$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer File: BE674235014841C34B81D477A887E851CCB5DE20.cer (raw, json) Hash identifier: NhVY6b0oF+gp74i4v7yw2ZLWGbrfZTvgU473799kHb4= Subject key identifier: BE:67:42:35:01:48:41:C3:4B:81:D4:77:A8:87:E8:51:CC:B5:DE:20 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 099C360C28AA4FCE65C9BB1397AFE87B1F81FC1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft caRepository: rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:37:17 +0000 Certificate not after: Sun 02 May 2027 00:42:17 +0000 Subordinate resources: IP: 103.169.32.0/23 IP: 2001:df2:f340::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:9c:36:0c:28:aa:4f:ce:65:c9:bb:13:97:af:e8:7b:1f:81:fc:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:37:17 2026 GMT Not After : May 2 00:42:17 2027 GMT Subject: CN=BE674235014841C34B81D477A887E851CCB5DE20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c4:13:f0:60:de:be:85:f1:ec:b1:bd:15:04: 20:ca:47:07:23:3c:75:55:c4:8c:b3:20:a9:ba:70: a5:22:7c:4d:ef:ca:e1:5d:9b:22:20:f3:04:e7:8c: 8d:08:b3:7d:02:cb:40:e5:80:24:3f:fa:56:31:5d: 36:00:19:3b:af:36:27:84:6a:47:c6:75:9d:96:1f: d7:46:5a:e8:76:cc:ad:a0:d3:32:9c:84:2f:d1:c8: 92:f0:ff:f2:82:08:7a:ee:36:f1:7f:55:c4:ec:05: d9:fe:31:ba:e4:7e:2b:58:5a:c5:55:5b:5b:09:75: b5:7b:73:94:ba:5b:3f:23:9a:7a:04:c0:43:9b:c3: 06:d1:c8:ca:80:ae:77:6d:a9:05:f7:a0:f1:85:9a: 10:a7:ad:e2:db:b4:1d:56:ce:51:7c:60:fd:7b:74: 48:e6:16:c2:e8:24:f2:15:04:df:56:7d:30:d7:ca: 88:88:e8:a8:b6:ee:a7:7c:ee:de:29:35:0e:5a:fb: 9e:b3:3f:79:80:b6:42:e8:68:0f:39:e9:04:b3:c1: 31:1a:69:08:49:57:cd:68:e8:d7:60:b4:a5:81:a9: 0e:a8:2c:65:79:5f:d3:91:65:10:9d:df:6f:97:3a: 6d:57:33:9c:1b:0d:c0:6c:44:6c:6c:25:9c:57:df: 3c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:67:42:35:01:48:41:C3:4B:81:D4:77:A8:87:E8:51:CC:B5:DE:20 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.32.0/23 IPv6: 2001:df2:f340::/48 Signature Algorithm: sha256WithRSAEncryption 09:04:39:e1:39:9d:6b:18:ce:f6:03:a5:21:22:d9:32:b5:42: 93:97:31:de:cc:90:8e:5d:b4:af:d6:17:76:53:85:a6:d2:6b: 9d:eb:6f:71:a4:8b:b3:d7:55:9a:f9:d1:a0:8a:2c:0c:db:bc: 4f:e7:9d:4b:95:8e:da:e5:e4:4f:7b:da:5f:c9:3d:f8:ed:2b: ad:eb:7a:ca:36:e6:03:5a:7d:b6:3a:29:2b:98:b5:18:e6:31: d5:75:aa:e4:36:82:f5:1e:5b:00:7a:07:a5:35:c4:73:f0:af: 0f:40:c4:53:c7:91:9c:b1:8e:12:0f:87:76:b1:8b:d6:13:8c: 32:c0:55:b6:c0:1e:32:98:9b:4a:20:de:44:63:a4:1c:bc:05: e9:6d:f3:ff:08:39:f2:b9:e2:8c:e2:97:57:9a:4f:a8:15:92: a8:a0:e3:45:49:5d:1d:cd:87:99:74:5c:20:f0:95:68:f5:f6: 18:f5:3b:82:96:0c:e6:02:29:8f:8d:94:88:29:e0:c8:9f:29: 7e:b3:a8:f9:9a:50:35:1f:22:f3:49:48:72:8a:f2:1c:26:ec: 03:ee:ff:1c:2a:d3:94:4c:c4:b2:31:10:ed:cc:50:9f:63:cf: 98:23:c9:74:4a:b2:8d:c8:12:6d:04:c8:d8:e9:72:93:0d:0a: 4f:5c:50:ab -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUCZw2DCiqT85lybsTl6/oex+B/BwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzcxN1oX DTI3MDUwMjAwNDIxN1owMzExMC8GA1UEAxMoQkU2NzQyMzUwMTQ4NDFDMzRCODFE NDc3QTg4N0U4NTFDQ0I1REUyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKHEE/Bg3r6F8eyxvRUEIMpHByM8dVXEjLMgqbpwpSJ8Te/K4V2bIiDzBOeM jQizfQLLQOWAJD/6VjFdNgAZO682J4RqR8Z1nZYf10Za6HbMraDTMpyEL9HIkvD/ 8oIIeu428X9VxOwF2f4xuuR+K1haxVVbWwl1tXtzlLpbPyOaegTAQ5vDBtHIyoCu d22pBfeg8YWaEKet4tu0HVbOUXxg/Xt0SOYWwugk8hUE31Z9MNfKiIjoqLbup3zu 3ik1Dlr7nrM/eYC2QuhoDznpBLPBMRppCElXzWjo12C0pYGpDqgsZXlf05FlEJ3f b5c6bVcznBsNwGxEbGwlnFffPMMCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL5nQjUBSEHDS4HUd6iH6FHMtd4gMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzU3MGMxYmFiLTEzZjQtNGNlNi04NWY3LWMzODg3MzdmNmQxOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81NzBjMWJh Yi0xM2Y0LTRjZTYtODVmNy1jMzg4NzM3ZjZkMTkvMC9CRTY3NDIzNTAxNDg0MUMz NEI4MUQ0NzdBODg3RTg1MUNDQjVERTIwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ6kgMA8EAgACMAkDBwAgAQ3y80AwDQYJKoZIhvcNAQELBQADggEBAAkEOeE5 nWsYzvYDpSEi2TK1QpOXMd7MkI5dtK/WF3ZThabSa53rb3Gki7PXVZr50aCKLAzb vE/nnUuVjtrl5E972l/JPfjtK63reso25gNafbY6KSuYtRjmMdV1quQ2gvUeWwB6 B6U1xHPwrw9AxFPHkZyxjhIPh3axi9YTjDLAVbbAHjKYm0og3kRjpBy8Belt8/8I OfK54ozil1eaT6gVkqig40VJXR3Nh5l0XCDwlWj19hj1O4KWDOYCKY+NlIgp4Mif KX6zqPmaUDUfIvNJSHKK8hwm7APu/xwq05RMxLIxEO3MUJ9jz5gjyXRKso3IEm0E yNjpcpMNCk9cUKs= -----END CERTIFICATE-----Generated at Wed May 13 02:25:59 2026 by rpki-client