$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer File: BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer (raw, json) Hash identifier: axSW2SLuzfwb7Z670mar0jMZk8qtNCzbiCifl4ywRHs= Subject key identifier: BE:38:0E:14:06:6F:8F:31:40:28:FD:06:15:B2:AE:EC:CD:1B:F3:B3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4235E9C21D7BF865A9C55653D830A5D0367C7031 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:39:01 +0000 Certificate not after: Sun 02 May 2027 01:44:01 +0000 Subordinate resources: IP: 103.122.2.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:35:e9:c2:1d:7b:f8:65:a9:c5:56:53:d8:30:a5:d0:36:7c:70:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:39:01 2026 GMT Not After : May 2 01:44:01 2027 GMT Subject: CN=BE380E14066F8F314028FD0615B2AEECCD1BF3B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:14:35:78:48:4c:39:fb:a6:d2:f4:58:b1:07: 5c:d9:42:3e:c7:75:2b:e8:c5:59:7f:80:2a:67:b4: e2:72:d4:a6:ca:cb:90:73:ad:24:f6:fa:6b:f1:ec: 2f:ca:a1:de:57:3e:b5:48:ba:95:34:16:66:2e:5c: 8d:54:aa:49:d5:36:e0:fe:1d:3f:b4:f8:9e:b5:46: 9c:39:c7:1e:c4:ac:c4:ae:f0:b2:f5:85:aa:ae:5a: 51:9d:37:35:78:8d:26:7a:82:63:43:44:d1:04:21: de:1e:44:80:d6:71:71:80:54:98:fd:12:b8:d0:70: a4:11:a6:ef:1a:b1:cf:fd:e3:77:25:3f:d0:06:7a: f8:d4:ec:b5:08:e2:cc:d0:4c:83:6a:8d:95:1a:5b: b5:51:d3:9b:eb:d4:af:c9:2b:a3:ab:ce:90:dd:46: a2:99:4a:1a:72:37:f4:ca:fe:f6:ed:1e:b1:26:cf: 59:ed:a3:e4:3b:c7:0c:88:17:3a:cc:e8:6e:45:63: f9:69:40:8f:23:18:3c:0e:28:4d:57:88:fc:e4:ed: 09:03:a6:d8:a4:1d:29:ed:cc:75:18:40:0c:b8:13: 07:cb:c7:33:37:74:1e:de:5c:ea:a5:cf:af:5e:bb: 61:9d:41:69:18:3c:7e:8c:c9:53:14:dd:25:ca:a0: e4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:38:0E:14:06:6F:8F:31:40:28:FD:06:15:B2:AE:EC:CD:1B:F3:B3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.122.2.0/23 Signature Algorithm: sha256WithRSAEncryption 76:9b:bf:24:b4:89:f8:f8:4d:7b:7e:17:b9:d2:04:28:a5:e6: 0a:4f:ce:58:ab:18:88:2c:24:71:23:8c:ce:5c:13:ed:bb:dd: a8:1f:5b:d3:fc:2c:48:be:c5:c6:5b:8c:59:4e:dd:bc:f5:d2: 3e:d0:10:2f:14:da:16:90:4c:de:3f:05:55:9e:df:df:d3:13: a4:10:e1:3a:af:36:8b:c9:84:f9:f2:ae:8b:79:9d:9b:85:37: ad:ce:64:19:af:58:a3:e1:7b:78:ba:05:30:74:28:24:a7:b2: 3a:45:ea:27:ff:4e:c6:c3:b3:5e:0b:60:d9:b8:07:86:78:60: f1:57:4e:41:c0:40:40:6e:b7:1f:0f:71:0f:e1:ff:e8:87:d7: bb:2f:20:aa:7e:a6:0e:cf:01:37:40:97:ff:e6:79:21:4c:fa: 58:d0:04:4c:49:22:6e:b4:4f:ec:2a:f7:92:83:21:64:4d:95: b0:eb:40:c0:89:80:47:db:23:d1:ff:e8:46:15:89:78:b9:6a: 16:d3:c2:83:d0:58:63:c0:a9:80:54:86:d6:53:b0:c8:db:c2: 1c:d0:44:1e:b2:0d:e8:83:d1:b3:3f:41:18:65:6d:51:38:92: 20:9e:80:b2:30:4b:b5:b3:96:15:97:81:a2:6a:2b:89:05:08: c7:39:c3:3e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUQjXpwh17+GWpxVZT2DCl0DZ8cDEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzkwMVoX DTI3MDUwMjAxNDQwMVowMzExMC8GA1UEAxMoQkUzODBFMTQwNjZGOEYzMTQwMjhG RDA2MTVCMkFFRUNDRDFCRjNCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsUNXhITDn7ptL0WLEHXNlCPsd1K+jFWX+AKme04nLUpsrLkHOtJPb6a/Hs L8qh3lc+tUi6lTQWZi5cjVSqSdU24P4dP7T4nrVGnDnHHsSsxK7wsvWFqq5aUZ03 NXiNJnqCY0NE0QQh3h5EgNZxcYBUmP0SuNBwpBGm7xqxz/3jdyU/0AZ6+NTstQji zNBMg2qNlRpbtVHTm+vUr8kro6vOkN1GoplKGnI39Mr+9u0esSbPWe2j5DvHDIgX OszobkVj+WlAjyMYPA4oTVeI/OTtCQOm2KQdKe3MdRhADLgTB8vHMzd0Ht5c6qXP r167YZ1BaRg8fozJUxTdJcqg5C8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL44DhQGb48xQCj9BhWyruzNG/OzMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2IyMTk1NWYwLTRiNDAtNGMzYi05ZmZmLTlmOTI1OGMzOTc1YS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iMjE5NTVm MC00YjQwLTRjM2ItOWZmZi05ZjkyNThjMzk3NWEvMC9CRTM4MEUxNDA2NkY4RjMx NDAyOEZEMDYxNUIyQUVFQ0NEMUJGM0IzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ3oCMA0GCSqGSIb3DQEBCwUAA4IBAQB2m78ktIn4+E17fhe50gQopeYKT85Y qxiILCRxI4zOXBPtu92oH1vT/CxIvsXGW4xZTt289dI+0BAvFNoWkEzePwVVnt/f 0xOkEOE6rzaLyYT58q6LeZ2bhTetzmQZr1ij4Xt4ugUwdCgkp7I6Reon/07Gw7Ne C2DZuAeGeGDxV05BwEBAbrcfD3EP4f/oh9e7LyCqfqYOzwE3QJf/5nkhTPpY0ARM SSJutE/sKveSgyFkTZWw60DAiYBH2yPR/+hGFYl4uWoW08KD0FhjwKmAVIbWU7DI 28Ic0EQesg3og9GzP0EYZW1ROJIgnoCyMEu1s5YVl4GiaiuJBQjHOcM+ -----END CERTIFICATE-----Generated at Tue May 12 22:39:20 2026 by rpki-client