$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/884E2365E4B8AF05C44BD649D5B42968E48B8A97.cer File: 884E2365E4B8AF05C44BD649D5B42968E48B8A97.cer (raw, json) Hash identifier: /silwZhmhtuvZDWiY1xTulqWQa71gq+GwdlYggpI6Mo= Subject key identifier: 88:4E:23:65:E4:B8:AF:05:C4:4B:D6:49:D5:B4:29:68:E4:8B:8A:97 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7E03D9A5C40D2E7ED5CCE3CDDA0B6217008982E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft caRepository: rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:55:47 +0000 Certificate not after: Sun 02 May 2027 00:00:47 +0000 Subordinate resources: IP: 103.11.22.0/23 IP: 2001:df0:2ec::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:03:d9:a5:c4:0d:2e:7e:d5:cc:e3:cd:da:0b:62:17:00:89:82:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:55:47 2026 GMT Not After : May 2 00:00:47 2027 GMT Subject: CN=884E2365E4B8AF05C44BD649D5B42968E48B8A97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d8:7b:45:3e:fd:00:a0:4d:fe:b8:98:e6:dc: fd:47:f8:4d:50:60:41:8b:40:70:71:1b:7a:fb:9f: a5:2f:c8:b2:94:d1:2b:58:4f:fa:81:c3:c7:cf:9e: 9c:8b:30:d1:b2:05:02:ec:70:8f:e3:f3:a4:4a:9b: c1:15:9a:56:86:08:99:c5:87:07:e7:bd:6e:e7:25: 80:b5:ef:37:a4:fa:43:41:e9:71:f3:62:72:7e:b9: 63:55:ca:d8:40:f5:d2:5b:e4:b1:05:a3:db:9a:01: 13:63:c5:dc:5c:d0:b8:56:50:df:cb:bb:a2:98:05: 0c:8b:61:31:a3:da:7a:52:7c:33:ca:e8:a8:35:33: 96:36:b9:f5:ef:ab:42:a9:02:0c:df:d3:de:15:60: 21:72:c9:bb:56:f9:11:30:95:94:0c:5c:fe:c3:17: 73:04:79:91:ea:81:31:d2:55:11:5f:05:5f:98:0d: 3a:35:ab:6c:1c:91:bc:43:50:d2:2a:c2:8c:fe:92: d9:f1:2d:d3:73:63:93:a2:d2:43:c5:7c:cc:6d:18: 69:4b:e4:26:e8:6d:f0:d6:89:cc:26:06:31:bb:14: 47:58:5d:ad:08:8b:f8:e5:20:75:bd:06:27:cf:ee: a4:12:32:e1:9b:af:f2:65:41:30:24:8a:99:b8:8d: 78:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:4E:23:65:E4:B8:AF:05:C4:4B:D6:49:D5:B4:29:68:E4:8B:8A:97 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.11.22.0/23 IPv6: 2001:df0:2ec::/48 Signature Algorithm: sha256WithRSAEncryption 38:fd:e3:ba:d0:a9:b7:3a:cc:a0:b2:0c:63:a8:3c:eb:dd:86: 02:da:8c:e8:6c:9f:b8:12:59:06:d5:64:64:4d:ca:fa:1f:08: 91:81:cb:b3:b4:57:d3:0f:09:80:ee:8f:30:05:a1:ca:72:82: 8d:dd:39:89:12:20:ea:6e:e6:4e:df:f5:5a:bc:1d:87:60:9f: c4:bd:06:f6:d8:e8:25:f2:31:88:7c:db:d4:47:de:76:ba:30: ea:b6:f7:7f:61:23:0d:a3:b6:ce:df:87:84:ad:3d:f4:70:6e: fb:7e:1f:0c:38:9b:50:48:ef:57:c0:26:60:88:9c:e5:d9:0b: 3d:61:99:54:d3:d2:19:ab:ca:8c:e6:d5:07:ca:70:8e:6f:37: 33:3b:83:05:86:a3:3d:46:c0:c3:cb:38:1e:62:a4:94:d9:28: c5:a0:2f:2f:e2:b9:ec:7b:18:44:94:f9:47:e3:63:89:3e:0d: a4:cd:bd:23:11:d3:ac:2d:43:70:03:42:f8:01:a8:84:1e:d3: ef:cf:f3:52:7a:84:95:25:50:64:e1:08:9f:62:53:a1:5d:21: 03:9d:70:6e:9a:9d:cc:81:93:02:5c:04:7d:a5:15:16:1d:a6: 63:a6:ce:93:62:38:70:6f:2c:53:c8:23:44:30:9d:ef:62:3c: 27:19:d4:7b -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUfgPZpcQNLn7VzOPN2gtiFwCJguYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTU0N1oX DTI3MDUwMjAwMDA0N1owMzExMC8GA1UEAxMoODg0RTIzNjVFNEI4QUYwNUM0NEJE NjQ5RDVCNDI5NjhFNDhCOEE5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOvYe0U+/QCgTf64mObc/Uf4TVBgQYtAcHEbevufpS/IspTRK1hP+oHDx8+e nIsw0bIFAuxwj+PzpEqbwRWaVoYImcWHB+e9buclgLXvN6T6Q0HpcfNicn65Y1XK 2ED10lvksQWj25oBE2PF3FzQuFZQ38u7opgFDIthMaPaelJ8M8roqDUzlja59e+r QqkCDN/T3hVgIXLJu1b5ETCVlAxc/sMXcwR5keqBMdJVEV8FX5gNOjWrbByRvENQ 0irCjP6S2fEt03Njk6LSQ8V8zG0YaUvkJuht8NaJzCYGMbsUR1hdrQiL+OUgdb0G J8/upBIy4Zuv8mVBMCSKmbiNeN0CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIhOI2XkuK8FxEvWSdW0KWjki4qXMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE4N2FkZTlmLTZiNzktNDcyMy05OTQ5LTk2ZGU3ZTQxZGI3MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xODdhZGU5 Zi02Yjc5LTQ3MjMtOTk0OS05NmRlN2U0MWRiNzAvMC84ODRFMjM2NUU0QjhBRjA1 QzQ0QkQ2NDlENUI0Mjk2OEU0OEI4QTk3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZwsWMA8EAgACMAkDBwAgAQ3wAuwwDQYJKoZIhvcNAQELBQADggEBADj947rQ qbc6zKCyDGOoPOvdhgLajOhsn7gSWQbVZGRNyvofCJGBy7O0V9MPCYDujzAFocpy go3dOYkSIOpu5k7f9Vq8HYdgn8S9BvbY6CXyMYh829RH3na6MOq2939hIw2jts7f h4StPfRwbvt+Hww4m1BI71fAJmCInOXZCz1hmVTT0hmryozm1QfKcI5vNzM7gwWG oz1GwMPLOB5ipJTZKMWgLy/iuex7GESU+UfjY4k+DaTNvSMR06wtQ3ADQvgBqIQe 0+/P81J6hJUlUGThCJ9iU6FdIQOdcG6ancyBkwJcBH2lFRYdpmOmzpNiOHBvLFPI I0Qwne9iPCcZ1Hs= -----END CERTIFICATE-----Generated at Wed May 13 02:12:26 2026 by rpki-client