$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/87C6DB06108050D15C2314C816BCB5DA6CB101C5.cer File: 87C6DB06108050D15C2314C816BCB5DA6CB101C5.cer (raw, json) Hash identifier: wAdxLsvVmxCTcISi1AlEsPu56w4CKaV78xSa2ewaTDE= Subject key identifier: 87:C6:DB:06:10:80:50:D1:5C:23:14:C8:16:BC:B5:DA:6C:B1:01:C5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4E49D1B340E9B513028B104FB26675F1E829FF2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:16:44 +0000 Certificate not after: Sun 02 May 2027 01:21:44 +0000 Subordinate resources: IP: 103.97.202.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:49:d1:b3:40:e9:b5:13:02:8b:10:4f:b2:66:75:f1:e8:29:ff:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:16:44 2026 GMT Not After : May 2 01:21:44 2027 GMT Subject: CN=87C6DB06108050D15C2314C816BCB5DA6CB101C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dd:4a:9c:ec:12:e3:58:f6:4f:f8:a4:0f:1b: fe:76:9b:85:96:2b:d9:30:2e:17:96:20:0e:3a:9e: ef:78:ff:d8:34:1e:d5:94:2c:2e:fc:3e:e9:a6:7d: d3:66:c2:dc:07:ba:e6:e9:bf:d1:19:2d:ec:30:67: f7:0f:86:db:c2:0d:c3:2d:90:6f:4c:c6:f8:a4:3b: 7c:ad:00:8a:e5:2b:09:62:d6:7a:f3:e4:1f:15:76: 2c:47:7a:ed:d4:f3:d0:19:de:e9:91:d9:13:b1:46: 88:23:89:9c:10:63:5c:fa:0b:6a:ef:31:22:55:59: d2:aa:27:0e:4e:fb:5b:12:c5:86:4e:6c:07:a0:a8: 82:33:0a:c9:71:15:64:70:2f:26:5b:69:1d:e9:8d: 73:0d:46:9b:93:22:2e:48:51:85:90:4a:68:51:9a: b4:84:93:20:a1:56:ec:0b:6a:e0:a8:79:ad:aa:b7: 21:db:37:7a:e0:1a:42:7e:8c:5b:a3:3c:a7:9d:2c: 44:0c:4a:78:a4:d9:a3:83:31:10:5a:82:b8:ea:88: 49:e2:97:9e:51:47:36:94:b8:25:71:59:98:ac:3e: bf:f2:d5:3d:e1:0b:58:b8:78:0e:c2:36:69:e1:5a: c9:f4:e1:3d:d8:79:db:00:0f:45:7e:37:80:2c:4a: b3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:C6:DB:06:10:80:50:D1:5C:23:14:C8:16:BC:B5:DA:6C:B1:01:C5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.97.202.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:6f:7d:74:a7:f4:77:15:82:c8:6b:e7:45:50:3a:08:45:93: a6:e5:f5:70:ed:de:a9:e8:f5:80:f3:0e:dd:4e:f5:86:8f:e7: 2d:ce:76:92:af:87:1d:48:16:1c:b1:74:53:06:3b:c2:dd:d0: fd:e8:0f:18:aa:1d:d2:82:aa:35:f2:29:e6:37:97:8e:b5:d2: dc:54:10:38:4c:37:6e:f4:51:85:d8:4a:e1:bf:76:59:32:f5: 79:0d:a3:55:5e:33:ec:ad:b4:6c:ef:ad:46:ed:c7:b8:59:5d: 3e:8b:31:8e:06:74:64:61:ef:a1:01:34:9d:87:9b:27:dc:c6: 8d:3a:e7:07:76:8f:36:5e:56:e1:7c:7c:b1:c2:60:d6:d6:21: 11:ff:2e:25:39:1c:40:51:e5:7b:22:59:10:c4:32:61:3f:55: 39:e0:14:52:7b:6f:a1:f0:7f:c3:06:2b:f1:9a:0e:86:85:26: 46:db:6c:93:eb:6b:0f:d9:20:ab:02:12:f9:39:c6:68:b0:d0: 0e:3f:67:35:57:69:0c:bd:02:26:bc:dc:c5:39:07:b4:6a:68: 99:fe:7b:39:45:e1:42:6f:38:01:25:dc:89:4e:56:93:56:a5: e6:4e:70:47:de:95:8a:67:c4:70:e5:d4:a0:cc:7f:db:4a:5b: 4d:a3:18:b2 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUTknRs0DptRMCixBPsmZ18egp/y4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTY0NFoX DTI3MDUwMjAxMjE0NFowMzExMC8GA1UEAxMoODdDNkRCMDYxMDgwNTBEMTVDMjMx NEM4MTZCQ0I1REE2Q0IxMDFDNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKPdSpzsEuNY9k/4pA8b/nabhZYr2TAuF5YgDjqe73j/2DQe1ZQsLvw+6aZ9 02bC3Ae65um/0Rkt7DBn9w+G28INwy2Qb0zG+KQ7fK0AiuUrCWLWevPkHxV2LEd6 7dTz0Bne6ZHZE7FGiCOJnBBjXPoLau8xIlVZ0qonDk77WxLFhk5sB6CogjMKyXEV ZHAvJltpHemNcw1Gm5MiLkhRhZBKaFGatISTIKFW7Atq4Kh5raq3Ids3euAaQn6M W6M8p50sRAxKeKTZo4MxEFqCuOqISeKXnlFHNpS4JXFZmKw+v/LVPeELWLh4DsI2 aeFayfThPdh52wAPRX43gCxKs7UCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIfG2wYQgFDRXCMUyBa8tdpssQHFMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzkwMmI3OGFkLWRmMjMtNDNlMi1hOTRkLTNiNDU0Y2JjN2ZjNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85MDJiNzhh ZC1kZjIzLTQzZTItYTk0ZC0zYjQ1NGNiYzdmYzUvMC84N0M2REIwNjEwODA1MEQx NUMyMzE0QzgxNkJDQjVEQTZDQjEwMUM1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ2HKMA0GCSqGSIb3DQEBCwUAA4IBAQAOb310p/R3FYLIa+dFUDoIRZOm5fVw 7d6p6PWA8w7dTvWGj+ctznaSr4cdSBYcsXRTBjvC3dD96A8Yqh3Sgqo18inmN5eO tdLcVBA4TDdu9FGF2Erhv3ZZMvV5DaNVXjPsrbRs761G7ce4WV0+izGOBnRkYe+h ATSdh5sn3MaNOucHdo82XlbhfHyxwmDW1iER/y4lORxAUeV7IlkQxDJhP1U54BRS e2+h8H/DBivxmg6GhSZG22yT62sP2SCrAhL5OcZosNAOP2c1V2kMvQImvNzFOQe0 amiZ/ns5ReFCbzgBJdyJTlaTVqXmTnBH3pWKZ8Rw5dSgzH/bSltNoxiy -----END CERTIFICATE-----Generated at Tue May 12 22:02:58 2026 by rpki-client