$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer File: 87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer (raw, json) Hash identifier: qOYiXTInPgnkpg2N9gkYT/xpWXwZfLXWDZ8NBGmVqso= Subject key identifier: 87:CE:07:4A:6F:FD:5F:C5:70:BB:3C:97:1B:0D:F3:14:18:85:82:8E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 57D7544B56F69ECAC0426CACF1C5059F4EBF2FCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:46:16 +0000 Certificate not after: Sun 02 May 2027 00:51:16 +0000 Subordinate resources: IP: 103.149.34.0/23 IP: 2001:df3:e80::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:d7:54:4b:56:f6:9e:ca:c0:42:6c:ac:f1:c5:05:9f:4e:bf:2f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:46:16 2026 GMT Not After : May 2 00:51:16 2027 GMT Subject: CN=87CE074A6FFD5FC570BB3C971B0DF3141885828E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e0:e0:87:7a:1a:d6:1e:66:ab:f0:15:cf:5c: 2d:f1:16:31:4b:1c:7d:c8:a9:fe:af:96:99:03:f5: 74:da:4c:27:88:1c:eb:2a:8f:8c:0a:cd:23:81:ac: c8:b4:82:ed:bb:13:5a:9a:59:15:9c:45:14:1f:fa: c0:87:62:0f:16:26:6f:d1:d3:71:76:ac:5e:9e:31: 43:58:b2:df:aa:8d:c5:0d:53:fc:6c:0b:32:77:ef: 09:80:63:ba:a4:d7:4b:33:61:72:9e:ff:6e:81:a9: 98:14:c7:67:a4:0d:32:a6:73:f8:da:25:b5:2c:86: 6f:9b:5d:a5:7a:7b:7c:69:32:61:71:50:ff:3c:ce: 42:de:6d:cf:8d:9a:c8:5b:9a:a5:6e:7e:4f:e2:6f: cd:f6:5c:0e:c7:fa:eb:7a:1f:45:67:c9:fe:12:58: 30:ee:19:70:ca:fd:84:de:0d:f4:75:0a:03:72:9a: f9:67:a6:fd:67:03:cc:39:59:d1:72:c6:53:be:21: 3b:f8:fb:55:37:40:8a:82:99:0c:e9:f4:c7:dd:22: 6f:09:c2:6a:1b:03:5a:d7:d3:10:b7:ba:00:ad:61: a6:8f:95:57:92:5f:5c:2c:07:aa:0e:8e:e6:3c:8a: ac:88:95:52:36:78:92:ed:4a:c1:7b:92:03:08:3f: 6c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:CE:07:4A:6F:FD:5F:C5:70:BB:3C:97:1B:0D:F3:14:18:85:82:8E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.34.0/23 IPv6: 2001:df3:e80::/48 Signature Algorithm: sha256WithRSAEncryption 98:56:06:3a:14:35:ac:be:49:a7:d9:a4:20:8a:5f:ce:11:86: 28:6e:2d:50:0d:c8:c8:e8:80:97:be:f2:37:2f:ba:f3:44:92: 55:0f:8c:8b:54:fa:ee:fa:4f:30:9c:d7:3b:45:e4:b9:26:63: 84:ea:4a:1c:0a:01:60:cf:d0:99:1e:8a:9f:41:2d:eb:4e:2a: b6:e1:b0:61:bf:21:f0:7c:41:f9:31:e2:33:af:93:10:29:df: ba:91:4e:98:74:10:5c:42:88:8d:98:f3:5f:ab:3c:e8:19:b1: af:ff:42:39:05:e9:4c:56:ca:ea:84:87:b4:2e:cc:2a:ad:ff: a8:4c:0f:99:eb:13:8d:55:6d:5f:ce:66:64:37:c5:40:a4:46: 11:c5:62:c2:1b:88:85:91:5d:45:e4:d9:6b:a9:d3:bd:69:db: cc:c0:30:11:da:55:cb:6c:8a:b6:ee:d6:b6:78:27:16:5e:77: 2d:00:97:51:34:8d:8e:4b:1c:f6:9c:43:61:ae:01:1d:3f:04: a3:3a:d7:3b:ff:8e:76:11:1c:2a:35:06:f0:b5:db:eb:93:87: 3d:f0:1a:d0:a9:02:f7:4c:2c:48:b8:86:57:a0:6e:c2:48:41: c6:9d:99:13:00:71:be:3e:ec:d7:6e:30:dd:b3:81:43:46:6f: 9b:f3:e5:c4 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUV9dUS1b2nsrAQmys8cUFn06/L8owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDYxNloX DTI3MDUwMjAwNTExNlowMzExMC8GA1UEAxMoODdDRTA3NEE2RkZENUZDNTcwQkIz Qzk3MUIwREYzMTQxODg1ODI4RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKPg4Id6GtYeZqvwFc9cLfEWMUscfcip/q+WmQP1dNpMJ4gc6yqPjArNI4Gs yLSC7bsTWppZFZxFFB/6wIdiDxYmb9HTcXasXp4xQ1iy36qNxQ1T/GwLMnfvCYBj uqTXSzNhcp7/boGpmBTHZ6QNMqZz+NoltSyGb5tdpXp7fGkyYXFQ/zzOQt5tz42a yFuapW5+T+JvzfZcDsf663ofRWfJ/hJYMO4ZcMr9hN4N9HUKA3Ka+Wem/WcDzDlZ 0XLGU74hO/j7VTdAioKZDOn0x90ibwnCahsDWtfTELe6AK1hpo+VV5JfXCwHqg6O 5jyKrIiVUjZ4ku1KwXuSAwg/bFMCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIfOB0pv/V/FcLs8lxsN8xQYhYKOMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzYzNjM1ZTI1LTg1OTktNDhhZS1iZGNiLWUzMjNkZmM4OTZlYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82MzYzNWUy NS04NTk5LTQ4YWUtYmRjYi1lMzIzZGZjODk2ZWMvMC84N0NFMDc0QTZGRkQ1RkM1 NzBCQjNDOTcxQjBERjMxNDE4ODU4MjhFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ5UiMA8EAgACMAkDBwAgAQ3zDoAwDQYJKoZIhvcNAQELBQADggEBAJhWBjoU Nay+SafZpCCKX84RhihuLVANyMjogJe+8jcvuvNEklUPjItU+u76TzCc1ztF5Lkm Y4TqShwKAWDP0Jkeip9BLetOKrbhsGG/IfB8Qfkx4jOvkxAp37qRTph0EFxCiI2Y 81+rPOgZsa//QjkF6UxWyuqEh7QuzCqt/6hMD5nrE41VbV/OZmQ3xUCkRhHFYsIb iIWRXUXk2Wup071p28zAMBHaVctsirbu1rZ4JxZedy0Al1E0jY5LHPacQ2GuAR0/ BKM61zv/jnYRHCo1BvC12+uThz3wGtCpAvdMLEi4hlegbsJIQcadmRMAcb4+7Ndu MN2zgUNGb5vz5cQ= -----END CERTIFICATE-----Generated at Tue May 12 22:04:03 2026 by rpki-client