$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer File: BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer (raw, json) Hash identifier: d4DAA9K3sP/2EuFGXA+PS29tebrrHgDTq2h2Px6AD9o= Subject key identifier: BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7424BBCF3715E554C1A9791F147615576ED82230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:40:00 +0000 Certificate not after: Sun 02 May 2027 00:45:00 +0000 Subordinate resources: IP: 103.124.136.0/22 IP: 2403:e0c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:24:bb:cf:37:15:e5:54:c1:a9:79:1f:14:76:15:57:6e:d8:22:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:40:00 2026 GMT Not After : May 2 00:45:00 2027 GMT Subject: CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:31:61:49:4e:b4:a8:98:f1:0e:d1:2f:74:d3: 9e:fe:11:52:ed:86:69:f5:3a:73:19:b0:9a:85:c1: 8e:d1:03:9c:50:c5:1e:17:88:2a:03:04:e4:50:88: bd:11:a9:83:80:f1:ad:5a:29:f3:55:ef:48:3d:30: d3:e7:68:a2:54:33:32:a9:d4:1e:e2:ff:23:44:91: 0b:24:ac:e7:71:0e:6d:d2:ee:c6:3d:43:b9:17:05: 3d:a3:40:eb:30:02:d5:31:13:ec:da:49:47:2c:68: a1:96:4d:74:e9:5b:18:87:e7:2b:0d:f8:76:8d:c5: 72:93:fd:d0:69:cc:09:fe:28:2c:aa:74:f4:09:a6: 2e:2d:8b:df:57:51:c5:07:b3:3f:31:45:9c:c5:5d: 4b:ad:ae:f5:8c:41:d5:a3:ea:85:a8:ae:07:a5:44: 35:74:c1:ea:24:e4:9e:33:4e:61:c4:59:4b:c2:75: ee:92:38:b7:8b:b0:72:bf:b6:a6:f2:50:1f:63:c4: 69:26:88:2e:cc:62:0c:17:ad:16:9f:22:2a:de:e7: 8b:b1:5c:01:2b:f7:fa:12:b1:ad:95:b6:ad:d2:97: 4c:b0:9a:04:bf:c5:73:c6:d1:94:19:80:ef:da:f7: 7d:36:f8:e6:89:62:6c:25:d1:a1:0b:6b:38:6a:ca: c0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.124.136.0/22 IPv6: 2403:e0c0::/32 Signature Algorithm: sha256WithRSAEncryption 57:de:7d:af:0e:d9:7d:a0:56:20:74:6c:67:31:fd:22:71:c5: 4d:0b:7c:3e:93:e6:86:39:af:3b:aa:02:0c:dc:43:93:53:c5: a3:41:95:b5:b3:2d:d2:df:5a:99:86:bd:6e:25:44:92:f6:9e: 83:1a:e2:a7:f8:29:0b:c4:f6:3e:c5:de:94:f6:b0:c2:ad:d8: 84:e0:84:3d:50:db:27:af:dc:a5:35:a2:7f:b1:76:d1:17:23: cf:4c:3b:40:d4:b9:24:68:47:6d:9a:e4:62:c6:73:d7:0e:02: 0b:04:0a:1e:ac:bd:e2:c2:b1:bd:96:ae:a9:f4:d4:fb:bc:cb: a9:39:c1:58:a4:78:e7:7d:91:4d:fb:aa:de:a2:bb:19:66:4f: 4c:e8:cc:b5:59:cf:43:e7:80:80:4d:5b:1a:61:8d:49:ff:6c: 95:ff:9d:eb:b6:7a:a3:9a:44:2a:af:cf:3c:50:d9:90:4b:b7: 38:bf:80:14:2e:22:61:a2:71:f8:a3:6b:8f:a4:3f:ee:79:88: 09:cd:80:df:99:a5:75:0c:ec:32:e7:b8:3e:67:ed:d6:7f:1d: 58:9d:af:30:82:4d:06:51:a2:06:51:ad:3a:a1:01:c3:d3:12: 60:49:e8:67:83:e1:4f:af:dc:5c:1c:44:c6:e9:97:70:1d:2f: 6a:5f:c4:25 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUdCS7zzcV5VTBqXkfFHYVV27YIjAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDAwMFoX DTI3MDUwMjAwNDUwMFowMzExMC8GA1UEAxMoQkI5MzNCRkIyQjBDOEEzQUJENEU1 NTQ4NUJDQ0Q5RTdCNDQ4NkU2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANkxYUlOtKiY8Q7RL3TTnv4RUu2GafU6cxmwmoXBjtEDnFDFHheIKgME5FCI vRGpg4DxrVop81XvSD0w0+doolQzMqnUHuL/I0SRCySs53EObdLuxj1DuRcFPaNA 6zAC1TET7NpJRyxooZZNdOlbGIfnKw34do3FcpP90GnMCf4oLKp09AmmLi2L31dR xQezPzFFnMVdS62u9YxB1aPqhaiuB6VENXTB6iTknjNOYcRZS8J17pI4t4uwcr+2 pvJQH2PEaSaILsxiDBetFp8iKt7ni7FcASv3+hKxrZW2rdKXTLCaBL/Fc8bRlBmA 79r3fTb45olibCXRoQtrOGrKwP8CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLuTO/srDIo6vU5VSFvM2ee0SG5nMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVhYmE0ZTU5LWZiMzEtNDFiNS04OGU3LTBiMmNlZDFmMjAxYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81YWJhNGU1 OS1mYjMxLTQxYjUtODhlNy0wYjJjZWQxZjIwMWMvMC9CQjkzM0JGQjJCMEM4QTNB QkQ0RTU1NDg1QkNDRDlFN0I0NDg2RTY3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ3yIMA0EAgACMAcDBQAkA+DAMA0GCSqGSIb3DQEBCwUAA4IBAQBX3n2vDtl9 oFYgdGxnMf0iccVNC3w+k+aGOa87qgIM3EOTU8WjQZW1sy3S31qZhr1uJUSS9p6D GuKn+CkLxPY+xd6U9rDCrdiE4IQ9UNsnr9ylNaJ/sXbRFyPPTDtA1LkkaEdtmuRi xnPXDgILBAoerL3iwrG9lq6p9NT7vMupOcFYpHjnfZFN+6reorsZZk9M6My1Wc9D 54CATVsaYY1J/2yV/53rtnqjmkQqr888UNmQS7c4v4AULiJhonH4o2uPpD/ueYgJ zYDfmaV1DOwy57g+Z+3Wfx1Yna8wgk0GUaIGUa06oQHD0xJgSehng+FPr9xcHETG 6ZdwHS9qX8Ql -----END CERTIFICATE-----Generated at Tue May 12 22:16:57 2026 by rpki-client