$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.cer File: 8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.cer (raw, json) Hash identifier: xQ520wVzcBWsdZ4Ue7VSlpkHyEpUhtWI5+gIBIqVcbM= Subject key identifier: 8B:8B:53:63:0D:4C:ED:B1:FC:82:4C:20:AE:9A:DF:46:8A:7D:43:E7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1FE9004BF1FBD66EF31A3CE7F184744B60395FEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:40:11 +0000 Certificate not after: Sun 02 May 2027 02:45:11 +0000 Subordinate resources: IP: 103.182.46.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:e9:00:4b:f1:fb:d6:6e:f3:1a:3c:e7:f1:84:74:4b:60:39:5f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:40:11 2026 GMT Not After : May 2 02:45:11 2027 GMT Subject: CN=8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fa:78:f8:6f:c8:be:60:5f:7c:b1:20:e5:4a: 1c:47:9c:a9:2a:17:af:3a:ab:b6:1e:6f:d2:1c:96: ce:06:bd:92:25:0b:16:67:1e:ad:a5:27:3d:ec:98: d6:1b:8c:e3:4b:ac:37:9e:15:7a:b5:91:c8:15:44: f9:84:f7:2a:1e:fa:35:b9:ab:9f:1a:37:35:7b:76: ac:37:e8:8d:26:39:24:5b:b2:38:2f:2b:ef:65:fb: 22:8b:8a:09:89:6b:ee:ac:ab:33:f4:b2:78:44:aa: f1:14:ef:81:66:2c:69:86:32:c5:3d:60:e6:19:65: 33:64:9c:6b:9b:91:72:d5:9a:ea:d2:b6:7f:29:c8: ec:09:87:ec:99:b8:a5:04:9b:54:85:b9:c6:bb:42: e4:e0:42:1f:a8:ec:0c:2f:5b:55:da:8d:01:fe:0c: 54:66:28:ee:36:ad:87:11:d3:36:c2:1e:d5:46:19: ab:67:c1:21:89:1d:e9:24:a5:8c:47:11:64:96:8f: 2f:e8:05:7f:5a:95:aa:98:cf:9c:34:88:a4:23:4a: 85:17:8b:d9:7d:b7:5a:5b:62:69:75:06:43:88:e8: 3d:92:e1:93:87:33:96:4e:31:d3:13:94:df:49:de: 1a:a7:4c:98:db:51:9d:37:95:12:fe:ab:83:c0:04: 46:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:8B:53:63:0D:4C:ED:B1:FC:82:4C:20:AE:9A:DF:46:8A:7D:43:E7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.182.46.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:3a:ea:73:20:4d:13:55:df:1c:ec:df:31:45:10:49:eb:1d: 35:54:15:10:ca:e7:17:df:2e:71:20:78:52:ba:86:9a:c0:f7: 41:6d:46:4e:9c:57:7b:a4:71:61:cc:8e:5c:f3:c4:bd:18:95: 43:18:51:4e:88:54:34:72:dc:4e:3b:c8:5d:73:5c:bb:ef:9f: a1:03:6d:37:07:5f:81:66:81:e8:8d:de:a6:46:24:79:72:7c: f8:d7:66:9b:87:e3:ad:26:51:7b:c5:3d:ca:1b:c5:d9:74:ac: 16:6d:b7:99:e4:fc:11:4b:22:fc:51:b9:81:24:ba:14:45:63: ed:41:17:9e:ca:9d:98:51:63:0d:46:78:2a:12:22:78:4a:46: e3:47:9d:8f:2a:d8:82:1f:82:7b:46:3f:a4:47:b0:6d:64:f1: 6a:7a:69:b4:63:17:3b:11:87:9d:f5:07:37:84:ec:5f:58:0c: ce:5c:e3:77:11:1b:d3:8c:d3:f2:a6:c6:ce:d9:58:46:04:0c: 23:6d:3f:d1:53:27:7b:92:21:c1:bb:08:83:00:f3:9e:28:8a: 18:37:35:7b:ec:6c:49:6e:fe:5e:7c:31:4c:a0:40:e0:b8:b9: 71:39:5a:82:3d:d1:e1:bd:4d:52:f3:4b:29:9e:7f:c8:2f:43: ea:95:9a:de -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUH+kAS/H71m7zGjzn8YR0S2A5X+4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyNDAxMVoX DTI3MDUwMjAyNDUxMVowMzExMC8GA1UEAxMoOEI4QjUzNjMwRDRDRURCMUZDODI0 QzIwQUU5QURGNDY4QTdENDNFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKz6ePhvyL5gX3yxIOVKHEecqSoXrzqrth5v0hyWzga9kiULFmceraUnPeyY 1huM40usN54VerWRyBVE+YT3Kh76Nbmrnxo3NXt2rDfojSY5JFuyOC8r72X7IouK CYlr7qyrM/SyeESq8RTvgWYsaYYyxT1g5hllM2Sca5uRctWa6tK2fynI7AmH7Jm4 pQSbVIW5xrtC5OBCH6jsDC9bVdqNAf4MVGYo7jathxHTNsIe1UYZq2fBIYkd6SSl jEcRZJaPL+gFf1qVqpjPnDSIpCNKhReL2X23WltiaXUGQ4joPZLhk4czlk4x0xOU 30neGqdMmNtRnTeVEv6rg8AERkECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIuLU2MNTO2x/IJMIK6a30aKfUPnMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y4NmExM2JkLWI3OWEtNDUwZS05YmUzLTNkNWEwM2FiOTNiMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mODZhMTNi ZC1iNzlhLTQ1MGUtOWJlMy0zZDVhMDNhYjkzYjEvMC84QjhCNTM2MzBENENFREIx RkM4MjRDMjBBRTlBREY0NjhBN0Q0M0U3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7YuMA0GCSqGSIb3DQEBCwUAA4IBAQA6OupzIE0TVd8c7N8xRRBJ6x01VBUQ yucX3y5xIHhSuoaawPdBbUZOnFd7pHFhzI5c88S9GJVDGFFOiFQ0ctxOO8hdc1y7 75+hA203B1+BZoHojd6mRiR5cnz412abh+OtJlF7xT3KG8XZdKwWbbeZ5PwRSyL8 UbmBJLoURWPtQReeyp2YUWMNRngqEiJ4SkbjR52PKtiCH4J7Rj+kR7BtZPFqemm0 Yxc7EYed9Qc3hOxfWAzOXON3ERvTjNPypsbO2VhGBAwjbT/RUyd7kiHBuwiDAPOe KIoYNzV77GxJbv5efDFMoEDguLlxOVqCPdHhvU1S80spnn/IL0PqlZre -----END CERTIFICATE-----Generated at Tue May 12 22:02:40 2026 by rpki-client