$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/131B2C4183A792602608BDB864E292BA8DE75A11.cer File: 131B2C4183A792602608BDB864E292BA8DE75A11.cer (raw, json) Hash identifier: +Vw6y7w4vgK/MOgZ6jWanvFvMp0RBBPdUzGpPZSAGJ4= Subject key identifier: 13:1B:2C:41:83:A7:92:60:26:08:BD:B8:64:E2:92:BA:8D:E7:5A:11 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 66E306D09F265E88015386D7E6E2E04A704B35CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft caRepository: rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:04:02 +0000 Certificate not after: Sun 02 May 2027 02:09:02 +0000 Subordinate resources: IP: 103.79.236.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e3:06:d0:9f:26:5e:88:01:53:86:d7:e6:e2:e0:4a:70:4b:35:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:04:02 2026 GMT Not After : May 2 02:09:02 2027 GMT Subject: CN=131B2C4183A792602608BDB864E292BA8DE75A11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b4:a8:3b:32:3c:e2:0d:31:bc:b9:85:e4:20: ff:1a:b0:b0:eb:bc:8f:6d:5f:87:42:39:e1:14:5e: 7e:00:c8:24:95:b0:7e:74:8b:30:cc:1f:e7:6f:08: 03:6b:f3:7b:e3:1a:c7:0c:07:72:e6:07:92:c6:3a: 51:e3:e3:39:c7:cd:93:0e:81:ce:c9:e5:21:85:f0: 52:69:1d:58:94:bd:38:48:8d:c1:61:33:ef:90:72: d6:40:a0:f6:95:d7:a1:0e:5a:11:c9:01:50:48:7f: 13:22:67:20:a3:23:1c:b9:26:cb:1d:60:2f:e8:35: c5:88:1d:84:b3:f9:16:2b:7c:a1:a3:58:79:89:57: de:98:e3:21:5b:35:f1:b5:28:51:3d:92:15:5b:2d: 0e:e2:e3:e9:e4:f7:93:87:62:2c:a5:04:51:cc:f1: c0:02:43:7a:de:e3:62:7e:25:8d:13:31:8a:f0:81: 1d:a9:76:28:94:dc:f8:2d:92:2e:2a:e5:aa:a3:f6: d6:b8:5c:fb:c0:6e:42:c7:e8:20:85:ba:91:66:a9: 9d:23:39:99:90:51:ea:70:36:c5:20:71:97:90:61: dc:b0:b0:d2:ce:92:1a:e5:e9:d1:82:69:e3:78:8d: 6b:e9:29:82:77:48:e4:d1:24:6b:3c:07:48:e1:52: ee:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:1B:2C:41:83:A7:92:60:26:08:BD:B8:64:E2:92:BA:8D:E7:5A:11 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/131B2C4183A792602608BDB864E292BA8DE75A11.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.79.236.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:25:6f:93:9d:70:96:33:32:36:e3:ce:da:72:2f:ea:a4:28: 5a:cc:ae:f2:5a:f3:8c:9b:5f:ac:8c:f9:30:68:5a:b0:c9:9d: 3e:8c:3d:f0:72:be:98:3f:bf:31:5b:59:e5:2b:ce:61:85:a2: 64:52:69:23:ea:6c:2e:ce:68:e2:e3:22:95:f3:7f:3e:e4:13: c9:81:93:07:cb:74:d6:4f:3e:bd:f7:99:52:a8:91:06:b6:7e: ee:af:83:14:a3:b4:62:10:e6:63:16:31:46:d1:fd:67:ec:ad: 3b:32:db:a7:9b:a9:6c:52:b7:36:94:21:b8:4a:46:ef:91:72: 12:27:eb:89:7c:8a:5c:2b:d4:4c:e4:1b:e4:d1:54:50:ea:23: 7d:ae:cb:24:b4:0d:88:8b:d2:bb:de:8a:29:a0:22:86:a5:57: 95:b7:aa:18:8e:69:71:4d:44:c1:43:b1:61:15:a0:52:d5:49: 6e:c6:99:b9:e4:93:98:52:20:32:fb:f8:47:8a:b6:54:bb:86: 0d:26:8b:e1:b4:e4:6e:2b:87:84:b9:09:f6:9c:9e:1f:e0:f5: 58:44:74:af:13:ab:7d:f5:e9:2a:60:42:0a:3c:c0:cb:5d:22: 12:fe:0c:60:35:a9:6a:52:8c:4c:21:d7:b0:bd:88:ef:2c:15: 53:00:47:07 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUZuMG0J8mXogBU4bX5uLgSnBLNcwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDQwMloX DTI3MDUwMjAyMDkwMlowMzExMC8GA1UEAxMoMTMxQjJDNDE4M0E3OTI2MDI2MDhC REI4NjRFMjkyQkE4REU3NUExMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMa0qDsyPOINMby5heQg/xqwsOu8j21fh0I54RRefgDIJJWwfnSLMMwf528I A2vze+MaxwwHcuYHksY6UePjOcfNkw6BzsnlIYXwUmkdWJS9OEiNwWEz75By1kCg 9pXXoQ5aEckBUEh/EyJnIKMjHLkmyx1gL+g1xYgdhLP5Fit8oaNYeYlX3pjjIVs1 8bUoUT2SFVstDuLj6eT3k4diLKUEUczxwAJDet7jYn4ljRMxivCBHal2KJTc+C2S LirlqqP21rhc+8BuQsfoIIW6kWapnSM5mZBR6nA2xSBxl5Bh3LCw0s6SGuXp0YJp 43iNa+kpgndI5NEkazwHSOFS7lECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBMbLEGDp5JgJgi9uGTikrqN51oRMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RiZmYxYjNmLTExOTAtNDExOS1iYmM2LTE0MTdkZjhhYTI1OC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kYmZmMWIz Zi0xMTkwLTQxMTktYmJjNi0xNDE3ZGY4YWEyNTgvMC8xMzFCMkM0MTgzQTc5MjYw MjYwOEJEQjg2NEUyOTJCQThERTc1QTExLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ0/sMA0GCSqGSIb3DQEBCwUAA4IBAQALJW+TnXCWMzI2487aci/qpChazK7y WvOMm1+sjPkwaFqwyZ0+jD3wcr6YP78xW1nlK85hhaJkUmkj6mwuzmji4yKV838+ 5BPJgZMHy3TWTz6995lSqJEGtn7ur4MUo7RiEOZjFjFG0f1n7K07Mtunm6lsUrc2 lCG4SkbvkXISJ+uJfIpcK9RM5Bvk0VRQ6iN9rssktA2Ii9K73oopoCKGpVeVt6oY jmlxTUTBQ7FhFaBS1Uluxpm55JOYUiAy+/hHirZUu4YNJovhtORuK4eEuQn2nJ4f 4PVYRHSvE6t99ekqYEIKPMDLXSIS/gxgNalqUoxMIdewvYjvLBVTAEcH -----END CERTIFICATE-----Generated at Tue May 12 22:29:00 2026 by rpki-client