$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer File: 8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer (raw, json) Hash identifier: 38OQycWmt4eKWPyx7CBKd2nbou6f5eSCGW+7UYfDsLA= Subject key identifier: 8B:0C:F8:7F:23:49:FC:87:87:EF:52:E3:B0:AD:80:E1:41:E2:BE:1C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 149F1C37551961696420A9EA44BF9B45822FFB89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:12:32 +0000 Certificate not after: Sun 02 May 2027 01:17:32 +0000 Subordinate resources: IP: 103.126.232.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:9f:1c:37:55:19:61:69:64:20:a9:ea:44:bf:9b:45:82:2f:fb:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:12:32 2026 GMT Not After : May 2 01:17:32 2027 GMT Subject: CN=8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cb:70:1b:c0:6f:48:85:2b:83:52:18:f0:9c: 4d:b3:d9:08:1f:6a:b0:53:ac:3e:91:a8:14:3f:dc: 5d:a8:36:4e:4d:df:be:79:ea:95:cc:ea:d7:54:cc: 6a:c1:0c:fc:9a:ae:4c:a8:f2:a3:3c:f8:80:ab:65: 7b:22:80:53:82:82:9c:6c:dc:e7:ad:3e:62:06:6a: 1c:fa:70:c4:1c:ba:ad:78:5a:f0:95:c6:f3:f9:0d: f0:e1:9d:db:68:74:23:de:54:ab:d8:56:db:93:50: 63:c6:86:8f:68:83:cb:6a:3c:4b:f6:86:05:80:85: e5:3d:66:1c:49:7a:29:54:2b:9a:0a:cf:ce:88:48: 32:5a:0d:58:e9:5c:69:e2:fb:80:23:95:ea:d2:cf: d9:b2:a5:d0:ff:9a:45:09:03:5a:58:99:6d:9d:e6: 8e:1d:99:9d:86:67:81:79:35:f9:4b:3c:02:ab:3d: 9c:82:e7:bf:75:2e:76:4e:38:cb:e6:a9:36:8d:68: 69:00:7e:6f:cc:60:a7:6a:ce:37:02:a1:71:48:69: b5:28:b2:58:ad:23:0f:3c:5b:7a:71:f8:ac:ad:96: 86:e3:7b:bf:b0:80:3a:7d:41:21:80:a8:a7:08:ff: af:2a:3a:7d:12:cd:9f:ec:63:20:a8:23:27:92:e5: e9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:0C:F8:7F:23:49:FC:87:87:EF:52:E3:B0:AD:80:E1:41:E2:BE:1C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.126.232.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:fc:6b:ca:de:e8:49:d9:06:ff:17:56:b0:0a:52:5d:81:cc: fa:36:0c:a7:22:71:f1:85:f2:09:37:de:7f:c4:b6:24:f9:1a: 95:6e:e6:81:38:89:65:dc:68:82:a0:fc:7a:95:58:d9:cd:04: 63:fc:7f:ce:ad:3e:b6:5a:d2:5a:19:6a:c1:ae:35:4a:c6:34: b5:8e:27:28:9d:2a:49:3c:e4:e2:48:9c:a8:9a:18:ae:7f:16: 78:57:f3:c6:83:f5:b7:75:d1:10:de:0f:5f:3b:da:79:09:f7: e9:2f:94:eb:c2:55:75:8e:f8:96:54:44:8e:f2:8f:34:3f:8f: bd:08:c0:7a:64:08:b7:de:42:dc:3d:df:e5:9b:b3:7f:f2:3c: 1c:40:34:ab:48:ba:09:a4:50:be:ea:26:95:53:0c:df:21:c0: 7a:10:28:55:02:ab:2e:22:e6:03:72:d3:44:71:da:a4:b0:ad: fd:e5:90:b9:62:d0:8d:86:91:8e:c3:b6:ad:9a:a3:60:d2:76: 7c:45:f8:8f:fe:53:f7:0e:06:c1:b6:12:f9:d0:29:fa:4b:01: 90:5c:a5:41:51:30:74:a0:34:ea:d5:64:e9:2c:48:de:cd:b6: 98:0e:e0:cf:82:74:70:c0:9e:e8:b4:f7:4e:47:df:18:6a:c4: 07:b8:0e:05 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUFJ8cN1UZYWlkIKnqRL+bRYIv+4kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTIzMloX DTI3MDUwMjAxMTczMlowMzExMC8GA1UEAxMoOEIwQ0Y4N0YyMzQ5RkM4Nzg3RUY1 MkUzQjBBRDgwRTE0MUUyQkUxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANnLcBvAb0iFK4NSGPCcTbPZCB9qsFOsPpGoFD/cXag2Tk3fvnnqlczq11TM asEM/JquTKjyozz4gKtleyKAU4KCnGzc560+YgZqHPpwxBy6rXha8JXG8/kN8OGd 22h0I95Uq9hW25NQY8aGj2iDy2o8S/aGBYCF5T1mHEl6KVQrmgrPzohIMloNWOlc aeL7gCOV6tLP2bKl0P+aRQkDWliZbZ3mjh2ZnYZngXk1+Us8Aqs9nILnv3Uudk44 y+apNo1oaQB+b8xgp2rONwKhcUhptSiyWK0jDzxbenH4rK2WhuN7v7CAOn1BIYCo pwj/ryo6fRLNn+xjIKgjJ5Ll6aUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIsM+H8jSfyHh+9S47CtgOFB4r4cMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg5YTQwMDg5LTYwNDEtNDVlZC04ZTQ0LWE5OTdjOGFjZjQ4MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84OWE0MDA4 OS02MDQxLTQ1ZWQtOGU0NC1hOTk3YzhhY2Y0ODAvMC84QjBDRjg3RjIzNDlGQzg3 ODdFRjUyRTNCMEFEODBFMTQxRTJCRTFDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ37oMA0GCSqGSIb3DQEBCwUAA4IBAQBe/GvK3uhJ2Qb/F1awClJdgcz6Ngyn InHxhfIJN95/xLYk+RqVbuaBOIll3GiCoPx6lVjZzQRj/H/OrT62WtJaGWrBrjVK xjS1jiconSpJPOTiSJyomhiufxZ4V/PGg/W3ddEQ3g9fO9p5CffpL5TrwlV1jviW VESO8o80P4+9CMB6ZAi33kLcPd/lm7N/8jwcQDSrSLoJpFC+6iaVUwzfIcB6EChV AqsuIuYDctNEcdqksK395ZC5YtCNhpGOw7atmqNg0nZ8RfiP/lP3DgbBthL50Cn6 SwGQXKVBUTB0oDTq1WTpLEjezbaYDuDPgnRwwJ7otPdOR98YasQHuA4F -----END CERTIFICATE-----Generated at Tue May 12 22:47:44 2026 by rpki-client