$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer File: 8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer (raw, json) Hash identifier: vqBrEP4ce1UELpnOWK4XMFSRvQXfqju5+empXmNdf9Q= Subject key identifier: 8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0A4ED00351C2D13625E10578B8BCA760E3E17215 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:58:55 +0000 Certificate not after: Sun 02 May 2027 02:03:55 +0000 Subordinate resources: IP: 45.127.132.0/22 IP: 103.56.204.0/22 IP: 2001:df5:1c00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:4e:d0:03:51:c2:d1:36:25:e1:05:78:b8:bc:a7:60:e3:e1:72:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:58:55 2026 GMT Not After : May 2 02:03:55 2027 GMT Subject: CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:aa:62:3a:92:ad:4c:57:7d:63:87:eb:cc:3e: aa:32:33:4a:44:e1:5f:df:25:fb:e8:65:de:e6:48: 3d:77:1e:34:33:98:0b:bf:16:ee:dc:db:30:4e:b2: 62:1f:08:02:45:8a:d5:d4:d9:9d:14:30:d4:5e:10: ca:19:56:8c:c5:cd:a1:f6:60:6f:a1:2b:02:f2:a2: 77:3f:87:06:56:ac:8f:ed:cf:46:00:18:3f:d5:21: d7:5b:3f:9b:46:5e:92:95:12:c4:ec:aa:18:df:78: 2d:48:75:fe:e9:a9:8b:50:a2:3c:7f:ce:c9:6c:fd: a7:29:ec:b3:2b:fc:4a:ac:dd:bf:7a:03:30:01:43: f9:2a:d5:d0:2e:f4:b0:bb:8e:7c:e6:b4:a4:ca:75: 4d:30:0f:73:16:b0:e6:cd:cb:64:39:8b:ff:4b:d1: 3d:b4:6e:e0:d8:45:e3:8f:f3:54:1a:42:07:9e:51: e1:88:d8:83:1a:cc:bd:51:33:30:fc:39:d6:52:d3: 9f:49:d9:2f:d7:5e:9e:39:9b:f1:06:cc:56:ee:0e: 5e:d3:17:59:1b:cf:da:63:f4:eb:ad:f7:aa:b6:98: 1f:12:a3:37:1c:c7:5f:33:72:05:b1:86:6e:ed:cc: ec:b6:9d:93:b9:9f:f8:88:6d:6a:d4:b4:62:4b:67: cd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.127.132.0/22 103.56.204.0/22 IPv6: 2001:df5:1c00::/48 Signature Algorithm: sha256WithRSAEncryption 82:d9:10:bb:f5:b4:df:dd:ba:94:5f:0f:df:ea:89:f0:c2:b0: 68:5e:27:ca:c9:34:d1:5a:33:44:c2:0c:6e:ce:fa:38:06:78: 02:83:cc:1c:85:d5:4e:f6:76:fc:2c:31:16:6e:a2:12:c9:db: f1:5b:4c:6c:de:de:2c:26:5d:12:96:3a:2d:32:87:c6:23:ec: 4d:62:aa:6e:3f:17:a7:2f:a3:50:37:a5:95:62:97:d1:8f:72: bb:bf:a5:be:a1:0e:f9:4e:18:21:ac:94:2f:2d:91:9f:6d:99: ac:0e:81:fe:ff:f4:be:5a:f2:e6:59:8f:5a:5e:18:32:f7:a0: 7c:df:eb:46:fe:9a:bb:bd:6a:c8:64:74:2a:f9:6b:a8:09:37: 2f:57:22:95:21:e3:af:0f:6b:cd:35:10:3a:fe:dc:ad:2d:5c: 39:c5:6b:c6:49:7f:33:66:3b:fd:79:ab:57:94:7e:a3:43:cc: 25:46:4f:71:ba:68:eb:06:87:23:fb:9d:4f:f7:7c:e2:55:40: b0:a4:11:33:15:b3:05:30:9b:b1:7b:be:04:4e:b9:ad:8e:be: 83:ac:34:dd:30:a4:9f:e9:82:f3:ec:44:f1:04:e0:b6:8b:f9: 47:a7:8a:7a:5f:0f:e8:5b:6c:08:cc:08:70:08:18:e4:1d:60: 24:74:e1:c3 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUCk7QA1HC0TYl4QV4uLynYOPhchUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTg1NVoX DTI3MDUwMjAyMDM1NVowMzExMC8GA1UEAxMoOEFFOUJCMjEwMDNFODczOTZDRURE Nzg5OEI0QTUwNDI0RThDRUM4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANeqYjqSrUxXfWOH68w+qjIzSkThX98l++hl3uZIPXceNDOYC78W7tzbME6y Yh8IAkWK1dTZnRQw1F4QyhlWjMXNofZgb6ErAvKidz+HBlasj+3PRgAYP9Uh11s/ m0ZekpUSxOyqGN94LUh1/umpi1CiPH/OyWz9pynssyv8Sqzdv3oDMAFD+SrV0C70 sLuOfOa0pMp1TTAPcxaw5s3LZDmL/0vRPbRu4NhF44/zVBpCB55R4YjYgxrMvVEz MPw51lLTn0nZL9denjmb8QbMVu4OXtMXWRvP2mP06633qraYHxKjNxzHXzNyBbGG bu3M7Ladk7mf+IhtatS0YktnzTECAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIrpuyEAPoc5bO3XiYtKUEJOjOyPMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2QzZjhmNTVjLTllMzUtNGNlMi04OTBmLTBkZTNlMjQwNDYxMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kM2Y4ZjU1 Yy05ZTM1LTRjZTItODkwZi0wZGUzZTI0MDQ2MTEvMC84QUU5QkIyMTAwM0U4NzM5 NkNFREQ3ODk4QjRBNTA0MjRFOENFQzhGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQCLX+EAwQCZzjMMA8EAgACMAkDBwAgAQ31HAAwDQYJKoZIhvcNAQELBQADggEB AILZELv1tN/dupRfD9/qifDCsGheJ8rJNNFaM0TCDG7O+jgGeAKDzByF1U72dvws MRZuohLJ2/FbTGze3iwmXRKWOi0yh8Yj7E1iqm4/F6cvo1A3pZVil9GPcru/pb6h DvlOGCGslC8tkZ9tmawOgf7/9L5a8uZZj1peGDL3oHzf60b+mru9ashkdCr5a6gJ Ny9XIpUh468Pa801EDr+3K0tXDnFa8ZJfzNmO/15q1eUfqNDzCVGT3G6aOsGhyP7 nU/3fOJVQLCkETMVswUwm7F7vgROua2OvoOsNN0wpJ/pgvPsRPEE4LaL+Ueninpf D+hbbAjMCHAIGOQdYCR04cM= -----END CERTIFICATE-----Generated at Wed May 13 00:27:38 2026 by rpki-client