$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/01B748FE9E379A963DF80DAA39E554231A002AB4.cer File: 01B748FE9E379A963DF80DAA39E554231A002AB4.cer (raw, json) Hash identifier: t6C6tQjrvQ7/MYVOmpjkBcnj5pkrnb/yqveV9XF6SHs= Subject key identifier: 01:B7:48:FE:9E:37:9A:96:3D:F8:0D:AA:39:E5:54:23:1A:00:2A:B4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4AE67F9D4013EA724BB6958C7B1D27721E6AD9AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:13:41 +0000 Certificate not after: Sun 02 May 2027 02:18:41 +0000 Subordinate resources: IP: 103.171.182.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e6:7f:9d:40:13:ea:72:4b:b6:95:8c:7b:1d:27:72:1e:6a:d9:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:13:41 2026 GMT Not After : May 2 02:18:41 2027 GMT Subject: CN=01B748FE9E379A963DF80DAA39E554231A002AB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:dd:c6:ce:ea:6e:e3:4c:5c:d3:58:71:7d:d4: 06:b6:50:2d:ff:ac:5b:49:b9:db:8a:5a:af:ef:c9: 4f:72:e6:68:1e:31:81:3e:84:1f:1f:90:09:4a:66: 4d:2a:53:15:96:e6:8e:78:8e:73:7e:e8:76:4b:b9: 73:1b:41:21:6e:f8:25:0f:a1:e3:1f:38:87:3e:a9: 2a:94:b7:67:dd:95:bf:61:69:ce:4f:89:59:e2:7f: 04:c2:fe:e2:54:7d:4c:87:f6:8f:0b:28:1a:e1:89: 8a:84:62:29:6b:79:f5:9f:44:d7:2c:99:75:c7:1a: 99:44:da:0e:b2:6d:2f:87:0c:15:72:18:cb:19:00: 8f:9d:aa:f4:91:82:82:d2:96:6e:01:ce:7a:3a:00: fb:d4:60:97:2c:a9:a3:29:6c:63:70:8c:28:b3:7e: a4:de:5b:8c:3f:4b:c9:3f:28:d3:24:eb:ba:5f:e9: 2b:97:fe:18:6c:39:d7:a5:33:8b:ad:d6:c4:39:5e: c2:b9:38:e5:34:80:d6:df:fa:e3:c8:12:ad:a6:d5: b0:f3:74:d5:0a:3e:2b:d8:63:19:f4:d3:0b:a1:6a: b4:08:d5:88:9c:db:a0:e0:af:11:32:71:10:ba:7d: d7:5b:b6:6a:83:f8:c9:88:f7:9d:a4:27:4e:a0:f1: 3c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:B7:48:FE:9E:37:9A:96:3D:F8:0D:AA:39:E5:54:23:1A:00:2A:B4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.171.182.0/23 Signature Algorithm: sha256WithRSAEncryption 66:b0:b9:3e:11:0e:f7:73:27:49:f8:5e:43:1b:c8:e3:9b:51: c9:ad:11:f1:47:35:8e:93:0c:d7:95:a5:22:3f:02:24:d2:33: 9e:f6:19:a8:ad:db:7b:b5:d0:ca:2e:0c:58:14:23:ec:a3:cd: 9a:1f:6e:e0:bf:6f:1c:21:57:f1:29:66:9b:51:22:f4:65:6f: 19:7b:ef:89:27:93:01:d7:76:79:ee:28:9f:c0:9f:8e:95:d3: 26:f1:59:da:57:d9:43:1d:0f:3c:6e:6b:ac:2f:8e:d2:ea:8b: 9a:24:a3:c4:fc:18:87:83:2b:6e:84:79:2e:39:e4:5f:5f:60: 68:64:0c:1b:0d:8d:c3:f0:08:40:d0:0c:88:9b:cc:23:9e:1c: 79:fb:f8:78:00:cc:17:5c:43:9c:02:15:63:7f:e4:8d:6e:84: e1:f2:c1:37:5b:f2:1e:31:46:81:72:10:30:77:fa:bf:c6:ad: 79:27:e7:c5:cd:62:4e:ad:40:64:23:20:0c:a9:3b:8b:41:2d: 48:7c:c7:02:44:d5:8a:a6:d4:c1:6c:3b:e6:2b:b2:41:a2:a7: 49:ae:c6:74:7d:cc:7e:51:86:9c:cc:d5:00:ed:46:87:c2:f7: e8:81:54:f7:8b:24:ed:94:81:9b:02:10:ff:92:04:38:b1:70: 74:19:b0:81 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUSuZ/nUAT6nJLtpWMex0nch5q2aswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTM0MVoX DTI3MDUwMjAyMTg0MVowMzExMC8GA1UEAxMoMDFCNzQ4RkU5RTM3OUE5NjNERjgw REFBMzlFNTU0MjMxQTAwMkFCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ/dxs7qbuNMXNNYcX3UBrZQLf+sW0m524par+/JT3LmaB4xgT6EHx+QCUpm TSpTFZbmjniOc37odku5cxtBIW74JQ+h4x84hz6pKpS3Z92Vv2Fpzk+JWeJ/BML+ 4lR9TIf2jwsoGuGJioRiKWt59Z9E1yyZdccamUTaDrJtL4cMFXIYyxkAj52q9JGC gtKWbgHOejoA+9RglyypoylsY3CMKLN+pN5bjD9LyT8o0yTrul/pK5f+GGw516Uz i63WxDlewrk45TSA1t/648gSrabVsPN01Qo+K9hjGfTTC6FqtAjViJzboOCvETJx ELp911u2aoP4yYj3naQnTqDxPJECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAG3SP6eN5qWPfgNqjnlVCMaACq0MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2UzNTA1Y2IzLWI1NWUtNDBlNC1hYzc5LTYzNjU2MDZmNGVmOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lMzUwNWNi My1iNTVlLTQwZTQtYWM3OS02MzY1NjA2ZjRlZjkvMC8wMUI3NDhGRTlFMzc5QTk2 M0RGODBEQUEzOUU1NTQyMzFBMDAyQUI0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6u2MA0GCSqGSIb3DQEBCwUAA4IBAQBmsLk+EQ73cydJ+F5DG8jjm1HJrRHx RzWOkwzXlaUiPwIk0jOe9hmordt7tdDKLgxYFCPso82aH27gv28cIVfxKWabUSL0 ZW8Ze++JJ5MB13Z57iifwJ+OldMm8VnaV9lDHQ88bmusL47S6ouaJKPE/BiHgytu hHkuOeRfX2BoZAwbDY3D8AhA0AyIm8wjnhx5+/h4AMwXXEOcAhVjf+SNboTh8sE3 W/IeMUaBchAwd/q/xq15J+fFzWJOrUBkIyAMqTuLQS1IfMcCRNWKptTBbDvmK7JB oqdJrsZ0fcx+UYaczNUA7UaHwvfogVT3iyTtlIGbAhD/kgQ4sXB0GbCB -----END CERTIFICATE-----Generated at Tue May 12 22:03:52 2026 by rpki-client