$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer File: 8DD710534DF68AAB08361EE28306B8FDEE71D144.cer (raw, json) Hash identifier: hbpE+CAR3vpRmRUdWY9JCyVclGHj/a/KqbDT4rub8/k= Subject key identifier: 8D:D7:10:53:4D:F6:8A:AB:08:36:1E:E2:83:06:B8:FD:EE:71:D1:44 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2DA278473DBD0E1BAAA17B4EAD6EC072644E982A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:42:20 +0000 Certificate not after: Sun 02 May 2027 01:47:20 +0000 Subordinate resources: IP: 103.158.102.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a2:78:47:3d:bd:0e:1b:aa:a1:7b:4e:ad:6e:c0:72:64:4e:98:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:42:20 2026 GMT Not After : May 2 01:47:20 2027 GMT Subject: CN=8DD710534DF68AAB08361EE28306B8FDEE71D144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d7:fe:e5:a8:d4:da:76:78:74:ef:df:47:2a: 02:cc:2f:5c:0e:be:00:f2:3d:1a:4a:8b:97:55:b4: 52:f4:8b:86:31:70:19:54:40:c6:14:e0:bc:39:0c: 86:eb:0d:85:9c:b6:ad:c5:59:93:71:a6:de:3e:93: 43:aa:fe:f0:d1:21:fe:d3:85:0e:e0:c1:53:0d:5e: c4:31:91:62:a4:98:72:37:1c:a4:99:e2:fb:e3:46: 1e:81:44:62:db:a1:12:df:93:55:d8:b1:64:6e:71: db:fb:86:bf:e7:39:6e:b4:b9:98:a4:d3:95:1b:b2: d0:cb:cf:54:f7:01:09:50:5d:7e:d4:93:fd:8f:08: 8c:d1:ba:7d:d3:51:85:ef:30:9d:e9:81:dc:81:01: 6b:a6:48:bb:a7:6d:80:2a:4b:f7:4e:dd:e8:9c:54: 7b:05:95:18:eb:a9:51:a4:80:ba:5d:22:20:56:cd: 5e:5e:b0:c3:96:b8:a1:54:91:ff:35:1a:8e:b9:39: 03:27:1e:1a:b4:4a:52:7c:6a:db:8e:30:8b:59:1d: 44:8a:a6:75:00:6c:8d:8e:96:a5:88:30:0d:1d:34: 44:5d:b8:02:88:c5:07:52:0c:7d:7f:d6:ba:f4:d2: 2d:ef:59:93:68:e9:20:17:8c:e8:d2:c3:55:7a:ac: 83:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:D7:10:53:4D:F6:8A:AB:08:36:1E:E2:83:06:B8:FD:EE:71:D1:44 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.102.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:2b:7c:4c:4f:05:f5:f7:60:e3:c5:d7:95:2c:06:fb:9b:7d: 85:e5:8b:89:d8:5a:38:d5:bf:7e:cd:b8:c4:cb:87:fd:a6:23: 76:f3:78:1f:b0:d3:a1:3c:91:5e:b3:da:80:8c:e3:58:a3:49: 11:1c:46:60:62:ee:51:69:4d:ac:3e:dd:0b:8a:04:15:37:f7: 3a:60:0b:ea:79:61:0b:ca:87:43:56:d4:59:7f:60:93:bd:49: f1:70:14:10:a5:4c:cd:c5:58:60:23:7e:b3:4d:a5:e3:fe:ab: d4:35:10:96:d9:aa:8d:0f:04:5f:bf:cc:43:84:03:03:0c:cb: 9a:a6:9d:87:9a:05:bf:48:05:42:01:e3:ac:72:a7:54:38:35: 59:e9:f6:13:f5:1a:19:bc:fd:8e:26:d3:10:d0:4a:4c:8c:95: 07:51:64:04:ec:1d:ab:24:ff:c3:81:13:ce:d2:5c:a4:55:da: 59:44:00:ba:c5:9d:9c:09:fe:b6:32:59:d5:65:b8:d8:5b:81: 06:8a:cd:e0:39:ee:df:91:36:6f:b2:16:12:d2:1c:d3:bb:2f: 83:4e:7c:98:7b:f7:07:f9:4b:62:cc:2f:d9:e0:2c:88:34:dc: c7:31:77:27:17:f5:a4:c2:f6:96:7f:01:8b:64:80:29:80:89: b6:95:3d:96 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIULaJ4Rz29DhuqoXtOrW7AcmROmCowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDIyMFoX DTI3MDUwMjAxNDcyMFowMzExMC8GA1UEAxMoOERENzEwNTM0REY2OEFBQjA4MzYx RUUyODMwNkI4RkRFRTcxRDE0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMDX/uWo1Np2eHTv30cqAswvXA6+API9GkqLl1W0UvSLhjFwGVRAxhTgvDkM husNhZy2rcVZk3Gm3j6TQ6r+8NEh/tOFDuDBUw1exDGRYqSYcjccpJni++NGHoFE YtuhEt+TVdixZG5x2/uGv+c5brS5mKTTlRuy0MvPVPcBCVBdftST/Y8IjNG6fdNR he8wnemB3IEBa6ZIu6dtgCpL907d6JxUewWVGOupUaSAul0iIFbNXl6ww5a4oVSR /zUajrk5AyceGrRKUnxq244wi1kdRIqmdQBsjY6WpYgwDR00RF24AojFB1IMfX/W uvTSLe9Zk2jpIBeM6NLDVXqsg3MCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI3XEFNN9oqrCDYe4oMGuP3ucdFEMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2I3MjRlNDViLTI1NGItNGZlYi1iZjhlLTdiZjEyMDkxMmFmNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iNzI0ZTQ1 Yi0yNTRiLTRmZWItYmY4ZS03YmYxMjA5MTJhZjcvMC84REQ3MTA1MzRERjY4QUFC MDgzNjFFRTI4MzA2QjhGREVFNzFEMTQ0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ55mMA0GCSqGSIb3DQEBCwUAA4IBAQAOK3xMTwX192DjxdeVLAb7m32F5YuJ 2Fo41b9+zbjEy4f9piN283gfsNOhPJFes9qAjONYo0kRHEZgYu5RaU2sPt0LigQV N/c6YAvqeWELyodDVtRZf2CTvUnxcBQQpUzNxVhgI36zTaXj/qvUNRCW2aqNDwRf v8xDhAMDDMuapp2HmgW/SAVCAeOscqdUODVZ6fYT9RoZvP2OJtMQ0EpMjJUHUWQE 7B2rJP/DgRPO0lykVdpZRAC6xZ2cCf62MlnVZbjYW4EGis3gOe7fkTZvshYS0hzT uy+DTnyYe/cH+UtizC/Z4CyINNzHMXcnF/WkwvaWfwGLZIApgIm2lT2W -----END CERTIFICATE-----Generated at Tue May 12 22:52:51 2026 by rpki-client