$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/16E36A76C68AD7EF73B872D0A244597711CEC92B.cer File: 16E36A76C68AD7EF73B872D0A244597711CEC92B.cer (raw, json) Hash identifier: 9DVmTem+SNvGGHSXXTx/MMoJ4Kmrgwy4lf9hEmjboK0= Subject key identifier: 16:E3:6A:76:C6:8A:D7:EF:73:B8:72:D0:A2:44:59:77:11:CE:C9:2B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 17C8E582056C44B26A7EDEB8B1452EDCC673016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:58:46 +0000 Certificate not after: Sun 02 May 2027 00:03:46 +0000 Subordinate resources: IP: 103.49.50.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c8:e5:82:05:6c:44:b2:6a:7e:de:b8:b1:45:2e:dc:c6:73:01:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:58:46 2026 GMT Not After : May 2 00:03:46 2027 GMT Subject: CN=16E36A76C68AD7EF73B872D0A244597711CEC92B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:be:1b:48:6c:58:59:fa:51:1d:e4:51:ba:da: 71:f1:62:57:11:4b:11:96:1e:c0:f9:4f:76:7f:ab: 30:7d:c5:ee:be:0f:15:57:b0:77:67:a9:35:ce:fd: 47:6e:1c:2a:fc:17:d9:5e:24:ff:a1:4c:fd:c9:3c: 56:85:57:a8:eb:a3:c2:9a:e4:ba:47:bc:6b:95:ff: de:1f:d7:ae:df:e6:3e:86:77:f2:a9:25:4b:0f:57: 12:9f:91:e2:90:5a:71:95:95:de:3f:52:77:1a:36: 80:02:5b:a9:db:65:c3:9c:30:68:c1:b9:7f:ed:d1: f6:6f:6e:be:e9:b1:54:c0:f8:7f:55:e6:cd:ab:b8: 34:8a:60:00:21:c2:db:fa:c2:08:03:df:aa:d7:e6: ff:2d:1d:01:6e:08:90:aa:1e:a5:4d:6b:a1:8e:ed: ff:fa:eb:52:9e:0d:7b:00:f2:9b:fe:75:86:f2:6b: 24:db:38:f3:60:20:e8:5c:3b:76:73:30:ba:fa:f8: c3:51:4a:c5:4f:00:fa:95:7a:7d:40:8f:34:93:9e: 76:c6:b1:3d:b9:7e:2c:36:1c:75:77:d6:9c:10:19: 5e:64:bd:de:a6:d9:ed:4f:e5:fd:7c:65:08:0c:d8: 5e:a7:08:5d:b9:07:1c:2f:ff:f9:a4:b0:77:aa:62: 75:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 16:E3:6A:76:C6:8A:D7:EF:73:B8:72:D0:A2:44:59:77:11:CE:C9:2B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.49.50.0/23 Signature Algorithm: sha256WithRSAEncryption 23:a2:65:a3:19:30:88:50:75:aa:fc:aa:19:88:ff:e7:ef:f6: eb:b7:5e:6c:db:56:da:cb:69:6b:25:41:84:9c:ba:d3:b7:9d: ce:e4:b8:3e:cf:62:15:3e:d8:2c:37:b6:0f:16:d3:10:db:de: 25:d5:9e:a5:bf:48:e2:88:6d:a3:88:6c:4c:fe:92:25:71:c5: 37:88:a4:b8:b1:4e:cf:37:8c:4c:1a:34:c7:71:67:e3:08:53: a8:00:fb:93:7a:5f:81:a5:d9:3e:2c:5a:e4:69:49:e5:00:84: a3:69:bb:6f:0f:2f:bb:39:61:a5:c8:2a:ec:a4:db:cb:13:91: 01:15:1d:59:36:37:0c:ca:92:97:40:66:41:61:e9:fa:90:4b: f1:5b:e2:40:d7:b7:0d:56:a3:2b:aa:84:53:1c:c2:0b:90:94: 24:3b:37:3d:7c:93:b6:47:71:49:4e:27:6c:62:0e:d9:2a:a4: c6:90:27:53:51:a3:10:02:d2:35:94:1e:e5:75:5f:67:4a:0a: 22:68:87:d4:a9:0a:f3:6e:65:63:82:d6:90:de:6a:b5:08:d1: 6e:d6:1a:a3:0a:c4:37:d6:96:ca:c7:58:0b:17:f4:ac:8b:89: 76:a5:2d:11:4f:93:62:91:31:0e:16:27:09:65:91:82:74:0f: d5:b5:5a:50 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUF8jlggVsRLJqft64sUUu3MZzAW4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTg0NloX DTI3MDUwMjAwMDM0NlowMzExMC8GA1UEAxMoMTZFMzZBNzZDNjhBRDdFRjczQjg3 MkQwQTI0NDU5NzcxMUNFQzkyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOu+G0hsWFn6UR3kUbracfFiVxFLEZYewPlPdn+rMH3F7r4PFVewd2epNc79 R24cKvwX2V4k/6FM/ck8VoVXqOujwprkuke8a5X/3h/Xrt/mPoZ38qklSw9XEp+R 4pBacZWV3j9Sdxo2gAJbqdtlw5wwaMG5f+3R9m9uvumxVMD4f1Xmzau4NIpgACHC 2/rCCAPfqtfm/y0dAW4IkKoepU1roY7t//rrUp4NewDym/51hvJrJNs482Ag6Fw7 dnMwuvr4w1FKxU8A+pV6fUCPNJOedsaxPbl+LDYcdXfWnBAZXmS93qbZ7U/l/Xxl CAzYXqcIXbkHHC//+aSwd6pidb8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBbjanbGitfvc7hy0KJEWXcRzskrMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzFjZThkYTljLWJkYmQtNDkwOC1iYTkyLWQ5MGZlYTljOGYwNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xY2U4ZGE5 Yy1iZGJkLTQ5MDgtYmE5Mi1kOTBmZWE5YzhmMDUvMC8xNkUzNkE3NkM2OEFEN0VG NzNCODcyRDBBMjQ0NTk3NzExQ0VDOTJCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZzEyMA0GCSqGSIb3DQEBCwUAA4IBAQAjomWjGTCIUHWq/KoZiP/n7/brt15s 21bay2lrJUGEnLrTt53O5Lg+z2IVPtgsN7YPFtMQ294l1Z6lv0jiiG2jiGxM/pIl ccU3iKS4sU7PN4xMGjTHcWfjCFOoAPuTel+Bpdk+LFrkaUnlAISjabtvDy+7OWGl yCrspNvLE5EBFR1ZNjcMypKXQGZBYen6kEvxW+JA17cNVqMrqoRTHMILkJQkOzc9 fJO2R3FJTidsYg7ZKqTGkCdTUaMQAtI1lB7ldV9nSgoiaIfUqQrzbmVjgtaQ3mq1 CNFu1hqjCsQ31pbKx1gLF/Ssi4l2pS0RT5NikTEOFicJZZGCdA/VtVpQ -----END CERTIFICATE-----Generated at Wed May 13 02:12:04 2026 by rpki-client