$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0162FB1D75470A2F01326C3FB94D24AE036CD51B.cer File: 0162FB1D75470A2F01326C3FB94D24AE036CD51B.cer (raw, json) Hash identifier: KLf7dI7l56rkcWcz3YrCs8nvPR2QX+zJiil943MYGbM= Subject key identifier: 01:62:FB:1D:75:47:0A:2F:01:32:6C:3F:B9:4D:24:AE:03:6C:D5:1B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 145826132C19956CF6541B282ECC5BC4F45B5112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/0162FB1D75470A2F01326C3FB94D24AE036CD51B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:51:20 +0000 Certificate not after: Sun 02 May 2027 01:56:20 +0000 Subordinate resources: IP: 103.21.64.0/23 IP: 2001:df2:5d40::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:58:26:13:2c:19:95:6c:f6:54:1b:28:2e:cc:5b:c4:f4:5b:51:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:51:20 2026 GMT Not After : May 2 01:56:20 2027 GMT Subject: CN=0162FB1D75470A2F01326C3FB94D24AE036CD51B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b6:4e:8e:00:ab:0f:40:b1:1c:ec:d7:65:2d: df:53:4b:5f:3a:85:fd:15:2d:5a:19:68:a1:15:c7: f6:05:d9:28:e3:b0:fc:79:35:3a:3c:dc:43:a8:50: 86:90:00:55:32:22:da:fa:08:bc:f5:24:2f:aa:5e: c7:94:22:35:4b:54:3a:90:8d:e9:37:04:a3:d0:e5: 9b:65:8d:bb:81:ed:22:ab:c4:82:10:e5:15:31:85: 57:af:9a:a6:27:61:e0:bc:07:fe:49:d8:22:7e:3c: f2:16:57:c4:2d:9d:40:a0:a0:a0:da:f7:98:98:ee: cc:dd:c7:eb:0d:82:13:d8:07:8a:f4:ef:b3:c5:e5: fa:39:e4:ed:b1:f9:0c:23:54:d8:97:96:08:8d:b8: 42:5e:76:43:95:fe:9f:d5:17:05:df:d9:1e:89:63: 22:bc:2f:fb:af:d3:e9:6d:98:35:20:f0:ab:de:3d: 0a:de:0f:45:42:c2:5f:7a:3e:77:47:b0:bb:6a:3a: 97:55:9c:6b:74:8f:1d:0f:c0:ec:b1:4c:fb:78:d7: ac:53:91:be:5b:b4:ff:22:6d:af:a7:b2:9e:24:e9: 73:87:89:d8:92:82:56:d5:9a:b2:94:d9:ee:ae:2f: 6f:12:cf:df:36:16:e0:02:80:3e:82:9c:9f:c6:6d: 79:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:62:FB:1D:75:47:0A:2F:01:32:6C:3F:B9:4D:24:AE:03:6C:D5:1B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/0162FB1D75470A2F01326C3FB94D24AE036CD51B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.21.64.0/23 IPv6: 2001:df2:5d40::/48 Signature Algorithm: sha256WithRSAEncryption 88:3e:c7:87:ec:96:32:8b:02:88:23:84:4c:2a:31:a8:e3:f4: dd:db:50:0f:ab:00:76:aa:16:cc:68:d0:c7:7c:25:fb:86:68: 1f:57:f8:4b:eb:f5:c2:3a:e7:c0:e8:2f:ad:84:f6:f4:4a:fd: 35:a2:b6:3d:c5:88:84:9f:f0:6b:18:f1:e6:22:f7:2d:14:9a: f7:00:a2:91:41:fc:29:e8:8b:81:58:b1:0a:83:f7:2b:be:3b: 8e:91:8f:07:6a:6f:50:42:f9:5f:91:c5:59:6d:dc:9e:86:ea: 45:30:ae:ac:1d:21:6e:e0:5d:30:19:cb:41:41:4b:5c:6d:8e: 26:e1:54:3e:ca:cb:bb:ef:15:ea:cc:d5:c2:49:36:51:e2:56: a7:a2:6b:8e:02:be:d3:e3:05:3e:ff:98:bf:67:3a:1d:2a:34: ea:12:ef:15:f3:eb:9c:5d:56:3d:ac:fd:60:a0:2d:ea:99:bd: 2c:81:82:e6:ee:c5:2a:a0:95:9c:ec:70:3c:ed:29:08:fe:0c: 2f:10:50:7d:2b:03:20:92:c3:9e:d8:eb:ae:f9:bf:f2:e7:d0: 28:b4:00:70:a8:a2:57:b2:14:65:30:cd:10:e6:0b:cb:bb:c0: 90:c6:9d:b5:e3:c3:21:ca:89:bd:4d:0b:b4:b1:4e:64:87:88: 5d:0d:3b:b9 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUFFgmEywZlWz2VBsoLsxbxPRbURIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTEyMFoX DTI3MDUwMjAxNTYyMFowMzExMC8GA1UEAxMoMDE2MkZCMUQ3NTQ3MEEyRjAxMzI2 QzNGQjk0RDI0QUUwMzZDRDUxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJq2To4Aqw9AsRzs12Ut31NLXzqF/RUtWhlooRXH9gXZKOOw/Hk1OjzcQ6hQ hpAAVTIi2voIvPUkL6pex5QiNUtUOpCN6TcEo9Dlm2WNu4HtIqvEghDlFTGFV6+a pidh4LwH/knYIn488hZXxC2dQKCgoNr3mJjuzN3H6w2CE9gHivTvs8Xl+jnk7bH5 DCNU2JeWCI24Ql52Q5X+n9UXBd/ZHoljIrwv+6/T6W2YNSDwq949Ct4PRULCX3o+ d0ewu2o6l1Wca3SPHQ/A7LFM+3jXrFORvlu0/yJtr6eyniTpc4eJ2JKCVtWaspTZ 7q4vbxLP3zYW4AKAPoKcn8ZteZkCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAFi+x11RwovATJsP7lNJK4DbNUbMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2M2YmVjOGU5LTY1NjgtNDc4ZC1iZDI2LWY2ZTc3Nzg3NTUxMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jNmJlYzhl OS02NTY4LTQ3OGQtYmQyNi1mNmU3Nzc4NzU1MTEvMC8wMTYyRkIxRDc1NDcwQTJG MDEzMjZDM0ZCOTREMjRBRTAzNkNENTFCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZxVAMA8EAgACMAkDBwAgAQ3yXUAwDQYJKoZIhvcNAQELBQADggEBAIg+x4fs ljKLAogjhEwqMajj9N3bUA+rAHaqFsxo0Md8JfuGaB9X+Evr9cI658DoL62E9vRK /TWitj3FiISf8GsY8eYi9y0UmvcAopFB/Cnoi4FYsQqD9yu+O46Rjwdqb1BC+V+R xVlt3J6G6kUwrqwdIW7gXTAZy0FBS1xtjibhVD7Ky7vvFerM1cJJNlHiVqeia44C vtPjBT7/mL9nOh0qNOoS7xXz65xdVj2s/WCgLeqZvSyBgubuxSqglZzscDztKQj+ DC8QUH0rAyCSw57Y6675v/Ln0Ci0AHCooleyFGUwzRDmC8u7wJDGnbXjwyHKib1N C7SxTmSHiF0NO7k= -----END CERTIFICATE-----Generated at Tue May 12 22:47:28 2026 by rpki-client