$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer File: 8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer (raw, json) Hash identifier: mvkjsrc5hWMIHdsEQ8oGx5oY4mM4KAXhCCRA5G2NN4s= Subject key identifier: 8F:16:5E:EE:E0:E2:AF:2A:9C:1B:D8:01:E8:BC:78:8F:F3:89:00:04 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 321A30D89B1B0BD061C8F54BFE90A3EFF3722E2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:23:14 +0000 Certificate not after: Sun 02 May 2027 01:28:14 +0000 Subordinate resources: IP: 103.164.230.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:1a:30:d8:9b:1b:0b:d0:61:c8:f5:4b:fe:90:a3:ef:f3:72:2e:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:23:14 2026 GMT Not After : May 2 01:28:14 2027 GMT Subject: CN=8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:72:56:1f:e5:6c:5e:04:e5:89:c2:f8:a3:1a: 93:a8:da:8b:23:31:80:08:ab:6e:d2:b4:b7:6c:b0: 70:9f:29:4b:fc:c4:e5:e0:eb:7d:49:12:26:33:91: f5:7c:ec:76:cf:c9:61:14:f1:72:2a:49:f4:10:dd: 54:bc:af:fe:40:42:53:67:71:1e:ec:bd:9b:a7:7d: 8d:32:2d:b7:d4:03:3c:5a:6d:fd:8b:2f:70:bd:2e: 12:08:08:82:56:c4:bc:a3:c3:75:a9:f0:2c:cf:f5: e9:e8:df:49:a1:59:67:77:86:bd:a4:ab:1e:bb:d9: 1a:f8:84:d8:22:94:50:ec:62:91:d8:9c:8f:28:35: e3:27:79:f5:f9:4a:0d:88:44:4b:7c:22:cb:f3:2e: 9e:dd:d4:fa:0c:23:83:36:37:97:d5:54:bf:3c:1d: 51:26:0f:b0:7b:4a:09:f8:5e:1a:37:71:a2:ba:d8: 42:a8:d9:cf:bc:80:20:06:b5:38:8d:c5:8b:3b:d2: b1:14:9d:4f:60:70:c2:e5:ab:c9:b0:5a:bb:9d:50: 60:3d:e0:33:3f:4a:cf:7e:61:28:54:8e:d2:70:c6: be:c4:d5:6d:4f:1c:8f:4e:5f:61:36:4d:31:fc:27: 06:6f:5b:58:af:32:31:db:99:98:ad:8c:a0:c0:d4: 53:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8F:16:5E:EE:E0:E2:AF:2A:9C:1B:D8:01:E8:BC:78:8F:F3:89:00:04 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.230.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:96:2c:3a:f5:06:e9:2d:9d:0c:a0:98:8c:1a:e7:1f:80:ff: b0:cf:8f:c1:9d:01:53:4b:1b:f6:5b:68:b3:c4:00:eb:e7:b9: ed:80:32:ab:b8:58:5a:af:c2:3e:ba:28:bd:25:7a:65:07:40: 79:f5:cb:09:43:96:89:84:3e:12:3a:ae:06:6d:2b:22:27:dc: 31:ff:b9:cc:4c:57:9b:07:b6:c2:c4:29:eb:e8:4e:77:6d:e2: 19:e5:b3:d3:43:e1:85:2b:ee:85:bb:4a:fe:5a:88:c5:a0:be: c1:c4:b1:0a:6e:1c:9d:fb:29:30:ca:b1:a6:f8:0e:c0:68:88: 56:02:18:27:50:e0:da:ac:a2:db:13:9e:1c:15:72:3e:4b:ee: 64:2a:81:28:2b:5f:b4:01:36:b1:08:58:0f:65:66:6b:b6:57: 9c:a5:37:95:b3:bd:98:07:3d:ab:4c:cf:46:8b:e0:f9:ca:14: 80:20:19:8b:1d:15:c5:27:4b:4f:9d:5d:58:62:11:b4:45:14: 9e:93:3a:a8:83:7c:d4:34:e3:bb:5c:a0:78:80:91:f8:b0:f4: 63:47:f7:d5:a7:cc:ea:05:a3:01:56:d5:15:01:1a:fa:4a:57: ce:5d:60:ab:d3:0f:6d:a1:59:d4:99:ca:c1:e0:3a:c6:10:1a: 0b:42:0b:51 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUMhow2JsbC9BhyPVL/pCj7/NyLiowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjMxNFoX DTI3MDUwMjAxMjgxNFowMzExMC8GA1UEAxMoOEYxNjVFRUVFMEUyQUYyQTlDMUJE ODAxRThCQzc4OEZGMzg5MDAwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKlyVh/lbF4E5YnC+KMak6jaiyMxgAirbtK0t2ywcJ8pS/zE5eDrfUkSJjOR 9Xzsds/JYRTxcipJ9BDdVLyv/kBCU2dxHuy9m6d9jTItt9QDPFpt/YsvcL0uEggI glbEvKPDdanwLM/16ejfSaFZZ3eGvaSrHrvZGviE2CKUUOxikdicjyg14yd59flK DYhES3wiy/Munt3U+gwjgzY3l9VUvzwdUSYPsHtKCfheGjdxorrYQqjZz7yAIAa1 OI3FizvSsRSdT2BwwuWrybBau51QYD3gMz9Kz35hKFSO0nDGvsTVbU8cj05fYTZN MfwnBm9bWK8yMduZmK2MoMDUUykCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI8WXu7g4q8qnBvYAei8eI/ziQAEMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzlhMTc5NGFhLTMyOTEtNDgzYi1hYzBiLTdiYzdiMWE2N2NjNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85YTE3OTRh YS0zMjkxLTQ4M2ItYWMwYi03YmM3YjFhNjdjYzYvMC84RjE2NUVFRUUwRTJBRjJB OUMxQkQ4MDFFOEJDNzg4RkYzODkwMDA0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6TmMA0GCSqGSIb3DQEBCwUAA4IBAQAOliw69QbpLZ0MoJiMGucfgP+wz4/B nQFTSxv2W2izxADr57ntgDKruFhar8I+uii9JXplB0B59csJQ5aJhD4SOq4GbSsi J9wx/7nMTFebB7bCxCnr6E53beIZ5bPTQ+GFK+6Fu0r+WojFoL7BxLEKbhyd+ykw yrGm+A7AaIhWAhgnUODarKLbE54cFXI+S+5kKoEoK1+0ATaxCFgPZWZrtlecpTeV s72YBz2rTM9Gi+D5yhSAIBmLHRXFJ0tPnV1YYhG0RRSekzqog3zUNOO7XKB4gJH4 sPRjR/fVp8zqBaMBVtUVARr6SlfOXWCr0w9toVnUmcrB4DrGEBoLQgtR -----END CERTIFICATE-----Generated at Tue May 12 22:04:05 2026 by rpki-client