$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer File: 04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer (raw, json) Hash identifier: rjhhXFOw6jFqLu7s2OE6v5h61Zi5beK7hKEAOTElVpI= Subject key identifier: 04:01:9B:19:84:57:60:AE:BF:FA:4B:33:95:DC:C3:0F:1C:6D:7A:F5 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 77291E5016645E6AF3735179C1850F9A14B0CA4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:13:44 +0000 Certificate not after: Sun 02 May 2027 01:18:44 +0000 Subordinate resources: IP: 160.22.222.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:29:1e:50:16:64:5e:6a:f3:73:51:79:c1:85:0f:9a:14:b0:ca:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:13:44 2026 GMT Not After : May 2 01:18:44 2027 GMT Subject: CN=04019B19845760AEBFFA4B3395DCC30F1C6D7AF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:84:54:e4:07:ec:25:b2:fc:9e:98:d6:63:9b: f7:7b:7e:21:c1:67:94:f9:c7:3b:e9:bb:74:12:ad: 2f:2b:24:46:8c:db:0e:3b:72:6a:46:8c:af:29:df: 75:cc:02:cd:93:dc:51:33:b3:65:30:de:3d:fb:0d: 94:15:f3:22:36:c8:fa:52:89:82:a4:d8:b9:09:47: 69:6c:13:58:5f:f0:29:9d:c8:b1:11:7c:81:68:28: b9:fc:d6:97:a2:2a:3a:73:b8:ab:a9:5d:2c:ef:9c: 65:3d:41:13:55:39:be:c8:4b:70:91:0b:4b:20:d6: 55:34:06:e9:33:90:dd:85:85:b1:e4:0e:e2:e3:f6: 30:25:ba:da:e7:dd:25:cf:eb:fd:fc:68:fd:62:fb: 8f:3c:d6:62:a5:ce:af:0f:f6:e7:99:0d:cf:ec:9d: 31:8f:1c:1b:d9:0e:57:7e:f7:32:e4:02:0c:6e:e6: a1:f8:e1:a8:ac:23:27:77:f9:46:0e:f8:a9:a5:97: 17:f2:ba:5f:bc:c1:38:10:c2:d6:1c:1b:e5:a0:ce: cb:0e:96:81:90:b0:85:35:f0:36:41:aa:4a:9c:99: c4:fa:f6:ed:54:b0:7f:88:81:12:8f:bc:9e:dd:ba: d3:ad:67:ee:66:05:15:90:f4:e0:bd:e2:a3:96:59: f5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 04:01:9B:19:84:57:60:AE:BF:FA:4B:33:95:DC:C3:0F:1C:6D:7A:F5 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.222.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:51:6b:96:e2:55:5f:f6:94:78:46:17:be:5c:85:89:8d:a7: 22:8b:8d:74:38:d1:09:c2:e5:f6:58:70:84:b9:f7:e2:03:a1: e1:17:b3:e2:d5:53:39:34:63:8c:ac:d7:cd:90:e1:21:5e:1d: 04:c3:ac:20:32:93:8a:7e:06:76:2b:4a:e6:2f:80:8f:97:9b: cf:1f:33:63:e0:27:80:52:49:a3:04:61:df:66:a2:b9:6e:46: 88:48:fe:cf:d5:9a:23:ef:fd:bb:07:73:de:5c:01:89:e2:a6: 29:67:1c:79:40:56:d3:dd:54:8f:a1:3b:14:c7:c6:15:05:b8: 5c:86:6d:3c:1e:2e:c0:d9:df:1d:ed:0c:56:d3:25:c0:b1:fb: ff:3d:26:1e:1d:7b:ab:02:48:13:8e:00:0b:8d:41:8d:e4:ba: 71:a6:5a:5a:73:22:4c:e7:af:b3:3b:7b:d7:19:b8:82:fa:53: 14:e4:4c:08:8a:2d:c0:bd:70:8f:b6:0a:e1:b4:b8:cd:d6:fc: 7c:41:89:6d:3d:b4:93:df:b9:44:fd:ce:e6:5b:86:8a:df:25: da:ce:5f:6a:e5:31:6b:1c:a0:5b:5f:4e:d8:c9:4f:3b:cc:a3: f6:c5:7d:1d:90:e1:5e:7b:d6:3b:fc:3e:06:78:c2:73:5b:7b: 6b:7c:b3:f1 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUdykeUBZkXmrzc1F5wYUPmhSwyk0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMTM0NFoX DTI3MDUwMjAxMTg0NFowMzExMC8GA1UEAxMoMDQwMTlCMTk4NDU3NjBBRUJGRkE0 QjMzOTVEQ0MzMEYxQzZEN0FGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2EVOQH7CWy/J6Y1mOb93t+IcFnlPnHO+m7dBKtLyskRozbDjtyakaMrynf dcwCzZPcUTOzZTDePfsNlBXzIjbI+lKJgqTYuQlHaWwTWF/wKZ3IsRF8gWgoufzW l6IqOnO4q6ldLO+cZT1BE1U5vshLcJELSyDWVTQG6TOQ3YWFseQO4uP2MCW62ufd Jc/r/fxo/WL7jzzWYqXOrw/255kNz+ydMY8cG9kOV373MuQCDG7mofjhqKwjJ3f5 Rg74qaWXF/K6X7zBOBDC1hwb5aDOyw6WgZCwhTXwNkGqSpyZxPr27VSwf4iBEo+8 nt26061n7mYFFZD04L3io5ZZ9c0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAQBmxmEV2Cuv/pLM5Xcww8cbXr1MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzhiMjllOTEyLTM1YzYtNDgwZi1iODY5LTJhMGY4YWVmMzBkMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84YjI5ZTkx Mi0zNWM2LTQ4MGYtYjg2OS0yYTBmOGFlZjMwZDIvMC8wNDAxOUIxOTg0NTc2MEFF QkZGQTRCMzM5NURDQzMwRjFDNkQ3QUY1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBbeMA0GCSqGSIb3DQEBCwUAA4IBAQAqUWuW4lVf9pR4Rhe+XIWJjacii410 ONEJwuX2WHCEuffiA6HhF7Pi1VM5NGOMrNfNkOEhXh0Ew6wgMpOKfgZ2K0rmL4CP l5vPHzNj4CeAUkmjBGHfZqK5bkaISP7P1Zoj7/27B3PeXAGJ4qYpZxx5QFbT3VSP oTsUx8YVBbhchm08Hi7A2d8d7QxW0yXAsfv/PSYeHXurAkgTjgALjUGN5Lpxplpa cyJM56+zO3vXGbiC+lMU5EwIii3AvXCPtgrhtLjN1vx8QYltPbST37lE/c7mW4aK 3yXazl9q5TFrHKBbX07YyU87zKP2xX0dkOFee9Y7/D4GeMJzW3trfLPx -----END CERTIFICATE-----Generated at Wed May 13 03:59:06 2026 by rpki-client