$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer File: BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer (raw, json) Hash identifier: Ha6F5yjHaVqaqYiNPLXeewUms+8mSp/u8ERvBatPHcc= Subject key identifier: BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1FE1A45A3768ADA5EE95CF9B0E6C6FCD3C17BF7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:51:08 +0000 Certificate not after: Sun 02 May 2027 01:56:08 +0000 Subordinate resources: IP: 103.51.204.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:e1:a4:5a:37:68:ad:a5:ee:95:cf:9b:0e:6c:6f:cd:3c:17:bf:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:51:08 2026 GMT Not After : May 2 01:56:08 2027 GMT Subject: CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:1a:65:87:f0:5f:7f:4d:12:0d:9e:4b:12: 7c:63:18:cd:f8:5d:2c:8c:1b:86:59:88:e6:a6:3a: 87:8f:d6:fd:f2:86:e2:3a:c8:6f:c1:e7:67:36:b4: af:1c:22:a7:0f:f7:04:8a:03:8c:9c:30:1f:a7:51: c0:8d:68:07:2d:a7:9d:25:ff:ff:52:5f:62:17:80: 84:16:a9:ad:62:f0:e5:94:e4:06:08:b3:cc:19:5a: bf:c8:d3:45:4f:62:22:e2:22:4b:d7:29:83:52:eb: 77:12:c8:d8:e8:f2:e7:e2:4a:9c:68:4e:f7:64:25: ec:bf:c3:30:ce:fc:9b:ba:5f:0a:94:75:d8:dc:fd: 26:7c:eb:e9:fe:5f:3a:51:04:55:56:cc:9c:90:bf: f1:d7:33:1b:99:3f:7a:a1:0f:44:35:ab:fc:cb:53: f5:05:4e:73:d0:ac:e7:cc:4c:36:fd:72:ab:7f:e2: 19:dc:de:07:84:a0:86:2f:58:9e:83:97:38:5e:25: dd:a2:14:d9:0d:43:45:0f:14:8c:e1:95:57:80:43: 1a:c4:3a:c2:c9:03:d1:d3:3c:02:7a:42:a5:d1:9d: a2:4c:0b:0a:25:74:b6:7a:0a:9c:c8:ab:49:70:40: 16:01:bf:68:45:7a:3e:07:76:95:fb:8c:aa:0e:bd: 0e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.51.204.0/23 Signature Algorithm: sha256WithRSAEncryption 75:61:38:18:f1:b1:fa:99:92:5c:c9:cf:ff:3d:f7:42:20:4a: 6f:95:0b:f6:d9:05:9a:68:4b:e2:a0:b4:f5:95:08:8d:22:47: c4:8a:26:cb:00:de:c3:ef:b5:93:5c:75:3e:47:9d:33:1c:a7: d9:8f:8a:ce:9d:9e:39:9d:1d:fe:d9:4b:30:a6:34:90:21:b0: 95:1d:cd:41:af:3a:de:84:04:34:59:74:b9:ff:fc:6d:b7:b0: a5:2c:2e:9b:51:65:c0:24:04:d2:f5:4b:05:09:03:77:f5:76: b3:0d:87:e1:a2:38:66:fe:11:5f:75:4c:bf:f6:12:22:9f:ea: 87:ae:f0:e3:cb:6b:87:05:51:86:6d:c0:67:68:89:92:36:5c: c8:1a:80:ab:3d:a8:2a:85:8e:9e:4e:f8:41:ef:93:3e:dd:90: 4a:66:8f:d3:34:35:89:30:a0:21:4f:06:28:9d:16:4a:a8:f1: ae:e7:53:6f:a8:0c:4e:62:e1:bf:89:67:89:e0:45:6a:4f:d8: c9:84:8a:5d:12:25:d9:be:96:47:e3:0c:39:aa:91:c3:bf:05: cb:83:bc:eb:c5:7c:33:73:c8:28:35:0e:c7:8b:25:6e:78:c2: c8:96:cf:cf:5f:51:0e:f4:6b:2a:ff:60:45:b5:1e:41:93:dc: cd:ac:8e:b3 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUH+GkWjdoraXulc+bDmxvzTwXv3swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTEwOFoX DTI3MDUwMjAxNTYwOFowMzExMC8GA1UEAxMoQkI2RUU0OTc5NUU1RkRFMUU5ODI1 M0UzNDQ4MDY3QTlEMDdFNUVCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIIGmWH8F9/TRINnksSfGMYzfhdLIwbhlmI5qY6h4/W/fKG4jrIb8HnZza0 rxwipw/3BIoDjJwwH6dRwI1oBy2nnSX//1JfYheAhBaprWLw5ZTkBgizzBlav8jT RU9iIuIiS9cpg1LrdxLI2Ojy5+JKnGhO92Ql7L/DMM78m7pfCpR12Nz9Jnzr6f5f OlEEVVbMnJC/8dczG5k/eqEPRDWr/MtT9QVOc9Cs58xMNv1yq3/iGdzeB4Sghi9Y noOXOF4l3aIU2Q1DRQ8UjOGVV4BDGsQ6wskD0dM8AnpCpdGdokwLCiV0tnoKnMir SXBAFgG/aEV6Pgd2lfuMqg69DrsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLtu5JeV5f3h6YJT40SAZ6nQfl60MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2M2NWI4NGYyLTk4MDQtNDY3MC04YmJjLWMzMzI3MWI1OTI1OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jNjViODRm Mi05ODA0LTQ2NzAtOGJiYy1jMzMyNzFiNTkyNTkvMC9CQjZFRTQ5Nzk1RTVGREUx RTk4MjUzRTM0NDgwNjdBOUQwN0U1RUI0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZzPMMA0GCSqGSIb3DQEBCwUAA4IBAQB1YTgY8bH6mZJcyc//PfdCIEpvlQv2 2QWaaEvioLT1lQiNIkfEiibLAN7D77WTXHU+R50zHKfZj4rOnZ45nR3+2UswpjSQ IbCVHc1BrzrehAQ0WXS5//xtt7ClLC6bUWXAJATS9UsFCQN39XazDYfhojhm/hFf dUy/9hIin+qHrvDjy2uHBVGGbcBnaImSNlzIGoCrPagqhY6eTvhB75M+3ZBKZo/T NDWJMKAhTwYonRZKqPGu51NvqAxOYuG/iWeJ4EVqT9jJhIpdEiXZvpZH4ww5qpHD vwXLg7zrxXwzc8goNQ7HiyVueMLIls/PX1EO9Gsq/2BFtR5Bk9zNrI6z -----END CERTIFICATE-----Generated at Tue May 12 22:32:16 2026 by rpki-client