$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/8F6B228755F970273B8D779247A1AE56FE0C9587.cer File: 8F6B228755F970273B8D779247A1AE56FE0C9587.cer (raw, json) Hash identifier: 7oy6JS1CBvuxy3+0Dhxeae2Lk2dvw/7Tkaq5eCaMSlc= Subject key identifier: 8F:6B:22:87:55:F9:70:27:3B:8D:77:92:47:A1:AE:56:FE:0C:95:87 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 18BD9C977C7452918C97AE4752FC2648288053FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft caRepository: rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:15:33 +0000 Certificate not after: Sun 02 May 2027 00:20:33 +0000 Subordinate resources: IP: 103.255.98.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:bd:9c:97:7c:74:52:91:8c:97:ae:47:52:fc:26:48:28:80:53:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:15:33 2026 GMT Not After : May 2 00:20:33 2027 GMT Subject: CN=8F6B228755F970273B8D779247A1AE56FE0C9587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:29:81:33:d3:bb:aa:c6:fc:71:01:e5:c8:e4: fc:a5:6b:ad:56:f2:db:9c:89:11:67:56:9a:c4:a1: 92:a4:c0:73:63:52:23:45:e2:0b:c3:dd:24:24:ab: cb:81:2f:76:ad:14:cb:3d:4e:74:ee:ed:c9:e6:1f: 1f:e8:57:af:e6:ee:3f:b9:77:46:c3:53:d0:02:b2: 50:c3:6c:80:c4:fe:bd:b3:44:71:d8:d5:ee:1a:59: d2:ac:85:2f:99:0e:4c:a6:d3:6a:8d:18:d9:5c:45: 0a:98:c3:c3:76:82:0e:c1:70:69:e3:7a:9b:9b:26: 07:6b:0e:77:7b:52:b4:c7:02:83:8f:f1:73:87:9d: ae:de:a1:3a:5c:15:bf:77:5f:04:ba:d6:5f:1e:af: a9:cc:85:a8:7f:7b:3e:3a:02:0b:66:f8:28:67:50: c2:a1:98:d8:5b:72:cd:fc:bc:c6:13:f8:72:86:11: 4a:3b:73:14:d4:af:61:83:29:83:3f:d6:e7:e9:25: 65:4e:14:6b:c9:3c:78:32:39:94:92:99:dd:6b:80: 3d:ee:76:32:a5:0f:d7:a9:d2:e8:54:5f:1f:88:29: 98:87:d3:b0:42:81:74:51:41:d7:2c:a8:e9:32:a0: 93:65:92:94:a0:b6:08:35:8b:27:24:02:3b:06:e3: ec:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8F:6B:22:87:55:F9:70:27:3B:8D:77:92:47:A1:AE:56:FE:0C:95:87 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.255.98.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:ad:d0:37:6c:ec:41:73:96:45:fd:6e:ba:00:7f:b5:07:a4: e8:f7:bb:1a:87:3e:bc:5a:5f:61:5a:33:26:aa:05:fe:f3:cf: d6:92:a9:5f:98:b7:f1:87:64:15:05:95:52:de:e6:0b:14:45: 89:83:10:06:5d:8d:95:b1:9d:fe:c1:fa:65:1c:df:62:62:bf: e9:13:8f:cd:a3:d4:74:3b:2c:8c:ed:6d:5d:e8:af:1e:70:f1: bb:20:87:a9:ab:57:bb:d8:d7:50:28:c8:8d:a8:54:28:e8:d6: a4:a0:c4:18:25:d8:d4:74:fb:4f:ff:88:4b:4e:02:04:9a:96: 21:ef:4d:13:fa:f4:dc:5f:4d:0d:97:4f:60:0d:2a:ff:22:4e: da:1e:cb:3f:1f:9a:46:94:92:16:4e:01:78:12:dc:42:9a:a6: 31:2a:7b:a3:4f:f1:cd:0d:4d:21:d6:d8:a3:a1:94:ca:90:8d: c9:b1:43:16:de:16:01:71:a2:2a:27:d8:ff:56:d8:be:d5:ae: 59:16:11:0d:12:ac:7f:e3:56:36:4d:68:66:9d:c9:ba:1c:c3: df:a9:c1:bd:dd:7a:c7:5e:1f:87:5b:64:44:bf:41:47:b8:b1: 6f:f8:d6:54:5c:6a:4e:d5:5f:13:be:f6:13:ba:be:29:15:47: 06:54:cb:c8 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUGL2cl3x0UpGMl65HUvwmSCiAU/owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTUzM1oX DTI3MDUwMjAwMjAzM1owMzExMC8GA1UEAxMoOEY2QjIyODc1NUY5NzAyNzNCOEQ3 NzkyNDdBMUFFNTZGRTBDOTU4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKwpgTPTu6rG/HEB5cjk/KVrrVby25yJEWdWmsShkqTAc2NSI0XiC8PdJCSr y4Evdq0Uyz1OdO7tyeYfH+hXr+buP7l3RsNT0AKyUMNsgMT+vbNEcdjV7hpZ0qyF L5kOTKbTao0Y2VxFCpjDw3aCDsFwaeN6m5smB2sOd3tStMcCg4/xc4edrt6hOlwV v3dfBLrWXx6vqcyFqH97PjoCC2b4KGdQwqGY2Ftyzfy8xhP4coYRSjtzFNSvYYMp gz/W5+klZU4Ua8k8eDI5lJKZ3WuAPe52MqUP16nS6FRfH4gpmIfTsEKBdFFB1yyo 6TKgk2WSlKC2CDWLJyQCOwbj7DcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI9rIodV+XAnO413kkehrlb+DJWHMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM1N2ZiMTdlLTlkNTgtNGQ1MS04NDZlLTBhODRjODY5OTE0Mi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zNTdmYjE3 ZS05ZDU4LTRkNTEtODQ2ZS0wYTg0Yzg2OTkxNDIvMC84RjZCMjI4NzU1Rjk3MDI3 M0I4RDc3OTI0N0ExQUU1NkZFMEM5NTg3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ/9iMA0GCSqGSIb3DQEBCwUAA4IBAQBLrdA3bOxBc5ZF/W66AH+1B6To97sa hz68Wl9hWjMmqgX+88/WkqlfmLfxh2QVBZVS3uYLFEWJgxAGXY2VsZ3+wfplHN9i Yr/pE4/No9R0OyyM7W1d6K8ecPG7IIepq1e72NdQKMiNqFQo6NakoMQYJdjUdPtP /4hLTgIEmpYh700T+vTcX00Nl09gDSr/Ik7aHss/H5pGlJIWTgF4EtxCmqYxKnuj T/HNDU0h1tijoZTKkI3JsUMW3hYBcaIqJ9j/Vti+1a5ZFhENEqx/41Y2TWhmncm6 HMPfqcG93XrHXh+HW2REv0FHuLFv+NZUXGpO1V8TvvYTur4pFUcGVMvI -----END CERTIFICATE-----Generated at Tue May 12 22:16:04 2026 by rpki-client