$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.cer File: B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.cer (raw, json) Hash identifier: G+GDhKTGRn5s9BDlkucbtV+ay6PfjylxocFbD3nLAW0= Subject key identifier: B8:4C:63:BE:F8:B2:6A:45:95:EC:8A:50:0B:A5:15:4E:3A:6B:0F:60 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 48CC7481EFF5C5B15DCC83260818DBD65F4D6322 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:03:58 +0000 Certificate not after: Sun 02 May 2027 00:08:58 +0000 Subordinate resources: IP: 103.30.212.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:cc:74:81:ef:f5:c5:b1:5d:cc:83:26:08:18:db:d6:5f:4d:63:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:03:58 2026 GMT Not After : May 2 00:08:58 2027 GMT Subject: CN=B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5e:3e:5a:c0:27:0a:32:9d:5b:e3:69:62:da: ab:0e:d5:04:a2:c4:09:65:42:da:32:ff:45:2d:48: dc:d3:20:6b:e8:df:cd:f8:9e:34:7a:99:3b:ac:56: 57:3f:5d:fb:4f:0e:41:af:74:63:fc:0c:c0:f6:5e: 2e:c7:4e:45:8f:f6:c1:84:53:fc:c7:67:b4:1a:c1: 3b:0c:0a:5d:50:70:91:48:03:df:be:64:c5:c2:14: d1:1c:6f:e1:a0:fb:1f:37:59:62:57:ab:5c:44:66: 7d:d1:f6:7f:dd:07:ef:43:07:b9:1b:cf:3f:95:4f: c5:6c:6a:22:bb:89:38:21:45:7b:94:01:bb:ea:6e: aa:8f:64:de:50:78:1c:2c:68:3e:3c:76:38:0b:77: 2b:5d:d5:c1:5b:b4:34:ff:1e:b9:f7:37:7c:12:70: c8:08:2f:72:44:06:37:2f:ef:ff:d6:d2:c1:38:08: 1f:5e:46:f5:a1:b6:7f:a8:db:cf:2c:f5:34:d1:ab: d7:42:54:25:13:dc:a8:33:4c:91:c0:3e:f2:7d:b5: c7:c9:ea:64:4f:98:1b:4c:8b:ac:23:3a:f7:95:99: ec:07:11:3d:71:27:d8:a6:88:46:b5:38:61:be:77: cd:86:0a:85:c3:ae:ef:3d:c6:4c:04:63:ba:5a:02: 82:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:4C:63:BE:F8:B2:6A:45:95:EC:8A:50:0B:A5:15:4E:3A:6B:0F:60 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.30.212.0/24 Signature Algorithm: sha256WithRSAEncryption 87:05:e4:53:55:02:7d:1d:ae:f0:07:25:d3:fd:86:62:de:5b: 52:71:6d:b0:fb:a0:d0:00:fe:4c:58:ca:3f:98:fd:9f:0c:c1: d1:e5:56:de:e2:c5:8e:40:bf:29:fb:54:cb:ad:8e:a7:c4:ea: ed:24:ff:01:25:d4:56:b7:b6:4f:c1:c6:80:b8:d0:25:4c:49: df:42:6f:4e:46:2e:69:fa:6c:44:d8:12:95:b9:d6:b9:14:fe: 07:59:d3:59:80:56:c6:9e:6c:25:36:19:32:64:c2:fa:c3:f2: 0c:da:37:4c:95:b3:a3:45:a2:20:ae:74:60:21:5c:98:8b:fa: 10:9d:68:88:e7:fa:9d:fa:b9:cb:d2:3c:c1:d8:c8:ef:e6:a8: 3a:b0:ad:34:12:37:a4:9a:50:10:f3:26:66:8f:97:c1:a7:bd: 83:66:c5:34:1a:bb:ad:a9:bb:54:3f:94:c9:4a:64:ad:9e:dd: 60:45:2c:2b:0b:9e:f5:20:54:45:13:6a:c7:d6:82:9f:c7:35: 7f:2f:b7:03:ac:ee:c4:b0:ec:9e:ee:74:75:9e:86:e3:94:95: c2:bd:0c:cc:62:1a:0d:7c:8d:12:4e:ed:78:9d:05:8e:3c:c2: 02:ea:78:94:3e:d0:aa:13:05:ee:80:c1:eb:20:80:21:4e:7d: 8e:aa:5d:61 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUSMx0ge/1xbFdzIMmCBjb1l9NYyIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDM1OFoX DTI3MDUwMjAwMDg1OFowMzExMC8GA1UEAxMoQjg0QzYzQkVGOEIyNkE0NTk1RUM4 QTUwMEJBNTE1NEUzQTZCMEY2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANNePlrAJwoynVvjaWLaqw7VBKLECWVC2jL/RS1I3NMga+jfzfieNHqZO6xW Vz9d+08OQa90Y/wMwPZeLsdORY/2wYRT/MdntBrBOwwKXVBwkUgD375kxcIU0Rxv 4aD7HzdZYlerXERmfdH2f90H70MHuRvPP5VPxWxqIruJOCFFe5QBu+puqo9k3lB4 HCxoPjx2OAt3K13VwVu0NP8eufc3fBJwyAgvckQGNy/v/9bSwTgIH15G9aG2f6jb zyz1NNGr10JUJRPcqDNMkcA+8n21x8nqZE+YG0yLrCM695WZ7AcRPXEn2KaIRrU4 Yb53zYYKhcOu7z3GTARjuloCgvECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLhMY774smpFleyKUAulFU46aw9gMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzI1NjVhMWNmLTI5NTAtNDdkYy1hMjEyLWY2NTNiOGMzZjVhOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yNTY1YTFj Zi0yOTUwLTQ3ZGMtYTIxMi1mNjUzYjhjM2Y1YTkvMC9CODRDNjNCRUY4QjI2QTQ1 OTVFQzhBNTAwQkE1MTU0RTNBNkIwRjYwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZx7UMA0GCSqGSIb3DQEBCwUAA4IBAQCHBeRTVQJ9Ha7wByXT/YZi3ltScW2w +6DQAP5MWMo/mP2fDMHR5Vbe4sWOQL8p+1TLrY6nxOrtJP8BJdRWt7ZPwcaAuNAl TEnfQm9ORi5p+mxE2BKVuda5FP4HWdNZgFbGnmwlNhkyZML6w/IM2jdMlbOjRaIg rnRgIVyYi/oQnWiI5/qd+rnL0jzB2Mjv5qg6sK00EjekmlAQ8yZmj5fBp72DZsU0 GrutqbtUP5TJSmStnt1gRSwrC571IFRFE2rH1oKfxzV/L7cDrO7EsOye7nR1nobj lJXCvQzMYhoNfI0STu14nQWOPMIC6niUPtCqEwXugMHrIIAhTn2Oql1h -----END CERTIFICATE-----Generated at Tue May 12 22:04:07 2026 by rpki-client