$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer File: B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer (raw, json) Hash identifier: XDnK7xo++73jRgvPPIRfRPBsCN8MZSviyeO1qxUTomg= Subject key identifier: B9:BC:CC:BE:89:27:A7:BA:B7:85:3C:7A:BB:0A:F3:95:CD:04:78:65 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4CA04BE5ADC40440E44D37376E72EB15E4E3E1B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:54:05 +0000 Certificate not after: Sun 02 May 2027 00:59:05 +0000 Subordinate resources: IP: 116.58.192.0/21 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:a0:4b:e5:ad:c4:04:40:e4:4d:37:37:6e:72:eb:15:e4:e3:e1:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:54:05 2026 GMT Not After : May 2 00:59:05 2027 GMT Subject: CN=B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e0:04:99:d1:5a:00:4f:c2:bd:65:2c:7c:72: 5d:e2:27:eb:a5:74:c8:91:75:fa:c2:20:d1:cf:85: 55:18:5d:00:69:72:f7:4a:3f:20:e2:bf:60:ec:31: a6:15:06:e9:22:89:50:56:bb:88:92:84:7f:a2:46: 3c:16:41:78:e5:bf:95:36:23:77:d3:47:27:dc:9a: 9f:d8:31:0d:97:32:dd:e6:8e:09:9f:de:36:08:d1: 7d:51:25:b2:fa:ee:6a:5e:b9:85:08:dd:22:05:92: 23:3c:27:ca:fb:e5:36:07:61:5a:2c:14:15:be:bf: 6c:25:61:56:af:78:af:c3:5c:23:32:8e:81:3e:ac: a2:bd:f7:e7:c6:ee:82:2d:b8:a4:67:1c:24:ab:42: 11:cb:ca:06:85:d5:20:fd:bc:b8:9a:a8:d2:31:5f: 3f:b9:26:79:65:e1:f1:a1:7d:49:3d:93:d4:e3:62: 3c:e7:19:1a:c5:af:35:0f:0f:42:22:ca:c0:2b:94: 5e:c7:cf:2f:7e:42:00:9a:91:f9:87:68:26:54:4a: b4:2f:9c:c0:21:8a:f0:ad:78:52:42:65:ac:80:51: e2:13:8d:7e:09:b1:66:7e:df:31:ff:cb:d0:94:89: 2b:b1:40:29:44:8a:fb:51:ca:81:59:2b:8a:de:15: 99:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B9:BC:CC:BE:89:27:A7:BA:B7:85:3C:7A:BB:0A:F3:95:CD:04:78:65 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.58.192.0/21 Signature Algorithm: sha256WithRSAEncryption 54:fc:63:fb:f8:77:f7:0e:0b:3d:06:2f:94:0c:65:0e:06:d2: 58:13:47:79:39:bf:72:85:ea:94:af:66:59:5a:87:d6:84:c3: 8a:6d:4d:4f:7a:10:42:5e:80:b2:02:92:c7:a1:be:90:1b:c6: 92:f5:3a:93:c5:c7:0c:13:8e:9b:86:cd:e8:e0:18:e0:ff:b0: 69:69:28:57:60:83:68:88:a4:60:60:99:78:50:23:89:d8:cc: 78:8f:64:52:ce:62:a2:7e:5b:29:7d:bd:b4:27:03:e0:54:2d: 70:00:f1:e3:cf:8e:73:4e:28:06:96:22:76:ca:0b:47:97:1c: 39:68:35:63:6b:fd:e4:56:b5:ca:9a:69:5d:76:b1:f8:dd:57: bb:e7:4c:04:65:45:e7:6b:c2:b0:d6:aa:a1:c0:4b:b0:62:28: ac:61:c1:b1:e5:2a:6e:cc:8b:c6:a5:96:02:35:53:15:3e:56: 95:3d:8d:59:6c:80:01:8f:34:55:43:46:e6:94:ca:00:39:99: 99:4d:1f:95:4f:34:b2:10:4f:30:f0:ae:75:1e:8d:ed:e6:38: 31:6a:44:4a:7f:3e:38:c6:1c:cd:f9:85:a6:f0:6c:ad:9f:be: 88:9a:f0:70:b9:e4:d9:bb:f8:24:37:bf:8e:c4:1f:5d:34:8d: 45:36:1b:98 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUTKBL5a3EBEDkTTc3bnLrFeTj4bYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTQwNVoX DTI3MDUwMjAwNTkwNVowMzExMC8GA1UEAxMoQjlCQ0NDQkU4OTI3QTdCQUI3ODUz QzdBQkIwQUYzOTVDRDA0Nzg2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANbgBJnRWgBPwr1lLHxyXeIn66V0yJF1+sIg0c+FVRhdAGly90o/IOK/YOwx phUG6SKJUFa7iJKEf6JGPBZBeOW/lTYjd9NHJ9yan9gxDZcy3eaOCZ/eNgjRfVEl svrual65hQjdIgWSIzwnyvvlNgdhWiwUFb6/bCVhVq94r8NcIzKOgT6sor3358bu gi24pGccJKtCEcvKBoXVIP28uJqo0jFfP7kmeWXh8aF9ST2T1ONiPOcZGsWvNQ8P QiLKwCuUXsfPL35CAJqR+YdoJlRKtC+cwCGK8K14UkJlrIBR4hONfgmxZn7fMf/L 0JSJK7FAKUSK+1HKgVkrit4VmbMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLm8zL6JJ6e6t4U8ersK85XNBHhlMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZmZWJiNjhhLThhNWQtNDExYy04YmIzLTgzMzQyMzEwMGI2ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82ZmViYjY4 YS04YTVkLTQxMWMtOGJiMy04MzM0MjMxMDBiNmUvMC9COUJDQ0NCRTg5MjdBN0JB Qjc4NTNDN0FCQjBBRjM5NUNEMDQ3ODY1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQDdDrAMA0GCSqGSIb3DQEBCwUAA4IBAQBU/GP7+Hf3Dgs9Bi+UDGUOBtJYE0d5 Ob9yheqUr2ZZWofWhMOKbU1PehBCXoCyApLHob6QG8aS9TqTxccME46bhs3o4Bjg /7BpaShXYINoiKRgYJl4UCOJ2Mx4j2RSzmKiflspfb20JwPgVC1wAPHjz45zTigG liJ2ygtHlxw5aDVja/3kVrXKmmlddrH43Ve750wEZUXna8Kw1qqhwEuwYiisYcGx 5SpuzIvGpZYCNVMVPlaVPY1ZbIABjzRVQ0bmlMoAOZmZTR+VTzSyEE8w8K51Ho3t 5jgxakRKfz44xhzN+YWm8Gytn76ImvBwueTZu/gkN7+OxB9dNI1FNhuY -----END CERTIFICATE-----Generated at Tue May 12 22:09:50 2026 by rpki-client