$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer File: 8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer (raw, json) Hash identifier: I0Y+CyN1ZV3bDCPQ6mWnbMK3jsMoDq9KXFmHa9b91Do= Subject key identifier: 8E:EC:1E:03:B8:E5:2F:66:A0:71:3D:EB:14:21:7C:87:F9:EA:17:A7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 28C186292C919A8938579A361218046A6B8E502E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft caRepository: rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:34:35 +0000 Certificate not after: Sun 02 May 2027 00:39:35 +0000 Subordinate resources: IP: 103.70.122.0/23 IP: 2001:df2:74c0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c1:86:29:2c:91:9a:89:38:57:9a:36:12:18:04:6a:6b:8e:50:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:34:35 2026 GMT Not After : May 2 00:39:35 2027 GMT Subject: CN=8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:30:13:02:3a:ea:d7:40:14:db:97:59:fe:de: cb:b0:66:30:ea:59:70:e9:ee:e1:d7:8b:af:1f:bd: 7e:8d:7d:74:0a:97:16:ef:36:ed:ba:21:23:b7:10: 95:d0:58:e3:15:9b:1b:9e:14:f7:c4:86:01:c8:48: 75:e5:e4:85:3d:f0:ff:4e:20:18:95:a7:db:35:47: c4:69:d8:27:69:c0:c7:ed:b1:53:6b:e3:72:c0:7c: 2b:8d:f4:6c:99:72:eb:e0:a9:a1:a0:66:59:e5:04: 16:b8:94:80:e9:1f:c2:fb:5a:43:85:c7:c7:5f:ae: c6:94:aa:36:80:84:f8:79:97:60:62:89:59:53:a4: f2:67:cd:fe:85:f7:36:f5:8c:65:8e:72:2a:2a:2f: df:1e:84:05:83:18:d0:b9:a5:d9:a2:c5:20:76:8d: d6:64:e5:ee:89:53:2b:37:80:15:30:b4:bf:35:1f: b8:80:18:20:1e:90:11:f6:56:95:9a:85:ed:1f:06: 6e:33:47:10:93:ba:a2:1c:8d:c7:38:0a:2d:d2:19: 72:4d:d1:d1:48:e9:32:da:9a:fd:fe:7b:78:ed:30: 27:37:ef:4f:24:8f:2f:35:03:5f:5e:60:fd:04:0d: ad:db:41:c0:16:05:7d:b8:01:45:1a:63:79:af:5f: f1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8E:EC:1E:03:B8:E5:2F:66:A0:71:3D:EB:14:21:7C:87:F9:EA:17:A7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.70.122.0/23 IPv6: 2001:df2:74c0::/48 Signature Algorithm: sha256WithRSAEncryption 02:c2:87:c0:b6:ed:12:fd:da:8c:62:7a:ba:87:67:76:42:3b: 67:3c:cc:07:21:16:31:0f:12:97:22:64:6b:0e:e4:d0:16:e2: 49:cc:49:3e:fb:8f:03:82:a6:f1:8d:96:c4:03:09:2e:d4:c9: b0:b6:0b:f0:49:19:a0:ca:d9:2b:6c:18:d0:52:52:98:87:d1: 8f:e2:ff:74:da:1c:11:19:70:32:dc:11:cf:ea:e1:1b:93:70: e7:da:af:00:c2:d1:9c:ae:de:9a:ab:f0:76:34:79:e8:0f:e0: af:45:9f:d0:d5:07:1c:e8:46:ac:74:a1:1f:2e:5e:ce:ec:7b: ca:74:0a:7a:37:2e:46:0d:e1:db:13:c1:ba:04:63:7f:61:93: a1:8d:ee:db:2f:06:2c:f1:fd:b8:9c:e0:7f:a7:61:83:4f:8d: 64:c5:ef:cb:bf:28:4e:8a:0d:16:90:b7:6f:26:56:62:f5:a0: 1b:15:4c:e7:97:9d:55:a0:28:e3:33:03:0d:60:fd:f3:01:08: d1:c7:ad:fd:ba:bc:87:b5:12:25:91:f5:d1:82:d9:45:27:34: 22:43:4d:e8:fb:97:8d:35:09:83:dd:78:1a:79:90:74:11:8c: 21:89:3e:10:0c:9b:e3:ff:6f:36:20:2d:9c:64:9a:1e:36:0c: de:b8:8f:a2 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUKMGGKSyRmok4V5o2EhgEamuOUC4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzQzNVoX DTI3MDUwMjAwMzkzNVowMzExMC8GA1UEAxMoOEVFQzFFMDNCOEU1MkY2NkEwNzEz REVCMTQyMTdDODdGOUVBMTdBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOwwEwI66tdAFNuXWf7ey7BmMOpZcOnu4deLrx+9fo19dAqXFu827bohI7cQ ldBY4xWbG54U98SGAchIdeXkhT3w/04gGJWn2zVHxGnYJ2nAx+2xU2vjcsB8K430 bJly6+CpoaBmWeUEFriUgOkfwvtaQ4XHx1+uxpSqNoCE+HmXYGKJWVOk8mfN/oX3 NvWMZY5yKiov3x6EBYMY0Lml2aLFIHaN1mTl7olTKzeAFTC0vzUfuIAYIB6QEfZW lZqF7R8GbjNHEJO6ohyNxzgKLdIZck3R0UjpMtqa/f57eO0wJzfvTySPLzUDX15g /QQNrdtBwBYFfbgBRRpjea9f8RsCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI7sHgO45S9moHE96xQhfIf56henMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzUzMjUwNjYyLTNlZWYtNGFhOS05ZWRlLTU2MjlkNWI2ZWE5NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81MzI1MDY2 Mi0zZWVmLTRhYTktOWVkZS01NjI5ZDViNmVhOTUvMC84RUVDMUUwM0I4RTUyRjY2 QTA3MTNERUIxNDIxN0M4N0Y5RUExN0E3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ0Z6MA8EAgACMAkDBwAgAQ3ydMAwDQYJKoZIhvcNAQELBQADggEBAALCh8C2 7RL92oxierqHZ3ZCO2c8zAchFjEPEpciZGsO5NAW4knMST77jwOCpvGNlsQDCS7U ybC2C/BJGaDK2StsGNBSUpiH0Y/i/3TaHBEZcDLcEc/q4RuTcOfarwDC0Zyu3pqr 8HY0eegP4K9Fn9DVBxzoRqx0oR8uXs7se8p0Cno3LkYN4dsTwboEY39hk6GN7tsv Bizx/bic4H+nYYNPjWTF78u/KE6KDRaQt28mVmL1oBsVTOeXnVWgKOMzAw1g/fMB CNHHrf26vIe1EiWR9dGC2UUnNCJDTej7l401CYPdeBp5kHQRjCGJPhAMm+P/bzYg LZxkmh42DN64j6I= -----END CERTIFICATE-----Generated at Wed May 13 01:44:43 2026 by rpki-client