$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer File: 11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer (raw, json) Hash identifier: ZIKW2TQ4QZ/t3sRCEAbKf5B8WMpcSB4PgtajA+M/xOE= Subject key identifier: 11:90:0E:43:1D:F4:CA:DF:5D:82:20:E1:75:3D:CC:AD:3C:15:4E:A0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 206A78411F2A39F33B93B7EAFB21E566C90076FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:43:37 +0000 Certificate not after: Sun 02 May 2027 01:48:37 +0000 Subordinate resources: IP: 103.105.56.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:6a:78:41:1f:2a:39:f3:3b:93:b7:ea:fb:21:e5:66:c9:00:76:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:43:37 2026 GMT Not After : May 2 01:48:37 2027 GMT Subject: CN=11900E431DF4CADF5D8220E1753DCCAD3C154EA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:82:73:7b:99:4e:d3:c9:e2:82:70:be:48:5d: 1e:7c:6e:21:9e:f0:d7:9e:2e:f8:4c:49:08:c0:6c: 3c:21:63:c6:64:36:a4:e7:52:fa:0f:43:83:68:fd: 57:e7:9c:05:a1:78:c8:8d:2b:0e:de:01:da:73:b4: ce:b1:2b:8c:e1:97:ad:17:48:67:cd:8f:09:15:b0: 43:9a:05:af:de:8b:cd:5f:84:d1:c7:39:29:14:f6: 8e:23:71:8c:71:e3:a7:b3:8e:18:be:70:5c:f0:82: a9:0b:7d:59:d5:d9:7e:e3:21:65:d4:e5:1a:ce:88: a1:a5:b3:b3:f9:96:58:e1:05:50:29:c6:6c:ec:1e: d3:66:1c:f4:cf:0a:6a:ae:18:a9:69:65:42:00:ac: c9:21:99:11:f7:fe:32:96:ae:55:a0:a4:33:91:10: a6:91:93:07:10:24:1d:66:16:2c:9c:6a:60:87:b3: c5:e3:b3:74:2a:45:f3:fa:3c:5a:ef:79:e3:d4:e3: 83:70:56:82:f7:e2:4b:66:c2:d3:ef:fb:22:11:64: 6f:3d:1c:1d:93:3c:5f:32:72:11:64:eb:8d:da:79: c6:a9:f9:c2:54:b9:0e:b2:0c:2f:d0:9e:03:40:88: 20:fe:42:d8:a0:11:d8:7b:40:d0:54:b6:96:d6:05: da:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 11:90:0E:43:1D:F4:CA:DF:5D:82:20:E1:75:3D:CC:AD:3C:15:4E:A0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.56.0/23 Signature Algorithm: sha256WithRSAEncryption 36:d9:c8:11:16:6c:a1:a4:ca:9c:26:c8:7c:4a:02:9e:6d:37: e4:28:08:98:eb:a8:21:5d:66:d8:90:03:85:43:f5:46:75:ee: fb:15:e8:d1:3b:e8:76:b0:4a:de:aa:e3:5c:e9:a1:e1:de:65: 66:c0:94:69:64:28:01:a0:21:07:e2:b0:08:d4:c2:36:31:33: 8e:2a:a0:84:d0:f1:67:f7:94:d5:d5:85:35:0f:d9:26:88:4a: da:0a:b4:72:6a:cd:c2:b2:f7:39:30:b2:fc:f8:6e:69:d6:b5: 45:0a:8f:c0:36:ba:cf:47:f5:82:4f:2d:5c:17:9a:40:67:e6: 86:ff:20:e4:ec:0d:4c:79:b4:3c:9b:9a:21:7d:02:32:55:c7: 88:49:49:36:c1:f4:de:23:1f:c4:b2:24:70:cc:a2:b6:7c:c7: 58:cd:fb:6f:23:c0:23:a3:de:dc:22:d4:48:9c:c9:24:0e:27: 1c:f1:58:e0:a4:e7:c0:27:bd:53:5c:39:ef:42:8d:d2:ee:83: 48:d0:60:12:ad:a9:2b:2f:a0:5e:96:1e:c2:1a:25:e9:83:99: 1b:43:29:da:4b:a0:4d:6f:2f:09:88:dc:30:5f:92:39:78:15: dd:98:9a:e7:01:60:58:7a:f0:e0:70:46:06:53:ad:d5:91:c4: a4:e6:5d:6d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUIGp4QR8qOfM7k7fq+yHlZskAdvowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDMzN1oX DTI3MDUwMjAxNDgzN1owMzExMC8GA1UEAxMoMTE5MDBFNDMxREY0Q0FERjVEODIy MEUxNzUzRENDQUQzQzE1NEVBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALKCc3uZTtPJ4oJwvkhdHnxuIZ7w154u+ExJCMBsPCFjxmQ2pOdS+g9Dg2j9 V+ecBaF4yI0rDt4B2nO0zrErjOGXrRdIZ82PCRWwQ5oFr96LzV+E0cc5KRT2jiNx jHHjp7OOGL5wXPCCqQt9WdXZfuMhZdTlGs6IoaWzs/mWWOEFUCnGbOwe02Yc9M8K aq4YqWllQgCsySGZEff+MpauVaCkM5EQppGTBxAkHWYWLJxqYIezxeOzdCpF8/o8 Wu9549Tjg3BWgvfiS2bC0+/7IhFkbz0cHZM8XzJyEWTrjdp5xqn5wlS5DrIML9Ce A0CIIP5C2KAR2HtA0FS2ltYF2pECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBGQDkMd9MrfXYIg4XU9zK08FU6gMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2I5N2NmOWEwLWU5MjctNDgxNC04NDQ3LThiM2EwMDI3NjBhOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iOTdjZjlh MC1lOTI3LTQ4MTQtODQ0Ny04YjNhMDAyNzYwYTgvMC8xMTkwMEU0MzFERjRDQURG NUQ4MjIwRTE3NTNEQ0NBRDNDMTU0RUEwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ2k4MA0GCSqGSIb3DQEBCwUAA4IBAQA22cgRFmyhpMqcJsh8SgKebTfkKAiY 66ghXWbYkAOFQ/VGde77FejRO+h2sErequNc6aHh3mVmwJRpZCgBoCEH4rAI1MI2 MTOOKqCE0PFn95TV1YU1D9kmiEraCrRyas3Csvc5MLL8+G5p1rVFCo/ANrrPR/WC Ty1cF5pAZ+aG/yDk7A1MebQ8m5ohfQIyVceISUk2wfTeIx/EsiRwzKK2fMdYzftv I8Ajo97cItRInMkkDicc8VjgpOfAJ71TXDnvQo3S7oNI0GASrakrL6Belh7CGiXp g5kbQynaS6BNby8JiNwwX5I5eBXdmJrnAWBYevDgcEYGU63VkcSk5l1t -----END CERTIFICATE-----Generated at Tue May 12 22:03:50 2026 by rpki-client