$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer File: 8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer (raw, json) Hash identifier: w0Pd6gCV1zx0MTTawTJ3pZngIgNz02cVu9eOM9xDYtA= Subject key identifier: 8C:D6:FC:02:55:FD:1E:D1:7F:D8:2C:FA:8B:66:D2:4A:29:BA:1D:8E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2461E4B07422F8CCD4B8101CE68848C01340E648 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:36:54 +0000 Certificate not after: Sun 02 May 2027 00:41:54 +0000 Subordinate resources: IP: 103.87.196.0/22 IP: 2001:df0:8f00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:61:e4:b0:74:22:f8:cc:d4:b8:10:1c:e6:88:48:c0:13:40:e6:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:36:54 2026 GMT Not After : May 2 00:41:54 2027 GMT Subject: CN=8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:59:76:fe:2d:bc:71:3b:2a:21:54:f7:0f:fb: 87:3b:d3:f5:44:97:87:21:7c:20:53:e8:7b:68:ad: 66:7b:a4:2c:9b:1b:fc:07:29:c0:58:95:89:f5:aa: 12:c4:d5:b4:ca:83:3e:67:46:2e:42:46:3c:39:c7: 84:58:2e:ed:5f:c0:e3:18:c6:5d:46:78:eb:7f:85: 6e:df:82:be:4f:88:2f:f0:35:0e:1c:8b:a9:26:c7: b7:bc:a4:0a:93:15:58:a3:f6:05:6b:df:d3:1b:e9: 2d:b9:5b:86:d4:87:24:45:77:c0:10:0e:d7:e6:a5: 8d:36:bc:65:cd:c0:2d:83:f4:15:4c:7f:7e:ec:a6: a7:93:66:94:f0:51:a7:a5:b3:85:3d:cc:a2:07:3a: df:7c:5a:12:47:f9:f7:0f:25:f5:ae:dd:bf:b5:7b: 4c:ef:43:50:a6:6f:ed:15:20:1d:48:91:cf:06:5e: c2:86:55:f4:d1:b3:31:f7:4c:22:48:8f:eb:ad:1f: 44:4a:4b:0a:85:c5:62:1d:b3:9a:08:a0:12:0f:f0: 87:fb:b1:5f:66:3c:b7:57:0c:3d:da:f8:92:d2:29: 67:9f:a7:ff:a7:4f:9f:90:ee:64:ea:f8:b7:b7:40: 7f:bb:67:bd:c1:bf:a4:d4:3c:ce:cc:0e:00:fc:a3: 87:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8C:D6:FC:02:55:FD:1E:D1:7F:D8:2C:FA:8B:66:D2:4A:29:BA:1D:8E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.87.196.0/22 IPv6: 2001:df0:8f00::/48 Signature Algorithm: sha256WithRSAEncryption 7c:97:aa:93:38:6b:55:a2:ed:07:a4:fa:e3:e3:3e:c1:09:85: ba:bc:c8:b3:38:eb:f5:3d:78:42:a3:ab:7a:22:07:5e:08:e2: 28:cd:c7:a9:53:57:44:74:a5:bb:29:49:81:36:20:36:ff:39: 7d:dc:8f:4f:46:0b:75:f7:70:a1:ab:a6:c6:6d:cd:f6:97:9b: 70:48:bd:98:bc:5d:89:d4:11:7a:bb:ac:dc:0f:a4:c2:b7:3c: 3d:ee:a4:a5:31:ec:21:e4:6f:73:3c:cf:9f:83:ea:92:ae:49: 16:e8:dc:78:fc:cc:07:5a:84:8a:27:ab:25:1f:55:0f:20:eb: 7d:0e:0d:83:a2:25:b3:03:1a:e1:ef:4e:41:91:5f:08:48:af: 78:6c:f4:34:a0:cc:47:4c:84:ff:d4:7e:0b:47:f2:35:42:55: f0:1b:09:66:20:35:03:2f:9a:7e:f0:29:66:10:bf:a1:c4:90: 60:ed:bd:9e:1f:b8:cd:e6:60:d4:6e:68:a8:9f:73:b5:c6:20: df:a1:5f:cc:05:f4:58:09:b2:1d:be:c6:f6:84:ce:0b:2f:4b: 94:9d:d3:2b:27:b4:be:3a:dd:a2:79:e2:23:22:61:da:88:49: 7d:02:d6:c3:73:d4:63:63:7d:0b:c7:75:13:db:64:f9:37:37: 0f:54:0b:5b -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUJGHksHQi+MzUuBAc5ohIwBNA5kgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzY1NFoX DTI3MDUwMjAwNDE1NFowMzExMC8GA1UEAxMoOENENkZDMDI1NUZEMUVEMTdGRDgy Q0ZBOEI2NkQyNEEyOUJBMUQ4RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANhZdv4tvHE7KiFU9w/7hzvT9USXhyF8IFPoe2itZnukLJsb/AcpwFiVifWq EsTVtMqDPmdGLkJGPDnHhFgu7V/A4xjGXUZ463+Fbt+Cvk+IL/A1DhyLqSbHt7yk CpMVWKP2BWvf0xvpLblbhtSHJEV3wBAO1+aljTa8Zc3ALYP0FUx/fuymp5NmlPBR p6WzhT3Mogc633xaEkf59w8l9a7dv7V7TO9DUKZv7RUgHUiRzwZewoZV9NGzMfdM IkiP660fREpLCoXFYh2zmgigEg/wh/uxX2Y8t1cMPdr4ktIpZ5+n/6dPn5DuZOr4 t7dAf7tnvcG/pNQ8zswOAPyjh9ECAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIzW/AJV/R7Rf9gs+otm0kopuh2OMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzU2ZTYzY2QyLWZiM2MtNDFiMi1iOTZiLWFiMjM0NDIwYTIxMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81NmU2M2Nk Mi1mYjNjLTQxYjItYjk2Yi1hYjIzNDQyMGEyMTEvMC84Q0Q2RkMwMjU1RkQxRUQx N0ZEODJDRkE4QjY2RDI0QTI5QkExRDhFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZ1fEMA8EAgACMAkDBwAgAQ3wjwAwDQYJKoZIhvcNAQELBQADggEBAHyXqpM4 a1Wi7Qek+uPjPsEJhbq8yLM46/U9eEKjq3oiB14I4ijNx6lTV0R0pbspSYE2IDb/ OX3cj09GC3X3cKGrpsZtzfaXm3BIvZi8XYnUEXq7rNwPpMK3PD3upKUx7CHkb3M8 z5+D6pKuSRbo3Hj8zAdahIonqyUfVQ8g630ODYOiJbMDGuHvTkGRXwhIr3hs9DSg zEdMhP/UfgtH8jVCVfAbCWYgNQMvmn7wKWYQv6HEkGDtvZ4fuM3mYNRuaKifc7XG IN+hX8wF9FgJsh2+xvaEzgsvS5Sd0ysntL463aJ54iMiYdqISX0C1sNz1GNjfQvH dRPbZPk3Nw9UC1s= -----END CERTIFICATE-----Generated at Tue May 12 22:10:23 2026 by rpki-client