$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer File: 8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer (raw, json) Hash identifier: eQPR0Mkb5I3S5mVUIgoIaGV0ZJlOxMz4tx/8ZBKET0s= Subject key identifier: 8D:1A:94:EA:0F:9F:D5:14:8E:09:CA:E0:A3:07:BD:C9:9B:1B:45:73 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1154774971328FCCEDEC430D16223A9FF64C824C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:27:03 +0000 Certificate not after: Sun 02 May 2027 01:32:03 +0000 Subordinate resources: IP: 103.17.76.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:54:77:49:71:32:8f:cc:ed:ec:43:0d:16:22:3a:9f:f6:4c:82:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:27:03 2026 GMT Not After : May 2 01:32:03 2027 GMT Subject: CN=8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2d:ae:26:c6:79:a1:30:82:fd:15:8b:b2:c2: e6:c1:05:5e:50:90:3c:95:48:ac:a5:7f:08:e7:20: 84:60:88:6d:34:f0:55:54:d9:97:02:2a:c4:51:14: 3f:34:0d:f9:b3:ef:0c:5d:53:26:d4:98:71:ae:0a: cc:7a:29:73:f4:2c:b5:6f:bf:54:84:d5:9f:b0:29: 50:97:50:56:23:e4:15:13:ad:f2:31:d4:62:65:6f: d0:72:80:da:4d:11:37:a4:15:6c:65:91:e1:eb:a4: 50:23:64:0d:ae:19:10:97:4b:93:a0:95:67:6b:6d: 10:10:3d:04:b6:3b:d1:cc:40:65:1b:b7:2f:8e:c6: b0:fe:47:aa:9a:98:ed:e5:77:e7:4b:44:a0:96:2d: a1:77:78:6e:d3:dc:06:ba:b0:20:6a:7e:5b:02:bb: 78:21:e0:64:98:4d:08:9e:0b:ae:f1:fa:bc:06:85: 94:eb:7c:c2:49:cb:34:28:f1:8e:04:19:9f:70:6a: e4:45:f5:56:0a:8e:65:d5:78:3b:75:e4:29:ee:c4: e3:49:c3:10:97:9e:11:46:03:af:2f:27:43:e9:a0: c9:3b:e8:4d:77:b5:67:99:be:99:f4:aa:2f:c4:f6: f0:fa:b5:19:8b:a2:c4:45:e8:a4:8f:67:56:93:f9: e2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:1A:94:EA:0F:9F:D5:14:8E:09:CA:E0:A3:07:BD:C9:9B:1B:45:73 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.17.76.0/23 Signature Algorithm: sha256WithRSAEncryption 57:ac:7c:9c:6d:93:04:84:47:65:83:2f:f6:b4:fb:92:c6:84: 59:97:15:83:88:96:03:a7:65:1c:50:20:29:6a:30:69:97:15: 4c:70:c5:ea:9d:1d:e1:e9:31:60:9d:44:e1:31:d6:24:a9:56: 54:ba:94:86:e3:0c:db:89:ba:26:fa:09:fa:a1:eb:d9:11:cf: 69:67:8f:ff:74:b6:c4:d8:f4:1b:e8:4c:b9:d9:65:9a:eb:a8: 17:f4:fc:fb:0d:82:3f:2f:ec:b8:f2:49:28:58:c8:be:dc:d8: 5b:b9:86:68:86:d8:e4:65:00:ce:d6:dd:7c:fd:a3:82:7d:d9: 12:2a:a6:d6:2f:55:5b:b2:d0:6c:2e:54:0d:7e:4d:6f:c8:13: e5:0f:c4:d1:04:47:b6:5e:2c:be:4c:86:a3:0f:65:d8:62:f6: 8c:e9:da:e3:f4:16:ef:1e:93:78:5b:a0:6a:9e:87:cd:f3:1b: 23:35:b5:87:5b:3e:6f:90:f8:08:38:46:85:47:6e:9f:c6:4c: 8a:43:8b:2f:bd:0a:b2:1c:f2:41:18:47:ee:6f:ec:8e:37:fc: 01:18:7d:b3:76:33:b3:33:d6:c1:92:59:98:52:db:d1:72:dc: ec:5b:01:d7:2a:b5:f1:91:89:ea:6b:24:16:b3:25:36:1d:3f: 09:bd:72:bf -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUEVR3SXEyj8zt7EMNFiI6n/ZMgkwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjcwM1oX DTI3MDUwMjAxMzIwM1owMzExMC8GA1UEAxMoOEQxQTk0RUEwRjlGRDUxNDhFMDlD QUUwQTMwN0JEQzk5QjFCNDU3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMktribGeaEwgv0Vi7LC5sEFXlCQPJVIrKV/COcghGCIbTTwVVTZlwIqxFEU PzQN+bPvDF1TJtSYca4KzHopc/QstW+/VITVn7ApUJdQViPkFROt8jHUYmVv0HKA 2k0RN6QVbGWR4eukUCNkDa4ZEJdLk6CVZ2ttEBA9BLY70cxAZRu3L47GsP5HqpqY 7eV350tEoJYtoXd4btPcBrqwIGp+WwK7eCHgZJhNCJ4LrvH6vAaFlOt8wknLNCjx jgQZn3Bq5EX1VgqOZdV4O3XkKe7E40nDEJeeEUYDry8nQ+mgyTvoTXe1Z5m+mfSq L8T28Pq1GYuixEXopI9nVpP54q0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI0alOoPn9UUjgnK4KMHvcmbG0VzMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2EwNjIxMTFkLTBhMTMtNDQwNy1hZjMzLTM0YzIyYTlkN2FlYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hMDYyMTEx ZC0wYTEzLTQ0MDctYWYzMy0zNGMyMmE5ZDdhZWMvMC84RDFBOTRFQTBGOUZENTE0 OEUwOUNBRTBBMzA3QkRDOTlCMUI0NTczLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZxFMMA0GCSqGSIb3DQEBCwUAA4IBAQBXrHycbZMEhEdlgy/2tPuSxoRZlxWD iJYDp2UcUCApajBplxVMcMXqnR3h6TFgnUThMdYkqVZUupSG4wzbibom+gn6oevZ Ec9pZ4//dLbE2PQb6Ey52WWa66gX9Pz7DYI/L+y48kkoWMi+3NhbuYZohtjkZQDO 1t18/aOCfdkSKqbWL1VbstBsLlQNfk1vyBPlD8TRBEe2Xiy+TIajD2XYYvaM6drj 9BbvHpN4W6BqnofN8xsjNbWHWz5vkPgIOEaFR26fxkyKQ4svvQqyHPJBGEfub+yO N/wBGH2zdjOzM9bBklmYUtvRctzsWwHXKrXxkYnqayQWsyU2HT8JvXK/ -----END CERTIFICATE-----Generated at Tue May 12 22:16:01 2026 by rpki-client