$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer File: B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer (raw, json) Hash identifier: VU3ieujMHmYjogARG/hHibg1oGV5EmeRdhPwU47R+QU= Subject key identifier: B3:E8:FD:3D:17:3B:D1:89:F8:08:0C:4C:1D:E9:D1:90:01:1E:46:3D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 9A13D3DB4383928841D9C8BA69B618C99155C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:37:31 +0000 Certificate not after: Sun 02 May 2027 00:42:31 +0000 Subordinate resources: IP: 103.81.64.0/22 IP: 2400:64c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9a:13:d3:db:43:83:92:88:41:d9:c8:ba:69:b6:18:c9:91:55:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:37:31 2026 GMT Not After : May 2 00:42:31 2027 GMT Subject: CN=B3E8FD3D173BD189F8080C4C1DE9D190011E463D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:54:73:89:4c:31:bc:26:d9:2b:4e:bb:32:a8: 35:b8:75:8b:96:fc:c9:c0:80:70:04:dc:9a:fe:e8: a2:cc:09:05:16:37:0d:dd:b0:15:a0:96:43:a9:41: 34:fa:37:ba:10:f8:d1:05:bf:0f:fc:95:e3:17:e4: b3:31:d7:82:dd:10:23:34:3c:6b:bf:16:69:e3:2b: 7c:a6:b2:bd:75:60:7e:ee:f6:4e:b7:de:b8:2a:48: b1:31:5b:4a:2c:b6:dc:3e:4d:83:6b:ce:eb:93:5e: 99:35:54:67:ca:dd:ba:9e:e8:2e:53:32:0e:cc:3b: d8:c0:1a:f5:51:ae:06:14:57:5a:41:c3:86:19:35: f0:85:1e:11:4a:1f:bf:24:0f:65:f1:34:c0:ad:01: ec:a6:af:52:60:67:67:a1:7a:8e:ac:14:8a:de:5d: c6:74:a7:93:76:a4:d6:f7:65:ef:47:8b:dd:d1:1b: 7d:de:01:c4:64:3f:6a:0e:ab:31:8a:cb:cd:47:66: 18:bc:6c:da:11:2b:9a:63:12:05:ef:02:b2:b5:a5: c9:0d:a8:38:e0:3c:f2:80:22:7a:dc:30:87:2c:08: 9f:63:9d:ba:a2:15:4a:73:19:4c:39:62:4a:95:8f: 48:e4:3f:b9:53:a5:d7:bd:a2:9a:0d:dc:68:99:21: 28:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:E8:FD:3D:17:3B:D1:89:F8:08:0C:4C:1D:E9:D1:90:01:1E:46:3D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.81.64.0/22 IPv6: 2400:64c0::/32 Signature Algorithm: sha256WithRSAEncryption 93:9a:cb:44:bf:6f:be:15:f9:bb:1e:e5:90:f4:13:57:51:c1: 2a:d8:6c:48:ca:64:7e:fe:c3:bf:53:d8:e1:b1:35:7d:c1:ef: 34:38:62:bf:95:16:1e:44:08:a0:12:f6:c3:52:be:d1:01:0b: 8c:bb:7c:8b:19:0c:66:bb:3a:16:91:00:61:8a:2d:1e:94:19: ae:af:70:01:a5:a1:b8:19:ab:0c:e9:df:cc:d6:07:f1:fd:92: 6c:c8:72:05:ac:8c:f0:f7:08:b5:a9:94:d0:44:1f:d0:d6:3f: 9c:7b:17:b9:aa:34:bd:85:6d:81:25:f7:35:ae:00:30:1f:b6: 7b:f7:29:47:17:80:ae:c1:21:4f:66:b4:16:54:06:8c:13:8c: 0f:41:88:f0:e6:5c:d2:3a:17:70:ff:aa:97:e8:37:41:cf:b1: 4b:27:6d:f7:9a:31:5d:9e:97:2e:28:f7:82:ad:fb:d4:cc:d9: 9c:d8:e5:c8:6f:ac:c3:f0:31:dc:e5:33:af:d9:5c:4e:7f:61: 16:a2:52:46:a9:a6:58:88:4b:5f:92:2a:24:df:db:b9:ea:df: 15:94:39:d1:b7:b9:10:67:81:f7:41:a3:d2:00:28:66:e2:37: 7e:18:58:50:ad:09:d9:8b:25:5f:ae:43:b3:b1:d3:30:0d:23: 94:50:c7:ce -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUAJoT09tDg5KIQdnIumm2GMmRVcIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzczMVoX DTI3MDUwMjAwNDIzMVowMzExMC8GA1UEAxMoQjNFOEZEM0QxNzNCRDE4OUY4MDgw QzRDMURFOUQxOTAwMTFFNDYzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL5Uc4lMMbwm2StOuzKoNbh1i5b8ycCAcATcmv7ooswJBRY3Dd2wFaCWQ6lB NPo3uhD40QW/D/yV4xfkszHXgt0QIzQ8a78WaeMrfKayvXVgfu72TrfeuCpIsTFb Siy23D5Ng2vO65NemTVUZ8rdup7oLlMyDsw72MAa9VGuBhRXWkHDhhk18IUeEUof vyQPZfE0wK0B7KavUmBnZ6F6jqwUit5dxnSnk3ak1vdl70eL3dEbfd4BxGQ/ag6r MYrLzUdmGLxs2hErmmMSBe8CsrWlyQ2oOOA88oAietwwhywIn2OduqIVSnMZTDli SpWPSOQ/uVOl172img3caJkhKN0CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLPo/T0XO9GJ+AgMTB3p0ZABHkY9MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzU3MjgwNDAwLTk2NTQtNGQ0NS04ODhiLTkwNjdiYWRhMTkwYi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81NzI4MDQw MC05NjU0LTRkNDUtODg4Yi05MDY3YmFkYTE5MGIvMC9CM0U4RkQzRDE3M0JEMTg5 RjgwODBDNEMxREU5RDE5MDAxMUU0NjNELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ1FAMA0EAgACMAcDBQAkAGTAMA0GCSqGSIb3DQEBCwUAA4IBAQCTmstEv2++ Ffm7HuWQ9BNXUcEq2GxIymR+/sO/U9jhsTV9we80OGK/lRYeRAigEvbDUr7RAQuM u3yLGQxmuzoWkQBhii0elBmur3ABpaG4GasM6d/M1gfx/ZJsyHIFrIzw9wi1qZTQ RB/Q1j+cexe5qjS9hW2BJfc1rgAwH7Z79ylHF4CuwSFPZrQWVAaME4wPQYjw5lzS Ohdw/6qX6DdBz7FLJ233mjFdnpcuKPeCrfvUzNmc2OXIb6zD8DHc5TOv2VxOf2EW olJGqaZYiEtfkiok39u56t8VlDnRt7kQZ4H3QaPSAChm4jd+GFhQrQnZiyVfrkOz sdMwDSOUUMfO -----END CERTIFICATE-----Generated at Tue May 12 22:32:53 2026 by rpki-client