$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer File: 87D1485E2D8D59808482A339E96F7B631508F371.cer (raw, json) Hash identifier: YqQUNMbf5lM+kILMhX7V8zWtiFEpJMuqfv2PIAtNy7g= Subject key identifier: 87:D1:48:5E:2D:8D:59:80:84:82:A3:39:E9:6F:7B:63:15:08:F3:71 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 165E5AA6948E21224B6ED8F7E3AD7A1DC2C55F0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:28:44 +0000 Certificate not after: Sun 02 May 2027 01:33:44 +0000 Subordinate resources: IP: 103.66.68.0/22 IP: 2001:df2:ba00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:5e:5a:a6:94:8e:21:22:4b:6e:d8:f7:e3:ad:7a:1d:c2:c5:5f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:28:44 2026 GMT Not After : May 2 01:33:44 2027 GMT Subject: CN=87D1485E2D8D59808482A339E96F7B631508F371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0f:ef:c1:8f:bd:12:f2:de:51:df:9d:da:3c: c4:cb:5f:de:1c:9e:3c:1f:05:5e:60:f6:87:52:f4: 85:41:f0:d1:c0:94:d0:b4:fd:06:05:1c:e0:ae:1e: 13:9d:f8:38:8a:70:b0:1e:f1:76:11:12:10:25:ed: e9:83:d5:fa:40:d4:fb:ae:1c:96:6b:c3:0c:91:b2: 3d:8d:8f:3b:99:0e:71:99:9d:56:c8:b4:4b:d4:a0: fb:7a:71:a7:6e:61:79:a4:20:6e:c0:a1:55:5a:15: 5b:12:33:0f:09:c4:b1:6c:6e:7e:77:23:f6:8a:fa: 90:67:bf:51:2b:63:07:23:97:e3:c3:46:9d:a0:d8: ac:5e:8f:5f:8c:af:93:32:d8:5c:1b:a3:68:65:15: 75:4d:de:21:7c:9d:d7:b4:45:91:76:e5:10:13:2f: f1:78:91:3c:70:61:51:d0:09:48:48:95:0a:04:a6: 30:19:23:05:66:5a:9d:a0:10:60:76:a8:a7:db:f5: 5d:cb:58:d7:e5:e1:7a:cc:78:8f:49:65:1a:c8:67: c4:d3:e8:90:94:99:60:7b:23:20:f6:70:0e:0e:55: 58:88:0d:ec:de:e6:a3:6a:c6:71:20:e5:30:82:e0: cd:35:4f:82:9d:be:8b:d1:ac:8c:ba:57:c8:59:be: 93:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:D1:48:5E:2D:8D:59:80:84:82:A3:39:E9:6F:7B:63:15:08:F3:71 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.66.68.0/22 IPv6: 2001:df2:ba00::/48 Signature Algorithm: sha256WithRSAEncryption 63:66:59:c4:82:79:0f:6a:2d:18:13:74:f8:ab:52:10:13:47: 48:e8:2a:08:d2:8a:55:a0:16:e9:4c:94:e5:bf:a2:42:2f:8a: 6a:a5:49:f8:cb:12:97:2a:05:23:2d:37:8b:7d:86:9b:8f:1f: a0:40:b4:ba:4e:fc:e2:84:d4:1c:63:44:51:2f:57:70:6d:93: 93:ff:fe:a2:0e:0e:40:98:c8:67:a3:86:f3:28:de:82:42:ec: 40:f1:2e:bc:a8:b9:91:6d:ad:cf:88:bf:91:fb:21:8d:f9:6d: 3a:4f:bb:99:47:43:d1:39:11:af:0d:8f:c8:b2:14:b5:05:f5: 8e:8d:c2:bd:14:39:63:a5:1c:9d:c2:7e:c3:7e:1f:67:54:f5: af:48:d3:53:1a:bc:3f:6a:69:37:cf:8d:04:95:b8:39:c4:3d: 1d:6d:b0:f2:f9:8c:a1:00:35:1d:1c:bb:24:08:3b:7d:2f:74: 90:44:63:c6:72:fd:cc:dd:82:68:22:38:29:65:ac:a1:9a:a5: c4:2a:b5:ae:ab:59:d7:71:14:58:47:9a:3a:f7:ba:ba:20:59: 36:00:90:60:9e:8f:ff:a4:38:9d:65:c6:af:19:73:fe:fd:8f: 84:23:11:6c:e7:8a:2a:4d:f0:27:87:51:f1:09:99:6a:9b:21: 77:73:ed:54 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUFl5appSOISJLbtj34616HcLFXwwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjg0NFoX DTI3MDUwMjAxMzM0NFowMzExMC8GA1UEAxMoODdEMTQ4NUUyRDhENTk4MDg0ODJB MzM5RTk2RjdCNjMxNTA4RjM3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcP78GPvRLy3lHfndo8xMtf3hyePB8FXmD2h1L0hUHw0cCU0LT9BgUc4K4e E534OIpwsB7xdhESECXt6YPV+kDU+64clmvDDJGyPY2PO5kOcZmdVsi0S9Sg+3px p25heaQgbsChVVoVWxIzDwnEsWxufncj9or6kGe/UStjByOX48NGnaDYrF6PX4yv kzLYXBujaGUVdU3eIXyd17RFkXblEBMv8XiRPHBhUdAJSEiVCgSmMBkjBWZanaAQ YHaop9v1XctY1+Xhesx4j0llGshnxNPokJSZYHsjIPZwDg5VWIgN7N7mo2rGcSDl MILgzTVPgp2+i9GsjLpXyFm+kxkCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIfRSF4tjVmAhIKjOelve2MVCPNxMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2EyYWExNmVhLTJhZWMtNDk1ZC1hOWEzLTY5MjU3MzBkNWUwZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hMmFhMTZl YS0yYWVjLTQ5NWQtYTlhMy02OTI1NzMwZDVlMGYvMC84N0QxNDg1RTJEOEQ1OTgw ODQ4MkEzMzlFOTZGN0I2MzE1MDhGMzcxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZ0JEMA8EAgACMAkDBwAgAQ3yugAwDQYJKoZIhvcNAQELBQADggEBAGNmWcSC eQ9qLRgTdPirUhATR0joKgjSilWgFulMlOW/okIvimqlSfjLEpcqBSMtN4t9hpuP H6BAtLpO/OKE1BxjRFEvV3Btk5P//qIODkCYyGejhvMo3oJC7EDxLryouZFtrc+I v5H7IY35bTpPu5lHQ9E5Ea8Nj8iyFLUF9Y6Nwr0UOWOlHJ3CfsN+H2dU9a9I01Ma vD9qaTfPjQSVuDnEPR1tsPL5jKEANR0cuyQIO30vdJBEY8Zy/czdgmgiOCllrKGa pcQqta6rWddxFFhHmjr3urogWTYAkGCej/+kOJ1lxq8Zc/79j4QjEWzniipN8CeH UfEJmWqbIXdz7VQ= -----END CERTIFICATE-----Generated at Wed May 13 00:44:43 2026 by rpki-client