$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer File: D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.cer (raw, json) Hash identifier: JJBY+1Cs2hJpHC0XOCKbQ3M+yQP0Tb1r0yqbDBuyvks= Subject key identifier: D8:B1:AA:A4:D2:2A:2E:22:59:E5:5E:7A:50:CB:15:FF:4D:D1:F5:24 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 777A79B615A48A4E2D16CFE39179F6B2C025BDB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:01:44 +0000 Certificate not after: Sun 02 May 2027 01:06:44 +0000 Subordinate resources: IP: 103.150.60.0/23 IP: 2001:df3:5b80::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:7a:79:b6:15:a4:8a:4e:2d:16:cf:e3:91:79:f6:b2:c0:25:bd:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:01:44 2026 GMT Not After : May 2 01:06:44 2027 GMT Subject: CN=D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:77:39:80:66:c7:f4:ac:3f:6f:cc:1f:26:fb: 2b:6f:d1:0e:9e:32:cb:d3:8c:d2:b3:2f:3d:5e:a6: 8d:1b:79:c2:ad:09:b4:dc:03:8f:ba:dc:93:4a:98: 7e:18:d4:cb:84:5b:24:8b:0a:8f:6e:03:2c:d0:f5: 5a:11:15:71:06:6b:49:6d:53:d7:78:f3:24:e4:cf: 29:33:8a:93:50:9b:cc:8f:23:17:08:a3:58:00:71: 4b:fd:59:5f:89:09:ed:87:54:37:f9:05:a6:c9:c2: b4:ba:19:43:75:c9:89:31:1e:64:df:97:80:71:f0: 58:9d:aa:c6:e0:5e:98:44:db:b0:7c:80:b7:cf:6d: 7a:09:97:10:70:5c:ac:85:76:ab:5b:96:ab:b5:31: c1:2d:4e:33:a3:f4:60:9e:89:94:b3:a7:4f:68:f3: 2e:e6:29:b3:1e:8d:99:78:0e:d2:bf:55:a3:f5:52: d4:d0:77:0a:2e:17:cf:dd:f7:f0:1a:52:d6:ab:f0: ec:e9:a2:89:51:99:c2:ce:80:bb:64:1d:26:e1:95: 65:5f:e6:4a:76:01:67:f9:04:ec:06:b6:7c:b5:ac: c9:e5:01:16:7f:17:47:b4:c0:eb:57:18:e1:ce:ce: 48:70:97:bd:be:df:6b:1b:7c:ae:a6:58:57:34:59: 28:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:B1:AA:A4:D2:2A:2E:22:59:E5:5E:7A:50:CB:15:FF:4D:D1:F5:24 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/D8B1AAA4D22A2E2259E55E7A50CB15FF4DD1F524.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.60.0/23 IPv6: 2001:df3:5b80::/48 Signature Algorithm: sha256WithRSAEncryption 28:ff:fc:51:e1:22:b5:2c:b1:e3:2f:1a:d2:26:00:fb:c3:6f: c4:19:9c:a9:66:dd:06:36:45:f0:71:99:98:62:2b:09:1b:fc: 63:1b:cf:15:bc:15:8a:84:0c:57:3e:3c:30:a9:9d:ec:3f:07: 0f:ef:56:e1:8d:f7:9c:2a:a6:ae:d5:88:b7:01:a3:c3:81:26: de:e2:f6:e1:88:b1:d6:3a:96:c8:6a:9b:37:75:eb:10:23:39: e7:7d:4e:d5:4a:3a:ac:50:2f:af:76:f7:64:06:7d:06:ff:15: 0d:f3:0a:4d:05:19:f2:e6:7e:44:af:07:6e:70:55:30:4c:83: 5b:d1:6b:ce:12:83:cf:02:24:0b:40:09:0a:4d:41:1d:a5:89: d6:64:e2:a1:ab:f0:6e:b0:05:01:79:c0:05:7b:34:40:66:aa: a4:23:ae:1d:1c:ba:67:1c:46:03:78:60:3d:0d:76:7c:64:87: 91:c7:ae:66:ed:ea:0b:a6:43:1a:5d:3d:3d:11:27:48:6f:f5: 71:8a:e8:c6:6b:b7:ec:4f:55:cd:a4:a4:9b:b6:d0:18:0b:63: 71:79:08:2f:a3:d3:7e:a8:c4:d0:ce:20:c4:a9:0a:8d:76:99: 24:37:5a:f2:bc:fd:fc:47:49:bd:39:a2:05:26:c0:d2:d3:cd: 05:7e:11:60 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUd3p5thWkik4tFs/jkXn2ssAlvbUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDE0NFoX DTI3MDUwMjAxMDY0NFowMzExMC8GA1UEAxMoRDhCMUFBQTREMjJBMkUyMjU5RTU1 RTdBNTBDQjE1RkY0REQxRjUyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM13OYBmx/SsP2/MHyb7K2/RDp4yy9OM0rMvPV6mjRt5wq0JtNwDj7rck0qY fhjUy4RbJIsKj24DLND1WhEVcQZrSW1T13jzJOTPKTOKk1CbzI8jFwijWABxS/1Z X4kJ7YdUN/kFpsnCtLoZQ3XJiTEeZN+XgHHwWJ2qxuBemETbsHyAt89tegmXEHBc rIV2q1uWq7UxwS1OM6P0YJ6JlLOnT2jzLuYpsx6NmXgO0r9Vo/VS1NB3Ci4Xz933 8BpS1qvw7OmiiVGZws6Au2QdJuGVZV/mSnYBZ/kE7Aa2fLWsyeUBFn8XR7TA61cY 4c7OSHCXvb7faxt8rqZYVzRZKFMCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNixqqTSKi4iWeVeelDLFf9N0fUkMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdiM2VhYmI0LTRkYjMtNDM3My1hMzQ4LWZiMWVkNzA1NTY1MS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83YjNlYWJi NC00ZGIzLTQzNzMtYTM0OC1mYjFlZDcwNTU2NTEvMC9EOEIxQUFBNEQyMkEyRTIy NTlFNTVFN0E1MENCMTVGRjRERDFGNTI0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ5Y8MA8EAgACMAkDBwAgAQ3zW4AwDQYJKoZIhvcNAQELBQADggEBACj//FHh IrUsseMvGtImAPvDb8QZnKlm3QY2RfBxmZhiKwkb/GMbzxW8FYqEDFc+PDCpnew/ Bw/vVuGN95wqpq7ViLcBo8OBJt7i9uGIsdY6lshqmzd16xAjOed9TtVKOqxQL692 92QGfQb/FQ3zCk0FGfLmfkSvB25wVTBMg1vRa84Sg88CJAtACQpNQR2lidZk4qGr 8G6wBQF5wAV7NEBmqqQjrh0cumccRgN4YD0Ndnxkh5HHrmbt6gumQxpdPT0RJ0hv 9XGK6MZrt+xPVc2kpJu20BgLY3F5CC+j036oxNDOIMSpCo12mSQ3WvK8/fxHSb05 ogUmwNLTzQV+EWA= -----END CERTIFICATE-----Generated at Tue May 12 22:16:42 2026 by rpki-client