$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B677F5476721449C1CB3D8F67673665A0A038595.cer File: B677F5476721449C1CB3D8F67673665A0A038595.cer (raw, json) Hash identifier: opwByEq8Jpb9kh000qsP0RkrvzUcwIpyvhcnV6+V41k= Subject key identifier: B6:77:F5:47:67:21:44:9C:1C:B3:D8:F6:76:73:66:5A:0A:03:85:95 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3C0A079132BD002E0DA962B4D8E69E899685166B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:07:28 +0000 Certificate not after: Sun 02 May 2027 00:12:28 +0000 Subordinate resources: IP: 103.137.82.0/23 IP: 2404:acc0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:0a:07:91:32:bd:00:2e:0d:a9:62:b4:d8:e6:9e:89:96:85:16:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:07:28 2026 GMT Not After : May 2 00:12:28 2027 GMT Subject: CN=B677F5476721449C1CB3D8F67673665A0A038595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:28:be:2a:aa:13:05:7f:18:42:d7:53:d9:b4: c8:bc:3a:6c:6c:69:77:e3:84:56:4a:16:8b:04:c4: cd:be:54:ed:fc:02:1b:f6:65:13:f7:a1:4d:a9:3a: 2d:de:a5:0d:18:ed:0b:90:58:d3:9e:25:92:93:44: 21:2c:5e:15:76:c9:0c:6c:b5:e6:1d:1d:29:bb:3f: 0e:2c:ae:cf:fb:a1:ab:1d:7a:20:1a:bc:60:83:72: 49:24:7b:b0:1e:d9:8b:5b:63:b8:76:72:10:e8:62: 85:74:6f:a1:82:0d:b9:77:f9:a4:29:a0:76:4f:9b: 27:31:ea:4b:7e:08:02:c9:d4:a4:f3:30:96:62:b9: 01:89:c7:f6:e3:37:36:ea:42:55:27:2d:28:4b:8e: 99:6a:de:45:f0:d7:d0:cb:79:96:f2:10:6f:1a:90: 50:f8:fa:f5:78:44:8c:f0:b9:51:08:17:e3:67:fd: 56:10:05:b4:c7:ae:07:cf:8f:ec:92:26:9a:ce:6f: 2d:e8:ae:f5:c4:ad:12:34:ca:40:b1:84:df:b9:99: c3:55:a6:cb:79:97:af:5a:52:d9:ae:46:79:2a:57: 05:db:3a:63:35:0f:6f:59:04:d7:62:c2:8c:53:45: 6d:46:f9:15:53:e7:53:34:db:cc:d5:67:84:1f:17: 83:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B6:77:F5:47:67:21:44:9C:1C:B3:D8:F6:76:73:66:5A:0A:03:85:95 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.137.82.0/23 IPv6: 2404:acc0::/32 Signature Algorithm: sha256WithRSAEncryption 46:db:c9:7b:fb:66:12:a2:3a:06:ec:db:26:7a:36:55:cb:33: e0:4e:be:56:85:ac:20:2d:c7:74:84:34:57:b0:c6:6b:1e:65: 68:80:28:a4:27:97:c6:45:af:aa:1c:7a:6d:5a:b1:a0:c3:06: 03:22:73:00:23:47:8b:db:6f:4b:7f:d2:dd:35:eb:1a:e5:be: 95:1e:cf:b0:fa:7a:e5:5b:54:64:24:28:95:b1:4e:00:c7:0a: b0:e2:8c:c9:71:13:ae:dd:59:9b:5e:0f:39:48:5e:42:56:24: 47:90:e2:c9:1d:28:c0:bf:9e:6a:19:1c:d0:fd:98:1a:88:7e: 25:fd:ca:e2:f4:98:76:9f:04:e9:4a:ef:29:93:df:0f:71:a0: 3f:38:0d:72:16:0d:04:79:c7:ce:69:e8:23:19:68:a7:d1:76: 2c:ff:59:88:35:f7:15:77:85:37:6c:f0:71:17:70:fb:75:84: b7:af:25:e0:d2:df:31:e1:1c:f2:77:06:d5:00:87:34:20:f4: 96:55:3d:37:6b:2d:de:be:7f:1a:46:62:ef:1d:6e:ff:bc:4d: 38:a4:05:83:a3:64:e8:bf:f8:a7:2a:7c:0d:92:dd:6b:82:3b: f7:2e:e0:12:1c:de:24:29:1b:57:9a:d2:4d:cb:f6:77:55:ce: d4:52:d9:d8 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUPAoHkTK9AC4NqWK02OaeiZaFFmswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDcyOFoX DTI3MDUwMjAwMTIyOFowMzExMC8GA1UEAxMoQjY3N0Y1NDc2NzIxNDQ5QzFDQjNE OEY2NzY3MzY2NUEwQTAzODU5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMMoviqqEwV/GELXU9m0yLw6bGxpd+OEVkoWiwTEzb5U7fwCG/ZlE/ehTak6 Ld6lDRjtC5BY054lkpNEISxeFXbJDGy15h0dKbs/Diyuz/uhqx16IBq8YINySSR7 sB7Zi1tjuHZyEOhihXRvoYINuXf5pCmgdk+bJzHqS34IAsnUpPMwlmK5AYnH9uM3 NupCVSctKEuOmWreRfDX0Mt5lvIQbxqQUPj69XhEjPC5UQgX42f9VhAFtMeuB8+P 7JImms5vLeiu9cStEjTKQLGE37mZw1Wmy3mXr1pS2a5GeSpXBds6YzUPb1kE12LC jFNFbUb5FVPnUzTbzNVnhB8Xg5cCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLZ39UdnIUScHLPY9nZzZloKA4WVMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJhZTZjZDQxLTJlNGMtNGNjMi04ODFlLWJhYjQ0YTg4NGZkNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yYWU2Y2Q0 MS0yZTRjLTRjYzItODgxZS1iYWI0NGE4ODRmZDQvMC9CNjc3RjU0NzY3MjE0NDlD MUNCM0Q4RjY3NjczNjY1QTBBMDM4NTk1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ4lSMA0EAgACMAcDBQAkBKzAMA0GCSqGSIb3DQEBCwUAA4IBAQBG28l7+2YS ojoG7NsmejZVyzPgTr5WhawgLcd0hDRXsMZrHmVogCikJ5fGRa+qHHptWrGgwwYD InMAI0eL229Lf9LdNesa5b6VHs+w+nrlW1RkJCiVsU4Axwqw4ozJcROu3VmbXg85 SF5CViRHkOLJHSjAv55qGRzQ/ZgaiH4l/cri9Jh2nwTpSu8pk98PcaA/OA1yFg0E ecfOaegjGWin0XYs/1mINfcVd4U3bPBxF3D7dYS3ryXg0t8x4RzydwbVAIc0IPSW VT03ay3evn8aRmLvHW7/vE04pAWDo2Tov/inKnwNkt1rgjv3LuASHN4kKRtXmtJN y/Z3Vc7UUtnY -----END CERTIFICATE-----Generated at Tue May 12 22:32:22 2026 by rpki-client