$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer File: 8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer (raw, json) Hash identifier: 9P7HRft0xA3iJQjLR5lXV/6O8AXIdlKg1JCMpOho1jg= Subject key identifier: 8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6C12DDFF8CEDC444EFCB319150B6D4EF0BDF79CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:30:21 +0000 Certificate not after: Sun 02 May 2027 01:35:21 +0000 Subordinate resources: IP: 103.102.112.0/22 IP: 2001:df2:d500::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:12:dd:ff:8c:ed:c4:44:ef:cb:31:91:50:b6:d4:ef:0b:df:79:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:30:21 2026 GMT Not After : May 2 01:35:21 2027 GMT Subject: CN=8EE359887ED47947E74ECC3D12D7DD874E3AE6EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6d:99:4b:b8:81:18:f9:1a:1d:2a:f5:9c:44: 0c:58:8c:77:db:c5:a4:a8:46:a6:6e:4a:d7:3f:e1: 59:61:1f:be:81:83:2e:0b:15:a3:4e:4b:1c:77:6d: bd:fd:92:14:00:fd:8d:86:5b:ac:a9:75:83:aa:db: fa:79:d1:90:15:60:fb:60:ea:b1:d1:79:22:4f:96: c3:07:71:f0:4e:3f:60:56:e5:2c:4d:13:2b:22:a7: 7a:a2:f6:34:1c:c4:84:25:4b:1a:07:24:31:60:c6: a8:92:1f:e4:5d:5c:2a:b0:fc:bd:c5:e4:ec:5e:e5: 54:f2:23:87:19:fa:63:bd:37:84:7a:2f:bc:fa:64: d5:6e:86:e4:8f:1e:be:21:4e:39:6b:13:4f:a3:b5: db:66:5d:d7:e6:e0:a5:f8:5a:ac:3c:49:d6:a7:11: 8a:66:c5:3a:61:03:db:86:1c:99:36:03:64:e6:e7: d7:1e:63:57:f5:6d:07:25:d7:7d:02:c2:5b:f1:0b: 08:24:ff:eb:89:67:dd:52:cd:5a:e0:06:ec:fe:75: ff:48:7c:8c:37:96:f4:8e:fb:e9:b6:5b:28:b0:30: 9e:9b:2d:d3:86:f8:2c:98:3f:e1:1b:0e:cc:00:8e: a6:19:fe:76:c8:2d:93:a0:f4:90:a5:cd:50:4f:2b: 63:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.112.0/22 IPv6: 2001:df2:d500::/48 Signature Algorithm: sha256WithRSAEncryption 40:3b:94:15:16:18:f1:7b:fd:12:05:26:ce:5d:51:8a:ba:ab: c5:9d:89:4c:3c:78:62:3e:c5:51:f3:63:10:0b:9d:ca:4f:d4: 59:63:a2:1a:53:67:39:b9:d9:d2:c1:5d:08:1b:36:8f:f5:23: 89:cc:cc:8b:24:a1:b9:02:2b:a2:67:e5:22:81:13:c1:df:f9: fe:88:9a:42:4f:94:39:1d:eb:1f:b1:d2:ef:01:14:e9:5d:0c: 83:d4:1f:d9:c7:c3:42:a9:9a:6d:be:5b:1a:0a:f5:2c:b6:da: b0:98:d1:65:fa:47:a8:15:dd:65:d1:b5:b1:27:03:8b:6c:70: 1b:73:4c:2c:ed:58:d5:ce:47:3c:0b:9f:0f:fc:ad:c8:74:6e: 2b:1c:bf:51:3f:ad:5a:cc:16:07:da:32:0f:0e:2f:4d:bb:79: a5:a6:e3:1d:e7:90:25:9b:79:55:80:11:8e:bd:d6:aa:ee:9c: 25:7b:28:7a:da:c4:37:7a:d7:05:9a:05:cd:92:18:9c:bb:c2: b2:dd:45:6b:6f:d7:8b:18:ef:03:41:bb:bd:df:f6:3f:cb:18: 57:62:1e:e9:44:00:ef:f0:31:08:45:b4:3a:41:e5:fe:18:a7: 0b:7b:c0:68:98:b5:34:50:14:f3:17:3d:65:13:ab:6f:59:db: a4:96:07:ec -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUbBLd/4ztxETvyzGRULbU7wvfec0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzAyMVoX DTI3MDUwMjAxMzUyMVowMzExMC8GA1UEAxMoOEVFMzU5ODg3RUQ0Nzk0N0U3NEVD QzNEMTJEN0REODc0RTNBRTZFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMptmUu4gRj5Gh0q9ZxEDFiMd9vFpKhGpm5K1z/hWWEfvoGDLgsVo05LHHdt vf2SFAD9jYZbrKl1g6rb+nnRkBVg+2DqsdF5Ik+Wwwdx8E4/YFblLE0TKyKneqL2 NBzEhCVLGgckMWDGqJIf5F1cKrD8vcXk7F7lVPIjhxn6Y703hHovvPpk1W6G5I8e viFOOWsTT6O122Zd1+bgpfharDxJ1qcRimbFOmED24YcmTYDZObn1x5jV/VtByXX fQLCW/ELCCT/64ln3VLNWuAG7P51/0h8jDeW9I776bZbKLAwnpst04b4LJg/4RsO zACOphn+dsgtk6D0kKXNUE8rY6kCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI7jWYh+1HlH507MPRLX3YdOOubsMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E1YzdhNDA0LWViM2YtNGNmMS05OWY5LTgyNzk2MTY2MWYzMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hNWM3YTQw NC1lYjNmLTRjZjEtOTlmOS04Mjc5NjE2NjFmMzEvMC84RUUzNTk4ODdFRDQ3OTQ3 RTc0RUNDM0QxMkQ3REQ4NzRFM0FFNkVDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZ2ZwMA8EAgACMAkDBwAgAQ3y1QAwDQYJKoZIhvcNAQELBQADggEBAEA7lBUW GPF7/RIFJs5dUYq6q8WdiUw8eGI+xVHzYxALncpP1FljohpTZzm52dLBXQgbNo/1 I4nMzIskobkCK6Jn5SKBE8Hf+f6ImkJPlDkd6x+x0u8BFOldDIPUH9nHw0Kpmm2+ WxoK9Sy22rCY0WX6R6gV3WXRtbEnA4tscBtzTCztWNXORzwLnw/8rch0biscv1E/ rVrMFgfaMg8OL027eaWm4x3nkCWbeVWAEY691qrunCV7KHraxDd61wWaBc2SGJy7 wrLdRWtv14sY7wNBu73f9j/LGFdiHulEAO/wMQhFtDpB5f4Ypwt7wGiYtTRQFPMX PWUTq29Z26SWB+w= -----END CERTIFICATE-----Generated at Wed May 13 01:07:03 2026 by rpki-client