6a:d8:4b:05:78:c6:b7:ed:e0:a7:96:b3:ae: a2:b2:24:ed:fc:05:7e:1a:09:c3:42:ef:ee:c0:53: dd:1b:91:38:3b:24:3e:5e:3f:66:63:cf:28:ff:d9: 43:75:82:e9:69:93:ca:e2:ec:a2:45:79:77:73:dd: b8:b5:19:a6:4c:59:d0:f0:f7:b5:2c:3a:cc:49:1d: a2:a2:99:19:64:35:6c:49:4f:c1:44:41:ae:6e:4d: da:6d:8f:43:e5:fc:cb:b1:dc:2b:63:7f:44:e6:ee: a4:3d:56:49:dc:e6:73:02:d5:41:1f:9e:47:38:db: bc:2f:d9:5a:c7:24:69:f3:07:4a:c5:e1:8a:d5:0f: 99:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.77.208.0/20 IPv6: 2406:2c00::/32 Signature Algorithm: sha256WithRSAEncryption 98:42:80:8c:10:7f:f8:37:11:d6:df:21:b8:7f:1f:f8:69:29: 4a:32:63:af:cb:7b:e9:90:91:9e:c6:a0:84:fc:5e:ef:64:7c: 30:3f:c0:31:57:7c:3d:d9:e8:b4:7c:fb:e9:14:c8:da:ab:07: f4:8a:4c:7a:e8:a1:e6:11:0b:05:71:77:00:34:a2:66:22:d1: 08:5e:5e:73:e8:6a:74:95:79:2b:9a:a4:9d:9d:08:ea:74:f7: 70:83:ce:05:af:3d:dc:7b:74:90:6a:ea:ee:9b:d0:66:db:94: 3b:13:e8:42:02:37:2d:bf:32:f2:3f:d3:f0:ee:e4:06:06:0b: 76:d7:ba:f1:08:34:4f:ed:1e:8d:b5:75:6d:40:58:c2:0c:24: 1d:a5:a4:45:e1:5d:22:bc:0d:d4:ee:b4:e6:1f:98:0b:a0:1c: 5e:e8:33:f3:8e:6a:49:4b:e3:ba:92:56:1f:1f:7e:46:bc:fd: 57:01:a3:ad:a3:e9:2e:2a:54:31:5b:1d:a7:5f:85:4b:ac:84: f4:e5:cd:86:65:68:b9:73:b9:8a:8a:34:91:12:5e:43:b7:af: 83:ff:b7:f7:6c:66:df:e2:51:2e:d2:13:71:30:b2:3d:39:00: 51:0c:5d:4a:0b:ff:6e:3e:25:0b:9f:49:ae:96:b4:fe:fe:8f: e0:12:ab:15 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUeLyth0tKYd7b92OL6m8zk9GtmxgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTkyOFoX DTI3MDUwMjAwMDQyOFowMzExMC8GA1UEAxMoODY2QUZFNjM0NjM4OEI5OEJBNzhF NEE1MTMzMDc0NjU2RDlCN0FEMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPY2wJMG3Xkdjt9peSdq2lZTSIMKyH7qyPXWH42Wz/bCR8rQG+dPEBpCWeBo DPo8nHHPGm974kAyAU6VCmJavvqNid5juuRvJtGWnJ4XTv2qa0v2yenfKCZ935/Y xgY0CrSyYZMq/5uQrtLSC7YhoGu0uFqXAH/R9kFq2EsFeMa37eCnlrOuorIk7fwF fhoJw0Lv7sBT3RuRODskPl4/ZmPPKP/ZQ3WC6WmTyuLsokV5d3PduLUZpkxZ0PD3 tSw6zEkdoqKZGWQ1bElPwURBrm5N2m2PQ+X8y7HcK2N/RObupD1WSdzmcwLVQR+e RzjbvC/ZWsckafMHSsXhitUPmXcCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIZq/mNGOIuYunjkpRMwdGVtm3rRMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzFlMzE1OWYyLTBjZjAtNDNjNi1iMjgyLWM2OWZiYTEzYTE0YS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xZTMxNTlm Mi0wY2YwLTQzYzYtYjI4Mi1jNjlmYmExM2ExNGEvMC84NjZBRkU2MzQ2Mzg4Qjk4 QkE3OEU0QTUxMzMwNzQ2NTZEOUI3QUQxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQEy03QMA0EAgACMAcDBQAkBiwAMA0GCSqGSIb3DQEBCwUAA4IBAQCYQoCMEH/4 NxHW3yG4fx/4aSlKMmOvy3vpkJGexqCE/F7vZHwwP8AxV3w92ei0fPvpFMjaqwf0 ikx66KHmEQsFcXcANKJmItEIXl5z6Gp0lXkrmqSdnQjqdPdwg84Frz3ce3SQauru m9Bm25Q7E+hCAjctvzLyP9Pw7uQGBgt217rxCDRP7R6NtXVtQFjCDCQdpaRF4V0i vA3U7rTmH5gLoBxe6DPzjmpJS+O6klYfH35GvP1XAaOto+kuKlQxWx2nX4VLrIT0 5c2GZWi5c7mKijSREl5Dt6+D/7f3bGbf4lEu0hNxMLI9OQBRDF1KC/9uPiULn0mu lrT+/o/gEqsV -----END CERTIFICATE-----Generated at Tue May 12 22:03:05 2026 by rpki-client