$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer File: B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer (raw, json) Hash identifier: KhzXZ4OwpClkQLxANo6y1OfNxKZUQSqw8gCIvZllR58= Subject key identifier: B8:2F:DF:C6:26:E7:3C:B2:26:8F:5B:1E:FE:F5:76:71:5F:E5:A5:70 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 23AD9E231C36F521868CF3AD01BE214084BA7338 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft caRepository: rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:13:04 +0000 Certificate not after: Sun 02 May 2027 01:18:04 +0000 Subordinate resources: IP: 103.148.44.0/23 IP: 2405:cac0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ad:9e:23:1c:36:f5:21:86:8c:f3:ad:01:be:21:40:84:ba:73:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:13:04 2026 GMT Not After : May 2 01:18:04 2027 GMT Subject: CN=B82FDFC626E73CB2268F5B1EFEF576715FE5A570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a3:d7:53:69:ba:3f:50:ed:5d:e3:97:c0:da: 3d:31:36:0c:07:6c:6c:70:bc:71:84:6e:59:8d:4e: 8c:81:1e:27:ce:4f:66:11:d4:43:74:db:8b:f9:50: 60:e5:e6:3d:06:e4:f2:04:b0:3b:38:d9:ad:d2:5d: 09:88:37:1d:fa:df:77:01:40:c7:75:c5:47:a8:f6: 6e:ba:87:e3:3c:c7:58:da:b6:3c:4c:4b:a8:a8:10: 38:7c:c2:85:72:f1:e8:49:cd:72:1c:ba:f9:a2:8e: 57:19:1e:6b:ef:2f:26:ef:5d:a5:87:7a:72:e4:61: 09:ec:1c:d1:57:2e:a4:3e:23:58:48:40:18:25:3e: e5:2e:9e:40:49:f5:93:da:50:dc:d7:84:65:20:d9: 34:b2:2f:b8:7b:82:e9:35:d6:12:a7:2b:4b:57:a5: 62:b3:d2:a1:fd:4a:f4:7d:72:c8:39:4c:a1:7b:60: d8:69:8d:02:3d:ca:a4:65:34:ac:92:f9:5f:25:ea: 89:8c:2f:26:b1:54:4a:53:cd:0c:24:bf:ec:25:96: 36:36:3d:48:55:01:ad:af:70:6e:b5:98:87:df:6d: d2:ee:d6:f4:c7:af:e3:0f:62:a2:4c:90:be:4d:39: 86:2c:d3:0c:3c:bd:a3:bf:91:dc:5d:b5:b7:db:7b: d8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:2F:DF:C6:26:E7:3C:B2:26:8F:5B:1E:FE:F5:76:71:5F:E5:A5:70 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.44.0/23 IPv6: 2405:cac0::/32 Signature Algorithm: sha256WithRSAEncryption 0a:af:26:06:7e:b5:64:10:67:99:b8:8b:c6:0a:a6:94:98:c1: 0d:65:01:64:97:61:79:a9:d1:6d:9a:4e:e6:cf:d6:b1:1b:17: 93:94:b3:2c:9d:28:a6:5a:ce:f5:16:c1:95:dc:47:1e:b3:75: d8:37:a9:72:0c:49:d8:32:93:9f:f0:7d:1d:58:14:0f:ab:ca: 68:2d:42:df:fe:c8:02:90:dd:1e:18:ad:94:d3:79:65:c9:a6: 33:36:01:7c:17:c7:65:71:35:c8:dc:16:e5:7f:aa:ae:bd:e7: 41:5a:30:ac:24:ad:58:b1:93:5e:20:ca:3d:fc:fe:16:c7:f5: a3:68:e1:ca:c0:87:00:57:a6:4d:1a:21:ee:6a:1d:dd:49:47: 30:21:b0:9c:9b:12:7a:1b:7a:af:67:bf:76:30:88:9e:b8:c3: 3d:0c:31:f7:8b:44:52:9d:de:36:d6:c4:4a:c2:e2:c1:5c:1c: 6c:cc:32:41:f6:24:22:fc:b5:ca:b2:49:d1:d2:84:00:c4:b7: 41:43:17:d2:03:05:5b:43:77:ed:01:4f:ed:38:2e:68:82:d1: f9:bf:71:2b:70:6c:fe:93:81:2f:c8:0d:84:8d:77:f7:a7:a8: 4c:9f:d9:f1:c7:e7:3c:67:63:3f:7c:7c:16:09:48:5f:1a:16: 40:78:84:1f -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUI62eIxw29SGGjPOtAb4hQIS6czgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTMwNFoX DTI3MDUwMjAxMTgwNFowMzExMC8GA1UEAxMoQjgyRkRGQzYyNkU3M0NCMjI2OEY1 QjFFRkVGNTc2NzE1RkU1QTU3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANOj11Npuj9Q7V3jl8DaPTE2DAdsbHC8cYRuWY1OjIEeJ85PZhHUQ3Tbi/lQ YOXmPQbk8gSwOzjZrdJdCYg3HfrfdwFAx3XFR6j2brqH4zzHWNq2PExLqKgQOHzC hXLx6EnNchy6+aKOVxkea+8vJu9dpYd6cuRhCewc0VcupD4jWEhAGCU+5S6eQEn1 k9pQ3NeEZSDZNLIvuHuC6TXWEqcrS1elYrPSof1K9H1yyDlMoXtg2GmNAj3KpGU0 rJL5XyXqiYwvJrFUSlPNDCS/7CWWNjY9SFUBra9wbrWYh99t0u7W9Mev4w9iokyQ vk05hizTDDy9o7+R3F21t9t72L0CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLgv38Ym5zyyJo9bHv71dnFf5aVwMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg5ZjI2ZmI4LTcyYzQtNDlkOS05Y2JlLTgyMjYzOTcyNzFhMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84OWYyNmZi OC03MmM0LTQ5ZDktOWNiZS04MjI2Mzk3MjcxYTIvMC9CODJGREZDNjI2RTczQ0Iy MjY4RjVCMUVGRUY1NzY3MTVGRTVBNTcwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5QsMA0EAgACMAcDBQAkBcrAMA0GCSqGSIb3DQEBCwUAA4IBAQAKryYGfrVk EGeZuIvGCqaUmMENZQFkl2F5qdFtmk7mz9axGxeTlLMsnSimWs71FsGV3Eces3XY N6lyDEnYMpOf8H0dWBQPq8poLULf/sgCkN0eGK2U03llyaYzNgF8F8dlcTXI3Bbl f6quvedBWjCsJK1YsZNeIMo9/P4Wx/WjaOHKwIcAV6ZNGiHuah3dSUcwIbCcmxJ6 G3qvZ792MIieuMM9DDH3i0RSnd421sRKwuLBXBxszDJB9iQi/LXKsknR0oQAxLdB QxfSAwVbQ3ftAU/tOC5ogtH5v3ErcGz+k4EvyA2EjXf3p6hMn9nxx+c8Z2M/fHwW CUhfGhZAeIQf -----END CERTIFICATE-----Generated at Tue May 12 22:46:07 2026 by rpki-client