$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer File: 8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer (raw, json) Hash identifier: 2yeV014WzXxwxyhKYZ1iV2fCycta6ZMGS5F0hUe+9d8= Subject key identifier: 8A:BD:45:58:C9:F9:4F:FC:67:0A:52:DB:39:F0:C9:B0:B8:39:82:25 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 16D0824380297FB63E37A6958CF7950830B93C45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:58:37 +0000 Certificate not after: Sun 02 May 2027 02:03:37 +0000 Subordinate resources: IP: 103.140.74.0/23 IP: 2404:f9c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:d0:82:43:80:29:7f:b6:3e:37:a6:95:8c:f7:95:08:30:b9:3c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:58:37 2026 GMT Not After : May 2 02:03:37 2027 GMT Subject: CN=8ABD4558C9F94FFC670A52DB39F0C9B0B8398225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0c:43:98:9c:23:bb:d0:4a:e5:3b:1c:24:06: fd:5d:c8:79:44:46:15:b6:16:6b:99:6c:94:fb:fc: e9:ce:68:5d:18:ce:e1:28:4a:b3:9b:fe:54:f9:0e: e0:6b:4b:b1:53:09:66:ab:5c:4c:9e:ee:d1:fc:b1: bd:17:82:44:d5:6f:b2:d6:32:d9:38:03:47:25:d6: a3:47:2e:93:42:c7:d6:78:1e:1b:3b:eb:e0:6f:99: 74:f7:5a:d2:6c:f7:3e:0d:fb:2d:32:71:9f:34:b5: b9:81:e3:ea:ee:71:0a:12:40:2b:79:6b:81:74:e0: b7:77:7e:2e:db:85:48:48:14:7b:e2:ef:d8:6b:e4: 9e:15:1d:58:6d:a3:cf:a3:83:8f:8e:9c:ce:9b:c0: 7b:3e:f9:c5:1e:73:35:84:b8:89:da:77:2b:0b:30: e2:15:cf:60:e5:24:ea:82:ad:d6:75:e7:e6:19:ef: 7a:b2:43:da:0b:55:ef:61:e1:b8:c5:c8:04:91:d5: 25:22:24:07:62:6f:6a:2d:be:d0:34:ba:71:bc:5a: d6:1f:6e:20:79:14:ff:17:95:7d:f3:06:84:77:8d: d3:21:f5:0e:7c:8d:fe:78:f8:2d:17:5f:1b:e5:db: 90:0d:3d:e9:fe:f1:b1:0b:4a:61:4c:1f:57:37:8c: df:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:BD:45:58:C9:F9:4F:FC:67:0A:52:DB:39:F0:C9:B0:B8:39:82:25 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.74.0/23 IPv6: 2404:f9c0::/32 Signature Algorithm: sha256WithRSAEncryption 77:61:0e:fb:52:ec:ed:a0:5f:ec:06:27:fc:c0:89:ca:1d:f8: 58:80:67:b7:d8:3d:f5:f0:db:6e:92:df:ac:f2:7d:0e:ce:d8: 52:b8:ad:dd:ad:34:04:aa:86:c8:9e:71:56:1b:59:54:11:90: 42:3f:39:59:f2:43:d0:67:8e:fd:24:f5:c2:00:56:73:5c:49: 11:c8:a6:8f:bd:e3:83:01:42:28:a1:ec:cf:f8:07:14:6b:e4: 03:b6:28:c1:69:2d:db:10:48:76:eb:a3:b5:bb:34:d4:8f:9a: 8e:ce:f5:5a:b5:05:cf:07:6f:3f:a3:a8:9d:bb:0a:56:92:7a: 88:74:d5:a8:d5:ac:af:31:74:1a:71:7b:d9:db:21:9e:af:44: b4:f2:d4:53:4f:e9:94:0d:33:01:21:7a:b0:09:4a:c6:1c:61: f6:d4:49:a4:3f:37:fa:7f:60:06:18:91:b4:a6:c8:35:fb:4a: 54:e5:ab:af:c3:17:0b:b1:8c:71:1c:48:10:e0:c9:37:95:14: 48:e5:58:40:f9:d9:4e:20:17:f2:c1:c2:79:56:64:29:83:5a: 86:6b:a0:1e:07:e7:36:0d:df:5a:63:70:ae:c1:03:11:16:4c: dc:a8:51:30:d8:46:e6:b0:00:61:ba:f8:64:d5:a7:b9:93:ea: 95:f5:57:1b -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUFtCCQ4Apf7Y+N6aVjPeVCDC5PEUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTgzN1oX DTI3MDUwMjAyMDMzN1owMzExMC8GA1UEAxMoOEFCRDQ1NThDOUY5NEZGQzY3MEE1 MkRCMzlGMEM5QjBCODM5ODIyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOsMQ5icI7vQSuU7HCQG/V3IeURGFbYWa5lslPv86c5oXRjO4ShKs5v+VPkO 4GtLsVMJZqtcTJ7u0fyxvReCRNVvstYy2TgDRyXWo0cuk0LH1ngeGzvr4G+ZdPda 0mz3Pg37LTJxnzS1uYHj6u5xChJAK3lrgXTgt3d+LtuFSEgUe+Lv2GvknhUdWG2j z6ODj46czpvAez75xR5zNYS4idp3Kwsw4hXPYOUk6oKt1nXn5hnverJD2gtV72Hh uMXIBJHVJSIkB2Jvai2+0DS6cbxa1h9uIHkU/xeVffMGhHeN0yH1DnyN/nj4LRdf G+XbkA096f7xsQtKYUwfVzeM3wECAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIq9RVjJ+U/8ZwpS2znwybC4OYIlMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2QzODdlODVkLWIxODUtNDMzNC04MDFiLTQ5YzhjOGI5MTg0NC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kMzg3ZTg1 ZC1iMTg1LTQzMzQtODAxYi00OWM4YzhiOTE4NDQvMC84QUJENDU1OEM5Rjk0RkZD NjcwQTUyREIzOUYwQzlCMEI4Mzk4MjI1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ4xKMA0EAgACMAcDBQAkBPnAMA0GCSqGSIb3DQEBCwUAA4IBAQB3YQ77Uuzt oF/sBif8wInKHfhYgGe32D318Ntukt+s8n0OzthSuK3drTQEqobInnFWG1lUEZBC PzlZ8kPQZ479JPXCAFZzXEkRyKaPveODAUIooezP+AcUa+QDtijBaS3bEEh266O1 uzTUj5qOzvVatQXPB28/o6iduwpWknqIdNWo1ayvMXQacXvZ2yGer0S08tRTT+mU DTMBIXqwCUrGHGH21EmkPzf6f2AGGJG0psg1+0pU5auvwxcLsYxxHEgQ4Mk3lRRI 5VhA+dlOIBfywcJ5VmQpg1qGa6AeB+c2Dd9aY3CuwQMRFkzcqFEw2EbmsABhuvhk 1ae5k+qV9Vcb -----END CERTIFICATE-----Generated at Tue May 12 22:52:48 2026 by rpki-client