$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer File: BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer (raw, json) Hash identifier: uFp5JFvwa52OLBwxNmsweUV2S+qgKmGEZozhKcpaZpI= Subject key identifier: BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2DDCE0F101B5B20C860C500F6BA9983848C8DB0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:31:04 +0000 Certificate not after: Sun 02 May 2027 01:36:04 +0000 Subordinate resources: IP: 45.126.56.0/22 IP: 103.19.176.0/22 IP: 2001:df5:4000::/48 IP: 2402:ee80::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:dc:e0:f1:01:b5:b2:0c:86:0c:50:0f:6b:a9:98:38:48:c8:db:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:31:04 2026 GMT Not After : May 2 01:36:04 2027 GMT Subject: CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:71:d1:fb:30:1b:a9:d9:a5:03:7b:bf:99:ac: a2:8f:f7:b5:48:de:51:e4:a9:1d:95:fb:a5:54:38: e1:d5:12:e8:51:2f:88:1a:5f:26:d4:cb:a2:e0:f1: dc:51:59:aa:50:f0:62:0c:67:e0:12:ad:14:75:0b: 2f:e9:b7:d2:52:a9:9a:78:1b:13:6e:65:de:97:f9: 23:ad:fa:09:8c:ab:93:cf:18:2a:3e:d8:e6:79:5e: ac:0a:23:29:00:2c:78:af:a5:26:39:11:b8:9d:b4: 8f:90:23:ef:2c:57:69:09:b2:5b:9f:74:bd:1a:59: c3:9f:6b:7b:15:de:93:31:75:e5:4a:bf:91:ae:e2: 22:9c:3d:f6:f5:57:da:6b:95:3b:fa:78:80:a0:8c: 39:0d:4e:5c:99:b0:13:9f:64:da:b9:dc:f9:88:48: 43:24:f0:87:e4:08:d8:a2:20:2c:13:90:73:ba:a6: 27:a3:e8:a5:68:e9:f6:67:f7:d1:3a:a8:bd:18:58: c2:7d:4d:0b:49:be:ad:0f:58:68:7b:79:24:db:40: e1:a8:2d:a3:fa:36:d9:59:19:a8:d9:9d:4a:a1:8e: fe:4e:9a:03:07:19:0f:ff:83:20:2f:ad:a8:52:b1: 79:9b:a0:dc:59:0a:58:17:41:c0:ec:9b:7f:58:94: ff:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.126.56.0/22 103.19.176.0/22 IPv6: 2001:df5:4000::/48 2402:ee80::/32 Signature Algorithm: sha256WithRSAEncryption 4b:96:c5:bf:95:02:cd:e2:10:99:f4:3c:b1:96:6a:1c:35:6e: 84:12:f9:7f:e4:20:77:6c:23:28:a7:1c:35:8d:53:cf:02:57: ae:a5:b8:48:13:96:04:fe:7c:7a:35:45:23:bc:8b:ad:fa:66: f9:d5:27:14:d9:df:35:6b:83:81:86:1e:28:db:b1:a0:08:dd: 64:47:39:6c:50:ee:4e:0b:33:c3:4c:4d:d8:fa:c7:a0:a5:67: de:73:3a:89:5e:c0:63:75:32:1a:03:dd:44:19:ea:28:b5:c3: 82:b9:f2:4a:84:22:23:12:1c:8b:a5:42:26:73:01:ff:c3:8c: 30:31:0c:76:5c:eb:cd:f9:35:f4:e8:04:1f:6a:3f:15:5b:ca: 4f:90:d3:ab:95:62:9d:a5:9e:cc:13:57:ae:57:75:83:3a:72: 5c:35:78:9f:81:c3:36:58:fe:b7:6a:87:89:8f:10:82:de:22: 8b:88:ce:50:bf:77:f2:ff:94:6b:a5:39:c7:bd:48:f5:f3:1b: 42:f1:45:e7:f3:16:62:37:49:5c:fa:4d:95:bb:3c:13:37:0e: a2:46:7e:66:64:f7:44:44:52:6e:90:59:61:57:57:34:73:4b: 50:fb:36:70:ba:3a:a0:16:f6:29:80:76:cf:8e:28:b7:37:e2: 67:34:93:5c -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgIULdzg8QG1sgyGDFAPa6mYOEjI2wowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzEwNFoX DTI3MDUwMjAxMzYwNFowMzExMC8GA1UEAxMoQkI1NzY4MzVFRDhBNDZFMzBGQjhE REY1NjZBQkM0Nzc2NTUzN0VCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIxx0fswG6nZpQN7v5msoo/3tUjeUeSpHZX7pVQ44dUS6FEviBpfJtTLouDx 3FFZqlDwYgxn4BKtFHULL+m30lKpmngbE25l3pf5I636CYyrk88YKj7Y5nlerAoj KQAseK+lJjkRuJ20j5Aj7yxXaQmyW590vRpZw59rexXekzF15Uq/ka7iIpw99vVX 2muVO/p4gKCMOQ1OXJmwE59k2rnc+YhIQyTwh+QI2KIgLBOQc7qmJ6PopWjp9mf3 0TqovRhYwn1NC0m+rQ9YaHt5JNtA4agto/o22VkZqNmdSqGO/k6aAwcZD/+DIC+t qFKxeZug3FkKWBdBwOybf1iU/4kCAwEAAaOCAtcwggLTMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLtXaDXtikbjD7jd9WarxHdlU362MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E2NjE3ZDhjLWQxNTQtNDYxZS1iY2NhLWI2NmQyNjdjZmZjNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hNjYxN2Q4 Yy1kMTU0LTQ2MWUtYmNjYS1iNjZkMjY3Y2ZmYzcvMC9CQjU3NjgzNUVEOEE0NkUz MEZCOERERjU2NkFCQzQ3NzY1NTM3RUI2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAM AwQCLX44AwQCZxOwMBYEAgACMBADBwAgAQ31QAADBQAkAu6AMA0GCSqGSIb3DQEB CwUAA4IBAQBLlsW/lQLN4hCZ9DyxlmocNW6EEvl/5CB3bCMopxw1jVPPAleupbhI E5YE/nx6NUUjvIut+mb51ScU2d81a4OBhh4o27GgCN1kRzlsUO5OCzPDTE3Y+seg pWfeczqJXsBjdTIaA91EGeootcOCufJKhCIjEhyLpUImcwH/w4wwMQx2XOvN+TX0 6AQfaj8VW8pPkNOrlWKdpZ7ME1euV3WDOnJcNXifgcM2WP63aoeJjxCC3iKLiM5Q v3fy/5RrpTnHvUj18xtC8UXn8xZiN0lc+k2VuzwTNw6iRn5mZPdERFJukFlhV1c0 c0tQ+zZwujqgFvYpgHbPjii3N+JnNJNc -----END CERTIFICATE-----Generated at Wed May 13 01:07:02 2026 by rpki-client