$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1859662B11A1F7335B5E5F6093D493B45F785BCF.cer File: 1859662B11A1F7335B5E5F6093D493B45F785BCF.cer (raw, json) Hash identifier: P/FovyjMba+7fPJdsYv7i+Jcys5/KHFNRNEY5+D+sew= Subject key identifier: 18:59:66:2B:11:A1:F7:33:5B:5E:5F:60:93:D4:93:B4:5F:78:5B:CF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 127886EFF070DEE54F64106BEA9709787C167381 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:02:15 +0000 Certificate not after: Sun 02 May 2027 02:07:15 +0000 Subordinate resources: IP: 103.166.178.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:78:86:ef:f0:70:de:e5:4f:64:10:6b:ea:97:09:78:7c:16:73:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:02:15 2026 GMT Not After : May 2 02:07:15 2027 GMT Subject: CN=1859662B11A1F7335B5E5F6093D493B45F785BCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:07:88:8e:e5:50:57:16:b0:f3:62:e6:aa:f9: ee:f9:df:c8:b9:2b:81:e9:de:39:3d:55:1a:85:35: d6:20:23:d1:2c:47:46:79:02:f2:c1:66:69:10:ee: ff:f4:4d:30:cd:29:e3:58:ab:b3:35:e1:2e:c2:c7: fd:53:40:2e:0b:af:33:44:e0:d8:54:b8:3b:32:0a: e4:34:cb:38:3a:83:d1:50:af:ad:b7:b5:b8:0b:82: 7c:63:44:4a:36:c6:98:d3:a7:77:dc:42:da:7c:5f: d6:22:bc:6e:2f:4a:8b:fb:ae:b2:58:6e:f1:66:12: 53:94:11:29:06:f9:bc:d6:12:d4:ac:c2:9e:cb:5d: d1:bd:af:2d:2b:f5:dc:43:74:1f:65:7a:f1:2e:a9: 12:a2:33:cd:e1:0b:9c:e3:bd:ad:42:cb:a0:97:ab: 6c:0c:5f:c8:a2:99:72:59:1c:db:b7:6d:39:eb:24: 9d:90:a0:91:33:ea:c2:04:09:d6:08:cd:4d:06:2f: fb:51:6d:29:6a:16:d5:f8:a4:38:13:f5:d1:b0:22: c7:57:6b:6c:ab:a0:ff:02:30:78:e7:69:0a:86:32: e5:2d:4b:5c:63:73:16:7b:f3:ad:72:19:6d:e9:e2: 8d:b2:ff:0a:ce:bd:fa:84:81:7f:ce:64:5e:61:6c: fe:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 18:59:66:2B:11:A1:F7:33:5B:5E:5F:60:93:D4:93:B4:5F:78:5B:CF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/1859662B11A1F7335B5E5F6093D493B45F785BCF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.178.0/24 Signature Algorithm: sha256WithRSAEncryption 59:28:dc:6f:60:64:1b:b5:b5:96:0b:6d:1d:f4:a2:fc:80:fc: 3f:14:0c:86:6b:fe:30:1c:cf:1c:01:f6:21:ce:37:52:95:61: b6:bd:ad:fe:b7:b3:12:e6:9e:63:55:7a:95:92:f4:04:83:5f: c2:14:ed:13:0e:6f:f2:2f:6e:2c:9a:c3:28:3f:39:cc:a8:7d: 7f:fc:60:75:b0:56:2d:1b:32:13:8e:ab:20:05:11:88:8d:23: 69:ba:63:5f:c4:1a:4a:93:02:4d:ba:24:62:50:64:67:28:45: 21:6a:21:04:15:6b:50:0b:66:76:34:9e:08:c3:e7:a5:7a:74: 77:08:6a:06:43:90:cb:51:3a:4f:26:68:12:02:70:5f:1c:a0: 6f:1b:bf:2b:f0:c1:f8:7b:1c:ed:55:0e:fe:f8:98:b8:38:2f: 28:e4:2a:10:73:97:2f:70:0b:1d:ac:0b:ae:21:9e:e5:a2:aa: 32:a0:fe:72:2d:57:e8:c7:af:4e:23:e7:86:ca:a6:26:ae:bf: 34:a3:f7:e7:61:94:20:f2:c0:37:8c:34:3d:2c:22:53:4e:8f: 58:44:84:b5:3d:e1:3d:03:ba:ca:ba:3c:ce:53:98:36:91:04: cb:9e:a1:33:f5:0d:6e:b1:ae:70:16:1f:67:f9:15:3f:00:89: e8:08:e9:ab -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUEniG7/Bw3uVPZBBr6pcJeHwWc4EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDIxNVoX DTI3MDUwMjAyMDcxNVowMzExMC8GA1UEAxMoMTg1OTY2MkIxMUExRjczMzVCNUU1 RjYwOTNENDkzQjQ1Rjc4NUJDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL8HiI7lUFcWsPNi5qr57vnfyLkrgeneOT1VGoU11iAj0SxHRnkC8sFmaRDu //RNMM0p41irszXhLsLH/VNALguvM0Tg2FS4OzIK5DTLODqD0VCvrbe1uAuCfGNE SjbGmNOnd9xC2nxf1iK8bi9Ki/uuslhu8WYSU5QRKQb5vNYS1KzCnstd0b2vLSv1 3EN0H2V68S6pEqIzzeELnOO9rULLoJerbAxfyKKZclkc27dtOesknZCgkTPqwgQJ 1gjNTQYv+1FtKWoW1fikOBP10bAix1drbKug/wIweOdpCoYy5S1LXGNzFnvzrXIZ benijbL/Cs69+oSBf85kXmFs/oMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBhZZisRofczW15fYJPUk7RfeFvPMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q5MGFjNWNhLTM1ZGYtNDYwNy05NDA1LTM5N2I3YWFkYjJhNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kOTBhYzVj YS0zNWRmLTQ2MDctOTQwNS0zOTdiN2FhZGIyYTcvMC8xODU5NjYyQjExQTFGNzMz NUI1RTVGNjA5M0Q0OTNCNDVGNzg1QkNGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6ayMA0GCSqGSIb3DQEBCwUAA4IBAQBZKNxvYGQbtbWWC20d9KL8gPw/FAyG a/4wHM8cAfYhzjdSlWG2va3+t7MS5p5jVXqVkvQEg1/CFO0TDm/yL24smsMoPznM qH1//GB1sFYtGzITjqsgBRGIjSNpumNfxBpKkwJNuiRiUGRnKEUhaiEEFWtQC2Z2 NJ4Iw+elenR3CGoGQ5DLUTpPJmgSAnBfHKBvG78r8MH4exztVQ7++Ji4OC8o5CoQ c5cvcAsdrAuuIZ7loqoyoP5yLVfox69OI+eGyqYmrr80o/fnYZQg8sA3jDQ9LCJT To9YRIS1PeE9A7rKujzOU5g2kQTLnqEz9Q1usa5wFh9n+RU/AInoCOmr -----END CERTIFICATE-----Generated at Tue May 12 22:16:22 2026 by rpki-client