$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer File: C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer (raw, json) Hash identifier: h1L7+c5mtgn7MvP25oxHB9N1/Tzqm2w7L1ecdOrflKU= Subject key identifier: C8:64:7E:DF:5E:FD:E9:71:22:9F:5D:76:81:8B:39:57:AA:6D:8A:14 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 23F7A8076E7F1F208FD9F780A7BEB116B5E5A4EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft caRepository: rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:04:13 +0000 Certificate not after: Sun 02 May 2027 00:09:13 +0000 Subordinate resources: IP: 103.184.16.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:f7:a8:07:6e:7f:1f:20:8f:d9:f7:80:a7:be:b1:16:b5:e5:a4:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:04:13 2026 GMT Not After : May 2 00:09:13 2027 GMT Subject: CN=C8647EDF5EFDE971229F5D76818B3957AA6D8A14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2e:3f:08:10:60:18:3b:7d:d9:27:11:be:05: 15:51:53:87:20:df:bb:81:8f:05:93:4a:58:00:43: 76:e3:48:d0:73:0a:1f:eb:a2:b1:97:3f:a4:0c:ee: b2:3d:c6:f9:5e:3b:54:7d:f2:16:6e:ae:92:af:69: 61:73:f2:ae:54:48:14:25:d9:b7:73:a2:80:b1:0c: 70:54:a1:f6:00:fb:21:3f:bc:77:2e:33:66:d2:c8: 75:45:f0:d0:18:58:02:f7:34:fb:48:76:16:f5:4a: 26:3e:48:90:3e:9b:8a:34:32:e1:bf:ff:f1:fc:b3: e6:e3:cb:b9:66:89:81:69:5f:fa:62:6c:31:04:8b: 2f:0e:b9:91:65:4b:a3:d5:d7:53:92:15:61:69:fd: 8d:d3:a9:67:02:3a:62:a4:bc:e1:57:fd:51:85:1b: d0:d2:60:38:da:05:84:2e:65:1f:75:f5:f4:51:65: ec:18:33:3a:b0:63:b4:db:b7:26:5f:d7:2d:13:e5: c1:7c:14:3d:4e:52:b4:63:21:86:43:26:34:68:89: de:23:22:56:b6:a9:87:99:b2:29:9e:fd:8e:f2:96: 2f:b4:78:9a:d4:c1:39:d0:2c:dd:5f:93:1f:f8:0b: 03:d1:2b:d6:10:62:43:c7:01:da:52:36:f3:0a:aa: f4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:64:7E:DF:5E:FD:E9:71:22:9F:5D:76:81:8B:39:57:AA:6D:8A:14 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.16.0/23 Signature Algorithm: sha256WithRSAEncryption 87:59:6e:ed:cc:5f:59:65:2d:ed:fa:78:7d:74:b7:be:c6:b5: bf:0d:01:5e:16:fb:10:74:42:57:b6:62:84:c1:5e:f3:2d:38: 4b:0d:90:7e:55:62:53:53:12:32:16:59:99:7f:ba:30:ff:10: 01:e4:c7:0d:95:cd:4f:a4:82:56:9b:4a:6f:43:10:fc:a1:44: ee:2e:60:aa:01:77:b7:b3:27:f3:4d:c8:8e:eb:92:b3:cf:a9: 24:d5:98:b0:ab:5a:de:e2:87:14:18:44:3f:b4:db:c5:a3:bf: b3:c4:bd:30:2c:d6:23:f3:1e:7f:83:d6:36:b7:02:5b:c1:33: 48:7f:97:83:e6:50:82:29:d3:01:dd:77:b0:9e:c9:fa:76:97: 6a:75:c1:16:99:6f:11:8b:e2:30:2f:57:8f:8f:9a:09:a6:56: df:6e:a1:42:76:b5:e6:86:00:44:bf:d3:17:58:9d:ca:1a:56: 29:7c:51:f5:59:c9:f7:ca:67:a8:77:08:0c:35:e8:93:49:8f: de:d1:d3:e8:cf:a8:19:a9:34:4e:05:36:89:0b:b7:35:85:7e: c9:0b:7e:5e:24:ca:a7:64:5e:24:cc:d3:7c:3e:58:13:ea:27: 32:8a:08:b8:77:10:0d:53:80:3b:e3:80:1b:02:99:12:4f:a1: a6:c9:49:42 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUI/eoB25/HyCP2feAp76xFrXlpO4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDQxM1oX DTI3MDUwMjAwMDkxM1owMzExMC8GA1UEAxMoQzg2NDdFREY1RUZERTk3MTIyOUY1 RDc2ODE4QjM5NTdBQTZEOEExNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8uPwgQYBg7fdknEb4FFVFThyDfu4GPBZNKWABDduNI0HMKH+uisZc/pAzu sj3G+V47VH3yFm6ukq9pYXPyrlRIFCXZt3OigLEMcFSh9gD7IT+8dy4zZtLIdUXw 0BhYAvc0+0h2FvVKJj5IkD6bijQy4b//8fyz5uPLuWaJgWlf+mJsMQSLLw65kWVL o9XXU5IVYWn9jdOpZwI6YqS84Vf9UYUb0NJgONoFhC5lH3X19FFl7BgzOrBjtNu3 Jl/XLRPlwXwUPU5StGMhhkMmNGiJ3iMiVraph5myKZ79jvKWL7R4mtTBOdAs3V+T H/gLA9Er1hBiQ8cB2lI28wqq9IcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMhkft9e/elxIp9ddoGLOVeqbYoUMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzI1ZDM4YjQyLWI3YzItNDJiNi1hMmZjLTY3NWRhMjU0Yzc3Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yNWQzOGI0 Mi1iN2MyLTQyYjYtYTJmYy02NzVkYTI1NGM3NzYvMC9DODY0N0VERjVFRkRFOTcx MjI5RjVENzY4MThCMzk1N0FBNkQ4QTE0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7gQMA0GCSqGSIb3DQEBCwUAA4IBAQCHWW7tzF9ZZS3t+nh9dLe+xrW/DQFe FvsQdEJXtmKEwV7zLThLDZB+VWJTUxIyFlmZf7ow/xAB5McNlc1PpIJWm0pvQxD8 oUTuLmCqAXe3syfzTciO65Kzz6kk1Ziwq1re4ocUGEQ/tNvFo7+zxL0wLNYj8x5/ g9Y2twJbwTNIf5eD5lCCKdMB3Xewnsn6dpdqdcEWmW8Ri+IwL1ePj5oJplbfbqFC drXmhgBEv9MXWJ3KGlYpfFH1Wcn3ymeodwgMNeiTSY/e0dPoz6gZqTROBTaJC7c1 hX7JC35eJMqnZF4kzNN8PlgT6icyigi4dxANU4A744AbApkST6GmyUlC -----END CERTIFICATE-----Generated at Tue May 12 22:49:48 2026 by rpki-client