$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8B43E14BD4588C4904A641356A5D07D628190CAB.cer File: 8B43E14BD4588C4904A641356A5D07D628190CAB.cer (raw, json) Hash identifier: Qvss71VNyzlPS3r5oDDRZziQW+NnLRTZ5wSbEwBDpAU= Subject key identifier: 8B:43:E1:4B:D4:58:8C:49:04:A6:41:35:6A:5D:07:D6:28:19:0C:AB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6C002287080A9EE370D0E05EA0CAA0AE87AABAC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:15:02 +0000 Certificate not after: Sun 02 May 2027 00:20:02 +0000 Subordinate resources: IP: 103.174.36.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:00:22:87:08:0a:9e:e3:70:d0:e0:5e:a0:ca:a0:ae:87:aa:ba:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:15:02 2026 GMT Not After : May 2 00:20:02 2027 GMT Subject: CN=8B43E14BD4588C4904A641356A5D07D628190CAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8b:0b:23:45:4a:d4:ed:87:b8:d6:b9:05:f9: 1f:3d:cc:25:87:e8:1c:62:96:e7:4f:b4:ae:60:a4: 57:f1:3c:4c:80:4c:d7:a2:8e:85:5c:33:78:0c:4f: 19:a9:d8:77:47:99:e6:32:e5:70:57:a1:3a:47:62: 41:35:ec:8a:50:eb:31:e7:31:38:44:a0:ed:de:7b: 6d:07:cb:cd:1a:61:65:e2:dd:59:3f:f9:b4:da:d3: 46:19:e8:85:e1:0c:cf:48:ac:9e:71:85:5f:d7:be: 4a:c3:a8:0e:16:74:b1:fe:b2:22:1c:16:49:bd:88: 86:3d:6f:9d:17:2f:76:b8:7d:d2:0a:b6:74:40:08: e1:65:2a:01:a6:0f:78:84:8a:5a:4d:ae:40:04:68: c2:29:87:2a:94:78:49:86:fb:3e:26:0f:78:be:33: e5:5f:fe:5f:63:8a:62:24:17:a7:65:24:6f:80:00: b5:d9:b7:96:33:ce:32:b8:1b:ed:39:03:8e:c7:02: c2:93:2a:71:e2:2b:31:b9:8b:cc:b4:85:ca:12:03: bc:32:05:f0:9e:c9:1b:da:d4:17:aa:9e:b7:55:06: a2:53:23:72:8a:0c:97:94:53:d1:69:0a:f7:d0:b7: 96:09:90:7d:1f:80:a4:93:93:ef:55:7c:56:b4:20: af:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:43:E1:4B:D4:58:8C:49:04:A6:41:35:6A:5D:07:D6:28:19:0C:AB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.36.0/23 Signature Algorithm: sha256WithRSAEncryption 83:a5:a8:07:19:78:ce:db:29:6f:0a:1b:6b:e3:7b:1b:80:c7: 33:91:97:18:fe:cd:84:08:1b:61:83:92:fb:41:70:1b:e2:33: 89:20:3b:98:a1:d5:38:49:e5:a5:54:f6:9d:6a:73:8e:c2:f2: 12:31:6b:e5:78:27:b3:45:2e:a5:52:e0:5b:17:6f:93:91:b4: 75:1a:34:9b:df:36:32:6b:f6:61:7d:7f:18:c2:c2:34:8b:a7: d3:49:04:1b:d3:c7:1d:09:af:08:c6:95:c2:c9:dc:74:6e:78: 74:a0:7a:b2:0a:3f:c0:c7:ee:f4:75:e1:9a:7e:9c:62:aa:44: cb:b2:41:4a:f3:40:5e:7d:84:f4:12:94:71:73:de:4e:58:d1: 1e:65:bd:d5:07:ec:34:50:e5:66:4c:2a:8b:39:b1:52:b4:82: fd:f1:d3:33:6c:58:14:fd:44:9c:fe:ca:18:4c:7d:89:60:93: 3b:49:ea:58:a3:ed:3e:be:2d:a9:d3:a3:8b:0b:59:a2:ed:d0: c3:df:4d:e8:f5:e5:96:17:9a:43:a1:61:98:54:fa:ab:5d:6c: 05:67:bd:a2:8e:2c:59:b7:07:0f:96:f1:b3:32:20:a0:c4:9c: 9f:5f:cc:17:b2:1e:29:01:aa:b9:fb:52:8d:40:c7:2b:e4:1f: d7:97:b4:0e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUbAAihwgKnuNw0OBeoMqgroequskwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTUwMloX DTI3MDUwMjAwMjAwMlowMzExMC8GA1UEAxMoOEI0M0UxNEJENDU4OEM0OTA0QTY0 MTM1NkE1RDA3RDYyODE5MENBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIyLCyNFStTth7jWuQX5Hz3MJYfoHGKW50+0rmCkV/E8TIBM16KOhVwzeAxP GanYd0eZ5jLlcFehOkdiQTXsilDrMecxOESg7d57bQfLzRphZeLdWT/5tNrTRhno heEMz0isnnGFX9e+SsOoDhZ0sf6yIhwWSb2Ihj1vnRcvdrh90gq2dEAI4WUqAaYP eISKWk2uQARowimHKpR4SYb7PiYPeL4z5V/+X2OKYiQXp2Ukb4AAtdm3ljPOMrgb 7TkDjscCwpMqceIrMbmLzLSFyhIDvDIF8J7JG9rUF6qet1UGolMjcooMl5RT0WkK 99C3lgmQfR+ApJOT71V8VrQgr5cCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFItD4UvUWIxJBKZBNWpdB9YoGQyrMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM0YTIzYzRlLTM5MzItNDNiZC04MTc2LWY2MjUxZGRlYTg0Mi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zNGEyM2M0 ZS0zOTMyLTQzYmQtODE3Ni1mNjI1MWRkZWE4NDIvMC84QjQzRTE0QkQ0NTg4QzQ5 MDRBNjQxMzU2QTVEMDdENjI4MTkwQ0FCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ64kMA0GCSqGSIb3DQEBCwUAA4IBAQCDpagHGXjO2ylvChtr43sbgMczkZcY /s2ECBthg5L7QXAb4jOJIDuYodU4SeWlVPadanOOwvISMWvleCezRS6lUuBbF2+T kbR1GjSb3zYya/ZhfX8YwsI0i6fTSQQb08cdCa8IxpXCydx0bnh0oHqyCj/Ax+70 deGafpxiqkTLskFK80BefYT0EpRxc95OWNEeZb3VB+w0UOVmTCqLObFStIL98dMz bFgU/USc/soYTH2JYJM7SepYo+0+vi2p06OLC1mi7dDD303o9eWWF5pDoWGYVPqr XWwFZ72ijixZtwcPlvGzMiCgxJyfX8wXsh4pAaq5+1KNQMcr5B/Xl7QO -----END CERTIFICATE-----Generated at Wed May 13 01:36:53 2026 by rpki-client