$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer File: BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer (raw, json) Hash identifier: EZUKvnxGzX0NrzS6Zt+TYRY4x/EQHn/31mSKUw96N0c= Subject key identifier: BE:D9:0B:E7:E4:3F:70:BE:A2:E6:88:6B:13:E0:46:FB:39:73:6D:7C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 67F8C8E0F2FB2247B27152DD0E5F814FE42EC946 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:04:58 +0000 Certificate not after: Sun 02 May 2027 01:09:58 +0000 Subordinate resources: IP: 103.88.90.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f8:c8:e0:f2:fb:22:47:b2:71:52:dd:0e:5f:81:4f:e4:2e:c9:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:04:58 2026 GMT Not After : May 2 01:09:58 2027 GMT Subject: CN=BED90BE7E43F70BEA2E6886B13E046FB39736D7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:51:8b:c7:34:80:ca:4c:ff:ce:66:d2:b5: b7:c2:aa:f7:94:6a:d6:9c:d2:8c:3f:c9:d6:21:9e: 49:cc:d0:c3:f5:2a:4f:f5:8b:b2:5d:cb:30:66:4e: af:5c:5e:2b:e1:00:c5:4b:97:ef:cb:be:d9:5a:9a: e3:be:c6:f7:43:2a:88:ef:e1:13:e4:85:33:63:bf: 9e:18:67:bf:a4:50:b3:b2:77:ab:41:15:4a:32:41: e4:a7:c9:01:89:15:3c:49:66:3e:4c:40:54:37:1f: dd:d0:70:f7:94:a5:ca:11:14:54:37:5b:5a:2f:fe: ae:a1:d9:15:fc:0c:98:5f:5d:e1:26:ed:20:47:2e: 32:06:1b:d6:41:ef:3b:53:4f:e4:ce:04:c1:01:f7: 64:21:58:a4:aa:27:22:66:35:17:cc:16:6f:19:50: e5:2f:0e:53:6c:2f:46:87:c9:a3:68:33:91:45:1e: 7e:e6:c2:1c:fb:62:79:e5:1e:0d:6c:0d:14:b0:ac: b4:f9:78:79:00:39:eb:e4:01:b9:8c:cc:89:5c:75: 93:6d:c8:33:da:cc:1d:59:94:6a:f1:6f:b7:97:74: 05:7b:b1:c9:75:33:62:b6:69:76:52:af:c8:40:8b: fa:99:b6:42:da:6e:b5:b7:7b:dc:28:c1:e0:5d:db: be:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:D9:0B:E7:E4:3F:70:BE:A2:E6:88:6B:13:E0:46:FB:39:73:6D:7C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.88.90.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:80:44:5d:63:09:8c:20:93:ca:a2:64:0f:9d:40:63:4d:e7: 3d:c9:da:ea:ef:d8:84:b0:00:89:d0:ec:67:26:75:b1:58:b5: 49:96:3c:4f:a2:73:34:32:e5:d5:62:0d:a5:f1:ae:fb:23:08: d7:97:47:99:23:06:2a:54:2c:41:50:07:9d:0a:d0:c3:4d:c6: 0e:de:47:ac:90:04:7d:11:1d:e1:e9:f3:3d:b3:ea:4e:73:98: 5a:c8:38:c0:92:b8:13:c8:5a:d9:df:b0:ba:40:da:13:2e:5c: f6:bb:7b:12:87:7b:4f:d3:a0:af:b9:13:0b:f3:f2:bc:b7:ee: 78:96:0c:bc:f6:79:84:e1:39:ff:63:2f:e8:da:2c:7f:73:94: c8:7d:9c:db:69:f1:65:93:46:bb:f2:30:f9:9e:ec:91:25:a5: a3:6b:cc:cc:a9:18:99:54:24:f6:95:84:a1:c0:a9:ff:89:97: 12:33:38:3d:e0:17:2c:52:d3:00:12:85:3f:4a:88:17:69:89: f4:d2:73:03:09:03:55:a6:74:25:4c:60:47:82:0e:ce:96:29: 27:88:08:2c:c7:79:20:09:43:3b:82:cf:0d:4c:a6:2d:a8:9e: a2:a4:b1:e7:3d:8e:e0:81:34:ad:09:8d:50:2e:00:d4:e4:14: bf:b8:15:29 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUZ/jI4PL7IkeycVLdDl+BT+QuyUYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDQ1OFoX DTI3MDUwMjAxMDk1OFowMzExMC8GA1UEAxMoQkVEOTBCRTdFNDNGNzBCRUEyRTY4 ODZCMTNFMDQ2RkIzOTczNkQ3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLbUYvHNIDKTP/OZtK1t8Kq95Rq1pzSjD/J1iGeSczQw/UqT/WLsl3LMGZO r1xeK+EAxUuX78u+2Vqa477G90MqiO/hE+SFM2O/nhhnv6RQs7J3q0EVSjJB5KfJ AYkVPElmPkxAVDcf3dBw95SlyhEUVDdbWi/+rqHZFfwMmF9d4SbtIEcuMgYb1kHv O1NP5M4EwQH3ZCFYpKonImY1F8wWbxlQ5S8OU2wvRofJo2gzkUUefubCHPtieeUe DWwNFLCstPl4eQA56+QBuYzMiVx1k23IM9rMHVmUavFvt5d0BXuxyXUzYrZpdlKv yECL+pm2Qtputbd73CjB4F3bvlECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL7ZC+fkP3C+ouaIaxPgRvs5c218MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdlOTE4MDllLWRkNDktNGM1Mi1iMTFmLTJhNTE4YzNhYTg1Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83ZTkxODA5 ZS1kZDQ5LTRjNTItYjExZi0yYTUxOGMzYWE4NTYvMC9CRUQ5MEJFN0U0M0Y3MEJF QTJFNjg4NkIxM0UwNDZGQjM5NzM2RDdDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ1haMA0GCSqGSIb3DQEBCwUAA4IBAQAbgERdYwmMIJPKomQPnUBjTec9ydrq 79iEsACJ0OxnJnWxWLVJljxPonM0MuXVYg2l8a77IwjXl0eZIwYqVCxBUAedCtDD TcYO3keskAR9ER3h6fM9s+pOc5hayDjAkrgTyFrZ37C6QNoTLlz2u3sSh3tP06Cv uRML8/K8t+54lgy89nmE4Tn/Yy/o2ix/c5TIfZzbafFlk0a78jD5nuyRJaWja8zM qRiZVCT2lYShwKn/iZcSMzg94BcsUtMAEoU/SogXaYn00nMDCQNVpnQlTGBHgg7O likniAgsx3kgCUM7gs8NTKYtqJ6ipLHnPY7ggTStCY1QLgDU5BS/uBUp -----END CERTIFICATE-----Generated at Tue May 12 22:32:50 2026 by rpki-client