$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A8C779B92C9D8335C1CB86712683DFD8390906AB.cer File: A8C779B92C9D8335C1CB86712683DFD8390906AB.cer (raw, json) Hash identifier: ZZs2Masna9odfe10148B1A8DKYBHio4cWh0xFm8ErA4= Subject key identifier: A8:C7:79:B9:2C:9D:83:35:C1:CB:86:71:26:83:DF:D8:39:09:06:AB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7DB229414A6E6B28A8C78CC303F98DD2BFE6D981 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8C779B92C9D8335C1CB86712683DFD8390906AB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:26:04 +0000 Certificate not after: Sun 02 May 2027 01:31:04 +0000 Subordinate resources: IP: 103.191.216.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:b2:29:41:4a:6e:6b:28:a8:c7:8c:c3:03:f9:8d:d2:bf:e6:d9:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:26:04 2026 GMT Not After : May 2 01:31:04 2027 GMT Subject: CN=A8C779B92C9D8335C1CB86712683DFD8390906AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cd:10:19:bf:da:0c:c7:4b:b9:4a:a9:7d:58: 3c:93:92:9a:18:ce:d9:8b:f7:08:ae:aa:ab:3d:7d: 0f:8a:6f:0d:2b:89:c4:88:b3:56:03:7e:37:b9:f8: 67:f7:85:4e:08:96:a8:f4:32:ba:38:cb:b7:67:02: bb:28:17:a4:c5:59:4f:bd:74:31:30:3e:9f:eb:79: 5a:0c:24:97:7c:10:69:f2:52:06:8f:c9:ad:a0:fe: 4f:a6:5a:d2:50:98:9a:0d:72:c1:bc:d1:3e:57:86: 23:03:90:d1:d6:8c:79:ea:a1:3f:36:08:8e:45:d8: bb:72:85:1e:ad:4e:0b:7a:6c:13:28:c3:56:75:d0: 11:ab:42:6a:b4:38:68:08:5f:ea:5f:61:ff:9c:20: 03:3c:8b:d2:c8:1b:61:1a:a2:71:03:2e:32:b9:40: 9b:93:6d:d7:d7:87:7a:66:06:e0:3d:15:14:03:d1: 77:bb:88:6d:f2:2c:88:cf:0b:87:10:dc:1f:8e:47: a8:55:96:7f:7c:cf:65:d6:74:1d:2b:25:75:44:07: 96:f5:cb:e3:af:76:01:c9:77:29:e0:6a:fb:36:e2: e0:b8:f8:5b:b8:7b:91:02:16:44:7d:a9:c6:c5:50: a2:73:d0:65:f2:68:99:2a:52:52:7d:64:00:1c:1b: e1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A8:C7:79:B9:2C:9D:83:35:C1:CB:86:71:26:83:DF:D8:39:09:06:AB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8C779B92C9D8335C1CB86712683DFD8390906AB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.216.0/23 Signature Algorithm: sha256WithRSAEncryption 16:31:89:81:71:53:d6:7c:38:fc:b0:18:ff:97:86:f9:15:ea: 46:30:c1:dc:60:18:8f:ca:57:82:29:6b:f4:f4:db:7a:15:83: 6f:fb:63:7a:8d:d7:66:84:98:aa:51:ba:26:7b:75:f3:43:cf: 43:c2:8b:29:a9:a5:74:86:ea:54:dd:7e:d8:98:ec:61:f1:e4: f2:22:06:5d:b3:02:ac:33:0b:87:7a:bc:82:6d:ed:54:44:f5: c8:fc:e6:6e:41:04:fa:40:0e:59:a3:0d:c9:aa:c6:08:f9:9d: 86:c1:d6:b0:d7:66:74:06:e9:45:fb:aa:03:51:06:81:38:1e: 24:62:dc:d1:11:f6:d2:39:a9:e1:cc:e0:0b:1b:5a:95:c0:db: eb:45:7b:0f:65:45:d6:1d:3d:eb:0b:b4:c4:e0:55:2a:a0:02: ff:93:13:b7:1e:95:96:0e:77:dc:52:58:90:db:18:c7:ea:8d: e7:23:81:78:90:2e:7d:b2:f9:91:f5:da:91:48:81:31:d0:00: dc:c1:2e:3b:ce:89:48:76:c7:aa:7f:b2:4e:33:7e:cc:cb:c0: ad:bd:d0:b6:ed:b2:3c:e6:90:4e:17:88:31:e5:55:5d:14:02: 17:c0:bb:84:c3:98:c4:33:29:1b:5e:4a:1e:12:b5:5f:9b:1f: 4d:f6:ad:dc -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUfbIpQUpuayiox4zDA/mN0r/m2YEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjYwNFoX DTI3MDUwMjAxMzEwNFowMzExMC8GA1UEAxMoQThDNzc5QjkyQzlEODMzNUMxQ0I4 NjcxMjY4M0RGRDgzOTA5MDZBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHNEBm/2gzHS7lKqX1YPJOSmhjO2Yv3CK6qqz19D4pvDSuJxIizVgN+N7n4 Z/eFTgiWqPQyujjLt2cCuygXpMVZT710MTA+n+t5Wgwkl3wQafJSBo/JraD+T6Za 0lCYmg1ywbzRPleGIwOQ0daMeeqhPzYIjkXYu3KFHq1OC3psEyjDVnXQEatCarQ4 aAhf6l9h/5wgAzyL0sgbYRqicQMuMrlAm5Nt19eHemYG4D0VFAPRd7uIbfIsiM8L hxDcH45HqFWWf3zPZdZ0HSsldUQHlvXL4692Acl3KeBq+zbi4Lj4W7h7kQIWRH2p xsVQonPQZfJomSpSUn1kABwb4Y8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKjHebksnYM1wcuGcSaD39g5CQarMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzllNDc4NDdjLWJjMmMtNDBkYS1iMmFhLTkxNTk1MTQyOGFhZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85ZTQ3ODQ3 Yy1iYzJjLTQwZGEtYjJhYS05MTU5NTE0MjhhYWQvMC9BOEM3NzlCOTJDOUQ4MzM1 QzFDQjg2NzEyNjgzREZEODM5MDkwNkFCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7/YMA0GCSqGSIb3DQEBCwUAA4IBAQAWMYmBcVPWfDj8sBj/l4b5FepGMMHc YBiPyleCKWv09Nt6FYNv+2N6jddmhJiqUbome3XzQ89DwospqaV0hupU3X7YmOxh 8eTyIgZdswKsMwuHeryCbe1URPXI/OZuQQT6QA5Zow3JqsYI+Z2Gwdaw12Z0BulF +6oDUQaBOB4kYtzREfbSOanhzOALG1qVwNvrRXsPZUXWHT3rC7TE4FUqoAL/kxO3 HpWWDnfcUliQ2xjH6o3nI4F4kC59svmR9dqRSIEx0ADcwS47zolIdseqf7JOM37M y8CtvdC27bI85pBOF4gx5VVdFAIXwLuEw5jEMykbXkoeErVfmx9N9q3c -----END CERTIFICATE-----Generated at Tue May 12 22:47:32 2026 by rpki-client