$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.cer File: 19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.cer (raw, json) Hash identifier: pzA/W66PP9xry5lApp5ej6+qw6vjcrBrcDbelHQkpEU= Subject key identifier: 19:09:1C:E3:4B:A8:20:F9:6A:BC:2F:9D:8C:24:D9:5C:7C:84:FD:C1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4CFB6E2F972ED8DC0A54B07CB0E064F85C70BF09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:27:57 +0000 Certificate not after: Sun 02 May 2027 02:32:57 +0000 Subordinate resources: IP: 103.145.97.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:fb:6e:2f:97:2e:d8:dc:0a:54:b0:7c:b0:e0:64:f8:5c:70:bf:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:27:57 2026 GMT Not After : May 2 02:32:57 2027 GMT Subject: CN=19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c6:87:67:ac:25:5b:14:0e:aa:5b:dd:a6:9f: 58:7b:b9:3f:82:10:01:9c:b9:7c:dd:42:d8:f5:a9: 5e:c0:0d:17:ae:3d:27:6f:5e:45:cb:11:2b:71:d2: a6:f9:2b:78:af:db:a8:42:6e:07:85:ee:90:8f:c1: 39:4e:b4:10:72:c7:cb:83:85:4e:cf:c5:3a:bd:1a: d2:8c:3d:ef:35:04:51:6d:4a:1d:e4:40:35:a1:6c: 96:30:f6:da:f9:83:a4:d2:19:94:3c:be:f5:8e:60: 6f:7d:f5:f2:34:56:7e:1e:52:92:5d:51:e4:42:a4: e1:a2:59:e8:88:eb:ac:3b:29:df:14:d3:a4:ae:8b: e3:f2:96:31:2c:4e:fd:3d:73:e3:41:9e:77:64:3e: ea:a0:20:88:66:9a:d5:c5:30:6c:1e:a8:77:2c:10: d9:48:b6:68:6a:47:60:1c:b2:b3:5f:44:60:57:56: 59:87:08:ed:20:80:0a:ba:65:69:dd:aa:be:dc:c4: fe:f1:47:5f:0b:e2:63:81:19:78:d9:a6:c6:b3:9f: e6:9e:50:8d:b4:17:d3:a8:18:e4:7c:2a:d9:62:9a: 39:48:8c:d4:c3:7a:9a:cf:ec:08:ca:4a:b1:77:a9: 62:b0:16:05:b1:cb:b1:ad:a2:94:b8:36:0d:14:e1: 69:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:09:1C:E3:4B:A8:20:F9:6A:BC:2F:9D:8C:24:D9:5C:7C:84:FD:C1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/19091CE34BA820F96ABC2F9D8C24D95C7C84FDC1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.97.0/24 Signature Algorithm: sha256WithRSAEncryption 61:f8:54:0c:1b:90:c9:da:8c:b0:40:76:d3:2d:08:0c:2e:42: 9a:32:0e:96:b7:d5:db:c4:85:2a:38:cf:5a:a9:d3:6c:16:44: eb:6e:e1:c9:31:81:81:bd:9d:7b:2e:2c:ea:ac:bc:10:12:84: 1f:2d:83:d5:e9:c1:ef:99:79:d3:4f:32:1f:59:5b:5f:ef:d8: 79:20:85:9b:3d:f7:c4:ee:06:15:02:a5:3d:b8:97:27:54:99: 99:1f:0c:65:7c:8c:e6:26:07:0b:5c:29:1f:99:05:ab:7a:00: 40:37:19:54:5d:b4:96:61:02:cf:b8:f9:ba:08:b2:70:62:d7: fa:5b:9a:b7:05:f6:11:fe:3b:8a:93:36:e4:e8:a4:94:43:a3: 94:a5:d0:d3:75:4e:32:a5:12:11:00:02:aa:50:32:31:d8:c9: ac:0e:af:50:36:bb:ba:ea:04:70:00:49:55:00:b0:82:07:eb: 55:e7:a6:2c:0d:32:22:b5:33:e2:7b:ba:17:35:59:6a:1b:e6: 3f:28:a9:95:58:e6:a8:17:f8:34:37:fe:3d:e7:f0:d0:37:9a: 21:6a:b8:a5:8a:d1:fc:d6:fb:87:f5:94:6c:c4:b1:7d:f3:dc: bd:2b:35:05:ad:0c:32:6f:a6:78:36:e7:f2:ca:0e:88:a2:d5: 6a:e9:9e:57 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUTPtuL5cu2NwKVLB8sOBk+FxwvwkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjc1N1oX DTI3MDUwMjAyMzI1N1owMzExMC8GA1UEAxMoMTkwOTFDRTM0QkE4MjBGOTZBQkMy RjlEOEMyNEQ5NUM3Qzg0RkRDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ3Gh2esJVsUDqpb3aafWHu5P4IQAZy5fN1C2PWpXsANF649J29eRcsRK3HS pvkreK/bqEJuB4XukI/BOU60EHLHy4OFTs/FOr0a0ow97zUEUW1KHeRANaFsljD2 2vmDpNIZlDy+9Y5gb3318jRWfh5Skl1R5EKk4aJZ6IjrrDsp3xTTpK6L4/KWMSxO /T1z40Ged2Q+6qAgiGaa1cUwbB6odywQ2Ui2aGpHYByys19EYFdWWYcI7SCACrpl ad2qvtzE/vFHXwviY4EZeNmmxrOf5p5QjbQX06gY5Hwq2WKaOUiM1MN6ms/sCMpK sXepYrAWBbHLsa2ilLg2DRThaXsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBkJHONLqCD5arwvnYwk2Vx8hP3BMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2YwMzM2MmUyLTk3NjUtNDJiZC1iNTliLTY4ZDQzY2FkZWI1Yy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mMDMzNjJl Mi05NzY1LTQyYmQtYjU5Yi02OGQ0M2NhZGViNWMvMC8xOTA5MUNFMzRCQTgyMEY5 NkFCQzJGOUQ4QzI0RDk1QzdDODRGREMxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ5FhMA0GCSqGSIb3DQEBCwUAA4IBAQBh+FQMG5DJ2oywQHbTLQgMLkKaMg6W t9XbxIUqOM9aqdNsFkTrbuHJMYGBvZ17LizqrLwQEoQfLYPV6cHvmXnTTzIfWVtf 79h5IIWbPffE7gYVAqU9uJcnVJmZHwxlfIzmJgcLXCkfmQWregBANxlUXbSWYQLP uPm6CLJwYtf6W5q3BfYR/juKkzbk6KSUQ6OUpdDTdU4ypRIRAAKqUDIx2MmsDq9Q Nru66gRwAElVALCCB+tV56YsDTIitTPie7oXNVlqG+Y/KKmVWOaoF/g0N/495/DQ N5oharilitH81vuH9ZRsxLF989y9KzUFrQwyb6Z4Nufyyg6IotVq6Z5X -----END CERTIFICATE-----Generated at Tue May 12 22:10:24 2026 by rpki-client