$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/BBD0CD6436CA793BFF433922A8C38085169809BA.cer File: BBD0CD6436CA793BFF433922A8C38085169809BA.cer (raw, json) Hash identifier: 4IlpI+5CMpnWafUePGOIuEZz+wfOCWwJh6WXiHXK0vw= Subject key identifier: BB:D0:CD:64:36:CA:79:3B:FF:43:39:22:A8:C3:80:85:16:98:09:BA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 30F32E08D41108839063EEC553AAEAF0277769FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:47:56 +0000 Certificate not after: Sun 02 May 2027 01:52:56 +0000 Subordinate resources: IP: 103.250.14.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f3:2e:08:d4:11:08:83:90:63:ee:c5:53:aa:ea:f0:27:77:69:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:47:56 2026 GMT Not After : May 2 01:52:56 2027 GMT Subject: CN=BBD0CD6436CA793BFF433922A8C38085169809BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:10:da:30:25:b0:cb:7d:1b:d9:90:34:a1:15: f0:ea:62:6d:89:a7:db:08:01:61:a5:d1:8c:58:e6: 63:d8:61:58:77:97:08:bf:88:ae:fd:5b:58:81:bd: 3d:5a:1e:2e:4a:82:f6:45:16:cd:11:39:32:41:b7: c6:8c:18:e9:39:09:1a:39:65:05:66:38:c5:ed:93: e2:a9:33:8d:81:a6:41:d8:49:db:8e:8d:28:68:5a: ae:8e:a7:88:34:48:ce:19:1d:16:9b:7b:0f:a4:ba: 5d:a1:41:7d:c4:f5:ce:11:e2:d1:26:16:03:29:ac: 0e:de:f7:c0:c7:a1:44:bb:20:9e:8f:da:ad:a4:56: d3:7d:44:55:61:bd:30:8b:bf:f2:06:4f:bc:60:b5: 6f:84:f1:44:78:02:db:fb:24:b9:89:a3:09:50:fb: 5f:c9:b4:cd:1f:57:d0:09:a3:4d:0f:61:62:d6:9d: 39:0c:a0:c3:5a:90:c5:17:7d:ec:85:28:fe:2e:87: 9c:c5:98:65:0f:2d:be:39:1e:f5:dd:8e:7e:23:29: 9b:99:eb:1f:88:76:fc:d4:83:a8:2e:2a:61:df:04: 73:a3:cb:57:45:c5:a2:06:49:4b:81:92:16:dd:7f: 8b:ea:79:29:b3:ad:d5:b1:84:44:3b:24:07:26:fc: be:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BB:D0:CD:64:36:CA:79:3B:FF:43:39:22:A8:C3:80:85:16:98:09:BA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.250.14.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:1f:92:28:3b:53:e1:26:25:20:96:7b:0d:ea:27:59:42:a0: 1c:cc:78:0f:fc:4e:ba:04:16:10:ad:7d:4d:64:f4:ef:dd:e8: a6:1f:ba:0b:8a:f1:34:c5:6b:2d:df:94:3b:b5:97:0d:f7:92: 1a:0b:5e:9a:f0:a1:a8:78:de:98:1d:cd:d0:c2:75:e9:82:65: 4c:30:14:cd:a4:0d:34:50:37:8f:56:34:d0:30:51:3b:df:c4: a0:c8:bf:d3:26:ae:04:fe:00:50:3d:98:c6:48:65:32:0f:80: 57:63:29:c0:d3:eb:fc:0b:df:18:59:63:fa:90:9e:65:2e:bf: 0c:39:06:be:f4:3c:3b:1e:ff:d2:ec:8c:cb:18:0a:e6:52:7b: 6f:f7:f9:07:6a:fd:06:06:0b:98:d8:fa:e4:70:ee:8d:77:61: 3f:83:88:71:06:f0:ec:2d:2b:ba:33:2b:5f:25:13:a6:04:03: c9:a1:c6:5b:56:f6:70:9e:22:36:d5:b0:54:4b:2b:e4:22:35: 98:af:98:ee:bf:23:7d:a4:ef:c6:70:f2:07:66:22:81:09:d0: cc:b3:c0:df:3f:75:32:e1:7f:7f:58:f8:f0:70:6c:6c:b7:95: 52:96:7e:0f:77:5b:da:6d:17:58:f0:a2:96:50:4f:a8:14:b9: 11:d7:05:da -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUMPMuCNQRCIOQY+7FU6rq8Cd3af8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDc1NloX DTI3MDUwMjAxNTI1NlowMzExMC8GA1UEAxMoQkJEMENENjQzNkNBNzkzQkZGNDMz OTIyQThDMzgwODUxNjk4MDlCQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANYQ2jAlsMt9G9mQNKEV8OpibYmn2wgBYaXRjFjmY9hhWHeXCL+Irv1bWIG9 PVoeLkqC9kUWzRE5MkG3xowY6TkJGjllBWY4xe2T4qkzjYGmQdhJ246NKGharo6n iDRIzhkdFpt7D6S6XaFBfcT1zhHi0SYWAymsDt73wMehRLsgno/araRW031EVWG9 MIu/8gZPvGC1b4TxRHgC2/skuYmjCVD7X8m0zR9X0AmjTQ9hYtadOQygw1qQxRd9 7IUo/i6HnMWYZQ8tvjke9d2OfiMpm5nrH4h2/NSDqC4qYd8Ec6PLV0XFogZJS4GS Ft1/i+p5KbOt1bGERDskByb8vsECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLvQzWQ2ynk7/0M5IqjDgIUWmAm6MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2MxYjkyNmUwLTZjNmItNDg1NS1hNzU2LWUwY2JiN2FkMDFmOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jMWI5MjZl MC02YzZiLTQ4NTUtYTc1Ni1lMGNiYjdhZDAxZjgvMC9CQkQwQ0Q2NDM2Q0E3OTNC RkY0MzM5MjJBOEMzODA4NTE2OTgwOUJBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ/oOMA0GCSqGSIb3DQEBCwUAA4IBAQBbH5IoO1PhJiUglnsN6idZQqAczHgP /E66BBYQrX1NZPTv3eimH7oLivE0xWst35Q7tZcN95IaC16a8KGoeN6YHc3QwnXp gmVMMBTNpA00UDePVjTQMFE738SgyL/TJq4E/gBQPZjGSGUyD4BXYynA0+v8C98Y WWP6kJ5lLr8MOQa+9Dw7Hv/S7IzLGArmUntv9/kHav0GBguY2PrkcO6Nd2E/g4hx BvDsLSu6MytfJROmBAPJocZbVvZwniI21bBUSyvkIjWYr5juvyN9pO/GcPIHZiKB CdDMs8DfP3Uy4X9/WPjwcGxst5VSln4Pd1vabRdY8KKWUE+oFLkR1wXa -----END CERTIFICATE-----Generated at Wed May 13 03:55:13 2026 by rpki-client