$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8BBABE3D733222C2B6A217449635616F4F2C9625.cer File: 8BBABE3D733222C2B6A217449635616F4F2C9625.cer (raw, json) Hash identifier: wcP/ItVh3hczEi0m76KsD76BstYPWU7oAt/Rc2qIZ94= Subject key identifier: 8B:BA:BE:3D:73:32:22:C2:B6:A2:17:44:96:35:61:6F:4F:2C:96:25 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 76FC9DECAD20F0CA13ED899BEC93FC6EA937AFB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:13:33 +0000 Certificate not after: Sun 02 May 2027 01:18:33 +0000 Subordinate resources: IP: 103.168.186.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:fc:9d:ec:ad:20:f0:ca:13:ed:89:9b:ec:93:fc:6e:a9:37:af:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:13:33 2026 GMT Not After : May 2 01:18:33 2027 GMT Subject: CN=8BBABE3D733222C2B6A217449635616F4F2C9625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6c:b8:4c:36:c9:c2:4f:7e:dc:48:a1:50:a2: a4:4f:d9:cb:79:54:77:a1:4c:43:ad:dd:68:c7:95: 99:78:6a:dc:1c:ca:d8:75:5e:d4:c5:c7:1d:a9:a2: e9:58:43:1c:9d:44:7c:7d:26:74:a4:c4:5d:66:cc: 99:3e:2d:a2:58:35:39:bd:bf:32:27:eb:77:cb:87: 83:00:65:9f:fa:cb:c3:85:22:c0:67:b0:46:d7:8b: 7f:99:25:2d:e1:df:8a:a9:7c:79:c1:7d:2b:d4:ce: 78:2d:57:db:cb:33:be:6b:bf:0b:e0:46:b4:5b:b7: 67:53:18:52:b1:41:d9:94:72:63:5e:5f:74:c2:17: ac:6f:4a:a8:dc:de:e6:14:17:da:3e:27:6d:64:b8: 34:3d:6d:fe:62:e5:77:55:de:59:bd:ed:8f:95:dc: 4a:18:16:74:49:e8:f3:f0:ee:85:a7:99:ba:f4:2a: 45:58:92:fb:ec:01:32:93:3c:17:e3:37:96:e0:15: d8:83:13:0a:74:fe:26:9e:25:db:43:e5:42:96:02: c3:80:1e:95:93:b3:66:2d:1f:39:40:05:51:b4:4c: 1a:05:10:99:10:6b:a9:60:46:f9:c2:53:a3:f8:a6: 9a:68:a0:43:c7:2e:ea:8e:5f:6c:2f:30:54:86:54: cd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:BA:BE:3D:73:32:22:C2:B6:A2:17:44:96:35:61:6F:4F:2C:96:25 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.186.0/23 Signature Algorithm: sha256WithRSAEncryption 72:14:dc:4b:70:fa:ff:9c:21:41:b9:bc:0f:03:44:60:35:f6: cd:1b:38:81:3f:9c:58:40:1c:b4:e8:3c:e5:0c:75:de:cb:82: fc:c3:b0:f3:68:ef:d7:80:6d:b6:38:c0:e5:06:0b:33:3c:0a: 38:c5:69:92:de:86:1c:f1:b9:12:09:f7:4b:b4:b1:1d:bb:c2: 52:d2:9d:f2:47:3e:9b:19:33:6c:a9:3e:fb:1c:f6:af:3d:e6: c8:71:5b:e4:84:7e:9d:5b:2d:87:7f:04:75:a8:61:7c:0d:c4: a5:a9:32:eb:15:94:53:2f:a4:b1:46:a8:4a:87:45:94:1d:96: 86:1d:78:c2:69:16:d0:80:5c:8c:28:35:39:e1:17:12:5d:fc: 74:e7:21:ce:72:b5:53:b1:46:c3:7b:ff:9f:2d:8b:6a:ed:08: 9f:52:f4:6e:1b:52:c5:04:e9:36:00:5f:a2:82:66:9e:b7:55: 8b:17:4c:40:f5:8f:a0:f2:4d:64:ba:94:57:9c:a6:48:81:54: c8:e3:8c:22:ea:e8:3c:22:2c:2f:49:1f:d4:4d:09:d7:b4:d2: 8b:b9:ef:6c:ed:80:75:6b:2c:df:2f:d2:53:57:70:6f:72:61: 56:a1:38:ed:38:69:a8:b5:18:2a:17:fb:1f:bd:61:1c:8f:94: 04:c8:74:2e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUdvyd7K0g8MoT7Ymb7JP8bqk3r7YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTMzM1oX DTI3MDUwMjAxMTgzM1owMzExMC8GA1UEAxMoOEJCQUJFM0Q3MzMyMjJDMkI2QTIx NzQ0OTYzNTYxNkY0RjJDOTYyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALdsuEw2ycJPftxIoVCipE/Zy3lUd6FMQ63daMeVmXhq3BzK2HVe1MXHHami 6VhDHJ1EfH0mdKTEXWbMmT4tolg1Ob2/Mifrd8uHgwBln/rLw4UiwGewRteLf5kl LeHfiql8ecF9K9TOeC1X28szvmu/C+BGtFu3Z1MYUrFB2ZRyY15fdMIXrG9KqNze 5hQX2j4nbWS4ND1t/mLld1XeWb3tj5XcShgWdEno8/DuhaeZuvQqRViS++wBMpM8 F+M3luAV2IMTCnT+Jp4l20PlQpYCw4AelZOzZi0fOUAFUbRMGgUQmRBrqWBG+cJT o/immmigQ8cu6o5fbC8wVIZUzaUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIu6vj1zMiLCtqIXRJY1YW9PLJYlMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzhhZjAwMzFlLTJhOWUtNDdjYS05MjgzLTQwZTkyN2UzNTk5My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84YWYwMDMx ZS0yYTllLTQ3Y2EtOTI4My00MGU5MjdlMzU5OTMvMC84QkJBQkUzRDczMzIyMkMy QjZBMjE3NDQ5NjM1NjE2RjRGMkM5NjI1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6i6MA0GCSqGSIb3DQEBCwUAA4IBAQByFNxLcPr/nCFBubwPA0RgNfbNGziB P5xYQBy06DzlDHXey4L8w7DzaO/XgG22OMDlBgszPAo4xWmS3oYc8bkSCfdLtLEd u8JS0p3yRz6bGTNsqT77HPavPebIcVvkhH6dWy2HfwR1qGF8DcSlqTLrFZRTL6Sx RqhKh0WUHZaGHXjCaRbQgFyMKDU54RcSXfx05yHOcrVTsUbDe/+fLYtq7QifUvRu G1LFBOk2AF+igmaet1WLF0xA9Y+g8k1kupRXnKZIgVTI44wi6ug8IiwvSR/UTQnX tNKLue9s7YB1ayzfL9JTV3BvcmFWoTjtOGmotRgqF/sfvWEcj5QEyHQu -----END CERTIFICATE-----Generated at Tue May 12 22:47:40 2026 by rpki-client