$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/BF072074B801AFE1292270FB7A3E090A276EB893.cer File: BF072074B801AFE1292270FB7A3E090A276EB893.cer (raw, json) Hash identifier: 8H1K4l49KKmpuuptME+Qt7UXfvd+1iBIM2SrumumdLw= Subject key identifier: BF:07:20:74:B8:01:AF:E1:29:22:70:FB:7A:3E:09:0A:27:6E:B8:93 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7DC439BA934F1128D56FE4A7AD9A03C6D8A13CBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:58:33 +0000 Certificate not after: Sun 02 May 2027 00:03:33 +0000 Subordinate resources: IP: 210.79.141.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:c4:39:ba:93:4f:11:28:d5:6f:e4:a7:ad:9a:03:c6:d8:a1:3c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:58:33 2026 GMT Not After : May 2 00:03:33 2027 GMT Subject: CN=BF072074B801AFE1292270FB7A3E090A276EB893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bc:cc:6e:47:89:8d:c1:f4:82:7d:ac:d0:c5: 54:83:10:5e:b8:25:32:45:03:3b:8c:e9:98:70:9f: df:6a:6f:9f:af:aa:b4:01:4f:9e:39:80:4c:2b:e9: 6f:43:96:f6:cf:66:29:b1:ad:27:6a:ba:ec:d2:3e: 9f:2f:55:59:ef:b3:cd:8c:fe:ee:00:ec:83:38:ab: e9:3a:39:5d:48:7f:a9:c4:94:b0:b3:ab:76:63:db: 0d:a5:7c:cd:24:1c:45:9e:c3:c5:7e:d0:23:99:72: 60:46:3f:49:ca:69:cb:2b:40:e1:00:e2:93:ab:5e: ee:34:ab:27:d4:1a:d5:17:c8:33:82:fe:e0:1d:69: 15:e4:67:04:ce:04:b6:7d:b2:4a:e0:d4:bf:a1:5e: 98:1c:ec:e7:6d:98:27:49:03:27:3d:2a:e8:b8:65: b2:a0:b7:16:36:42:b4:c6:c0:14:a4:ca:9c:31:57: a3:77:d5:da:bb:13:a4:4a:c4:54:7d:73:e0:75:83: 6d:73:9e:6e:d1:d8:10:22:e4:d9:0b:d8:33:00:a8: 42:7e:bc:73:04:60:c6:4b:40:fa:9a:ec:46:fc:1c: ed:2b:10:17:bb:b0:72:5a:84:37:26:96:fb:56:2d: 51:da:d2:e1:54:07:a3:b3:79:7b:3c:dd:2d:47:82: 4f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BF:07:20:74:B8:01:AF:E1:29:22:70:FB:7A:3E:09:0A:27:6E:B8:93 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.79.141.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:d0:1f:36:db:74:04:33:c1:10:11:9a:1f:8b:75:f4:fe:85: a5:13:0e:83:b2:59:ee:3d:f3:c1:29:08:55:a0:31:67:aa:c5: 50:6f:a8:ae:86:cf:9e:4a:29:06:ae:22:84:63:98:12:74:9c: b8:dd:82:cd:81:c8:0e:a1:a8:8e:61:69:77:17:50:4f:bc:b6: ed:56:f6:b7:96:e1:3e:b5:98:6e:28:06:3a:d9:80:0e:04:59: 26:4f:74:3c:6e:51:6b:bd:4b:b4:e3:30:36:27:44:07:74:3d: af:55:89:c5:4c:46:8b:5a:90:17:cb:9b:05:b3:a6:0c:81:d3: e0:43:3f:8a:68:3e:20:b7:ae:8e:30:31:39:46:9f:88:1d:45: c7:4d:ac:f4:d8:5c:aa:86:99:c1:85:d1:86:f7:ff:91:e0:e4: 22:18:19:c0:1a:da:c7:59:4a:1c:fd:15:08:15:14:74:0b:0e: 86:36:9f:2a:20:0c:77:ee:51:5f:90:19:39:31:a5:fc:57:ec: 41:2a:04:b2:6b:2d:f7:8e:ac:ae:17:17:89:b5:14:c6:b7:f3: cd:f1:03:76:e5:89:1f:bc:23:e8:fb:30:63:6c:65:ef:f9:f5: 46:34:fa:e8:74:78:f9:d0:0e:e9:88:a8:f4:4b:27:5f:ce:fa: 7f:a4:40:87 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUfcQ5upNPESjVb+SnrZoDxtihPL4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTgzM1oX DTI3MDUwMjAwMDMzM1owMzExMC8GA1UEAxMoQkYwNzIwNzRCODAxQUZFMTI5MjI3 MEZCN0EzRTA5MEEyNzZFQjg5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALC8zG5HiY3B9IJ9rNDFVIMQXrglMkUDO4zpmHCf32pvn6+qtAFPnjmATCvp b0OW9s9mKbGtJ2q67NI+ny9VWe+zzYz+7gDsgzir6To5XUh/qcSUsLOrdmPbDaV8 zSQcRZ7DxX7QI5lyYEY/ScppyytA4QDik6te7jSrJ9Qa1RfIM4L+4B1pFeRnBM4E tn2ySuDUv6FemBzs522YJ0kDJz0q6LhlsqC3FjZCtMbAFKTKnDFXo3fV2rsTpErE VH1z4HWDbXOebtHYECLk2QvYMwCoQn68cwRgxktA+prsRvwc7SsQF7uwclqENyaW +1YtUdrS4VQHo7N5ezzdLUeCT00CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL8HIHS4Aa/hKSJw+3o+CQonbriTMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzFjZDdkMjliLWRkMWMtNDFkZC1iZWVmLTU2NDI4NjRlODZhZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xY2Q3ZDI5 Yi1kZDFjLTQxZGQtYmVlZi01NjQyODY0ZTg2YWUvMC9CRjA3MjA3NEI4MDFBRkUx MjkyMjcwRkI3QTNFMDkwQTI3NkVCODkzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQA0k+NMA0GCSqGSIb3DQEBCwUAA4IBAQAN0B8223QEM8EQEZofi3X0/oWlEw6D slnuPfPBKQhVoDFnqsVQb6iuhs+eSikGriKEY5gSdJy43YLNgcgOoaiOYWl3F1BP vLbtVva3luE+tZhuKAY62YAOBFkmT3Q8blFrvUu04zA2J0QHdD2vVYnFTEaLWpAX y5sFs6YMgdPgQz+KaD4gt66OMDE5Rp+IHUXHTaz02FyqhpnBhdGG9/+R4OQiGBnA GtrHWUoc/RUIFRR0Cw6GNp8qIAx37lFfkBk5MaX8V+xBKgSyay33jqyuFxeJtRTG t/PN8QN25YkfvCPo+zBjbGXv+fVGNProdHj50A7piKj0Sydfzvp/pECH -----END CERTIFICATE-----Generated at Tue May 12 22:02:48 2026 by rpki-client