$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer File: 86E48412E2794F23453AA6C42466D4F6BB140BF3.cer (raw, json) Hash identifier: vgWrFtMXDAbFPZNC3ylhAcntZt6Hy8P4YKJQyPZwx6I= Subject key identifier: 86:E4:84:12:E2:79:4F:23:45:3A:A6:C4:24:66:D4:F6:BB:14:0B:F3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 551FCF0C82575A413DDAB623ADF2411D4382AF57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:41:46 +0000 Certificate not after: Sun 02 May 2027 01:46:46 +0000 Subordinate resources: IP: 103.1.50.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:1f:cf:0c:82:57:5a:41:3d:da:b6:23:ad:f2:41:1d:43:82:af:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:41:46 2026 GMT Not After : May 2 01:46:46 2027 GMT Subject: CN=86E48412E2794F23453AA6C42466D4F6BB140BF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5d:ef:29:14:af:40:28:be:21:1f:1c:1b:d4: 3e:cf:63:d0:12:22:ac:f0:1c:7a:be:25:7d:75:f9: 13:20:94:d4:e0:46:30:9e:b3:3e:ba:9c:83:15:18: 2f:88:73:06:ef:c4:eb:23:2b:68:20:eb:77:82:b5: 2d:eb:60:6f:68:3a:14:89:ef:91:cc:06:ae:b9:a2: c1:d5:f0:1e:cd:4b:38:09:9b:28:ca:f2:9c:68:30: 9b:c2:48:f8:df:18:eb:ae:f2:16:2c:4d:f5:1d:eb: ff:71:f3:9a:3f:fd:99:b4:aa:62:21:59:f1:98:4a: c4:de:37:b8:0c:1c:b6:d7:14:0b:74:ed:fa:1a:45: 51:08:c0:84:0c:a5:7d:7e:92:a9:e0:5b:72:a5:2b: d4:ab:ec:de:a0:3d:69:dd:f1:ce:a0:2f:d3:ab:58: 44:70:88:c2:3d:f5:a5:98:06:82:0f:70:9a:a0:4f: d9:bc:47:46:b7:5b:00:86:93:89:78:c3:9b:9e:8c: ea:08:63:81:29:7c:d7:36:06:f3:85:1d:7e:ff:86: f1:bd:01:64:fb:e7:b2:c4:98:2d:7c:a8:6f:f9:7d: 33:27:0c:1f:95:90:8f:f6:f6:4e:e6:6f:9d:30:02: 6e:a2:f0:23:f9:e5:be:4c:9e:bc:da:10:e4:b5:04: b0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 86:E4:84:12:E2:79:4F:23:45:3A:A6:C4:24:66:D4:F6:BB:14:0B:F3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.1.50.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:c7:b1:42:40:e7:a6:51:80:4f:03:c7:3f:28:bb:31:23:69: 86:8b:63:87:71:31:e4:6c:d6:83:5b:87:dc:fa:5b:a1:3b:57: 81:89:49:5a:f9:3f:e0:66:d8:07:2c:28:f1:ac:f9:fd:5d:88: 06:45:34:1c:ec:29:cb:38:b3:b0:c1:c3:c0:30:1a:9f:a2:83: b6:c4:61:f1:a5:70:5d:98:56:8c:d3:5a:4c:bf:2e:3a:f2:0b: ce:2a:af:03:dc:23:60:cd:fa:c3:21:8a:dc:af:fa:00:b0:6e: 29:f9:34:5f:b9:e4:5a:ab:fc:80:99:39:a3:e6:5e:ee:ae:79: 04:52:b2:59:9b:92:49:f5:82:d0:f7:5e:9c:45:2e:f8:e1:5f: 72:0c:78:07:ba:4e:60:c2:90:6e:4e:70:9a:6d:b0:10:3a:f6: 3a:64:3b:d9:6b:90:41:ef:0b:31:e9:0b:f3:d9:1a:12:b8:d9: 50:6a:5c:8c:bd:c5:90:e7:b0:93:03:b9:ba:5c:66:66:51:f7: 5d:34:51:8f:31:5b:6b:a9:e3:d3:44:08:dc:0b:69:2d:69:de: e0:dd:bb:18:06:60:1e:bb:7b:46:56:59:7c:b1:93:7d:b9:6f: 16:ad:39:91:6c:3b:2e:e9:28:5a:03:7f:84:35:fb:97:ec:95: 51:70:2e:9a -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUVR/PDIJXWkE92rYjrfJBHUOCr1cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDE0NloX DTI3MDUwMjAxNDY0NlowMzExMC8GA1UEAxMoODZFNDg0MTJFMjc5NEYyMzQ1M0FB NkM0MjQ2NkQ0RjZCQjE0MEJGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMld7ykUr0AoviEfHBvUPs9j0BIirPAcer4lfXX5EyCU1OBGMJ6zPrqcgxUY L4hzBu/E6yMraCDrd4K1Letgb2g6FInvkcwGrrmiwdXwHs1LOAmbKMrynGgwm8JI +N8Y667yFixN9R3r/3Hzmj/9mbSqYiFZ8ZhKxN43uAwcttcUC3Tt+hpFUQjAhAyl fX6SqeBbcqUr1Kvs3qA9ad3xzqAv06tYRHCIwj31pZgGgg9wmqBP2bxHRrdbAIaT iXjDm56M6ghjgSl81zYG84Udfv+G8b0BZPvnssSYLXyob/l9MycMH5WQj/b2TuZv nTACbqLwI/nlvkyevNoQ5LUEsOkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIbkhBLieU8jRTqmxCRm1Pa7FAvzMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2I2NTJiZjljLTYzNGItNDBiOS1hYzBjLWE4N2I0N2Q1OWY5MS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iNjUyYmY5 Yy02MzRiLTQwYjktYWMwYy1hODdiNDdkNTlmOTEvMC84NkU0ODQxMkUyNzk0RjIz NDUzQUE2QzQyNDY2RDRGNkJCMTQwQkYzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZwEyMA0GCSqGSIb3DQEBCwUAA4IBAQCNx7FCQOemUYBPA8c/KLsxI2mGi2OH cTHkbNaDW4fc+luhO1eBiUla+T/gZtgHLCjxrPn9XYgGRTQc7CnLOLOwwcPAMBqf ooO2xGHxpXBdmFaM01pMvy468gvOKq8D3CNgzfrDIYrcr/oAsG4p+TRfueRaq/yA mTmj5l7urnkEUrJZm5JJ9YLQ916cRS744V9yDHgHuk5gwpBuTnCabbAQOvY6ZDvZ a5BB7wsx6Qvz2RoSuNlQalyMvcWQ57CTA7m6XGZmUfddNFGPMVtrqePTRAjcC2kt ad7g3bsYBmAeu3tGVll8sZN9uW8WrTmRbDsu6ShaA3+ENfuX7JVRcC6a -----END CERTIFICATE-----Generated at Wed May 13 01:45:14 2026 by rpki-client