$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer File: 87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer (raw, json) Hash identifier: wBVjerxMNyX7ZZ06vCaC7zZ2FyGfZSceNGXpUzKTJZA= Subject key identifier: 87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 099A6C3EDF922DCA2FA429D4AF604A26A154D574 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:10:26 +0000 Certificate not after: Sun 02 May 2027 00:15:26 +0000 Subordinate resources: IP: 122.49.224.0/21 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:9a:6c:3e:df:92:2d:ca:2f:a4:29:d4:af:60:4a:26:a1:54:d5:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:10:26 2026 GMT Not After : May 2 00:15:26 2027 GMT Subject: CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e6:1d:35:c8:fc:fb:21:4e:f0:05:7c:f1:97: 58:fb:f3:7b:5f:fc:a0:e5:a6:ce:fb:a6:18:36:a4: fa:a4:09:90:16:35:90:09:1d:3c:26:ad:97:9e:ef: 12:6f:37:5c:75:32:60:25:dc:32:cd:65:8c:d1:24: 2a:04:c7:6a:06:07:cb:83:1b:de:30:80:bb:e7:7b: af:7f:3e:1e:bd:24:98:71:4c:f3:c0:cb:ec:82:2b: 1d:de:a2:46:6f:06:a7:4f:91:8a:37:57:75:a2:79: e1:8a:14:66:d2:45:47:e8:9a:40:9b:dc:a8:ac:78: d2:26:35:85:1f:f3:f6:2d:95:9a:7e:63:60:c9:a2: 4c:7a:48:c4:c0:b6:64:81:99:fd:1e:45:6c:67:21: 0c:c2:f4:33:62:f4:6c:38:93:fc:6b:15:aa:18:6f: e0:57:bc:66:5b:a2:f9:4b:10:6d:b4:1d:5f:97:b3: 62:8e:73:56:ee:e3:b6:2a:1d:0a:e5:66:62:f4:0b: 05:5d:6e:5d:e9:a4:fe:b6:c9:5e:71:a6:eb:b8:dd: a6:fd:89:9e:2b:b8:08:52:10:bf:ba:bb:42:07:62: e6:ee:b8:83:27:5b:60:8e:ab:e3:02:1f:3b:83:9e: dd:66:d0:a3:b9:c7:ca:7a:ca:88:c7:94:f2:46:d6: 81:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.49.224.0/21 Signature Algorithm: sha256WithRSAEncryption a0:80:77:8d:e0:56:bb:ab:2d:3c:a4:5e:20:9c:29:d8:7b:74: 28:87:44:61:7a:20:e4:2e:8e:25:ca:4c:a7:5a:d7:62:05:50: 54:84:5d:67:ec:53:6e:de:db:81:5c:fc:04:0f:25:f7:6f:b9: 9e:a9:a1:12:7b:47:62:0b:95:90:53:42:09:5c:4a:60:40:95: eb:36:64:a0:af:95:3c:15:5d:61:c8:5f:15:1e:e6:74:e6:32: a5:80:e0:d9:1f:8b:59:9a:91:cd:26:e6:27:fa:29:23:4e:a9: 82:be:77:a0:4c:d6:e0:c1:22:16:29:bb:33:b6:20:74:e6:1f: 89:0e:ef:c6:5b:e9:3c:5b:31:85:c2:33:b7:b8:3a:e1:7b:0b: 19:4f:42:5d:f1:81:db:62:7e:ac:a3:a1:e0:7d:34:4d:31:83: 06:26:0b:eb:d1:d8:00:ff:31:b4:46:df:0f:9f:ef:35:71:00: 35:93:c7:35:47:04:b8:c0:e2:b0:0e:7f:1b:0f:d2:38:d1:87: a9:42:46:47:09:7e:c4:1e:f5:67:00:78:dd:f6:43:27:6a:01: 73:c3:87:9b:3b:c4:bb:0f:ed:f5:67:46:e4:46:2b:6b:e4:bf: 5d:4a:36:22:16:97:68:01:0d:5b:3f:96:0e:ff:4a:1d:2d:cb: cf:39:95:1d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUCZpsPt+SLcovpCnUr2BKJqFU1XQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTAyNloX DTI3MDUwMjAwMTUyNlowMzExMC8GA1UEAxMoODdCRTMxOEQ5QUI5RTc4M0QyRDZB OEU2NDczQjE0QkU3MjBGNEY1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALDmHTXI/PshTvAFfPGXWPvze1/8oOWmzvumGDak+qQJkBY1kAkdPCatl57v Em83XHUyYCXcMs1ljNEkKgTHagYHy4Mb3jCAu+d7r38+Hr0kmHFM88DL7IIrHd6i Rm8Gp0+RijdXdaJ54YoUZtJFR+iaQJvcqKx40iY1hR/z9i2Vmn5jYMmiTHpIxMC2 ZIGZ/R5FbGchDML0M2L0bDiT/GsVqhhv4Fe8Zlui+UsQbbQdX5ezYo5zVu7jtiod CuVmYvQLBV1uXemk/rbJXnGm67jdpv2Jniu4CFIQv7q7Qgdi5u64gydbYI6r4wIf O4Oe3WbQo7nHynrKiMeU8kbWgScCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIe+MY2aueeD0tao5kc7FL5yD09cMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJlNDM0OTgxLTM2YmItNDUzOS05YjU1LTA3YjY3MjA4ZmQwNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yZTQzNDk4 MS0zNmJiLTQ1MzktOWI1NS0wN2I2NzIwOGZkMDYvMC84N0JFMzE4RDlBQjlFNzgz RDJENkE4RTY0NzNCMTRCRTcyMEY0RjVDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQDejHgMA0GCSqGSIb3DQEBCwUAA4IBAQCggHeN4Fa7qy08pF4gnCnYe3Qoh0Rh eiDkLo4lykynWtdiBVBUhF1n7FNu3tuBXPwEDyX3b7meqaESe0diC5WQU0IJXEpg QJXrNmSgr5U8FV1hyF8VHuZ05jKlgODZH4tZmpHNJuYn+ikjTqmCvnegTNbgwSIW KbsztiB05h+JDu/GW+k8WzGFwjO3uDrhewsZT0Jd8YHbYn6so6HgfTRNMYMGJgvr 0dgA/zG0Rt8Pn+81cQA1k8c1RwS4wOKwDn8bD9I40YepQkZHCX7EHvVnAHjd9kMn agFzw4ebO8S7D+31Z0bkRitr5L9dSjYiFpdoAQ1bP5YO/0odLcvPOZUd -----END CERTIFICATE-----Generated at Tue May 12 22:16:58 2026 by rpki-client