$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer File: A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer (raw, json) Hash identifier: K2odUKls8k6zDZ7lGV5MY3vD0cA6AwH/oVFBPNqKh1M= Subject key identifier: A8:D6:02:17:38:8D:CE:E6:89:7B:DA:5B:C6:D5:19:03:17:CE:C0:EC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5B7249CCA7DB3045B035A1DF2D9871912B26FF73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:52:56 +0000 Certificate not after: Sun 02 May 2027 01:57:56 +0000 Subordinate resources: IP: 103.186.200.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:72:49:cc:a7:db:30:45:b0:35:a1:df:2d:98:71:91:2b:26:ff:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:52:56 2026 GMT Not After : May 2 01:57:56 2027 GMT Subject: CN=A8D60217388DCEE6897BDA5BC6D5190317CEC0EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b2:a9:83:61:01:bd:c1:f3:eb:91:b2:a4:68: 89:19:44:79:38:90:8b:fc:76:a5:a4:60:89:cf:d0: e7:ba:16:81:13:31:8f:24:ba:15:94:17:ec:72:fc: c8:4d:45:2a:83:e9:b9:3e:24:b5:9e:77:1a:e0:fd: e5:be:0d:c4:66:99:e5:b1:da:9a:05:49:23:2e:c6: 2d:e0:bd:a0:05:75:f7:92:75:30:e2:1c:a5:c9:8e: b0:f0:d6:25:8a:1a:1b:7d:45:08:fc:4e:ba:48:e2: dc:3e:dd:5d:a1:98:14:7d:4e:76:49:41:23:34:20: ba:f7:85:20:2a:55:8c:0f:5a:2c:b1:03:6f:4c:e9: 64:60:a9:63:07:20:da:6e:c9:f2:8d:97:eb:d5:02: f4:6e:5a:e4:59:36:38:64:b3:9e:2c:4e:4f:82:e4: cf:36:c4:d9:0b:5c:a1:8f:76:fa:62:db:63:13:31: 1e:82:f5:03:f0:2a:f7:4d:6a:e1:19:ad:64:18:91: 10:76:29:6a:bd:9d:2c:d8:d0:f7:d4:fc:5f:33:94: db:3d:5f:e0:b2:ae:9d:f1:48:d2:f3:98:a2:45:fb: 0e:f5:ed:04:1f:67:f6:e2:aa:21:da:9e:11:15:85: 6d:3d:83:60:f8:d3:8b:7d:c7:8f:9e:1e:61:a5:72: db:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A8:D6:02:17:38:8D:CE:E6:89:7B:DA:5B:C6:D5:19:03:17:CE:C0:EC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.200.0/23 Signature Algorithm: sha256WithRSAEncryption 65:57:32:64:2a:04:7f:3e:25:01:69:fb:8a:7e:2e:7d:d3:e6: 2f:66:02:24:de:1b:79:2c:d1:81:0e:9e:ca:e0:4b:ca:35:7c: ab:f3:17:da:b0:9a:59:be:74:7c:5c:17:6f:1b:76:5b:96:cc: d1:c7:ac:59:3e:3a:57:aa:c6:ee:42:be:4d:57:83:68:25:39: bd:b1:50:5a:fb:23:91:b9:89:10:ca:4d:f4:cf:58:61:d5:8e: 25:b2:74:d1:23:98:d5:2f:cd:fb:1b:ea:7e:78:68:03:d8:86: 64:07:ae:d2:dd:27:05:b1:e2:6b:de:4f:17:83:e7:88:b6:3d: cc:00:b2:ea:2c:ea:1e:97:80:e0:82:9c:d9:7e:07:ca:50:89: 1c:28:0e:36:50:5a:e6:e8:98:2f:de:be:6d:a9:7d:cf:58:e2: 36:cb:6a:b9:c5:38:2b:3c:fb:97:56:b6:8c:07:06:c2:b0:c2: 6d:56:de:bc:b9:a8:a7:bd:4b:98:88:ea:33:49:51:75:7b:7a: e5:05:b2:e9:06:b0:40:c0:f6:c2:98:0c:71:b1:fb:8e:0b:40: 13:57:54:8f:ff:64:4b:21:9d:bc:f7:78:87:9b:c3:82:5d:df: 83:20:c1:7f:a6:0c:7f:9e:a8:6b:03:93:4b:48:e4:84:f8:da: 6e:db:84:fb -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUW3JJzKfbMEWwNaHfLZhxkSsm/3MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTI1NloX DTI3MDUwMjAxNTc1NlowMzExMC8GA1UEAxMoQThENjAyMTczODhEQ0VFNjg5N0JE QTVCQzZENTE5MDMxN0NFQzBFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM6yqYNhAb3B8+uRsqRoiRlEeTiQi/x2paRgic/Q57oWgRMxjyS6FZQX7HL8 yE1FKoPpuT4ktZ53GuD95b4NxGaZ5bHamgVJIy7GLeC9oAV195J1MOIcpcmOsPDW JYoaG31FCPxOukji3D7dXaGYFH1OdklBIzQguveFICpVjA9aLLEDb0zpZGCpYwcg 2m7J8o2X69UC9G5a5Fk2OGSznixOT4LkzzbE2QtcoY92+mLbYxMxHoL1A/Aq901q 4RmtZBiREHYpar2dLNjQ99T8XzOU2z1f4LKunfFI0vOYokX7DvXtBB9n9uKqIdqe ERWFbT2DYPjTi33Hj54eYaVy278CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKjWAhc4jc7miXvaW8bVGQMXzsDsMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2M5NTc3YzNjLTY2Y2QtNDBhNC1hZmM1LTZjNmY4YjY2NGE1MS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jOTU3N2Mz Yy02NmNkLTQwYTQtYWZjNS02YzZmOGI2NjRhNTEvMC9BOEQ2MDIxNzM4OERDRUU2 ODk3QkRBNUJDNkQ1MTkwMzE3Q0VDMEVDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7rIMA0GCSqGSIb3DQEBCwUAA4IBAQBlVzJkKgR/PiUBafuKfi590+YvZgIk 3ht5LNGBDp7K4EvKNXyr8xfasJpZvnR8XBdvG3ZblszRx6xZPjpXqsbuQr5NV4No JTm9sVBa+yORuYkQyk30z1hh1Y4lsnTRI5jVL837G+p+eGgD2IZkB67S3ScFseJr 3k8Xg+eItj3MALLqLOoel4DggpzZfgfKUIkcKA42UFrm6Jgv3r5tqX3PWOI2y2q5 xTgrPPuXVraMBwbCsMJtVt68uainvUuYiOozSVF1e3rlBbLpBrBAwPbCmAxxsfuO C0ATV1SP/2RLIZ2893iHm8OCXd+DIMF/pgx/nqhrA5NLSOSE+Npu24T7 -----END CERTIFICATE-----Generated at Tue May 12 22:38:58 2026 by rpki-client