$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer File: BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer (raw, json) Hash identifier: L+AiBukwARo6qPx0PdlRiMxvauqgpUGW74rmaz3FtjY= Subject key identifier: BA:D1:40:35:88:CA:8E:7E:1F:9A:4B:30:6C:6B:8B:E2:90:79:79:3E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5572852B36746CA4D2904D790677CF962C3BE04B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:45:28 +0000 Certificate not after: Sun 02 May 2027 01:50:28 +0000 Subordinate resources: IP: 103.153.34.0/23 IP: 2001:df4:2d80::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:72:85:2b:36:74:6c:a4:d2:90:4d:79:06:77:cf:96:2c:3b:e0:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:45:28 2026 GMT Not After : May 2 01:50:28 2027 GMT Subject: CN=BAD1403588CA8E7E1F9A4B306C6B8BE29079793E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:60:51:6e:aa:12:de:23:69:db:7e:7f:1a:78: b6:dc:9c:44:f8:80:4c:ca:d7:2e:04:50:c9:02:e6: 01:37:42:e6:90:75:94:c3:96:bf:fe:d9:75:0c:cf: 09:32:ef:a0:3a:a7:88:45:f3:1a:13:16:4e:6c:a4: 9f:a7:dc:8b:fa:e2:42:a7:15:06:6e:4a:cb:75:29: 7b:2a:94:99:0a:29:d7:1d:8f:ae:4a:e9:d7:0f:67: 14:c0:db:b8:3e:b9:a6:e0:9f:58:db:9d:02:4a:8c: 41:67:eb:58:4c:3c:c6:a6:ea:76:80:16:14:5d:80: d7:eb:06:a2:04:41:22:b6:3d:4c:6a:d4:b6:63:f2: d5:ae:43:92:41:db:05:3d:54:51:38:31:f5:b5:ea: 42:4c:b7:cf:18:20:f9:50:0a:a1:4d:14:a0:00:2f: 83:c9:37:23:fb:74:63:34:92:60:de:91:53:b3:7f: 2d:da:2c:c1:86:ec:b1:a0:e5:54:e2:fa:ab:1a:00: 78:06:a1:4a:bd:f5:b8:ba:a3:3c:21:1b:38:45:94: 9b:51:63:61:4e:8e:f4:d6:e3:3e:cc:1c:55:9d:20: b3:58:dc:fa:fc:9e:d1:b2:3a:0b:2c:af:05:7b:e7: ab:8b:41:39:13:39:79:bd:5a:03:b6:0b:57:ba:37: 84:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BA:D1:40:35:88:CA:8E:7E:1F:9A:4B:30:6C:6B:8B:E2:90:79:79:3E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.34.0/23 IPv6: 2001:df4:2d80::/48 Signature Algorithm: sha256WithRSAEncryption 69:2b:c6:20:8d:25:81:aa:1e:d4:b9:30:29:01:be:1e:5b:b2: a2:59:94:61:81:bc:88:9d:a5:f2:a7:74:f8:20:f0:00:26:09: 41:83:9f:e6:68:0a:3f:71:ee:4f:d8:2c:d8:a3:df:4f:99:82: dc:81:70:ad:2f:cc:9d:55:ff:dc:7f:90:b0:6d:1a:f5:3d:83: c9:24:f1:c2:3e:63:fd:c2:9f:ca:25:c7:6b:dd:76:e1:17:03: e4:d6:c8:d1:b9:3a:84:6b:32:97:4d:7d:7c:35:fd:31:c3:64: 6f:ca:1e:a6:f7:69:c7:76:21:24:a8:49:b2:c0:81:4a:ff:4c: 78:5e:97:96:01:99:c6:3a:d0:6f:95:84:da:8a:57:73:ad:64: ab:b1:a2:fb:3c:ec:2a:9a:b7:a4:52:7d:36:95:4c:aa:b9:1a: ad:fb:21:08:cf:7f:13:da:9c:2a:b9:aa:e3:bd:a3:8d:e9:57: b3:75:7a:ac:a8:1e:d2:41:04:aa:ec:80:6a:c3:96:48:97:20: fd:20:4c:37:61:94:ee:a1:4b:dd:61:92:fa:07:b3:7c:f2:8a: e7:65:75:63:7a:60:36:45:8f:76:8f:84:dd:6d:94:65:24:02: a3:8a:d0:cb:10:69:4f:4f:ed:e8:68:a4:35:3e:01:26:5a:dd: 1e:74:b4:9e -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUVXKFKzZ0bKTSkE15BnfPliw74EswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDUyOFoX DTI3MDUwMjAxNTAyOFowMzExMC8GA1UEAxMoQkFEMTQwMzU4OENBOEU3RTFGOUE0 QjMwNkM2QjhCRTI5MDc5NzkzRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJhgUW6qEt4jadt+fxp4ttycRPiATMrXLgRQyQLmATdC5pB1lMOWv/7ZdQzP CTLvoDqniEXzGhMWTmykn6fci/riQqcVBm5Ky3UpeyqUmQop1x2Prkrp1w9nFMDb uD65puCfWNudAkqMQWfrWEw8xqbqdoAWFF2A1+sGogRBIrY9TGrUtmPy1a5DkkHb BT1UUTgx9bXqQky3zxgg+VAKoU0UoAAvg8k3I/t0YzSSYN6RU7N/LdoswYbssaDl VOL6qxoAeAahSr31uLqjPCEbOEWUm1FjYU6O9NbjPswcVZ0gs1jc+vye0bI6Cyyv BXvnq4tBORM5eb1aA7YLV7o3hDUCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLrRQDWIyo5+H5pLMGxri+KQeXk+MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2JkYzQxYzFhLWUwODgtNGVmNi05ZDI4LTgxNGM2MTQ1NmQzMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iZGM0MWMx YS1lMDg4LTRlZjYtOWQyOC04MTRjNjE0NTZkMzAvMC9CQUQxNDAzNTg4Q0E4RTdF MUY5QTRCMzA2QzZCOEJFMjkwNzk3OTNFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ5kiMA8EAgACMAkDBwAgAQ30LYAwDQYJKoZIhvcNAQELBQADggEBAGkrxiCN JYGqHtS5MCkBvh5bsqJZlGGBvIidpfKndPgg8AAmCUGDn+ZoCj9x7k/YLNij30+Z gtyBcK0vzJ1V/9x/kLBtGvU9g8kk8cI+Y/3Cn8olx2vdduEXA+TWyNG5OoRrMpdN fXw1/THDZG/KHqb3acd2ISSoSbLAgUr/THhel5YBmcY60G+VhNqKV3OtZKuxovs8 7Cqat6RSfTaVTKq5Gq37IQjPfxPanCq5quO9o43pV7N1eqyoHtJBBKrsgGrDlkiX IP0gTDdhlO6hS91hkvoHs3zyiudldWN6YDZFj3aPhN1tlGUkAqOK0MsQaU9P7eho pDU+ASZa3R50tJ4= -----END CERTIFICATE-----Generated at Tue May 12 22:32:37 2026 by rpki-client