$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer File: B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer (raw, json) Hash identifier: 6AWj34HI4iqn6WeHnuce+SsnazMOGo7/nj9lFXNHHuw= Subject key identifier: B8:7B:C5:AB:56:61:C6:7C:3E:7B:D7:00:FA:79:EC:70:0D:DD:4C:B3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 78A3C49A491F3B51F7F30F2266C254F4C4C7E89E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft caRepository: rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:49:40 +0000 Certificate not after: Sun 02 May 2027 00:54:40 +0000 Subordinate resources: IP: 103.153.96.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:a3:c4:9a:49:1f:3b:51:f7:f3:0f:22:66:c2:54:f4:c4:c7:e8:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:49:40 2026 GMT Not After : May 2 00:54:40 2027 GMT Subject: CN=B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:eb:ea:4e:a3:ed:45:4a:6b:34:e3:c9:2d:61: 5a:27:46:2a:b8:a4:a8:d8:fd:a5:d8:c7:d1:7e:2f: d5:52:33:b3:c0:40:b7:87:d5:91:97:b3:69:3e:5b: 11:20:3e:40:35:81:b9:bd:7b:15:fa:45:91:bb:fd: fb:c1:6f:49:ca:ec:b4:f0:f1:8f:c9:9a:72:0d:97: 3a:8a:ba:6a:88:cb:12:ea:0a:01:2e:a1:b2:aa:09: 84:3e:e4:13:c1:ce:30:06:6b:8f:55:a5:98:0f:94: 19:69:48:c4:b9:52:aa:53:14:a0:0c:10:8d:f1:a1: 84:61:3f:d6:62:c5:b2:4a:45:8b:65:ed:1c:f4:3e: 14:31:1c:72:d2:a9:80:98:d2:85:18:25:fd:52:67: fd:40:fd:9e:5b:cf:08:d3:1d:b1:0d:ab:f8:00:eb: 35:ba:2e:92:ec:92:a2:be:63:ae:eb:cb:b8:99:36: 56:e3:b7:80:b0:09:1a:04:fe:d9:2f:06:75:ac:90: 4a:d3:d3:56:b4:f1:01:02:7e:61:e4:a3:a2:8f:d7: 0d:b6:c4:7e:5c:5c:3a:e7:d0:5d:ef:a0:33:31:32: 30:5e:f3:1a:5e:e5:e0:b5:f8:cd:34:5b:d3:a9:99: dc:0f:fe:a5:aa:4e:8a:50:f5:80:30:ee:6f:0c:dc: 95:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:7B:C5:AB:56:61:C6:7C:3E:7B:D7:00:FA:79:EC:70:0D:DD:4C:B3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.96.0/23 Signature Algorithm: sha256WithRSAEncryption 41:e9:23:2a:07:07:b7:33:b6:ad:9a:6f:0f:79:db:36:ae:41: 4d:15:bf:40:02:d2:17:4b:25:18:b0:ad:3f:f8:74:05:2f:5c: fa:54:cd:c3:9b:b5:33:81:05:e8:29:af:d8:35:99:91:40:50: ef:44:98:11:9d:dc:04:11:c9:d7:9a:c2:ac:b1:aa:36:55:17: 5c:db:3f:84:38:5c:27:19:23:79:80:7b:33:ee:7c:ea:87:47: f5:43:54:f2:93:51:ca:2e:90:15:ff:c7:10:76:f2:88:92:cd: 92:a9:23:27:dd:cc:9e:66:8d:42:32:18:43:92:19:b4:99:14: 83:f2:8e:67:9e:a7:85:7e:0a:c0:1e:fc:f3:a8:65:78:02:b4: 43:98:d0:ba:ac:5d:13:11:9e:c6:d2:b9:0e:27:e7:5e:d6:03: 4e:ad:94:f6:d1:99:0f:f6:53:0f:8a:a9:10:1d:5a:c0:b1:2c: 96:34:69:20:cd:06:c8:c4:ed:92:f9:18:69:a7:17:5d:76:e9: 5c:98:2a:84:e8:bc:1d:e6:de:93:00:29:93:44:1a:1b:6f:7b: f5:53:2f:24:34:d7:33:ce:af:bd:44:bb:ef:e6:35:2a:5e:bc: 21:43:09:47:af:30:74:b0:bf:d0:05:13:8a:6c:35:8f:86:02: 9e:8a:e8:4a -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUeKPEmkkfO1H38w8iZsJU9MTH6J4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDk0MFoX DTI3MDUwMjAwNTQ0MFowMzExMC8GA1UEAxMoQjg3QkM1QUI1NjYxQzY3QzNFN0JE NzAwRkE3OUVDNzAwRERENENCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTr6k6j7UVKazTjyS1hWidGKrikqNj9pdjH0X4v1VIzs8BAt4fVkZezaT5b ESA+QDWBub17FfpFkbv9+8FvScrstPDxj8macg2XOoq6aojLEuoKAS6hsqoJhD7k E8HOMAZrj1WlmA+UGWlIxLlSqlMUoAwQjfGhhGE/1mLFskpFi2XtHPQ+FDEcctKp gJjShRgl/VJn/UD9nlvPCNMdsQ2r+ADrNboukuySor5jruvLuJk2VuO3gLAJGgT+ 2S8GdayQStPTVrTxAQJ+YeSjoo/XDbbEflxcOufQXe+gMzEyMF7zGl7l4LX4zTRb 06mZ3A/+papOilD1gDDubwzclQcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLh7xatWYcZ8PnvXAPp57HAN3UyzMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzY5NmE3NGRmLWQ5MDctNGFhZi1hODM2LTQzZTRlMTk2ODUyNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82OTZhNzRk Zi1kOTA3LTRhYWYtYTgzNi00M2U0ZTE5Njg1MjUvMC9CODdCQzVBQjU2NjFDNjdD M0U3QkQ3MDBGQTc5RUM3MDBEREQ0Q0IzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ5lgMA0GCSqGSIb3DQEBCwUAA4IBAQBB6SMqBwe3M7atmm8Peds2rkFNFb9A AtIXSyUYsK0/+HQFL1z6VM3Dm7UzgQXoKa/YNZmRQFDvRJgRndwEEcnXmsKssao2 VRdc2z+EOFwnGSN5gHsz7nzqh0f1Q1Tyk1HKLpAV/8cQdvKIks2SqSMn3cyeZo1C MhhDkhm0mRSD8o5nnqeFfgrAHvzzqGV4ArRDmNC6rF0TEZ7G0rkOJ+de1gNOrZT2 0ZkP9lMPiqkQHVrAsSyWNGkgzQbIxO2S+RhppxdddulcmCqE6Lwd5t6TACmTRBob b3v1Uy8kNNczzq+9RLvv5jUqXrwhQwlHrzB0sL/QBROKbDWPhgKeiuhK -----END CERTIFICATE-----Generated at Tue May 12 22:04:04 2026 by rpki-client