$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer File: BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer (raw, json) Hash identifier: qXwEC5wq5cwDV0uXWhGiicW+Im+0/Z7nig55BhhiAUU= Subject key identifier: BB:D4:E1:B6:77:6C:86:2F:7B:32:FC:50:35:87:EC:6E:E4:FF:BA:B8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5CED526A1C98307EBB3B194BF26B346F4CF8FF7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:52:11 +0000 Certificate not after: Sun 02 May 2027 01:57:11 +0000 Subordinate resources: IP: 103.222.254.0/24 IP: 103.250.103.0/24 IP: 2001:df2:e4c0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ed:52:6a:1c:98:30:7e:bb:3b:19:4b:f2:6b:34:6f:4c:f8:ff:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:52:11 2026 GMT Not After : May 2 01:57:11 2027 GMT Subject: CN=BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4f:68:52:89:06:5c:bd:17:5e:b6:ec:40:eb: 02:74:a1:a7:b0:0b:44:6f:d4:ce:e8:be:64:55:fc: 8c:93:f3:88:b0:db:09:95:a5:fa:0b:45:c6:7d:e4: 50:e8:5b:e8:06:0a:5b:49:b5:41:94:62:b0:0c:6f: 1c:23:a9:f7:72:71:13:ec:dc:88:6a:a7:ee:b3:df: 8b:3b:99:80:95:63:d3:86:77:92:da:a3:84:4e:ad: 19:a1:a0:61:48:a0:67:5e:b3:b9:cb:34:d1:45:b9: 03:94:d6:00:44:7c:52:3d:76:ca:20:b7:b6:16:a8: 30:a8:eb:6a:a9:45:ab:ef:75:63:e7:23:d2:08:06: 6d:02:3f:ca:ad:10:a6:65:68:0d:41:ed:c4:35:a6: 88:02:be:8c:5f:d0:f9:c6:8b:79:88:10:eb:9c:27: d6:a3:41:a8:9c:be:43:d0:c7:d2:f8:6e:de:7d:dc: be:b3:dd:9c:f3:d9:10:dd:e3:9e:c8:43:a9:bf:78: 44:ee:72:3c:7a:1e:58:27:19:87:b2:29:88:d2:29: 11:b4:27:ef:85:e7:9a:21:b0:78:e6:fc:90:f7:9c: 4a:c3:05:f6:8c:02:e1:64:43:60:b1:d1:d8:80:11: d2:fb:70:da:96:3d:61:da:10:6e:54:9d:b3:43:cc: 69:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BB:D4:E1:B6:77:6C:86:2F:7B:32:FC:50:35:87:EC:6E:E4:FF:BA:B8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.222.254.0/24 103.250.103.0/24 IPv6: 2001:df2:e4c0::/48 Signature Algorithm: sha256WithRSAEncryption 30:d9:64:21:ef:6f:88:76:36:af:46:ee:0f:a9:11:13:4f:df: 96:98:e6:5e:ae:ad:2c:32:8c:d6:9f:25:76:cf:b0:a9:f6:b5: 1f:78:70:a1:68:b9:c6:53:38:8c:24:42:dc:1c:4d:29:76:42: 56:30:01:84:43:ca:c0:5d:34:52:93:2c:b2:3b:df:fb:96:ff: 0b:77:21:64:f3:2e:1b:35:91:10:67:da:e0:e9:68:2e:85:84: 91:7f:78:a5:0a:29:35:9d:24:14:48:fb:db:d5:a1:57:df:a4: 7b:51:bc:d8:de:69:e7:1e:d0:f8:2e:f9:55:67:dc:45:0a:19: 1b:df:7f:c4:58:77:5b:7d:ea:a3:69:df:bd:b7:86:43:cf:a3: 41:a8:6f:a2:0a:97:ae:5b:ce:cc:07:ca:b7:0c:83:cf:c9:90: db:48:78:fb:a1:a4:08:b8:af:9c:76:7c:55:80:4d:80:f3:37: 28:b9:98:2b:a8:3c:5c:b2:d0:a7:e0:d8:03:c8:2a:c5:67:34: 74:ef:60:8c:18:e2:a2:4d:37:1a:f9:1c:30:34:7d:22:f2:f6: 55:1c:bf:b6:20:b6:43:be:e9:30:cf:2f:57:f0:2d:ac:c6:61: 6b:20:31:6a:44:21:33:67:7f:29:6c:a3:0d:83:a3:3a:1d:bc: 34:08:03:c8 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUXO1SahyYMH67OxlL8ms0b0z4/3owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTIxMVoX DTI3MDUwMjAxNTcxMVowMzExMC8GA1UEAxMoQkJENEUxQjY3NzZDODYyRjdCMzJG QzUwMzU4N0VDNkVFNEZGQkFCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMhPaFKJBly9F1627EDrAnShp7ALRG/Uzui+ZFX8jJPziLDbCZWl+gtFxn3k UOhb6AYKW0m1QZRisAxvHCOp93JxE+zciGqn7rPfizuZgJVj04Z3ktqjhE6tGaGg YUigZ16zucs00UW5A5TWAER8Uj12yiC3thaoMKjraqlFq+91Y+cj0ggGbQI/yq0Q pmVoDUHtxDWmiAK+jF/Q+caLeYgQ65wn1qNBqJy+Q9DH0vhu3n3cvrPdnPPZEN3j nshDqb94RO5yPHoeWCcZh7IpiNIpEbQn74XnmiGweOb8kPecSsMF9owC4WRDYLHR 2IAR0vtw2pY9YdoQblSds0PMaTkCAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLvU4bZ3bIYvezL8UDWH7G7k/7q4MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2M4MGRkZTk0LWU1YmUtNGQyOS1iYjEyLTQ1ZmI1YzFkMmM3OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jODBkZGU5 NC1lNWJlLTRkMjktYmIxMi00NWZiNWMxZDJjNzkvMC9CQkQ0RTFCNjc3NkM4NjJG N0IzMkZDNTAzNTg3RUM2RUU0RkZCQUI4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQAZ97+AwQAZ/pnMA8EAgACMAkDBwAgAQ3y5MAwDQYJKoZIhvcNAQELBQADggEB ADDZZCHvb4h2Nq9G7g+pERNP35aY5l6urSwyjNafJXbPsKn2tR94cKFoucZTOIwk QtwcTSl2QlYwAYRDysBdNFKTLLI73/uW/wt3IWTzLhs1kRBn2uDpaC6FhJF/eKUK KTWdJBRI+9vVoVffpHtRvNjeaece0Pgu+VVn3EUKGRvff8RYd1t96qNp3723hkPP o0Gob6IKl65bzswHyrcMg8/JkNtIePuhpAi4r5x2fFWATYDzNyi5mCuoPFyy0Kfg 2APIKsVnNHTvYIwY4qJNNxr5HDA0fSLy9lUcv7YgtkO+6TDPL1fwLazGYWsgMWpE ITNnfylsow2DozodvDQIA8g= -----END CERTIFICATE-----Generated at Tue May 12 22:39:15 2026 by rpki-client