$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/BC6E7AFA7113190200F775C4928A7567DFBE22BB.cer File: BC6E7AFA7113190200F775C4928A7567DFBE22BB.cer (raw, json) Hash identifier: H7trPnTcxmJgEuF8lx9bzw9jvk1QMJgb82DGlyjVo4w= Subject key identifier: BC:6E:7A:FA:71:13:19:02:00:F7:75:C4:92:8A:75:67:DF:BE:22:BB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 01309559AD87553FBDABDFAF6B36B7D6E0EA1408 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:34:29 +0000 Certificate not after: Sun 02 May 2027 01:39:29 +0000 Subordinate resources: IP: 103.170.32.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:30:95:59:ad:87:55:3f:bd:ab:df:af:6b:36:b7:d6:e0:ea:14:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:34:29 2026 GMT Not After : May 2 01:39:29 2027 GMT Subject: CN=BC6E7AFA7113190200F775C4928A7567DFBE22BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:78:98:f2:a7:7a:24:13:e9:dc:1d:6a:c3:cd: 83:7a:d5:4b:a4:5d:2e:6f:9f:10:a9:57:e9:6e:d9: b0:b0:38:47:f5:b5:17:d4:c2:ea:b4:0f:df:80:a4: 3a:12:37:15:e9:31:e4:68:98:82:7d:de:77:a1:de: eb:90:f1:37:ce:0e:9c:0d:48:67:6f:dd:90:3b:5d: bb:97:0e:69:34:b5:f3:1e:07:7f:a7:27:96:6f:ea: 16:d7:d5:21:ad:30:40:cc:27:f4:59:6d:a0:8f:e4: 08:0b:78:9b:85:9f:a0:21:c6:8a:86:6c:fc:72:7c: 30:d3:67:58:d3:2c:b2:26:48:a5:90:04:8a:ed:77: e7:e2:43:b6:29:e6:f5:2a:e1:7b:db:f7:c0:96:93: 42:3f:a1:61:37:3e:17:d2:23:39:f4:5e:df:d9:8a: 40:d2:89:60:09:d5:f7:fd:2e:0e:35:66:ce:e2:dc: 68:7d:dd:f3:86:bd:bc:1f:a1:71:1d:ef:84:17:27: 11:9c:52:49:34:e6:7f:ff:57:24:26:b6:62:2c:c9: a1:6c:53:22:cc:8a:f7:7c:ef:a7:54:9a:ed:7e:c8: ed:5a:09:f1:26:67:d8:de:1c:f0:2e:f7:e5:95:d8: d8:a4:b8:18:53:ad:47:fa:3d:b7:b3:0a:16:2c:e6: d1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BC:6E:7A:FA:71:13:19:02:00:F7:75:C4:92:8A:75:67:DF:BE:22:BB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/BC6E7AFA7113190200F775C4928A7567DFBE22BB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.32.0/23 Signature Algorithm: sha256WithRSAEncryption 06:e3:ae:8e:75:3b:1a:93:52:fd:3e:f7:f6:9a:a9:e0:58:89: 41:76:d0:2c:82:a4:59:6f:09:72:7b:fc:64:7c:d8:b7:90:e5: ef:9b:da:c2:db:24:4e:26:6f:4e:45:f4:00:55:c0:29:f1:c8: 87:fd:b4:a8:65:bd:30:2e:c6:13:eb:e4:1e:0a:11:bc:55:09: a9:35:46:97:2b:81:0a:f9:8a:bb:33:58:0b:19:3e:c9:fb:08: 2f:5d:e0:2b:41:f7:f1:cc:60:d1:1f:16:43:61:ae:4f:ee:d3: 03:91:79:e2:7c:c2:f5:95:49:8f:d0:d3:68:76:63:5c:32:07: 2e:5d:ae:4e:7a:b7:90:14:58:80:5c:34:06:b0:26:8a:92:5e: 62:70:17:c4:60:3c:dc:d2:17:d7:e5:f4:35:9b:45:10:ed:67: 39:98:9e:50:2b:2a:bd:39:16:b8:45:1c:38:e0:95:e4:b9:df: 2e:f3:be:77:9f:2c:cc:09:62:84:dc:c4:e3:c0:43:30:dd:1e: a9:a9:01:e5:38:22:6e:f3:61:d8:70:82:60:dc:f0:6c:16:3b: 40:1e:24:ed:85:04:1b:14:0c:44:92:37:b2:e5:e5:68:ad:8b: 1c:71:f4:b2:87:98:dc:f9:b7:68:d0:46:77:47:a8:fa:c1:f9: fd:5e:f8:9e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUATCVWa2HVT+9q9+vaza31uDqFAgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzQyOVoX DTI3MDUwMjAxMzkyOVowMzExMC8GA1UEAxMoQkM2RTdBRkE3MTEzMTkwMjAwRjc3 NUM0OTI4QTc1NjdERkJFMjJCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOh4mPKneiQT6dwdasPNg3rVS6RdLm+fEKlX6W7ZsLA4R/W1F9TC6rQP34Ck OhI3Fekx5GiYgn3ed6He65DxN84OnA1IZ2/dkDtdu5cOaTS18x4Hf6cnlm/qFtfV Ia0wQMwn9FltoI/kCAt4m4WfoCHGioZs/HJ8MNNnWNMssiZIpZAEiu135+JDtinm 9Srhe9v3wJaTQj+hYTc+F9IjOfRe39mKQNKJYAnV9/0uDjVmzuLcaH3d84a9vB+h cR3vhBcnEZxSSTTmf/9XJCa2YizJoWxTIsyK93zvp1Sa7X7I7VoJ8SZn2N4c8C73 5ZXY2KS4GFOtR/o9t7MKFizm0UMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLxuevpxExkCAPd1xJKKdWffviK7MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FhZTYzNzllLWI4ODYtNDM2ZS1iMGVkLTNhYWZmOWMwODUwMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hYWU2Mzc5 ZS1iODg2LTQzNmUtYjBlZC0zYWFmZjljMDg1MDEvMC9CQzZFN0FGQTcxMTMxOTAy MDBGNzc1QzQ5MjhBNzU2N0RGQkUyMkJCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6ogMA0GCSqGSIb3DQEBCwUAA4IBAQAG466OdTsak1L9Pvf2mqngWIlBdtAs gqRZbwlye/xkfNi3kOXvm9rC2yROJm9ORfQAVcAp8ciH/bSoZb0wLsYT6+QeChG8 VQmpNUaXK4EK+Yq7M1gLGT7J+wgvXeArQffxzGDRHxZDYa5P7tMDkXnifML1lUmP 0NNodmNcMgcuXa5OereQFFiAXDQGsCaKkl5icBfEYDzc0hfX5fQ1m0UQ7Wc5mJ5Q Kyq9ORa4RRw44JXkud8u8753nyzMCWKE3MTjwEMw3R6pqQHlOCJu82HYcIJg3PBs FjtAHiTthQQbFAxEkjey5eVorYsccfSyh5jc+bdo0EZ3R6j6wfn9Xvie -----END CERTIFICATE-----Generated at Tue May 12 22:32:46 2026 by rpki-client