$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer File: 8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer (raw, json) Hash identifier: HPmR4vl1qtiBCMACz7FvC2bP61M2oMd5eWP4rMqD4zE= Subject key identifier: 8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6A0743791863D10281A7CF449DC9796D0676E4A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:42:00 +0000 Certificate not after: Sat 01 May 2027 23:47:00 +0000 Subordinate resources: IP: 103.180.164.0/23 IP: 2001:df0:69c0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:07:43:79:18:63:d1:02:81:a7:cf:44:9d:c9:79:6d:06:76:e4:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:42:00 2026 GMT Not After : May 1 23:47:00 2027 GMT Subject: CN=8EA8EC991253F0665F4149D5FE42C3F8CF2255D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6f:1b:11:5b:a8:77:4b:ba:98:3d:ad:af:84: eb:0d:3c:cb:80:13:bf:0b:47:b4:80:1a:39:4a:a0: e7:2e:48:71:c7:bb:ac:f8:b3:0d:03:2a:d2:62:28: e0:9c:84:ee:8f:9d:4b:41:d0:88:76:38:47:2c:01: 3a:b8:1e:e6:1c:ec:a5:24:9f:5d:bd:cf:60:c7:2d: 4d:48:ee:00:00:2e:2d:f5:a6:3c:d2:5f:26:53:31: 37:0c:5b:36:9f:44:9a:1f:d3:05:b6:de:26:96:2d: 06:25:56:d7:2f:8b:a3:49:89:3b:7a:53:6d:3d:f6: 85:6b:92:6a:97:5d:00:dd:79:d1:a1:f2:26:76:49: f7:bc:ea:52:04:ff:03:2c:de:f1:86:91:d2:33:43: 6c:c9:c6:cb:d2:fb:f2:35:6f:6e:c4:86:b4:28:8f: f1:13:4a:5c:d9:e6:8e:21:c9:8c:d4:90:dc:5d:85: ff:2c:ee:44:22:32:45:b6:c9:ac:bf:17:3e:1e:28: 6d:cf:53:a5:c6:67:1b:a7:a5:5f:29:0a:7f:8f:2b: a6:03:43:05:55:a7:43:8a:e2:5c:a9:7a:9d:93:f6: a1:59:9a:4b:a9:d3:03:f9:29:97:8a:c8:88:78:ec: f2:43:a0:33:69:91:60:fb:55:96:72:6c:e7:10:2a: bf:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.164.0/23 IPv6: 2001:df0:69c0::/48 Signature Algorithm: sha256WithRSAEncryption 75:8b:48:20:c3:16:21:47:cd:e4:0d:65:8a:95:1c:c9:8d:19: 9b:51:4a:12:0f:08:46:9f:97:f2:c7:21:90:9a:01:c8:c4:0e: 26:ab:d7:ad:6f:8d:9d:81:62:ba:02:66:72:cb:ad:ac:cb:eb: 72:79:25:7b:24:ca:cc:1b:80:3e:49:ac:1d:93:a1:e4:cc:03: dd:55:28:fb:11:ce:ed:9e:6c:fd:a6:8a:ce:73:ff:5f:ec:4b: 03:18:ee:85:c2:3a:eb:c4:a1:16:5b:4d:a3:a1:f9:00:51:56: 82:e2:7b:36:01:17:56:77:76:b6:28:0a:36:e5:fb:8f:27:28: 1b:ec:7b:67:3d:5d:d1:4e:71:95:76:5d:d9:de:5c:f7:62:ad: e8:9e:58:62:a2:fb:b6:c7:59:92:ae:97:79:47:84:c6:07:f4: 77:2e:79:a5:95:ac:5c:b1:b2:37:12:ca:93:a5:67:7f:2a:27: 0d:61:a6:37:d2:9d:39:44:ab:de:af:61:a0:fb:f4:fe:db:3c: d4:46:f0:a4:4b:95:11:14:92:86:c4:b1:16:1f:f2:74:9d:61: bc:18:2c:23:81:85:2c:20:d7:44:3d:63:4a:e6:21:17:97:59: 93:4e:9b:95:10:e1:8e:c4:f6:ab:a5:3e:4a:33:93:91:db:33: 47:99:de:cf -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUagdDeRhj0QKBp89Encl5bQZ25KgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDIwMFoX DTI3MDUwMTIzNDcwMFowMzExMC8GA1UEAxMoOEVBOEVDOTkxMjUzRjA2NjVGNDE0 OUQ1RkU0MkMzRjhDRjIyNTVEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL1vGxFbqHdLupg9ra+E6w08y4ATvwtHtIAaOUqg5y5Icce7rPizDQMq0mIo 4JyE7o+dS0HQiHY4RywBOrge5hzspSSfXb3PYMctTUjuAAAuLfWmPNJfJlMxNwxb Np9Emh/TBbbeJpYtBiVW1y+Lo0mJO3pTbT32hWuSapddAN150aHyJnZJ97zqUgT/ Ayze8YaR0jNDbMnGy9L78jVvbsSGtCiP8RNKXNnmjiHJjNSQ3F2F/yzuRCIyRbbJ rL8XPh4obc9TpcZnG6elXykKf48rpgNDBVWnQ4riXKl6nZP2oVmaS6nTA/kpl4rI iHjs8kOgM2mRYPtVlnJs5xAqv2cCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI6o7JkSU/BmX0FJ1f5Cw/jPIlXYMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzAzOTA4NzgyLTQ1MjAtNDViNC05OWVkLTE5M2U1MWRmNTFjMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wMzkwODc4 Mi00NTIwLTQ1YjQtOTllZC0xOTNlNTFkZjUxYzMvMC84RUE4RUM5OTEyNTNGMDY2 NUY0MTQ5RDVGRTQyQzNGOENGMjI1NUQ4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ7SkMA8EAgACMAkDBwAgAQ3wacAwDQYJKoZIhvcNAQELBQADggEBAHWLSCDD FiFHzeQNZYqVHMmNGZtRShIPCEafl/LHIZCaAcjEDiar161vjZ2BYroCZnLLrazL 63J5JXskyswbgD5JrB2ToeTMA91VKPsRzu2ebP2mis5z/1/sSwMY7oXCOuvEoRZb TaOh+QBRVoLiezYBF1Z3drYoCjbl+48nKBvse2c9XdFOcZV2XdneXPdireieWGKi +7bHWZKul3lHhMYH9HcueaWVrFyxsjcSypOlZ38qJw1hpjfSnTlEq96vYaD79P7b PNRG8KRLlREUkobEsRYf8nSdYbwYLCOBhSwg10Q9Y0rmIReXWZNOm5UQ4Y7E9qul Pkozk5HbM0eZ3s8= -----END CERTIFICATE-----Generated at Tue May 12 22:46:10 2026 by rpki-client