$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer File: 8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer (raw, json) Hash identifier: Mdt8H5ELpfKTnvpEtKnZHJpBFoLq8xETND04GC/TX30= Subject key identifier: 8F:1F:52:C6:3B:B8:74:84:D4:C5:E9:D8:55:1A:E7:67:56:6D:00:60 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3D3DE21DBC783354ABC672A6D3E878D724E14B52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:23:25 +0000 Certificate not after: Sun 02 May 2027 01:28:25 +0000 Subordinate resources: IP: 103.171.18.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:3d:e2:1d:bc:78:33:54:ab:c6:72:a6:d3:e8:78:d7:24:e1:4b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:23:25 2026 GMT Not After : May 2 01:28:25 2027 GMT Subject: CN=8F1F52C63BB87484D4C5E9D8551AE767566D0060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c3:de:d5:d8:5d:c9:95:09:2e:6d:cd:96:a4: b1:9c:a6:0c:b0:c6:98:3a:e8:aa:88:99:52:b6:aa: fc:86:e2:2a:63:43:7e:33:8f:94:10:84:90:49:ed: 2d:bb:82:5d:f5:11:28:f5:32:bd:5b:f3:19:7b:5f: a0:e0:06:c4:71:41:02:fb:91:7f:a4:0d:59:c7:db: 59:4c:72:34:05:9d:19:49:5f:a9:ba:87:c5:a2:77: 70:99:eb:a7:cc:ff:d2:1a:ec:92:73:4a:12:86:05: 8b:39:6f:f6:c6:02:7f:45:a9:0d:19:28:1a:5d:03: 01:07:86:c2:be:58:d9:5e:b1:df:8c:12:e9:01:78: f5:67:1a:d7:be:0c:4e:b7:fa:88:d9:b5:e3:96:0e: 1a:3b:f9:d7:8d:33:d7:8b:c5:59:f0:35:52:f6:58: 37:fb:8b:4b:be:8a:fc:d4:02:8a:d2:96:35:60:1f: ab:8d:7d:44:6a:8c:01:6e:68:2d:c3:53:a1:cd:a8: e1:a6:ed:8e:d5:c5:86:c3:a8:03:2e:c5:86:c1:7a: 7e:dc:f7:c1:5b:9d:ba:c4:c3:3d:3f:df:75:ae:ee: 17:25:15:66:6b:19:9d:e5:34:07:b2:70:3f:fe:2c: f4:cd:5a:2b:d1:cf:93:bb:a5:f6:14:ef:b4:87:72: 6a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8F:1F:52:C6:3B:B8:74:84:D4:C5:E9:D8:55:1A:E7:67:56:6D:00:60 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.171.18.0/23 Signature Algorithm: sha256WithRSAEncryption 83:76:49:0b:44:80:74:03:22:ab:b8:62:b2:5b:29:72:3d:22: 92:3f:ab:6d:2c:9f:7d:cf:85:a0:b3:6b:e0:a9:20:f7:7f:4c: 3e:e4:e8:03:33:26:94:22:6b:7f:22:7a:ba:02:6b:60:9a:a6: 7c:ab:c7:a0:b9:7c:84:15:94:73:b4:bc:99:df:2d:6f:f6:a5: 8b:9e:0e:b8:0b:05:95:30:72:07:83:b9:13:9b:32:b0:cd:0e: f5:bc:93:2f:8c:5d:13:11:6b:a3:a3:b6:f2:84:9c:2a:48:be: 6c:29:28:49:ae:2e:17:12:a3:e6:2c:ba:99:cb:df:33:0e:6a: 44:cd:81:71:6e:41:56:cd:d9:9d:e0:6b:ad:c9:90:4b:a1:c7: 31:0b:89:1d:ad:92:07:ba:df:e4:1a:a9:f0:c1:cc:61:34:68: df:59:07:0b:c1:48:d2:1a:ae:d9:bf:3f:6b:47:e0:e7:82:f5: 86:03:c1:e0:bc:b8:cd:53:c2:e4:d3:31:89:c3:c3:5f:11:dc: b6:f3:7e:6b:c3:19:4b:1e:a3:71:84:7a:90:c1:d6:49:64:b7: 5b:43:fb:e6:d7:ec:5a:ec:59:bd:ee:d1:03:30:a2:31:00:04: 2c:8c:4d:bc:d4:8a:7a:a9:63:52:43:64:9a:ae:53:bd:61:0a: b9:e7:b9:7c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUPT3iHbx4M1SrxnKm0+h41yThS1IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjMyNVoX DTI3MDUwMjAxMjgyNVowMzExMC8GA1UEAxMoOEYxRjUyQzYzQkI4NzQ4NEQ0QzVF OUQ4NTUxQUU3Njc1NjZEMDA2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJLD3tXYXcmVCS5tzZaksZymDLDGmDroqoiZUraq/IbiKmNDfjOPlBCEkEnt LbuCXfURKPUyvVvzGXtfoOAGxHFBAvuRf6QNWcfbWUxyNAWdGUlfqbqHxaJ3cJnr p8z/0hrsknNKEoYFizlv9sYCf0WpDRkoGl0DAQeGwr5Y2V6x34wS6QF49Wca174M Trf6iNm145YOGjv5140z14vFWfA1UvZYN/uLS76K/NQCitKWNWAfq419RGqMAW5o LcNToc2o4abtjtXFhsOoAy7FhsF6ftz3wVudusTDPT/fda7uFyUVZmsZneU0B7Jw P/4s9M1aK9HPk7ul9hTvtIdyahUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI8fUsY7uHSE1MXp2FUa52dWbQBgMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzlhOGY2OWY3LTkzMzItNGNkNC1iM2U1LWNjNmM0NzcyY2Y3My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85YThmNjlm Ny05MzMyLTRjZDQtYjNlNS1jYzZjNDc3MmNmNzMvMC84RjFGNTJDNjNCQjg3NDg0 RDRDNUU5RDg1NTFBRTc2NzU2NkQwMDYwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6sSMA0GCSqGSIb3DQEBCwUAA4IBAQCDdkkLRIB0AyKruGKyWylyPSKSP6tt LJ99z4Wgs2vgqSD3f0w+5OgDMyaUImt/Inq6AmtgmqZ8q8eguXyEFZRztLyZ3y1v 9qWLng64CwWVMHIHg7kTmzKwzQ71vJMvjF0TEWujo7byhJwqSL5sKShJri4XEqPm LLqZy98zDmpEzYFxbkFWzdmd4GutyZBLoccxC4kdrZIHut/kGqnwwcxhNGjfWQcL wUjSGq7Zvz9rR+DngvWGA8HgvLjNU8Lk0zGJw8NfEdy2835rwxlLHqNxhHqQwdZJ ZLdbQ/vm1+xa7Fm97tEDMKIxAAQsjE281Ip6qWNSQ2SarlO9YQq557l8 -----END CERTIFICATE-----Generated at Tue May 12 22:15:50 2026 by rpki-client