$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/897D06B789644C150E8DD42A6444FA986BC2AC88.cer File: 897D06B789644C150E8DD42A6444FA986BC2AC88.cer (raw, json) Hash identifier: b1iOwD/HuXGf5xy626y3q/3LtQZLKn5t3AuQ03qWtvE= Subject key identifier: 89:7D:06:B7:89:64:4C:15:0E:8D:D4:2A:64:44:FA:98:6B:C2:AC:88 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: F28EA164DD9F0187B1DD4D12F9C88276884B4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft caRepository: rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:12:08 +0000 Certificate not after: Sun 02 May 2027 01:17:08 +0000 Subordinate resources: IP: 45.251.4.0/22 IP: 101.255.0.0/16 IP: 103.15.172.0/22 IP: 115.124.64.0/19 IP: 202.182.48.0/21 IP: 2404:cf00::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: f2:8e:a1:64:dd:9f:01:87:b1:dd:4d:12:f9:c8:82:76:88:4b:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:12:08 2026 GMT Not After : May 2 01:17:08 2027 GMT Subject: CN=897D06B789644C150E8DD42A6444FA986BC2AC88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bf:cf:85:af:35:ca:01:5c:d6:c7:f1:dd:e7: 40:2c:76:a5:0d:78:c0:c3:18:8d:fd:02:83:0c:5e: fb:a3:0b:0f:9a:3a:2f:9a:21:e6:c2:d9:76:b1:9d: 5a:49:01:43:26:29:fd:37:6a:3a:f9:15:3f:08:70: 6e:97:27:a9:4a:ee:45:9c:0e:a9:f7:21:55:2b:47: bc:a2:22:c8:19:c3:58:74:0e:5b:5e:be:f6:91:a8: bc:b2:6a:54:5c:cb:65:15:3d:19:3a:7d:fe:85:37: f2:14:6b:44:06:b4:50:35:73:2c:6d:05:64:c7:33: 23:ad:fa:0a:77:22:f9:95:bd:17:d7:76:23:57:37: f9:73:f6:a1:c8:23:2e:4e:fa:a2:9b:07:1f:4c:37: 1c:b3:d7:a9:e0:c7:55:5f:96:94:69:db:e3:c9:65: 39:da:a4:f3:bf:a0:ed:ec:32:3e:6c:b0:9d:30:7f: c7:2e:52:3e:aa:84:75:d3:33:4a:4c:2e:b7:2c:1d: 92:a2:02:a6:3f:cf:71:1b:e8:db:81:02:58:37:b3: 2c:4e:de:6f:e0:f9:e7:15:b4:89:a8:b6:bb:4c:65: ab:5e:7e:c3:9f:fe:81:8d:b8:c0:0e:7e:f1:3b:4c: 6c:f8:bd:02:c5:a3:32:87:85:82:99:03:27:a2:d5: 69:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 89:7D:06:B7:89:64:4C:15:0E:8D:D4:2A:64:44:FA:98:6B:C2:AC:88 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/897D06B789644C150E8DD42A6444FA986BC2AC88.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.251.4.0/22 101.255.0.0/16 103.15.172.0/22 115.124.64.0/19 202.182.48.0/21 IPv6: 2404:cf00::/32 Signature Algorithm: sha256WithRSAEncryption 0f:dd:e1:dc:62:ef:85:3d:a1:21:97:d1:8a:71:25:e4:d6:0c: 09:88:54:62:22:f1:d0:e0:8c:a1:b7:87:99:9c:dc:15:d5:b5: 49:ff:0c:99:38:85:2c:99:65:4b:7c:eb:d5:f5:91:e7:4d:1d: a3:7b:d3:9e:3d:f1:6a:e5:96:21:16:eb:cb:09:5f:50:b8:14: 4a:a5:75:04:57:45:d7:7f:bc:ca:44:b8:c8:7c:93:cb:67:a4: 57:d9:9b:76:ed:f9:6c:31:5b:fe:b2:56:e9:03:46:8e:59:39: 92:dd:e9:82:76:9f:f1:78:9f:d1:96:02:b3:0f:89:9d:81:66: 2d:ef:d0:50:1c:98:ec:08:1c:18:8e:ae:08:70:d1:48:12:bf: 1e:cd:b6:5d:a6:99:fd:dc:48:57:cd:0f:02:8e:20:0f:4e:d7: ec:7b:1e:de:53:ee:68:cf:86:21:05:de:53:68:a4:ca:27:f3: 18:24:90:4d:e1:0a:9a:b1:24:af:f2:c3:3a:7d:1e:d3:2c:12: 29:b7:91:f6:6c:a2:b2:94:88:5e:5d:0b:26:f8:e1:e6:e8:a0: 72:92:08:7c:26:1d:99:3b:b5:fb:e6:78:c1:ae:39:a9:9b:e4: e6:15:f5:4e:79:61:ea:bd:46:9f:4b:8a:57:ad:3e:77:11:51: 28:bd:80:6f -----BEGIN CERTIFICATE----- MIIF7DCCBNSgAwIBAgIUAPKOoWTdnwGHsd1NEvnIgnaIS0swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTIwOFoX DTI3MDUwMjAxMTcwOFowMzExMC8GA1UEAxMoODk3RDA2Qjc4OTY0NEMxNTBFOERE NDJBNjQ0NEZBOTg2QkMyQUM4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ+/z4WvNcoBXNbH8d3nQCx2pQ14wMMYjf0Cgwxe+6MLD5o6L5oh5sLZdrGd WkkBQyYp/TdqOvkVPwhwbpcnqUruRZwOqfchVStHvKIiyBnDWHQOW16+9pGovLJq VFzLZRU9GTp9/oU38hRrRAa0UDVzLG0FZMczI636Cnci+ZW9F9d2I1c3+XP2ocgj Lk76opsHH0w3HLPXqeDHVV+WlGnb48llOdqk87+g7ewyPmywnTB/xy5SPqqEddMz SkwutywdkqICpj/PcRvo24ECWDezLE7eb+D55xW0iai2u0xlq15+w5/+gY24wA5+ 8TtMbPi9AsWjMoeFgpkDJ6LVaScCAwEAAaOCAt8wggLbMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIl9BreJZEwVDo3UKmRE+phrwqyIMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg4ZjI5MTVkLTE4YzktNGUwMy1iYmZiLTIwNzRjNTk4MDg5OC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84OGYyOTE1 ZC0xOGM5LTRlMDMtYmJmYi0yMDc0YzU5ODA4OTgvMC84OTdEMDZCNzg5NjQ0QzE1 MEU4REQ0MkE2NDQ0RkE5ODZCQzJBQzg4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAjBAIAATAd AwQCLfsEAwMAZf8DBAJnD6wDBAVzfEADBAPKtjAwDQQCAAIwBwMFACQEzwAwDQYJ KoZIhvcNAQELBQADggEBAA/d4dxi74U9oSGX0YpxJeTWDAmIVGIi8dDgjKG3h5mc 3BXVtUn/DJk4hSyZZUt869X1kedNHaN705498WrlliEW68sJX1C4FEqldQRXRdd/ vMpEuMh8k8tnpFfZm3bt+WwxW/6yVukDRo5ZOZLd6YJ2n/F4n9GWArMPiZ2BZi3v 0FAcmOwIHBiOrghw0UgSvx7Ntl2mmf3cSFfNDwKOIA9O1+x7Ht5T7mjPhiEF3lNo pMon8xgkkE3hCpqxJK/ywzp9HtMsEim3kfZsorKUiF5dCyb44ebooHKSCHwmHZk7 tfvmeMGuOamb5OYV9U55Yeq9Rp9LiletPncRUSi9gG8= -----END CERTIFICATE-----Generated at Tue May 12 22:03:08 2026 by rpki-client