$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.cer File: 18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.cer (raw, json) Hash identifier: hrZl98shlxAg0+JS8s1OTIezb4Bw9nwnY0OLXqUkz9Q= Subject key identifier: 18:FB:C5:6E:5C:FC:C9:A1:DE:86:87:E2:5F:BC:6D:FC:4A:75:55:AB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 01F3990046ED9D2F4BE39E8B8857666131A959DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:36:03 +0000 Certificate not after: Sun 02 May 2027 01:41:03 +0000 Subordinate resources: IP: 103.144.18.0/23 IP: 2405:62c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:f3:99:00:46:ed:9d:2f:4b:e3:9e:8b:88:57:66:61:31:a9:59:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:36:03 2026 GMT Not After : May 2 01:41:03 2027 GMT Subject: CN=18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:61:d8:4b:5f:6d:ff:90:98:2a:d1:ff:5e:2d: ee:aa:73:09:01:cc:63:c5:59:fa:82:f5:87:6c:38: 52:43:19:51:7d:30:cc:23:60:f3:c3:6d:80:31:67: 45:93:9b:7b:ea:41:7c:a9:27:1b:02:51:c0:b6:5b: b4:86:94:56:7c:a6:49:7e:3a:a9:cd:4a:9a:55:0e: 55:bf:56:ce:86:00:49:2d:8a:cb:6a:03:1b:b5:e6: 84:0a:4d:a7:f4:01:89:ab:f5:45:31:65:ad:19:3c: 8b:2d:40:6e:21:c1:6d:02:67:5b:5f:fe:3f:16:0e: 01:20:d9:1d:50:9e:ae:f9:65:08:ae:3c:a6:80:92: 66:6d:75:ff:ba:2f:39:5a:9f:a1:5b:24:18:f6:05: 36:3c:a6:56:db:b8:0b:e9:f6:7a:dd:ec:9b:65:20: 2c:e0:da:e8:28:5e:88:38:83:ea:63:39:80:11:d7: 43:6c:c7:0b:c7:b7:54:eb:03:fe:83:97:0c:be:29: 20:6f:ab:cb:8d:9e:e2:00:c7:9c:58:16:af:6a:ec: db:57:da:67:3b:c1:fd:d9:df:d4:90:8d:2a:b8:c4: 05:45:07:79:f5:51:d9:3d:84:f4:37:0c:4a:32:11: c5:81:bd:dd:9c:45:80:dd:f4:66:6f:bb:47:c4:fc: c0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 18:FB:C5:6E:5C:FC:C9:A1:DE:86:87:E2:5F:BC:6D:FC:4A:75:55:AB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/18FBC56E5CFCC9A1DE8687E25FBC6DFC4A7555AB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.18.0/23 IPv6: 2405:62c0::/32 Signature Algorithm: sha256WithRSAEncryption 8d:88:c0:2f:3d:c4:fc:85:3b:06:2e:04:30:cf:1c:b6:a6:9c: 97:b4:48:a9:a8:10:89:32:c0:47:ca:c2:f5:67:c2:13:06:7e: f8:5e:ca:56:77:d8:af:00:4d:ac:1f:c6:fc:19:84:9b:d3:e2: 9c:8c:08:0b:e6:31:cc:1b:f3:4c:9b:52:f9:e1:d3:8e:be:64: 50:4f:98:a7:a1:ac:fc:4b:9b:4d:2a:9d:ef:5e:cc:f1:96:c3: e0:7a:15:0d:4c:a5:a2:e9:12:40:31:f0:5d:18:5d:7d:f1:c0: 86:bc:58:24:8f:31:45:8f:69:65:a7:88:a5:b1:d8:cf:64:05: 66:59:39:f2:6d:74:1c:f9:b1:64:3f:63:ab:cf:d3:f2:93:47: 74:fb:05:91:7c:ba:8e:c7:45:0b:bd:88:db:20:1a:14:0a:30: 65:4d:b1:02:92:5c:63:8a:49:26:c0:d1:16:8d:74:a9:92:8d: 3c:64:e2:2d:0c:40:d6:df:58:16:7d:be:b1:8d:4e:cf:58:8c: 8a:e7:37:9c:cc:de:60:4e:9e:17:a4:cb:e5:4a:a3:41:12:9f: 51:20:1c:11:9b:2b:a8:cf:31:03:a0:f4:6f:6d:52:7f:c2:91: 8a:35:37:6a:b0:7a:10:8f:f3:a9:b9:db:4f:27:73:40:51:b3: 7c:71:a8:0a -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUAfOZAEbtnS9L456LiFdmYTGpWd0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzYwM1oX DTI3MDUwMjAxNDEwM1owMzExMC8GA1UEAxMoMThGQkM1NkU1Q0ZDQzlBMURFODY4 N0UyNUZCQzZERkM0QTc1NTVBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZh2Etfbf+QmCrR/14t7qpzCQHMY8VZ+oL1h2w4UkMZUX0wzCNg88NtgDFn RZObe+pBfKknGwJRwLZbtIaUVnymSX46qc1KmlUOVb9WzoYASS2Ky2oDG7XmhApN p/QBiav1RTFlrRk8iy1AbiHBbQJnW1/+PxYOASDZHVCervllCK48poCSZm11/7ov OVqfoVskGPYFNjymVtu4C+n2et3sm2UgLODa6CheiDiD6mM5gBHXQ2zHC8e3VOsD /oOXDL4pIG+ry42e4gDHnFgWr2rs21faZzvB/dnf1JCNKrjEBUUHefVR2T2E9DcM SjIRxYG93ZxFgN30Zm+7R8T8wN8CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBj7xW5c/Mmh3oaH4l+8bfxKdVWrMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FkNTk4ZTk5LWU5ZmYtNGFiZS1iMDhlLTIyNmZkZDA3ZjlhZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hZDU5OGU5 OS1lOWZmLTRhYmUtYjA4ZS0yMjZmZGQwN2Y5YWUvMC8xOEZCQzU2RTVDRkNDOUEx REU4Njg3RTI1RkJDNkRGQzRBNzU1NUFCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5ASMA0EAgACMAcDBQAkBWLAMA0GCSqGSIb3DQEBCwUAA4IBAQCNiMAvPcT8 hTsGLgQwzxy2ppyXtEipqBCJMsBHysL1Z8ITBn74XspWd9ivAE2sH8b8GYSb0+Kc jAgL5jHMG/NMm1L54dOOvmRQT5inoaz8S5tNKp3vXszxlsPgehUNTKWi6RJAMfBd GF198cCGvFgkjzFFj2llp4ilsdjPZAVmWTnybXQc+bFkP2Orz9Pyk0d0+wWRfLqO x0ULvYjbIBoUCjBlTbECklxjikkmwNEWjXSpko08ZOItDEDW31gWfb6xjU7PWIyK 5zeczN5gTp4XpMvlSqNBEp9RIBwRmyuozzEDoPRvbVJ/wpGKNTdqsHoQj/OpudtP J3NAUbN8cagK -----END CERTIFICATE-----Generated at Tue May 12 22:03:34 2026 by rpki-client