$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.cer File: BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.cer (raw, json) Hash identifier: vxPIRTPPLM3a1qoPud7ieyvZOT4yz9VPGensTsiW8WQ= Subject key identifier: BB:88:F2:4C:5D:BE:FF:DF:77:66:0E:D1:E6:F9:F5:8E:23:2F:C0:B1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 22917E0DD81A0F87A4AA944EDB63F45131F3684E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:52:22 +0000 Certificate not after: Sun 02 May 2027 00:57:22 +0000 Subordinate resources: IP: 103.156.74.0/23 IP: 2406:8140::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:91:7e:0d:d8:1a:0f:87:a4:aa:94:4e:db:63:f4:51:31:f3:68:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:52:22 2026 GMT Not After : May 2 00:57:22 2027 GMT Subject: CN=BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:82:66:f4:e2:0d:08:04:05:33:0d:b6:25:d0: 7b:8a:0e:cb:f5:c5:0c:b1:13:03:27:d5:49:e6:54: 3c:10:94:59:fa:39:68:be:2d:51:c3:3a:d2:c4:59: 46:6c:82:a1:91:0a:a3:c4:f3:74:26:83:84:51:b5: 69:12:6f:51:4f:11:75:55:0d:7e:19:d2:58:1b:cd: 94:3f:f0:70:ac:dd:b0:63:8a:30:43:15:bd:bb:2d: 15:b6:d8:c5:75:a3:10:cd:5b:f2:e1:30:25:a5:6c: 34:05:0f:ff:59:50:c6:53:90:07:07:e2:ca:6f:90: 64:e8:9f:ca:4a:ed:ae:e0:7e:59:e3:50:30:b8:d7: 64:1e:e1:10:77:59:32:42:c2:24:fa:a6:c0:e2:48: 66:b4:b9:d1:0d:b7:4c:71:74:7f:44:f4:37:b6:38: fb:d8:f2:22:dc:20:37:d9:d5:78:c0:ec:35:85:14: 8d:7e:e1:f7:33:d9:e3:1f:9d:94:7f:d8:2e:cf:06: 27:77:30:aa:5e:90:36:d9:30:62:70:c2:4a:90:99: 8f:70:12:6a:91:2a:ea:34:3c:79:83:01:bc:db:8c: 11:45:fa:0f:d0:89:34:e9:94:94:3d:75:dc:b5:a7: 34:c1:66:90:45:b5:69:6d:21:a0:54:d9:eb:06:e2: 99:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BB:88:F2:4C:5D:BE:FF:DF:77:66:0E:D1:E6:F9:F5:8E:23:2F:C0:B1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.74.0/23 IPv6: 2406:8140::/32 Signature Algorithm: sha256WithRSAEncryption a0:0b:04:6b:d8:08:f8:12:4c:17:df:62:f9:1f:54:a0:e1:cb: c6:ad:f7:ca:85:06:6e:65:da:d0:1b:e4:e5:8e:0e:17:57:33: 67:93:1a:88:de:90:35:2b:3f:d4:c6:1f:96:09:2c:54:63:3f: 23:e2:24:27:b0:9e:c0:94:3c:f2:a8:84:7b:23:11:b6:31:51: 53:60:ad:09:c3:b9:6d:df:7d:15:d9:ad:f6:30:f5:d3:bb:71: 40:ce:6d:50:10:31:4f:54:20:c2:a6:3e:02:08:3e:60:0d:9b: 74:e7:8a:b4:8b:ba:91:78:66:21:7b:18:d4:a0:3d:37:41:b7: 30:24:31:77:01:fa:94:e8:f2:7d:d0:ce:92:a8:6c:9a:04:af: 1c:9e:9e:45:77:c9:a2:55:97:60:3c:04:f6:0b:0a:a7:f7:28: 15:c0:4d:e9:db:05:b3:f3:30:a3:dc:f8:32:64:8e:87:d5:32: c7:64:84:5d:03:4e:94:2c:ca:14:9e:5a:e3:fa:48:cd:b9:cb: 1b:cc:e4:b5:34:af:0e:a5:c4:7d:f5:dd:f8:ea:1e:d2:25:93: 66:a5:f9:fb:d2:ad:c5:3f:92:3f:39:ab:8c:4b:32:75:2d:c7: 90:84:5f:ff:0e:d1:ab:d9:99:35:25:62:13:9e:32:84:85:9a: dd:95:0a:21 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUIpF+DdgaD4ekqpRO22P0UTHzaE4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTIyMloX DTI3MDUwMjAwNTcyMlowMzExMC8GA1UEAxMoQkI4OEYyNEM1REJFRkZERjc3NjYw RUQxRTZGOUY1OEUyMzJGQzBCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKOCZvTiDQgEBTMNtiXQe4oOy/XFDLETAyfVSeZUPBCUWfo5aL4tUcM60sRZ RmyCoZEKo8TzdCaDhFG1aRJvUU8RdVUNfhnSWBvNlD/wcKzdsGOKMEMVvbstFbbY xXWjEM1b8uEwJaVsNAUP/1lQxlOQBwfiym+QZOifykrtruB+WeNQMLjXZB7hEHdZ MkLCJPqmwOJIZrS50Q23THF0f0T0N7Y4+9jyItwgN9nVeMDsNYUUjX7h9zPZ4x+d lH/YLs8GJ3cwql6QNtkwYnDCSpCZj3ASapEq6jQ8eYMBvNuMEUX6D9CJNOmUlD11 3LWnNMFmkEW1aW0hoFTZ6wbimVcCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLuI8kxdvv/fd2YO0eb59Y4jL8CxMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZkYTBjZGQ5LTdmMzEtNGYxZi1hYjA5LWE2MGNjMDg1OWNkYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82ZGEwY2Rk OS03ZjMxLTRmMWYtYWIwOS1hNjBjYzA4NTljZGEvMC9CQjg4RjI0QzVEQkVGRkRG Nzc2NjBFRDFFNkY5RjU4RTIzMkZDMEIxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5xKMA0EAgACMAcDBQAkBoFAMA0GCSqGSIb3DQEBCwUAA4IBAQCgCwRr2Aj4 EkwX32L5H1Sg4cvGrffKhQZuZdrQG+Tljg4XVzNnkxqI3pA1Kz/Uxh+WCSxUYz8j 4iQnsJ7AlDzyqIR7IxG2MVFTYK0Jw7lt330V2a32MPXTu3FAzm1QEDFPVCDCpj4C CD5gDZt054q0i7qReGYhexjUoD03QbcwJDF3AfqU6PJ90M6SqGyaBK8cnp5Fd8mi VZdgPAT2Cwqn9ygVwE3p2wWz8zCj3PgyZI6H1TLHZIRdA06ULMoUnlrj+kjNucsb zOS1NK8OpcR99d346h7SJZNmpfn70q3FP5I/OauMSzJ1LceQhF//DtGr2Zk1JWIT njKEhZrdlQoh -----END CERTIFICATE-----Generated at Tue May 12 22:39:08 2026 by rpki-client