$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer File: 8D7E0574648D2E037D2147F409FC002E56E42A23.cer (raw, json) Hash identifier: 092hxxoKQ4DlCCAAhuUq7fYZMOa9Cgo3jPc3VINP/Zk= Subject key identifier: 8D:7E:05:74:64:8D:2E:03:7D:21:47:F4:09:FC:00:2E:56:E4:2A:23 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0AEEEB83B36CF1A00CE2A8BA1AF06550532B731A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:02:50 +0000 Certificate not after: Sun 02 May 2027 02:07:50 +0000 Subordinate resources: IP: 103.191.52.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ee:eb:83:b3:6c:f1:a0:0c:e2:a8:ba:1a:f0:65:50:53:2b:73:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:02:50 2026 GMT Not After : May 2 02:07:50 2027 GMT Subject: CN=8D7E0574648D2E037D2147F409FC002E56E42A23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a7:ed:3c:5f:3f:57:36:29:d6:26:d2:8d:1b: 03:8b:c4:03:f6:62:82:62:61:37:d4:71:40:cd:51: c6:bc:1f:c4:06:e4:50:a8:98:f0:a1:16:e2:04:c6: 89:23:20:22:f2:14:1c:2c:54:b6:24:4f:92:b0:76: 62:f7:dc:4b:54:98:9e:eb:68:3b:1d:ff:67:3a:e8: 69:8d:96:07:80:09:ce:ba:27:e7:29:8f:06:76:33: 6f:26:73:f5:3a:f1:b0:12:e1:b3:d2:fb:f3:31:3c: d4:2e:cf:67:3c:ad:41:12:f9:c3:fc:67:aa:fe:b2: 85:60:19:14:1a:e5:38:c8:c0:36:60:a6:ce:5e:60: 3d:cf:a2:23:b0:ed:41:03:e8:5d:d7:ae:d3:43:7f: 8a:11:c9:3d:64:84:bb:10:5a:e8:33:70:29:9d:48: ee:33:ae:b3:13:1d:4a:d1:94:67:1c:d0:f5:5f:40: 11:f8:c2:bd:8d:ed:be:75:d7:a0:f0:c2:51:a6:ed: 3f:a6:81:eb:5b:c4:80:14:e0:31:01:df:68:f8:67: 15:32:54:22:36:30:f4:16:c7:6e:d9:f8:36:4f:97: a5:bf:a3:fc:f4:29:c5:2a:8f:cf:f0:e9:ad:53:3f: 5e:7e:c8:3c:71:64:b0:e6:ab:e3:37:69:08:f5:c9: d0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:7E:05:74:64:8D:2E:03:7D:21:47:F4:09:FC:00:2E:56:E4:2A:23 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.52.0/23 Signature Algorithm: sha256WithRSAEncryption 90:bd:44:3a:6b:b0:25:f1:44:5e:71:73:e5:2f:d5:77:f1:49: 4e:e7:9c:c3:14:9a:1d:4c:c3:3d:63:58:f4:8b:17:1a:5f:7b: 11:d0:4d:91:78:51:f2:5d:85:a1:3a:09:e9:ce:20:1c:96:f5: ca:6b:91:09:52:25:82:ed:c7:86:f8:2b:70:67:28:3a:5d:a7: 75:1b:ff:55:c3:8c:0f:9c:22:6b:ca:77:c9:7d:47:fe:56:70: 31:7f:1a:8b:7f:6f:db:9e:ea:88:67:8d:f7:8c:e5:08:92:7e: f7:64:f9:f6:5b:4e:7c:60:48:94:2d:8a:c7:91:8e:79:e9:86: ab:20:5b:4d:76:04:20:db:82:40:5a:f8:ae:80:52:28:c2:ad: c3:60:b3:7e:ed:b7:cf:dd:53:dc:f0:3c:f3:de:45:47:98:90: e9:db:a3:54:c8:45:d9:0a:68:0a:da:1f:36:e1:6c:1d:68:d3: 0a:5e:83:0e:33:df:3f:c0:dc:86:34:c0:4f:da:13:5d:06:75: 53:2f:cf:fe:bd:5e:23:62:44:c8:28:51:43:30:b2:1a:6a:42: 97:30:89:bd:e5:f0:18:c2:75:b6:07:32:76:6e:d2:78:64:1e: 4f:77:51:8a:51:ec:7d:be:26:c0:60:34:ee:5d:74:41:53:83: a6:03:cb:d8 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUCu7rg7Ns8aAM4qi6GvBlUFMrcxowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDI1MFoX DTI3MDUwMjAyMDc1MFowMzExMC8GA1UEAxMoOEQ3RTA1NzQ2NDhEMkUwMzdEMjE0 N0Y0MDlGQzAwMkU1NkU0MkEyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWn7TxfP1c2KdYm0o0bA4vEA/ZigmJhN9RxQM1RxrwfxAbkUKiY8KEW4gTG iSMgIvIUHCxUtiRPkrB2YvfcS1SYnutoOx3/ZzroaY2WB4AJzron5ymPBnYzbyZz 9TrxsBLhs9L78zE81C7PZzytQRL5w/xnqv6yhWAZFBrlOMjANmCmzl5gPc+iI7Dt QQPoXdeu00N/ihHJPWSEuxBa6DNwKZ1I7jOusxMdStGUZxzQ9V9AEfjCvY3tvnXX oPDCUabtP6aB61vEgBTgMQHfaPhnFTJUIjYw9BbHbtn4Nk+Xpb+j/PQpxSqPz/Dp rVM/Xn7IPHFksOar4zdpCPXJ0F8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI1+BXRkjS4DfSFH9An8AC5W5CojMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q5YWZkMzE1LWY0N2YtNGY2YS1iOGI1LTQ1YTIyODBiYmM4NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kOWFmZDMx NS1mNDdmLTRmNmEtYjhiNS00NWEyMjgwYmJjODUvMC84RDdFMDU3NDY0OEQyRTAz N0QyMTQ3RjQwOUZDMDAyRTU2RTQyQTIzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ780MA0GCSqGSIb3DQEBCwUAA4IBAQCQvUQ6a7Al8URecXPlL9V38UlO55zD FJodTMM9Y1j0ixcaX3sR0E2ReFHyXYWhOgnpziAclvXKa5EJUiWC7ceG+CtwZyg6 Xad1G/9Vw4wPnCJrynfJfUf+VnAxfxqLf2/bnuqIZ433jOUIkn73ZPn2W058YEiU LYrHkY556YarIFtNdgQg24JAWviugFIowq3DYLN+7bfP3VPc8Dzz3kVHmJDp26NU yEXZCmgK2h824WwdaNMKXoMOM98/wNyGNMBP2hNdBnVTL8/+vV4jYkTIKFFDMLIa akKXMIm95fAYwnW2BzJ2btJ4ZB5Pd1GKUex9vibAYDTuXXRBU4OmA8vY -----END CERTIFICATE-----Generated at Tue May 12 22:16:06 2026 by rpki-client