$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/181AE15A381C4B158527A37B5B320F08B7BB589F.cer File: 181AE15A381C4B158527A37B5B320F08B7BB589F.cer (raw, json) Hash identifier: BLVoxqAc60jNu4cCcmuIHp4HlMDCJziBnT24OXKOQSY= Subject key identifier: 18:1A:E1:5A:38:1C:4B:15:85:27:A3:7B:5B:32:0F:08:B7:BB:58:9F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 09E161E2A059602F5987853328725B0DDD31DCB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:36:54 +0000 Certificate not after: Sun 02 May 2027 01:41:54 +0000 Subordinate resources: IP: 103.164.172.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e1:61:e2:a0:59:60:2f:59:87:85:33:28:72:5b:0d:dd:31:dc:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:36:54 2026 GMT Not After : May 2 01:41:54 2027 GMT Subject: CN=181AE15A381C4B158527A37B5B320F08B7BB589F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f2:38:43:35:7a:03:18:fb:e6:d5:b1:1e:0f: 6d:17:58:14:38:f8:e4:b2:7c:0c:d6:7a:5f:35:92: e4:43:cc:72:db:05:d7:f7:88:2c:10:2a:47:12:04: cf:1f:3f:61:21:c1:dc:13:e6:34:3f:50:a0:2e:93: ed:df:5b:6e:81:c8:be:ab:b3:f3:21:59:f4:42:41: 48:4b:f2:07:8c:95:11:eb:ec:4b:f1:f9:66:77:7e: 19:a5:e6:3a:62:ef:31:04:01:a3:42:cc:51:1a:71: 8e:13:60:88:08:11:40:a7:0f:89:bb:50:b3:29:1e: 00:ea:16:f7:f5:2f:51:25:8b:a3:72:89:d3:b7:05: 7c:80:56:64:79:49:c4:58:fb:54:64:a0:f4:ca:cf: cb:4e:8b:66:cd:ca:b4:41:2e:49:4b:0c:5b:ca:46: 10:eb:31:63:6b:42:ee:17:04:19:ca:06:13:e0:b2: 2f:d0:5b:87:a5:65:be:e3:22:6e:d8:7e:f9:e3:ff: 7b:e6:3e:a3:35:59:1c:dc:a7:86:76:1a:5b:da:1c: fe:3f:8e:cd:dc:c5:b6:5a:12:d8:17:f0:38:a2:fe: ca:29:4e:b0:ad:f3:ef:c7:43:a1:ed:13:0f:c4:dc: 64:a2:37:f8:09:4f:a0:af:39:02:44:33:c6:53:83: 68:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 18:1A:E1:5A:38:1C:4B:15:85:27:A3:7B:5B:32:0F:08:B7:BB:58:9F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/181AE15A381C4B158527A37B5B320F08B7BB589F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.172.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:a1:57:49:be:68:93:ee:c7:0e:a3:91:14:5c:2b:55:6d:65: c5:ee:8e:18:c4:c4:07:f5:f2:c2:d1:5b:7a:ef:81:0b:75:94: 36:fb:88:90:98:1c:be:53:e3:a9:b2:12:d1:65:76:35:bd:a3: ef:3d:b0:34:23:09:ec:48:73:bd:fe:b1:92:6d:7c:02:39:33: af:aa:b0:17:30:c8:00:b6:d6:88:3f:8d:0c:f9:e5:64:81:27: b6:8d:85:c5:67:be:7c:43:7d:2a:36:44:52:7f:a0:b0:f3:69: ee:16:a3:70:be:f1:79:ba:e5:6e:8e:0c:f3:f2:e5:1e:f9:97: ee:8a:9c:6e:43:14:09:98:d1:0f:e3:ba:75:1c:39:75:a3:c9: cc:53:ca:97:15:46:54:9c:62:79:bb:8b:a9:c9:33:c7:d5:53: a3:45:ac:bb:52:96:2d:de:55:c0:78:2d:1c:f6:6e:e1:40:78: a4:60:74:a1:6a:b8:09:12:a7:07:ac:22:b9:bf:5e:34:9a:68: 0c:d3:ac:95:06:b7:16:c8:5e:f8:ee:68:7e:e9:ec:1b:10:58: ea:32:eb:ea:29:f7:3a:e9:56:4c:88:88:42:15:6e:71:94:2d: 7c:4b:7d:7f:9d:f9:84:f6:fa:d9:49:90:0b:19:16:c2:5d:91: 6d:8c:8f:ac -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUCeFh4qBZYC9Zh4UzKHJbDd0x3LQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzY1NFoX DTI3MDUwMjAxNDE1NFowMzExMC8GA1UEAxMoMTgxQUUxNUEzODFDNEIxNTg1MjdB MzdCNUIzMjBGMDhCN0JCNTg5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALnyOEM1egMY++bVsR4PbRdYFDj45LJ8DNZ6XzWS5EPMctsF1/eILBAqRxIE zx8/YSHB3BPmND9QoC6T7d9bboHIvquz8yFZ9EJBSEvyB4yVEevsS/H5Znd+GaXm OmLvMQQBo0LMURpxjhNgiAgRQKcPibtQsykeAOoW9/UvUSWLo3KJ07cFfIBWZHlJ xFj7VGSg9MrPy06LZs3KtEEuSUsMW8pGEOsxY2tC7hcEGcoGE+CyL9Bbh6VlvuMi bth++eP/e+Y+ozVZHNynhnYaW9oc/j+OzdzFtloS2BfwOKL+yilOsK3z78dDoe0T D8TcZKI3+AlPoK85AkQzxlODaLkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBga4Vo4HEsVhSeje1syDwi3u1ifMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FlODlmMWI0LWVmNjMtNDUzOS04NDU1LTk4YzY3MTk5NWNjZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hZTg5ZjFi NC1lZjYzLTQ1MzktODQ1NS05OGM2NzE5OTVjY2YvMC8xODFBRTE1QTM4MUM0QjE1 ODUyN0EzN0I1QjMyMEYwOEI3QkI1ODlGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6SsMA0GCSqGSIb3DQEBCwUAA4IBAQCboVdJvmiT7scOo5EUXCtVbWXF7o4Y xMQH9fLC0Vt674ELdZQ2+4iQmBy+U+OpshLRZXY1vaPvPbA0IwnsSHO9/rGSbXwC OTOvqrAXMMgAttaIP40M+eVkgSe2jYXFZ758Q30qNkRSf6Cw82nuFqNwvvF5uuVu jgzz8uUe+ZfuipxuQxQJmNEP47p1HDl1o8nMU8qXFUZUnGJ5u4upyTPH1VOjRay7 UpYt3lXAeC0c9m7hQHikYHShargJEqcHrCK5v140mmgM06yVBrcWyF747mh+6ewb EFjqMuvqKfc66VZMiIhCFW5xlC18S31/nfmE9vrZSZALGRbCXZFtjI+s -----END CERTIFICATE-----Generated at Tue May 12 22:45:57 2026 by rpki-client