$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/866D7D1256D6F935A346BCB51C3E74AD084F39E1.cer File: 866D7D1256D6F935A346BCB51C3E74AD084F39E1.cer (raw, json) Hash identifier: Ss1lBtZfejefuK45DRZGy5qCtmPQNcaADj0e3gEqD/s= Subject key identifier: 86:6D:7D:12:56:D6:F9:35:A3:46:BC:B5:1C:3E:74:AD:08:4F:39:E1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 306A6C5BEE47E860D3DF381B39A098E47E6D66CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:16:57 +0000 Certificate not after: Sun 02 May 2027 00:21:57 +0000 Subordinate resources: IP: 45.121.216.0/22 IP: 103.56.232.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:6a:6c:5b:ee:47:e8:60:d3:df:38:1b:39:a0:98:e4:7e:6d:66:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:16:57 2026 GMT Not After : May 2 00:21:57 2027 GMT Subject: CN=866D7D1256D6F935A346BCB51C3E74AD084F39E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fa:d0:a5:71:0a:59:fb:a4:d3:e2:fb:9e:16: 23:b2:6e:60:00:7d:ee:5c:55:71:31:22:2c:a1:9e: 10:aa:ed:63:6e:da:b6:c5:b3:50:a1:73:f2:7d:d3: ee:34:06:d2:6d:20:90:d5:d7:55:50:e6:f1:8e:ab: 4b:b2:03:69:58:dc:42:f9:87:7e:a8:93:ed:e5:13: ee:3a:0f:22:12:31:4c:ed:f0:c7:33:01:da:d1:f5: d4:dd:b2:de:5c:70:ee:7f:27:16:dc:ec:6b:be:85: 74:9f:92:81:05:ca:c0:31:dc:3c:85:65:91:fb:b4: 3f:fc:62:b8:4c:71:f3:ca:9e:16:79:e9:e2:81:8f: 98:6b:4b:83:39:85:68:49:97:2f:d8:a2:02:5d:45: c4:f8:12:b9:6f:a5:f7:31:82:24:ce:75:69:b1:e8: f9:20:6e:33:5a:71:bf:66:59:2c:50:02:ca:44:fd: 84:cc:b9:8c:3a:8f:7c:24:03:f8:ee:25:a5:28:98: 93:f3:fe:f3:4f:dc:14:22:69:f0:b0:85:a6:02:59: 78:a3:96:4d:61:de:b2:8f:01:01:42:0c:63:1d:8c: b0:f8:bf:2d:c6:f7:75:24:97:fa:c1:49:95:c0:68: eb:14:cb:77:8f:d7:78:f8:20:d7:39:4b:fc:17:42: ce:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 86:6D:7D:12:56:D6:F9:35:A3:46:BC:B5:1C:3E:74:AD:08:4F:39:E1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.121.216.0/22 103.56.232.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:d3:e9:d5:ef:59:5f:50:d9:3e:d1:07:43:58:11:b1:ed:f5: 57:c5:6c:e7:87:75:80:6e:1c:a6:fd:64:23:88:84:85:77:2c: 64:1c:2b:35:e1:9d:f0:79:a4:72:46:ff:d6:46:3a:7c:f5:51: 5e:e4:18:52:13:3e:82:cd:a8:ca:e6:f1:2e:22:a9:31:5d:fa: 40:04:43:a0:38:3d:de:05:db:e1:25:39:42:f0:ab:76:3e:99: 05:c6:5b:65:ae:a9:81:e6:a3:1b:1c:07:5e:e9:46:06:d6:95: bf:b6:19:7f:1e:6a:6e:d4:90:e1:db:05:57:e3:b8:86:7d:c1: 56:99:09:72:fb:41:ad:a6:93:a4:78:19:7a:e0:58:ea:64:8a: dc:e2:c1:bb:2f:1f:73:9a:97:4b:5a:f2:66:2e:ef:a3:87:f9: 7d:76:6c:da:6b:a0:78:78:a9:cb:50:1c:99:3c:40:a3:7b:23: 6a:bb:58:73:f0:c4:75:ae:8b:60:6d:92:25:24:77:75:2e:b9: 7b:64:05:ed:23:80:33:f6:08:2b:71:25:98:16:09:c9:d2:a2: cf:44:49:32:9c:8b:95:19:65:d2:d0:ae:42:7f:39:4e:8e:1e: 5a:ef:eb:4f:c7:c7:29:88:17:68:d9:df:dd:7b:1e:b7:ee:25: 01:da:1b:58 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUMGpsW+5H6GDT3zgbOaCY5H5tZs8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTY1N1oX DTI3MDUwMjAwMjE1N1owMzExMC8GA1UEAxMoODY2RDdEMTI1NkQ2RjkzNUEzNDZC Q0I1MUMzRTc0QUQwODRGMzlFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALL60KVxCln7pNPi+54WI7JuYAB97lxVcTEiLKGeEKrtY27atsWzUKFz8n3T 7jQG0m0gkNXXVVDm8Y6rS7IDaVjcQvmHfqiT7eUT7joPIhIxTO3wxzMB2tH11N2y 3lxw7n8nFtzsa76FdJ+SgQXKwDHcPIVlkfu0P/xiuExx88qeFnnp4oGPmGtLgzmF aEmXL9iiAl1FxPgSuW+l9zGCJM51abHo+SBuM1pxv2ZZLFACykT9hMy5jDqPfCQD +O4lpSiYk/P+80/cFCJp8LCFpgJZeKOWTWHeso8BAUIMYx2MsPi/Lcb3dSSX+sFJ lcBo6xTLd4/XePgg1zlL/BdCzgsCAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIZtfRJW1vk1o0a8tRw+dK0ITznhMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM3YjMzNDEyLWJlNWItNDYzZS04MjMzLTllYWI4NDhhNTk3Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zN2IzMzQx Mi1iZTViLTQ2M2UtODIzMy05ZWFiODQ4YTU5NzYvMC84NjZEN0QxMjU2RDZGOTM1 QTM0NkJDQjUxQzNFNzRBRDA4NEYzOUUxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQCLXnYAwQCZzjoMA0GCSqGSIb3DQEBCwUAA4IBAQCa0+nV71lfUNk+0QdDWBGx 7fVXxWznh3WAbhym/WQjiISFdyxkHCs14Z3weaRyRv/WRjp89VFe5BhSEz6CzajK 5vEuIqkxXfpABEOgOD3eBdvhJTlC8Kt2PpkFxltlrqmB5qMbHAde6UYG1pW/thl/ Hmpu1JDh2wVX47iGfcFWmQly+0GtppOkeBl64FjqZIrc4sG7Lx9zmpdLWvJmLu+j h/l9dmzaa6B4eKnLUByZPECjeyNqu1hz8MR1rotgbZIlJHd1Lrl7ZAXtI4Az9ggr cSWYFgnJ0qLPREkynIuVGWXS0K5CfzlOjh5a7+tPx8cpiBdo2d/dex637iUB2htY -----END CERTIFICATE-----Generated at Tue May 12 22:16:26 2026 by rpki-client