$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer File: 883664DA613C9067C8155436693AEF1A82B3B1A7.cer (raw, json) Hash identifier: MPa8lrLWkjzrXV2nE60sHPLLI3neTs7lIlp6uf8dSPk= Subject key identifier: 88:36:64:DA:61:3C:90:67:C8:15:54:36:69:3A:EF:1A:82:B3:B1:A7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 34DF377E921897B172F03C6143F00B48ED7AB2E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft caRepository: rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:26:41 +0000 Certificate not after: Sun 02 May 2027 00:31:41 +0000 Subordinate resources: IP: 103.178.150.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:df:37:7e:92:18:97:b1:72:f0:3c:61:43:f0:0b:48:ed:7a:b2:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:26:41 2026 GMT Not After : May 2 00:31:41 2027 GMT Subject: CN=883664DA613C9067C8155436693AEF1A82B3B1A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1c:17:ce:77:22:5a:af:14:c0:c0:bc:7a:e0: af:20:22:5c:cf:d6:66:6a:11:6c:91:5b:eb:23:2b: 06:6a:99:ce:8c:3e:45:ec:d2:49:dc:eb:01:8e:44: ef:14:d1:e7:a7:c1:e7:c0:b0:8d:c9:cc:e0:df:1d: 09:eb:81:b4:60:ae:d3:81:bd:6c:9e:90:80:31:f5: 08:57:53:73:ff:3b:f5:f4:6d:ea:63:ef:38:9e:c2: 45:c4:71:f3:b8:6c:66:93:cd:96:a5:57:00:d8:00: 64:43:00:ff:e8:a8:8f:a4:a8:be:3a:cb:77:a9:9e: ed:df:60:ae:30:ea:1b:fb:1a:06:34:0d:24:58:b7: 19:03:ce:94:61:a0:cb:a1:02:e2:70:73:79:7a:1a: d0:b4:2e:a7:36:31:44:e1:49:90:e4:d9:08:a5:bd: a0:5d:08:43:72:b6:77:8e:72:90:19:25:c5:67:18: 17:4f:94:5d:92:7b:77:36:19:ed:a5:f1:42:6a:f4: e2:3b:eb:e1:7a:f6:48:b1:d5:a0:9f:19:23:13:54: 46:72:91:9c:dd:0c:42:98:8c:54:d6:e7:40:f9:67: 66:63:d9:72:98:9c:ef:15:e1:61:f2:7c:df:ea:39: 44:f8:86:ff:06:2e:b3:60:30:48:e7:55:6c:c5:ac: 56:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:36:64:DA:61:3C:90:67:C8:15:54:36:69:3A:EF:1A:82:B3:B1:A7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.150.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:7a:39:19:77:a1:d0:e0:c9:37:9e:66:2b:01:49:ad:d2:f3: f4:c7:cb:6d:a0:f5:7c:d7:77:4c:50:7f:d5:2d:50:50:a0:d6: ce:0f:48:36:c1:63:39:57:f9:ff:62:9b:72:82:60:79:e7:f7: 6d:39:6d:1e:6e:93:f1:8e:be:1d:b7:ac:25:74:01:c9:4f:6b: a9:40:74:2a:06:69:bd:d0:39:66:29:5f:b7:48:2b:13:4e:15: 97:48:e2:ee:c8:0b:b4:69:0c:5e:ce:95:8f:bc:5b:d8:f6:e0: 86:a7:ec:4f:9b:08:06:dc:52:1f:0c:ee:4c:cd:8d:c9:7b:c8: 85:61:38:ae:bf:24:cb:2f:ff:8d:5e:35:e7:8f:3d:3d:3f:03: b2:63:4a:28:60:94:27:3b:e0:fc:1c:d8:29:a0:c5:17:48:11: 30:a0:f2:22:48:77:d9:c0:0c:a5:db:f9:bf:b2:1c:a0:16:2a: 57:6c:b8:07:1b:a2:25:0d:06:51:c1:b2:dd:f2:21:ec:db:65: 13:ec:c4:2a:9f:5a:28:f7:8b:84:0c:5c:ac:36:bd:75:3a:ba: 49:2e:0e:4a:0d:c1:b2:48:9c:43:e8:8e:f6:44:92:55:b9:b8: b2:c2:87:c8:f3:b7:8a:78:b2:36:f8:62:fc:04:80:21:84:22: bb:74:12:9f -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUNN83fpIYl7Fy8DxhQ/ALSO16sukwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjY0MVoX DTI3MDUwMjAwMzE0MVowMzExMC8GA1UEAxMoODgzNjY0REE2MTNDOTA2N0M4MTU1 NDM2NjkzQUVGMUE4MkIzQjFBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALocF853IlqvFMDAvHrgryAiXM/WZmoRbJFb6yMrBmqZzow+RezSSdzrAY5E 7xTR56fB58CwjcnM4N8dCeuBtGCu04G9bJ6QgDH1CFdTc/879fRt6mPvOJ7CRcRx 87hsZpPNlqVXANgAZEMA/+ioj6SovjrLd6me7d9grjDqG/saBjQNJFi3GQPOlGGg y6EC4nBzeXoa0LQupzYxROFJkOTZCKW9oF0IQ3K2d45ykBklxWcYF0+UXZJ7dzYZ 7aXxQmr04jvr4Xr2SLHVoJ8ZIxNURnKRnN0MQpiMVNbnQPlnZmPZcpic7xXhYfJ8 3+o5RPiG/wYus2AwSOdVbMWsVvcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIg2ZNphPJBnyBVUNmk67xqCs7GnMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQ2NWZhOThmLTFlODUtNDYzOC1iYjlkLTI4NzM3OGE0Y2U4Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80NjVmYTk4 Zi0xZTg1LTQ2MzgtYmI5ZC0yODczNzhhNGNlODcvMC84ODM2NjREQTYxM0M5MDY3 QzgxNTU0MzY2OTNBRUYxQTgyQjNCMUE3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7KWMA0GCSqGSIb3DQEBCwUAA4IBAQBKejkZd6HQ4Mk3nmYrAUmt0vP0x8tt oPV813dMUH/VLVBQoNbOD0g2wWM5V/n/YptygmB55/dtOW0ebpPxjr4dt6wldAHJ T2upQHQqBmm90DlmKV+3SCsTThWXSOLuyAu0aQxezpWPvFvY9uCGp+xPmwgG3FIf DO5MzY3Je8iFYTiuvyTLL/+NXjXnjz09PwOyY0ooYJQnO+D8HNgpoMUXSBEwoPIi SHfZwAyl2/m/shygFipXbLgHG6IlDQZRwbLd8iHs22UT7MQqn1oo94uEDFysNr11 OrpJLg5KDcGySJxD6I72RJJVubiywofI87eKeLI2+GL8BIAhhCK7dBKf -----END CERTIFICATE-----Generated at Tue May 12 22:16:47 2026 by rpki-client