$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer File: BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer (raw, json) Hash identifier: WSogiqHjuysksMaq2oeIHgGOkMvZZbmyfixdWuBSnnM= Subject key identifier: BB:EB:72:27:8F:FF:2B:E2:85:B0:78:68:FE:F5:FE:AA:03:54:E8:72 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 60FB81184B0B62566E9BD627BBC3AEF2C4349FAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:49:32 +0000 Certificate not after: Sun 02 May 2027 01:54:32 +0000 Subordinate resources: IP: 202.162.32.0/20 IP: 2402:a600::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:fb:81:18:4b:0b:62:56:6e:9b:d6:27:bb:c3:ae:f2:c4:34:9f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:49:32 2026 GMT Not After : May 2 01:54:32 2027 GMT Subject: CN=BBEB72278FFF2BE285B07868FEF5FEAA0354E872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e3:fc:a3:88:f4:b8:84:36:d5:f3:8e:61:47: 99:2d:ed:cf:d3:fc:05:f3:d0:d5:89:d7:e9:9d:0f: 16:d1:8a:d7:ac:81:05:77:c1:35:05:7c:68:89:95: 58:d0:8a:63:45:d9:21:9c:a9:bb:4c:c6:5f:b6:60: 4e:e9:8e:a4:8e:ec:ca:67:e3:6d:30:1d:d0:0b:44: 43:fd:e9:e7:5b:1a:f9:8f:95:79:06:4d:d8:79:94: 67:47:46:64:13:ee:f6:56:b8:28:c6:4c:d2:d4:08: 62:6f:77:cd:d6:25:4e:d9:8b:00:49:40:6b:34:1d: 17:6b:9a:9c:82:50:b7:e7:d1:3b:3d:05:73:67:ce: 97:33:ef:c2:9b:6f:87:7e:cc:6d:cf:16:5f:27:04: 84:71:38:6c:d6:8d:ae:14:ed:31:25:21:46:59:b7: a7:49:ec:70:dc:26:34:1c:14:22:98:bb:fc:1f:df: a0:39:aa:2f:49:be:aa:39:d5:f5:4a:64:f0:d5:64: 99:39:2a:8e:c0:d2:e1:18:08:4a:96:a7:a6:e2:a0: 51:a9:a1:4d:34:fa:99:c3:85:df:8a:b0:1d:56:d5: 3a:95:43:3b:49:01:3e:4e:b9:ee:f3:47:4a:b0:62: 8a:ff:62:d9:1b:e6:6f:93:6a:1e:5f:44:59:d1:5b: 68:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BB:EB:72:27:8F:FF:2B:E2:85:B0:78:68:FE:F5:FE:AA:03:54:E8:72 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.162.32.0/20 IPv6: 2402:a600::/32 Signature Algorithm: sha256WithRSAEncryption 6a:cc:31:b7:24:c3:f8:f5:4b:f7:79:d1:51:62:75:5d:d1:c2: 26:fa:13:d7:f3:0c:1b:76:da:c2:82:57:c7:94:77:24:61:29: 63:72:4c:f0:6e:b6:13:10:7e:9d:3d:33:59:b3:34:b1:fe:5a: f5:db:04:09:63:ae:4f:e3:e5:70:7b:99:4a:10:60:ad:8e:42: f8:c5:18:ac:75:56:45:01:51:48:b6:fb:70:a7:51:49:88:95: 70:4f:77:2e:58:03:22:46:af:e7:68:e4:bf:fe:d5:3f:81:e7: 15:76:05:8f:1a:13:d6:f0:91:04:42:ce:40:28:67:fd:3e:99: 4f:47:01:01:2b:7c:ab:22:dc:ab:07:59:0a:b9:82:c4:3f:79: 60:3d:1d:a2:38:61:80:e4:11:b1:3c:fb:d3:73:2e:33:2a:6e: 8e:54:a2:86:64:0e:3d:bd:2b:e6:53:24:f1:ee:19:ca:9e:4b: bc:12:a0:60:c2:81:4e:6a:f9:f1:3e:fc:49:89:e5:f9:ef:78: 31:64:56:6e:dd:d9:19:ba:43:ca:e0:e3:2b:60:4d:b7:2d:02: d8:c1:a4:9a:60:db:01:2d:e9:d3:67:10:6a:a7:65:2e:e5:17: 92:ae:bc:53:5c:ba:d1:f3:25:58:dc:71:10:cf:39:60:82:6c: e0:8d:ed:ce -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUYPuBGEsLYlZum9Ynu8Ou8sQ0n6owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDkzMloX DTI3MDUwMjAxNTQzMlowMzExMC8GA1UEAxMoQkJFQjcyMjc4RkZGMkJFMjg1QjA3 ODY4RkVGNUZFQUEwMzU0RTg3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKPj/KOI9LiENtXzjmFHmS3tz9P8BfPQ1YnX6Z0PFtGK16yBBXfBNQV8aImV WNCKY0XZIZypu0zGX7ZgTumOpI7symfjbTAd0AtEQ/3p51sa+Y+VeQZN2HmUZ0dG ZBPu9la4KMZM0tQIYm93zdYlTtmLAElAazQdF2uanIJQt+fROz0Fc2fOlzPvwptv h37Mbc8WXycEhHE4bNaNrhTtMSUhRlm3p0nscNwmNBwUIpi7/B/foDmqL0m+qjnV 9Upk8NVkmTkqjsDS4RgISpanpuKgUamhTTT6mcOF34qwHVbVOpVDO0kBPk657vNH SrBiiv9i2Rvmb5NqHl9EWdFbaFsCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLvrcieP/yvihbB4aP71/qoDVOhyMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2MzZDJmMmY4LTM1MTItNDNlNS1iZTE3LWIxMWI1OGY5NjA4My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jM2QyZjJm OC0zNTEyLTQzZTUtYmUxNy1iMTFiNThmOTYwODMvMC9CQkVCNzIyNzhGRkYyQkUy ODVCMDc4NjhGRUY1RkVBQTAzNTRFODcyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQEyqIgMA0EAgACMAcDBQAkAqYAMA0GCSqGSIb3DQEBCwUAA4IBAQBqzDG3JMP4 9Uv3edFRYnVd0cIm+hPX8wwbdtrCglfHlHckYSljckzwbrYTEH6dPTNZszSx/lr1 2wQJY65P4+Vwe5lKEGCtjkL4xRisdVZFAVFItvtwp1FJiJVwT3cuWAMiRq/naOS/ /tU/gecVdgWPGhPW8JEEQs5AKGf9PplPRwEBK3yrItyrB1kKuYLEP3lgPR2iOGGA 5BGxPPvTcy4zKm6OVKKGZA49vSvmUyTx7hnKnku8EqBgwoFOavnxPvxJieX573gx ZFZu3dkZukPK4OMrYE23LQLYwaSaYNsBLenTZxBqp2Uu5ReSrrxTXLrR8yVY3HEQ zzlggmzgje3O -----END CERTIFICATE-----Generated at Tue May 12 22:16:29 2026 by rpki-client