$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/01B0C001093D0622F6A0653371CA0798A79BF1CB.cer File: 01B0C001093D0622F6A0653371CA0798A79BF1CB.cer (raw, json) Hash identifier: LJywt56IAYtLRPSREQfLWqLLJAKCVKPw74Cid48HA5c= Subject key identifier: 01:B0:C0:01:09:3D:06:22:F6:A0:65:33:71:CA:07:98:A7:9B:F1:CB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2EAA9B115AD39703CF6C5B2525B0D95117EC49F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/01B0C001093D0622F6A0653371CA0798A79BF1CB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:44:54 +0000 Certificate not after: Sun 02 May 2027 00:49:54 +0000 Subordinate resources: IP: 43.228.175.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:aa:9b:11:5a:d3:97:03:cf:6c:5b:25:25:b0:d9:51:17:ec:49:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:44:54 2026 GMT Not After : May 2 00:49:54 2027 GMT Subject: CN=01B0C001093D0622F6A0653371CA0798A79BF1CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:35:7f:6c:7b:11:3a:3f:b4:f5:74:63:a3:6a: 9d:43:45:4f:a0:71:79:71:21:28:56:da:f1:d3:f5: a2:07:de:0a:f9:55:01:22:bc:fd:24:ac:74:5f:db: 6c:20:c8:fe:a6:eb:bf:5b:59:47:a2:39:82:01:4e: 2c:59:a1:2d:9e:ab:ae:b7:4b:6e:bf:91:f5:95:40: 10:71:cf:ec:38:a4:8b:c5:4a:a2:aa:a7:7d:47:e0: 7b:2b:46:11:93:92:5f:55:c3:29:01:5a:69:47:7c: 6c:43:49:9d:7d:91:10:42:cc:4d:cb:e3:08:17:f4: 60:3f:01:b5:f3:3d:74:10:75:03:7d:2e:d8:84:8f: 53:44:77:1e:7a:38:b1:06:cf:d3:29:3f:fd:82:9c: 2f:a2:ab:c7:f4:2a:bf:9f:e7:54:12:5d:e5:66:ac: 02:e2:8e:5b:4a:35:bd:2f:87:bc:b1:a2:fa:34:a1: e3:0f:0b:29:ea:52:4d:96:a7:49:a2:a1:59:91:4c: 75:ef:05:d4:95:6c:77:81:ba:3a:41:37:66:32:3a: 20:18:b9:13:f4:f9:70:76:f7:f9:90:99:d9:a5:1c: 65:14:eb:2a:41:d1:50:65:1c:65:a3:93:e9:09:4b: 45:3e:a5:f9:ba:19:d6:69:eb:a7:a7:ae:d1:55:52: 83:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:B0:C0:01:09:3D:06:22:F6:A0:65:33:71:CA:07:98:A7:9B:F1:CB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/01B0C001093D0622F6A0653371CA0798A79BF1CB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.228.175.0/24 Signature Algorithm: sha256WithRSAEncryption 67:3f:58:d8:3d:72:53:92:9c:e1:e3:6b:46:33:fe:47:63:ce: fa:38:99:12:fc:da:ef:23:c3:ea:17:ec:1a:06:7b:22:36:8f: 38:6c:eb:c1:88:1e:be:3a:48:55:a3:bb:06:47:ce:02:9f:66: 82:ad:d7:5d:d8:b0:58:94:d3:0f:14:71:ee:f5:4f:2c:21:9f: cf:be:e7:30:f3:77:c6:bb:1e:15:77:63:b6:a3:62:97:4e:36: d0:37:38:5c:50:9e:18:26:8b:4b:25:aa:57:06:10:45:10:d1: b4:d3:48:c9:e4:24:4a:4b:ab:55:46:d2:19:9e:f9:de:68:32: a2:2e:38:bf:7b:59:8e:6c:84:70:58:79:6a:25:2f:99:16:51: 24:a6:d6:2e:5a:ee:72:ef:98:13:93:e4:69:24:d6:39:4d:14: 2a:d3:9c:14:d3:95:3e:64:e5:a7:ef:e3:63:94:89:02:42:cc: cd:08:04:97:5b:4b:bd:fc:b2:4a:8a:fe:8e:6d:9d:7c:e3:25: ee:9f:a1:9e:5f:57:02:99:f5:bf:31:fa:00:32:89:b9:87:02: bc:d1:b5:22:03:4f:ec:79:5f:ca:85:a7:60:3d:4b:89:d7:6c: f1:75:ba:04:4a:e5:1e:78:e1:e0:42:30:37:89:16:65:90:52: a7:bd:f8:2c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIULqqbEVrTlwPPbFslJbDZURfsSfAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDQ1NFoX DTI3MDUwMjAwNDk1NFowMzExMC8GA1UEAxMoMDFCMEMwMDEwOTNEMDYyMkY2QTA2 NTMzNzFDQTA3OThBNzlCRjFDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALc1f2x7ETo/tPV0Y6NqnUNFT6BxeXEhKFba8dP1ogfeCvlVASK8/SSsdF/b bCDI/qbrv1tZR6I5ggFOLFmhLZ6rrrdLbr+R9ZVAEHHP7Diki8VKoqqnfUfgeytG EZOSX1XDKQFaaUd8bENJnX2REELMTcvjCBf0YD8BtfM9dBB1A30u2ISPU0R3Hno4 sQbP0yk//YKcL6Krx/Qqv5/nVBJd5WasAuKOW0o1vS+HvLGi+jSh4w8LKepSTZan SaKhWZFMde8F1JVsd4G6OkE3ZjI6IBi5E/T5cHb3+ZCZ2aUcZRTrKkHRUGUcZaOT 6QlLRT6l+boZ1mnrp6eu0VVSg00CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAGwwAEJPQYi9qBlM3HKB5inm/HLMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzYxMWEzOTgwLWEzMmUtNGRmOS04ZTUyLTBiZTBkMzQzY2MwYi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82MTFhMzk4 MC1hMzJlLTRkZjktOGU1Mi0wYmUwZDM0M2NjMGIvMC8wMUIwQzAwMTA5M0QwNjIy RjZBMDY1MzM3MUNBMDc5OEE3OUJGMUNCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAK+SvMA0GCSqGSIb3DQEBCwUAA4IBAQBnP1jYPXJTkpzh42tGM/5HY876OJkS /NrvI8PqF+waBnsiNo84bOvBiB6+OkhVo7sGR84Cn2aCrddd2LBYlNMPFHHu9U8s IZ/Pvucw83fGux4Vd2O2o2KXTjbQNzhcUJ4YJotLJapXBhBFENG000jJ5CRKS6tV RtIZnvneaDKiLji/e1mObIRwWHlqJS+ZFlEkptYuWu5y75gTk+RpJNY5TRQq05wU 05U+ZOWn7+NjlIkCQszNCASXW0u9/LJKiv6ObZ184yXun6GeX1cCmfW/MfoAMom5 hwK80bUiA0/seV/KhadgPUuJ12zxdboESuUeeOHgQjA3iRZlkFKnvfgs -----END CERTIFICATE-----Generated at Tue May 12 22:03:29 2026 by rpki-client