$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer File: B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer (raw, json) Hash identifier: NQ0opMOD+HUzrs/4CEHH/5BUzyZ+nvYHh7e0pWudNUU= Subject key identifier: B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7323D10524EB65215880B3BB4B5A8627B559D983 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:44:57 +0000 Certificate not after: Sat 01 May 2027 23:49:57 +0000 Subordinate resources: IP: 103.136.162.0/23 IP: 2404:97c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:23:d1:05:24:eb:65:21:58:80:b3:bb:4b:5a:86:27:b5:59:d9:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:44:57 2026 GMT Not After : May 1 23:49:57 2027 GMT Subject: CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ea:fd:80:c3:83:d3:73:f4:06:24:2b:48:65: 14:94:62:86:14:50:35:96:ff:52:a0:db:5f:9f:7f: 89:97:ab:69:ce:f1:e5:39:2c:af:c4:c4:ab:b8:93: d4:5e:f0:d3:b9:a2:21:cc:fd:3d:6d:e6:e2:6d:93: b5:46:c8:37:52:03:ec:73:06:87:ed:19:45:98:74: 8c:ee:47:06:aa:f1:bd:fa:44:c1:11:91:87:a2:84: 9c:04:81:2c:df:ae:92:0c:db:29:93:96:bb:0d:a2: 7b:80:45:d2:6b:30:d2:95:71:66:ff:52:fe:4d:6c: 5c:f7:19:c5:14:05:88:db:9c:f4:4c:77:dc:50:e3: 51:5b:85:4c:d7:4f:3a:64:07:a1:1b:71:9a:3a:5a: 3d:29:18:f8:de:5d:1c:76:98:19:67:74:29:4e:c0: 96:c9:2c:d5:35:47:f0:a3:15:50:29:d1:00:fb:1e: 3a:53:70:8d:30:0d:89:93:76:30:9a:ed:12:3e:19: c8:4b:21:2d:66:a6:5b:35:bd:34:b0:37:66:14:42: e0:bd:7f:f9:73:3a:3c:ac:92:5d:03:1f:23:8a:7f: 6e:99:b8:1a:b9:56:09:27:fc:2d:98:e4:85:aa:67: 7e:1f:6b:b0:23:f3:da:ad:8f:e8:9e:82:93:b6:c9: 20:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.162.0/23 IPv6: 2404:97c0::/32 Signature Algorithm: sha256WithRSAEncryption 23:40:0c:b1:2a:b2:40:63:32:11:9a:3d:c0:50:fd:40:3f:fa: 0d:6f:d4:db:c5:e8:d3:19:0d:c5:9c:2e:c9:4e:6f:ff:f8:b0: e8:55:91:59:bc:88:21:9a:81:f7:69:f4:f4:e5:b3:f4:90:07: cd:8f:65:f3:9e:35:87:3a:2a:d2:4d:8d:65:dd:22:8a:c7:a5: f0:2c:8d:96:4c:59:3d:b4:62:06:f9:ee:23:e9:11:4d:1c:ac: 26:14:e8:08:72:6a:7e:1f:10:66:09:5b:a0:75:0a:ee:95:a9: e3:e0:65:3a:11:71:d5:7e:52:48:10:2a:30:b6:44:50:1a:c0: ae:12:47:f0:c1:2d:4e:25:e7:fe:3a:7d:a9:b9:dd:73:ff:37: f7:4e:7a:5b:6c:b0:ab:6e:0c:88:c8:12:c6:92:f3:3d:d0:c9: 57:8a:78:6e:08:02:a1:2c:aa:da:4e:ad:75:e8:66:2d:12:f0: e8:db:d0:53:fd:74:42:c0:0c:c5:47:39:04:34:19:39:af:7d: bb:0a:08:08:b7:a8:d2:e0:6c:0c:8a:f9:31:dd:b3:34:ab:04: 0a:9b:17:c2:66:02:bb:6f:57:fb:b4:ff:12:8b:19:6f:55:4f: ce:61:b7:08:fb:ef:27:73:92:44:06:df:5d:71:5c:d7:da:73: 13:95:6b:e6 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUcyPRBSTrZSFYgLO7S1qGJ7VZ2YMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDQ1N1oX DTI3MDUwMTIzNDk1N1owMzExMC8GA1UEAxMoQjk4MEVGRDY5REE0QzhBQjNGQzcx MzhGNTdCRTNDREFGODAyMjM4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALrq/YDDg9Nz9AYkK0hlFJRihhRQNZb/UqDbX59/iZerac7x5Tksr8TEq7iT 1F7w07miIcz9PW3m4m2TtUbIN1ID7HMGh+0ZRZh0jO5HBqrxvfpEwRGRh6KEnASB LN+ukgzbKZOWuw2ie4BF0msw0pVxZv9S/k1sXPcZxRQFiNuc9Ex33FDjUVuFTNdP OmQHoRtxmjpaPSkY+N5dHHaYGWd0KU7Alsks1TVH8KMVUCnRAPseOlNwjTANiZN2 MJrtEj4ZyEshLWamWzW9NLA3ZhRC4L1/+XM6PKySXQMfI4p/bpm4GrlWCSf8LZjk hapnfh9rsCPz2q2P6J6Ck7bJIIsCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLmA79adpMirP8cTj1e+PNr4AiOLMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzA2NTRhOGMzLTMwYzgtNDk1Ny04MjkxLWEwYzFmOWIxODM5ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wNjU0YThj My0zMGM4LTQ5NTctODI5MS1hMGMxZjliMTgzOWUvMC9COTgwRUZENjlEQTRDOEFC M0ZDNzEzOEY1N0JFM0NEQUY4MDIyMzhCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ4iiMA0EAgACMAcDBQAkBJfAMA0GCSqGSIb3DQEBCwUAA4IBAQAjQAyxKrJA YzIRmj3AUP1AP/oNb9TbxejTGQ3FnC7JTm//+LDoVZFZvIghmoH3afT05bP0kAfN j2XznjWHOirSTY1l3SKKx6XwLI2WTFk9tGIG+e4j6RFNHKwmFOgIcmp+HxBmCVug dQrulanj4GU6EXHVflJIECowtkRQGsCuEkfwwS1OJef+On2pud1z/zf3TnpbbLCr bgyIyBLGkvM90MlXinhuCAKhLKraTq116GYtEvDo29BT/XRCwAzFRzkENBk5r327 CggIt6jS4GwMivkx3bM0qwQKmxfCZgK7b1f7tP8SixlvVU/OYbcI++8nc5JEBt9d cVzX2nMTlWvm -----END CERTIFICATE-----Generated at Tue May 12 22:52:49 2026 by rpki-client