$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer File: BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer (raw, json) Hash identifier: pJYQoxmVFlCPuuTTomtOpRw/iwW1mXldyDILOPKwxek= Subject key identifier: BC:0B:28:86:85:FD:6E:33:D4:BC:07:12:27:4D:C0:A4:BB:8C:89:58 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 17AF64613A0371AD6D1231EAE530F64C362D3B02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:32:28 +0000 Certificate not after: Sun 02 May 2027 02:37:28 +0000 Subordinate resources: IP: 103.73.235.0/24 IP: 103.82.6.0/24 IP: 2001:df4:b200::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:af:64:61:3a:03:71:ad:6d:12:31:ea:e5:30:f6:4c:36:2d:3b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:32:28 2026 GMT Not After : May 2 02:37:28 2027 GMT Subject: CN=BC0B288685FD6E33D4BC0712274DC0A4BB8C8958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2d:de:f1:0e:eb:c3:4e:f5:05:4b:23:4d:d9: 50:b6:a1:12:ac:01:9f:83:e0:1f:cd:08:91:c1:78: d1:9a:97:fb:eb:10:7b:f4:b0:de:87:e2:26:2e:d1: 59:63:97:85:d7:8c:7d:c4:f3:55:13:07:e1:b1:4b: ae:b5:28:32:fc:7b:ad:8d:26:8c:03:c8:9c:1e:48: a5:20:a2:c3:0e:19:93:2b:8d:18:1c:1f:60:80:cf: 21:4c:05:05:a8:db:19:61:a3:2d:fb:7b:ac:a0:0a: ab:bb:a2:6e:e5:99:7e:1e:9e:53:b1:4b:ec:9a:ed: ae:f8:07:a5:7e:5e:f3:af:d4:91:60:5f:93:f7:64: 49:b8:c3:d1:aa:66:9b:e5:68:32:37:28:21:91:b4: e8:d6:8c:ae:c4:38:2c:9f:ef:e0:1a:f0:31:41:9d: 9c:ab:23:56:c8:fa:11:be:dc:7a:1b:b7:f4:44:fb: f8:0a:32:57:50:d4:e4:3a:e8:e7:42:12:ef:b0:67: dc:05:f3:d2:30:30:95:25:2b:dd:8f:9b:58:75:6f: b1:04:60:56:b7:5c:09:41:c6:35:35:b9:a4:90:a9: fa:44:c6:38:a0:f4:4c:be:26:0a:0d:f3:52:48:34: fc:24:de:0a:76:cb:07:54:3b:73:bf:b6:9f:f1:cf: 38:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BC:0B:28:86:85:FD:6E:33:D4:BC:07:12:27:4D:C0:A4:BB:8C:89:58 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.73.235.0/24 103.82.6.0/24 IPv6: 2001:df4:b200::/48 Signature Algorithm: sha256WithRSAEncryption 39:91:3f:cf:2d:bb:e4:5b:3e:8b:58:44:ff:76:cf:20:24:5f: 15:14:94:97:94:ea:fc:cc:c6:79:fb:d6:35:56:55:6d:12:83: 70:d4:57:8d:40:36:39:30:21:6a:bb:d7:2b:d4:ed:17:ae:05: b5:62:2e:9f:62:96:e3:62:2e:82:b5:84:9f:39:b7:13:85:4b: 97:74:db:bd:2d:c6:7f:eb:ae:8d:f5:0a:c1:4e:6a:58:0d:f3: ba:28:fc:eb:43:a0:14:4f:eb:57:93:8c:4d:35:1d:f4:d7:8c: 88:59:84:3b:86:41:f7:a9:3f:b0:17:5f:5b:00:f1:40:9b:56: 9d:0d:e0:e8:a0:46:2a:47:3c:8a:c3:d7:97:89:21:a5:1b:95: f0:d9:30:e8:53:96:b4:db:07:28:e5:cf:f7:34:57:84:56:61: e8:80:8f:71:be:29:4d:61:f7:ad:39:1e:58:7e:09:7c:37:22: 22:3a:1a:c9:11:ae:17:bd:8c:65:48:f0:39:c3:ca:76:53:0b: 74:7c:27:4a:d7:9b:96:c2:d1:8f:20:8a:ae:82:d9:4e:61:2b: 8c:07:c3:f4:f7:8b:66:46:8c:63:94:e9:26:99:3e:3c:2c:39: fb:33:8b:28:e2:8c:c6:33:79:de:a0:c4:78:91:31:01:22:f7: ea:ca:d7:31 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUF69kYToDca1tEjHq5TD2TDYtOwIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzIyOFoX DTI3MDUwMjAyMzcyOFowMzExMC8GA1UEAxMoQkMwQjI4ODY4NUZENkUzM0Q0QkMw NzEyMjc0REMwQTRCQjhDODk1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKwt3vEO68NO9QVLI03ZULahEqwBn4PgH80IkcF40ZqX++sQe/Sw3ofiJi7R WWOXhdeMfcTzVRMH4bFLrrUoMvx7rY0mjAPInB5IpSCiww4ZkyuNGBwfYIDPIUwF BajbGWGjLft7rKAKq7uibuWZfh6eU7FL7JrtrvgHpX5e86/UkWBfk/dkSbjD0apm m+VoMjcoIZG06NaMrsQ4LJ/v4BrwMUGdnKsjVsj6Eb7cehu39ET7+AoyV1DU5Dro 50IS77Bn3AXz0jAwlSUr3Y+bWHVvsQRgVrdcCUHGNTW5pJCp+kTGOKD0TL4mCg3z Ukg0/CTeCnbLB1Q7c7+2n/HPOOsCAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLwLKIaF/W4z1LwHEidNwKS7jIlYMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2YyNzg4Yzg4LWNhMmMtNGZhMC1hMzVmLTNlN2ExMDg4NzIyOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mMjc4OGM4 OC1jYTJjLTRmYTAtYTM1Zi0zZTdhMTA4ODcyMjgvMC9CQzBCMjg4Njg1RkQ2RTMz RDRCQzA3MTIyNzREQzBBNEJCOEM4OTU4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQAZ0nrAwQAZ1IGMA8EAgACMAkDBwAgAQ30sgAwDQYJKoZIhvcNAQELBQADggEB ADmRP88tu+RbPotYRP92zyAkXxUUlJeU6vzMxnn71jVWVW0Sg3DUV41ANjkwIWq7 1yvU7ReuBbViLp9iluNiLoK1hJ85txOFS5d0270txn/rro31CsFOalgN87oo/OtD oBRP61eTjE01HfTXjIhZhDuGQfepP7AXX1sA8UCbVp0N4OigRipHPIrD15eJIaUb lfDZMOhTlrTbByjlz/c0V4RWYeiAj3G+KU1h9605Hlh+CXw3IiI6GskRrhe9jGVI 8DnDynZTC3R8J0rXm5bC0Y8giq6C2U5hK4wHw/T3i2ZGjGOU6SaZPjwsOfsziyji jMYzed6gxHiRMQEi9+rK1zE= -----END CERTIFICATE-----Generated at Tue May 12 22:02:56 2026 by rpki-client