$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer File: BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer (raw, json) Hash identifier: GqnLyPpkxn6xXdMiZRaJQ6quXAPzqLOFSVgp7FL7ZeU= Subject key identifier: BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 59180D48D4BFE8972C73B5B22B77C4F549FEB7C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:39:55 +0000 Certificate not after: Sun 02 May 2027 00:44:55 +0000 Subordinate resources: IP: 103.144.38.0/23 IP: 2405:64c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:18:0d:48:d4:bf:e8:97:2c:73:b5:b2:2b:77:c4:f5:49:fe:b7:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:39:55 2026 GMT Not After : May 2 00:44:55 2027 GMT Subject: CN=BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c7:8d:97:8d:73:df:3a:dc:92:b7:9e:5a:78: 04:3d:8f:5c:e5:c7:7a:b4:4a:f3:f8:43:53:82:3b: ee:53:03:0e:a8:9b:91:82:3f:eb:8b:71:82:04:f6: e0:ca:bc:34:fb:83:3e:3c:e6:28:41:3a:1c:58:69: 55:51:e7:1c:7d:ce:94:5d:dd:a3:a0:d2:e8:8a:12: af:ac:67:66:ad:51:e0:c5:4f:0d:82:fd:a4:4b:44: b0:df:98:1f:22:7b:74:32:76:ef:a4:43:dd:aa:93: 7d:a3:1c:24:dd:a2:f8:ec:8f:03:94:ad:63:fd:e9: 26:14:c6:68:2b:67:eb:49:30:b0:47:b7:52:5f:39: 72:fc:6d:77:3e:56:89:8c:6a:c5:11:04:8a:73:c9: e2:13:a4:eb:88:5a:f0:c2:45:e2:37:2a:b3:c3:37: 49:6e:38:64:93:72:cf:3e:d1:57:cf:e7:89:13:86: 59:73:14:8c:15:81:5a:dc:95:a8:79:f8:ac:e8:0a: 77:bd:d2:6b:15:1a:90:ab:a0:92:e7:9c:a0:09:45: bf:5a:b5:73:f9:d1:36:ef:2d:3e:f2:19:2e:63:e9: fe:f1:a5:1a:ff:f5:a2:d4:4c:25:2b:be:35:12:89: 12:89:08:b0:a5:8f:dc:12:73:d4:c9:3c:5e:af:5e: 85:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.38.0/23 IPv6: 2405:64c0::/32 Signature Algorithm: sha256WithRSAEncryption 82:a1:f9:c5:e3:59:b6:86:cb:54:ad:c1:0f:a6:86:77:12:47: ee:9d:95:a0:51:ac:fe:ff:8c:83:ce:df:c8:46:e7:18:e9:c7: 99:dc:97:36:70:6e:fc:33:85:69:ee:bb:57:0a:fb:52:0c:39: 49:c9:20:82:7f:e3:e4:f9:86:9a:db:b2:6d:07:0d:0b:6c:e4: 73:66:d9:b5:ed:68:51:a4:ae:a3:4b:3c:35:27:bc:ca:ad:68: 9e:3d:eb:2f:65:ae:2c:33:e1:79:58:35:3e:0c:44:2d:32:2d: 64:0c:b2:66:a1:1b:f6:5b:7e:b1:08:f5:13:f1:b6:74:8c:92: 67:85:b3:2c:6c:f9:7e:4a:c4:bd:7a:50:b9:8b:5d:1b:18:62: 23:32:73:a3:cb:9b:e8:ed:8f:05:13:69:41:c4:df:17:b4:c8: 7e:1f:7d:4d:10:1b:df:5f:90:df:87:20:c4:01:f6:7d:88:63: ba:12:fb:bc:de:75:64:1a:48:38:b8:42:40:71:99:30:94:08: cb:3b:5b:0b:31:79:25:b5:26:84:bf:dc:11:7d:e8:00:57:35: 8e:6e:dd:72:f4:96:13:d3:e1:43:34:cb:25:21:9e:90:53:2c: 93:a9:85:5e:f4:3a:8c:74:1e:d9:21:14:7d:52:9b:0d:fb:29: 82:26:05:68 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUWRgNSNS/6Jcsc7WyK3fE9Un+t8UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzk1NVoX DTI3MDUwMjAwNDQ1NVowMzExMC8GA1UEAxMoQkI3QTU4NEE5RkJDOUI2NDJBMDNB NDhBQUE0NjQ1RUI3RkIxQzJDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKPHjZeNc9863JK3nlp4BD2PXOXHerRK8/hDU4I77lMDDqibkYI/64txggT2 4Mq8NPuDPjzmKEE6HFhpVVHnHH3OlF3do6DS6IoSr6xnZq1R4MVPDYL9pEtEsN+Y HyJ7dDJ276RD3aqTfaMcJN2i+OyPA5StY/3pJhTGaCtn60kwsEe3Ul85cvxtdz5W iYxqxREEinPJ4hOk64ha8MJF4jcqs8M3SW44ZJNyzz7RV8/niROGWXMUjBWBWtyV qHn4rOgKd73SaxUakKugkuecoAlFv1q1c/nRNu8tPvIZLmPp/vGlGv/1otRMJSu+ NRKJEokIsKWP3BJz1Mk8Xq9ehWMCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLt6WEqfvJtkKgOkiqpGRet/scLHMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVhYjBhNTlhLTYxYmEtNDYyZS1hODJhLWEyMDJiN2ZiODBmMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81YWIwYTU5 YS02MWJhLTQ2MmUtYTgyYS1hMjAyYjdmYjgwZjAvMC9CQjdBNTg0QTlGQkM5QjY0 MkEwM0E0OEFBQTQ2NDVFQjdGQjFDMkM3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5AmMA0EAgACMAcDBQAkBWTAMA0GCSqGSIb3DQEBCwUAA4IBAQCCofnF41m2 hstUrcEPpoZ3EkfunZWgUaz+/4yDzt/IRucY6ceZ3Jc2cG78M4Vp7rtXCvtSDDlJ ySCCf+Pk+Yaa27JtBw0LbORzZtm17WhRpK6jSzw1J7zKrWiePesvZa4sM+F5WDU+ DEQtMi1kDLJmoRv2W36xCPUT8bZ0jJJnhbMsbPl+SsS9elC5i10bGGIjMnOjy5vo 7Y8FE2lBxN8XtMh+H31NEBvfX5DfhyDEAfZ9iGO6Evu83nVkGkg4uEJAcZkwlAjL O1sLMXkltSaEv9wRfegAVzWObt1y9JYT0+FDNMslIZ6QUyyTqYVe9DqMdB7ZIRR9 UpsN+ymCJgVo -----END CERTIFICATE-----Generated at Tue May 12 22:45:38 2026 by rpki-client