$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.cer File: 0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.cer (raw, json) Hash identifier: t59kO/O8A8mp0wxsiN3P3JqQ/GbIf1+I+Tat+plyVTo= Subject key identifier: 0B:1A:75:6D:6F:1B:18:8E:DE:FA:5D:D5:CC:34:25:D3:3A:23:AC:9E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 187D672D5C64D085D03DE0D795C8F0482CE04C8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:03:23 +0000 Certificate not after: Sun 02 May 2027 01:08:23 +0000 Subordinate resources: IP: 103.162.218.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:7d:67:2d:5c:64:d0:85:d0:3d:e0:d7:95:c8:f0:48:2c:e0:4c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:03:23 2026 GMT Not After : May 2 01:08:23 2027 GMT Subject: CN=0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:73:61:e9:98:e6:89:24:86:11:d3:11:b3:a3: 0e:d0:0d:53:9f:4c:00:a4:50:72:b2:54:6b:ec:2a: bf:d1:28:3a:f4:8c:e1:8b:fa:64:1b:39:28:1f:aa: ab:08:aa:13:b0:7c:54:d8:cd:f8:5f:6e:34:42:aa: 3e:da:0a:34:c9:20:69:65:1b:f3:91:c5:fd:f6:13: 40:1d:e0:da:dc:7b:c9:5a:41:b4:67:ba:2b:f7:a4: 84:b5:f5:5c:6f:32:d7:66:0a:78:5f:c3:91:b7:12: c4:7c:b7:b6:26:09:13:27:1e:c8:9f:91:46:a3:bf: 4c:51:a3:f7:d7:80:84:c9:a4:7c:93:96:6d:86:37: ab:e6:a1:4c:3a:e1:d4:a8:0d:87:55:4e:56:cb:11: 5a:7b:95:9b:a6:79:02:72:87:be:32:35:ce:8c:6a: 27:c9:96:8d:5d:55:65:28:43:b3:59:eb:81:cc:16: 97:cf:b4:3f:aa:45:2e:55:d0:92:99:ce:f1:e6:a8: f1:76:41:aa:eb:f8:0c:f1:4f:b6:0c:90:42:9b:85: b7:90:ab:e5:11:e0:0b:66:ad:95:6e:72:62:4f:b4: 6b:f3:d2:70:e7:ab:f3:d0:25:d3:9b:68:64:40:e5: c1:08:24:32:30:5d:de:83:c8:46:e8:9f:d9:2b:32: d8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0B:1A:75:6D:6F:1B:18:8E:DE:FA:5D:D5:CC:34:25:D3:3A:23:AC:9E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.218.0/23 Signature Algorithm: sha256WithRSAEncryption 02:66:f4:2c:37:55:b7:9e:7d:a2:51:8c:0f:0b:6e:46:7a:a7: f5:3c:5e:8c:53:6e:08:ad:4f:6e:55:1b:07:51:6f:2f:60:0c: 8c:c0:2b:af:d9:3c:26:a3:e4:30:5b:ca:2d:76:c1:69:ac:d3: a9:82:f2:f2:51:bd:5b:f5:ae:d3:06:a5:85:42:31:b2:62:92: 76:6e:00:5d:e0:87:a0:dd:53:8c:64:8b:c7:7b:60:9d:b0:29: e3:aa:b5:ac:ba:61:c1:c1:2f:d3:00:61:92:d3:48:61:c9:97: ff:4b:5e:f6:07:e2:ed:11:dd:55:50:7f:3c:f3:29:9a:57:6f: a8:34:b9:22:8d:c6:85:cc:c9:44:00:36:74:c3:e1:06:de:a4: c2:67:04:91:1b:06:f8:00:4f:11:50:28:a0:1c:57:42:ed:c1: 19:da:a6:2c:3d:9e:96:9a:5e:a7:3a:c6:0d:52:15:48:9e:3e: e3:b8:33:07:49:8a:ad:3f:ed:ff:9f:97:02:e4:c1:26:aa:87: 2f:eb:a9:14:aa:7d:90:8a:80:75:1e:13:31:eb:01:ed:5d:48: c6:3c:e4:18:c5:6a:1b:1d:d9:4e:3c:3b:8b:13:3c:ce:0a:6f: 96:6c:b0:cb:23:42:83:cc:95:f6:b5:0d:f1:51:26:52:33:1a: 1e:96:d7:a8 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUGH1nLVxk0IXQPeDXlcjwSCzgTIowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDMyM1oX DTI3MDUwMjAxMDgyM1owMzExMC8GA1UEAxMoMEIxQTc1NkQ2RjFCMTg4RURFRkE1 REQ1Q0MzNDI1RDMzQTIzQUM5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPlzYemY5okkhhHTEbOjDtANU59MAKRQcrJUa+wqv9EoOvSM4Yv6ZBs5KB+q qwiqE7B8VNjN+F9uNEKqPtoKNMkgaWUb85HF/fYTQB3g2tx7yVpBtGe6K/ekhLX1 XG8y12YKeF/DkbcSxHy3tiYJEyceyJ+RRqO/TFGj99eAhMmkfJOWbYY3q+ahTDrh 1KgNh1VOVssRWnuVm6Z5AnKHvjI1zoxqJ8mWjV1VZShDs1nrgcwWl8+0P6pFLlXQ kpnO8eao8XZBquv4DPFPtgyQQpuFt5Cr5RHgC2atlW5yYk+0a/PScOer89Al05to ZEDlwQgkMjBd3oPIRuif2Ssy2FECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAsadW1vGxiO3vpd1cw0JdM6I6yeMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdkMjY2NTExLTYzOWUtNGMyYi05NjM0LTljYzFlMjJmYTcwOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83ZDI2NjUx MS02MzllLTRjMmItOTYzNC05Y2MxZTIyZmE3MDgvMC8wQjFBNzU2RDZGMUIxODhF REVGQTVERDVDQzM0MjVEMzNBMjNBQzlFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6LaMA0GCSqGSIb3DQEBCwUAA4IBAQACZvQsN1W3nn2iUYwPC25Geqf1PF6M U24IrU9uVRsHUW8vYAyMwCuv2Twmo+QwW8otdsFprNOpgvLyUb1b9a7TBqWFQjGy YpJ2bgBd4Ieg3VOMZIvHe2CdsCnjqrWsumHBwS/TAGGS00hhyZf/S172B+LtEd1V UH888ymaV2+oNLkijcaFzMlEADZ0w+EG3qTCZwSRGwb4AE8RUCigHFdC7cEZ2qYs PZ6Wml6nOsYNUhVInj7juDMHSYqtP+3/n5cC5MEmqocv66kUqn2QioB1HhMx6wHt XUjGPOQYxWobHdlOPDuLEzzOCm+WbLDLI0KDzJX2tQ3xUSZSMxoelteo -----END CERTIFICATE-----Generated at Tue May 12 22:16:30 2026 by rpki-client