$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer File: C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer (raw, json) Hash identifier: KsgAmvAbxh4quFh8woqzurItvyszKbCIkPDX9XdkjJ8= Subject key identifier: C8:A2:77:B3:DE:C8:C0:F0:AA:4C:1F:A5:42:E8:19:36:6C:4E:DC:32 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6D313EC635E67979ADB9858A7207E8FA0B094E80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:07:35 +0000 Certificate not after: Sun 02 May 2027 01:12:35 +0000 Subordinate resources: IP: 103.224.76.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:31:3e:c6:35:e6:79:79:ad:b9:85:8a:72:07:e8:fa:0b:09:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:07:35 2026 GMT Not After : May 2 01:12:35 2027 GMT Subject: CN=C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:93:01:58:8f:0d:03:09:52:fe:25:22:7d:ca: dc:2f:10:6d:3b:20:4d:0a:87:15:8d:60:fc:98:69: 8a:bd:0d:82:e2:4f:d1:8c:ea:d6:b9:51:30:36:b2: 4f:63:d9:dc:c3:06:df:da:fc:0f:dd:d1:a2:df:4a: 4d:11:57:6e:3f:5b:f5:25:2a:08:bd:b2:e9:98:ba: 79:f2:24:c7:a2:89:99:b2:8b:9b:eb:cc:60:68:52: 66:23:3c:2b:08:ce:71:49:82:7b:ec:ec:ec:ed:9c: 14:1d:38:5c:fe:91:76:68:95:fc:bb:d0:0f:44:53: 3a:f0:67:11:61:b7:91:12:bd:85:83:13:fc:b5:1d: a5:ca:a2:6b:45:10:5c:9c:e5:44:53:d5:2e:7c:50: c8:6a:f0:b5:bb:f2:50:d6:c4:73:08:2d:3c:cb:8b: 6e:62:5d:18:43:44:f8:a6:02:a1:96:e6:e1:66:b7: b7:35:80:43:39:5c:42:80:b2:df:1c:6b:e1:7b:26: 5c:1c:f1:32:18:5d:b9:e3:05:81:ee:45:a6:a4:4f: 30:7e:7e:6d:51:59:87:e7:e6:eb:61:dc:1f:36:5d: 10:34:d0:f7:f5:e1:22:21:97:50:17:f9:32:b4:8e: 43:be:1b:58:6f:7c:e2:cc:6a:8b:3f:56:7e:a1:2f: 93:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:A2:77:B3:DE:C8:C0:F0:AA:4C:1F:A5:42:E8:19:36:6C:4E:DC:32 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.224.76.0/23 Signature Algorithm: sha256WithRSAEncryption 09:37:0d:70:aa:14:65:b0:15:00:2a:70:83:65:d8:53:0b:21: 26:15:22:26:cc:c3:fa:f4:62:66:24:6f:e9:4c:4c:14:91:f3: 53:67:3d:96:cd:3c:8c:23:0c:0a:2d:04:0d:81:96:85:d8:4d: dd:bd:47:e6:a4:81:04:e3:f0:db:2b:96:c4:2d:14:94:b5:9c: f6:6d:86:e3:d7:9f:6e:72:e5:d8:e3:20:04:c1:7a:b6:0c:a0: 9e:e4:de:8b:e8:10:0a:43:f5:a0:15:17:66:73:77:16:df:c9: 6c:d3:ba:de:55:da:6e:fc:3f:24:ca:9a:f5:60:a1:1a:52:4a: a3:31:42:f3:a7:ec:65:73:52:93:c5:20:94:40:fd:c2:b6:28: bc:d0:a0:a5:3d:24:77:49:75:a4:94:dd:61:da:6b:cc:78:c7: 81:32:63:16:cd:36:68:01:03:10:ba:93:94:51:13:ba:81:83: 90:71:5e:11:61:aa:85:2b:a1:c0:24:11:16:1f:1f:a7:3f:d8: 42:41:e6:72:58:ae:f2:a7:bb:4e:07:2b:a7:c1:e2:e4:cd:ef: 73:d4:95:d1:12:ad:e3:91:43:1c:80:61:18:95:be:1e:8e:67: b3:53:ee:4e:28:8a:c8:1c:64:a2:46:c9:a5:99:d5:29:f1:b5: 43:a4:1e:3e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUbTE+xjXmeXmtuYWKcgfo+gsJToAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDczNVoX DTI3MDUwMjAxMTIzNVowMzExMC8GA1UEAxMoQzhBMjc3QjNERUM4QzBGMEFBNEMx RkE1NDJFODE5MzY2QzRFREMzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6TAViPDQMJUv4lIn3K3C8QbTsgTQqHFY1g/Jhpir0NguJP0Yzq1rlRMDay T2PZ3MMG39r8D93Rot9KTRFXbj9b9SUqCL2y6Zi6efIkx6KJmbKLm+vMYGhSZiM8 KwjOcUmCe+zs7O2cFB04XP6RdmiV/LvQD0RTOvBnEWG3kRK9hYMT/LUdpcqia0UQ XJzlRFPVLnxQyGrwtbvyUNbEcwgtPMuLbmJdGENE+KYCoZbm4Wa3tzWAQzlcQoCy 3xxr4XsmXBzxMhhdueMFge5FpqRPMH5+bVFZh+fm62HcHzZdEDTQ9/XhIiGXUBf5 MrSOQ74bWG984sxqiz9WfqEvkwECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMiid7PeyMDwqkwfpULoGTZsTtwyMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzgyMjZiM2UxLWQ3ZjYtNDY1ZS04MzAyLTdkNTJmNWMzNDBmZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84MjI2YjNl MS1kN2Y2LTQ2NWUtODMwMi03ZDUyZjVjMzQwZmYvMC9DOEEyNzdCM0RFQzhDMEYw QUE0QzFGQTU0MkU4MTkzNjZDNEVEQzMyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ+BMMA0GCSqGSIb3DQEBCwUAA4IBAQAJNw1wqhRlsBUAKnCDZdhTCyEmFSIm zMP69GJmJG/pTEwUkfNTZz2WzTyMIwwKLQQNgZaF2E3dvUfmpIEE4/DbK5bELRSU tZz2bYbj159ucuXY4yAEwXq2DKCe5N6L6BAKQ/WgFRdmc3cW38ls07reVdpu/D8k ypr1YKEaUkqjMULzp+xlc1KTxSCUQP3Ctii80KClPSR3SXWklN1h2mvMeMeBMmMW zTZoAQMQupOUURO6gYOQcV4RYaqFK6HAJBEWHx+nP9hCQeZyWK7yp7tOByunweLk ze9z1JXREq3jkUMcgGEYlb4ejmezU+5OKIrIHGSiRsmlmdUp8bVDpB4+ -----END CERTIFICATE-----Generated at Tue May 12 22:47:42 2026 by rpki-client