$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/885F36F281B0D4CC516E3818323CB9C1F30AF373.cer File: 885F36F281B0D4CC516E3818323CB9C1F30AF373.cer (raw, json) Hash identifier: FQOp5HSRbVL2IWWEaEFRccL6AGiClql39o2WnOOZ174= Subject key identifier: 88:5F:36:F2:81:B0:D4:CC:51:6E:38:18:32:3C:B9:C1:F3:0A:F3:73 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1B8FD06DF325391FCCD3AEA720A452F7652E8C67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft caRepository: rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:53:02 +0000 Certificate not after: Sat 01 May 2027 23:58:02 +0000 Subordinate resources: IP: 103.140.34.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:8f:d0:6d:f3:25:39:1f:cc:d3:ae:a7:20:a4:52:f7:65:2e:8c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:53:02 2026 GMT Not After : May 1 23:58:02 2027 GMT Subject: CN=885F36F281B0D4CC516E3818323CB9C1F30AF373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:21:bb:2e:15:a3:b3:1a:fd:93:3f:69:94:11: 92:02:81:64:3e:9c:4d:00:b3:bf:c4:88:7d:ed:77: 12:2a:5e:41:07:f7:ee:c1:08:e9:cb:1c:16:40:6b: 10:5b:a6:f0:c7:b6:35:ae:25:10:cd:a9:23:b8:64: c0:0a:1e:28:ee:8d:6d:1d:6b:7d:bd:51:22:94:1e: 17:f5:67:b4:28:e3:d4:33:89:41:c0:f9:2e:d4:60: e7:77:e1:f2:be:38:c6:bd:0a:df:39:86:89:ed:4e: 5b:95:3b:b8:cd:92:1f:cc:bc:a3:fc:32:88:f7:e7: e2:be:3b:04:fd:2a:02:62:42:96:d1:b3:42:45:dd: 1a:3e:28:2b:90:c1:13:e6:87:8c:c1:70:dc:ff:da: b1:fa:1f:95:ea:e2:a9:9b:cc:78:c9:13:5f:db:a6: 77:b4:93:14:e4:91:75:76:2c:a2:1a:59:ba:e9:3c: 87:fd:79:a8:32:dd:ac:ca:4c:6c:1b:02:b9:6f:d0: c8:cc:a9:74:c8:f7:44:4f:a0:15:ab:1c:d4:dd:42: 9c:29:27:36:53:d4:1c:fe:c3:33:85:1e:70:7a:cf: 75:73:c5:14:dd:3b:ff:80:2a:e9:7e:e0:78:cd:34: 5d:a6:55:e0:02:53:c5:22:1f:37:20:fc:7b:ff:3e: bb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:5F:36:F2:81:B0:D4:CC:51:6E:38:18:32:3C:B9:C1:F3:0A:F3:73 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.34.0/23 Signature Algorithm: sha256WithRSAEncryption 20:3b:e0:2a:95:8a:af:b0:88:90:e2:42:ee:9b:1e:c3:d2:a0: 40:33:f7:d4:ce:dc:f1:f0:5d:89:13:2a:f2:a9:6c:f5:10:d5: 75:6d:2d:70:8a:69:63:d5:f8:fc:75:bc:f7:5d:88:aa:96:a6: 81:3b:9d:6a:96:27:fb:6a:0f:15:c6:e2:97:96:19:7b:9b:1e: 75:5c:6a:fc:e5:93:80:17:79:06:f5:64:96:fa:15:a4:7b:f8: f9:c7:83:8f:bb:40:87:e8:36:76:67:cf:c4:fb:22:4f:37:02: 4f:55:12:2b:3d:48:19:08:ae:dd:b6:ea:35:6d:b8:c0:f9:50: c6:17:41:5f:25:59:ee:9a:cc:21:b8:41:5f:5a:f4:b2:83:7c: 61:0a:25:49:17:50:e5:72:b2:fc:f4:6f:bb:cb:83:0d:69:15: 1d:94:de:f6:dd:a0:dc:25:9a:13:b3:bf:18:1a:8e:49:90:d7: 25:86:f4:21:bc:e9:5f:24:ba:97:33:11:7c:eb:0e:3d:df:96: a9:c1:b5:fa:92:12:49:e9:57:6e:f8:2d:1a:24:a1:35:6e:d9: f4:cf:0b:29:2d:41:01:a6:ad:cf:91:3c:d3:52:76:cf:52:8d: 2e:d4:7b:db:04:58:6d:65:40:df:e0:99:25:3e:f6:9a:34:11: 6b:7f:11:1d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUG4/QbfMlOR/M066nIKRS92UujGcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTMwMloX DTI3MDUwMTIzNTgwMlowMzExMC8GA1UEAxMoODg1RjM2RjI4MUIwRDRDQzUxNkUz ODE4MzIzQ0I5QzFGMzBBRjM3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIohuy4Vo7Ma/ZM/aZQRkgKBZD6cTQCzv8SIfe13EipeQQf37sEI6cscFkBr EFum8Me2Na4lEM2pI7hkwAoeKO6NbR1rfb1RIpQeF/VntCjj1DOJQcD5LtRg53fh 8r44xr0K3zmGie1OW5U7uM2SH8y8o/wyiPfn4r47BP0qAmJCltGzQkXdGj4oK5DB E+aHjMFw3P/asfofleriqZvMeMkTX9umd7STFOSRdXYsohpZuuk8h/15qDLdrMpM bBsCuW/QyMypdMj3RE+gFasc1N1CnCknNlPUHP7DM4UecHrPdXPFFN07/4Aq6X7g eM00XaZV4AJTxSIfNyD8e/8+u6cCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIhfNvKBsNTMUW44GDI8ucHzCvNzMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE1MjIyNmVhLTVlMjYtNGVhNS1hNjg5LTQ3NTdhZDA1Zjk1Mi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xNTIyMjZl YS01ZTI2LTRlYTUtYTY4OS00NzU3YWQwNWY5NTIvMC84ODVGMzZGMjgxQjBENEND NTE2RTM4MTgzMjNDQjlDMUYzMEFGMzczLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ4wiMA0GCSqGSIb3DQEBCwUAA4IBAQAgO+AqlYqvsIiQ4kLumx7D0qBAM/fU ztzx8F2JEyryqWz1ENV1bS1wimlj1fj8dbz3XYiqlqaBO51qlif7ag8VxuKXlhl7 mx51XGr85ZOAF3kG9WSW+hWke/j5x4OPu0CH6DZ2Z8/E+yJPNwJPVRIrPUgZCK7d tuo1bbjA+VDGF0FfJVnumswhuEFfWvSyg3xhCiVJF1DlcrL89G+7y4MNaRUdlN72 3aDcJZoTs78YGo5JkNclhvQhvOlfJLqXMxF86w4935apwbX6khJJ6Vdu+C0aJKE1 btn0zwspLUEBpq3PkTzTUnbPUo0u1HvbBFhtZUDf4JklPvaaNBFrfxEd -----END CERTIFICATE-----Generated at Wed May 13 01:07:20 2026 by rpki-client