$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.cer File: 13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.cer (raw, json) Hash identifier: EdsDTVDTspVteBa1R1Rq/Fe3Gad43RcjfjqESeb+cN4= Subject key identifier: 13:C1:DB:8A:ED:E0:21:03:9F:FA:B8:4A:79:C8:E0:23:96:DE:5B:38 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7B1D4B4199814DEF7FBF1FE52DF1543A3BF80D8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:55:47 +0000 Certificate not after: Sun 02 May 2027 01:00:47 +0000 Subordinate resources: IP: 113.192.0.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:1d:4b:41:99:81:4d:ef:7f:bf:1f:e5:2d:f1:54:3a:3b:f8:0d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:55:47 2026 GMT Not After : May 2 01:00:47 2027 GMT Subject: CN=13C1DB8AEDE021039FFAB84A79C8E02396DE5B38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:53:10:c3:a5:73:92:4d:39:2e:29:20:dc:31: d5:89:c1:f3:2f:55:ad:7d:37:27:47:da:e2:81:aa: 1a:78:59:6d:87:d1:ff:b4:40:f8:53:ca:18:eb:d6: 69:79:a6:66:db:aa:15:73:08:b9:5e:50:de:55:d4: b0:5f:9e:34:52:ae:82:11:d1:d3:e6:83:22:bc:67: 17:15:e9:db:fe:91:14:34:af:8e:97:94:d1:23:65: 0e:2c:13:8a:3f:8d:f5:29:f5:4d:8c:9f:c7:f7:6b: 44:05:37:ee:d3:d4:64:7e:7b:bd:1a:bf:3e:ff:2e: 34:82:71:69:f5:0f:1a:a0:12:36:c7:d7:21:f8:87: b7:e4:97:39:b8:07:b4:93:b7:27:6b:49:8e:e1:53: 19:62:f9:ef:6b:9e:73:5c:81:60:73:b4:bc:d3:71: f3:c0:e7:ab:96:d1:60:03:4b:41:39:d3:6a:45:02: d5:76:f7:8c:46:53:3d:ce:94:63:40:97:66:9c:45: 5d:7e:95:30:d9:4f:3e:1f:60:07:91:9b:5a:9c:eb: 3b:3c:ea:73:06:17:65:cb:47:e4:e1:3e:a7:65:c1: f0:a1:3c:48:f1:6b:b0:2c:0b:97:3c:e6:aa:c7:b5: 60:e2:38:31:6d:7b:72:4c:34:37:a9:c3:9d:09:cd: ae:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:C1:DB:8A:ED:E0:21:03:9F:FA:B8:4A:79:C8:E0:23:96:DE:5B:38 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 113.192.0.0/23 Signature Algorithm: sha256WithRSAEncryption 87:9c:1f:f2:eb:d2:8d:da:89:87:6c:89:9a:49:f2:d4:3a:0d: 09:c6:33:b4:1a:d2:94:0d:b1:c4:2e:03:ce:37:16:49:d5:9e: 4d:a7:ed:f2:c7:a5:78:d2:d9:8e:31:cb:d9:8a:6a:54:89:cc: 7d:cd:8b:33:ac:bb:27:27:7f:0d:a4:ca:4c:80:98:1f:fe:96: 49:66:85:cb:c4:eb:8f:ce:fb:d9:c6:e1:09:7c:03:a5:aa:d7: 37:ca:91:45:24:81:4a:66:c6:48:92:ec:4d:4c:05:4c:8c:47: 1c:24:0c:36:a3:7d:d1:3a:26:91:aa:10:33:e9:21:7b:14:8d: 89:53:e9:fa:1c:4c:ed:b5:8d:26:74:07:5a:0a:24:bc:03:a2: d3:a2:26:ce:67:35:37:ec:4f:91:44:f1:de:91:99:d7:20:a4: 1c:d7:35:1e:39:17:dc:a0:35:75:5b:af:b4:a1:0d:02:d9:3f: a5:5e:d4:e1:6f:e3:cb:2f:63:48:a7:45:bd:24:79:7e:a3:f9: 70:5b:5d:66:4f:30:a5:81:03:20:1e:07:6a:33:37:e1:48:cf: 5a:9f:5d:08:d9:2a:b8:19:57:30:91:0e:81:1a:6d:86:e7:bc: 24:e7:9e:a9:f2:aa:9c:1a:6a:ee:1e:91:f1:f9:5b:12:0b:60: 37:10:e3:85 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUex1LQZmBTe9/vx/lLfFUOjv4DY4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTU0N1oX DTI3MDUwMjAxMDA0N1owMzExMC8GA1UEAxMoMTNDMURCOEFFREUwMjEwMzlGRkFC ODRBNzlDOEUwMjM5NkRFNUIzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKlTEMOlc5JNOS4pINwx1YnB8y9VrX03J0fa4oGqGnhZbYfR/7RA+FPKGOvW aXmmZtuqFXMIuV5Q3lXUsF+eNFKughHR0+aDIrxnFxXp2/6RFDSvjpeU0SNlDiwT ij+N9Sn1TYyfx/drRAU37tPUZH57vRq/Pv8uNIJxafUPGqASNsfXIfiHt+SXObgH tJO3J2tJjuFTGWL572uec1yBYHO0vNNx88Dnq5bRYANLQTnTakUC1Xb3jEZTPc6U Y0CXZpxFXX6VMNlPPh9gB5GbWpzrOzzqcwYXZctH5OE+p2XB8KE8SPFrsCwLlzzm qse1YOI4MW17ckw0N6nDnQnNrpsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBPB24rt4CEDn/q4SnnI4COW3ls4MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzczMjhiNDc2LTYyMjQtNGUwMS1iMTg2LTgwYmNlYzliYzBlMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83MzI4YjQ3 Ni02MjI0LTRlMDEtYjE4Ni04MGJjZWM5YmMwZTMvMC8xM0MxREI4QUVERTAyMTAz OUZGQUI4NEE3OUM4RTAyMzk2REU1QjM4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBccAAMA0GCSqGSIb3DQEBCwUAA4IBAQCHnB/y69KN2omHbImaSfLUOg0JxjO0 GtKUDbHELgPONxZJ1Z5Np+3yx6V40tmOMcvZimpUicx9zYszrLsnJ38NpMpMgJgf /pZJZoXLxOuPzvvZxuEJfAOlqtc3ypFFJIFKZsZIkuxNTAVMjEccJAw2o33ROiaR qhAz6SF7FI2JU+n6HEzttY0mdAdaCiS8A6LToibOZzU37E+RRPHekZnXIKQc1zUe ORfcoDV1W6+0oQ0C2T+lXtThb+PLL2NIp0W9JHl+o/lwW11mTzClgQMgHgdqMzfh SM9an10I2Sq4GVcwkQ6BGm2G57wk556p8qqcGmruHpHx+VsSC2A3EOOF -----END CERTIFICATE-----Generated at Tue May 12 22:50:04 2026 by rpki-client