$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/19101281C951DCE434F1B713AE570F59EE413A09.cer File: 19101281C951DCE434F1B713AE570F59EE413A09.cer (raw, json) Hash identifier: cT2mYW00MDrs12xjh5+D0e2Q+1SpitKfjQdkPaLxFkg= Subject key identifier: 19:10:12:81:C9:51:DC:E4:34:F1:B7:13:AE:57:0F:59:EE:41:3A:09 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5857D32877CB9BF9CC69946082021C52A8EAFB82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft caRepository: rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:02:44 +0000 Certificate not after: Sun 02 May 2027 00:07:44 +0000 Subordinate resources: IP: 103.208.100.0/22 IP: 2404:3e80::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:57:d3:28:77:cb:9b:f9:cc:69:94:60:82:02:1c:52:a8:ea:fb:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:02:44 2026 GMT Not After : May 2 00:07:44 2027 GMT Subject: CN=19101281C951DCE434F1B713AE570F59EE413A09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6a:d8:bc:54:2d:e1:36:a0:10:17:d2:1f:4d: 30:87:99:65:55:c7:f7:54:a9:9c:69:13:e7:3c:28: fc:1b:3d:77:64:64:b3:73:bf:f9:57:ee:43:db:20: f5:e3:74:76:ed:8f:78:5e:60:f1:58:45:7d:bf:14: 50:42:f6:18:76:0f:26:b1:1d:32:12:d8:17:f6:51: 1d:1d:57:2f:17:ad:b0:8b:6e:5c:e7:0b:51:e5:2c: 7e:26:34:42:e7:83:16:fa:7b:97:1c:1e:29:a1:38: f6:6a:d4:02:0e:25:3b:04:83:ea:63:c6:84:1b:f9: 56:87:69:0f:ff:1b:cd:c9:d7:e4:1b:c8:d4:b4:48: d9:64:db:45:c8:6d:91:8b:9b:90:69:8b:59:36:71: 43:42:ad:aa:ad:8b:2c:8a:8e:50:a3:a8:1f:e4:f9: 29:0b:0f:0c:bd:7a:be:40:1c:cb:02:8a:ce:65:9a: ca:08:fe:05:22:5e:54:22:0a:83:8b:fc:5b:01:04: ec:ea:b8:e1:c6:c9:cf:59:73:12:95:a8:f5:4d:3b: 69:31:11:1e:cc:04:91:58:74:aa:97:81:8b:33:6a: b9:31:e9:13:01:df:f0:fd:9b:6d:6a:86:4d:7e:c4: 00:84:96:d1:9c:49:4f:04:98:d0:7a:70:12:9d:78: 10:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:10:12:81:C9:51:DC:E4:34:F1:B7:13:AE:57:0F:59:EE:41:3A:09 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/19101281C951DCE434F1B713AE570F59EE413A09.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.208.100.0/22 IPv6: 2404:3e80::/32 Signature Algorithm: sha256WithRSAEncryption 5c:4d:f2:d6:6f:5d:67:26:d7:92:68:d0:73:56:40:f6:66:50: e2:df:79:b1:b0:c4:5d:c7:03:f7:42:e1:e1:b5:dc:92:97:5c: 10:79:96:a7:fd:e7:e1:74:aa:47:69:3d:28:d8:e2:df:94:d0: f4:dc:4e:86:95:07:5c:57:5a:a6:4e:bf:8b:e6:1b:79:ae:18: 59:a5:78:9c:25:f5:27:45:e7:db:0a:73:66:15:f5:6c:3d:81: f1:6f:d8:8f:17:89:c9:fa:71:3b:97:79:0a:c0:7c:fb:f5:d1: ff:8f:e0:7d:58:22:fe:5f:80:6f:ba:e3:96:36:8c:80:6e:01: 94:ae:ca:78:0e:1c:ab:10:9f:cb:24:23:6a:25:50:62:1d:03: f9:4f:95:54:00:49:18:12:52:2c:d7:c9:18:72:f1:a5:0d:c5: 4e:d7:b1:a3:f2:4a:c8:74:cb:c6:90:dd:cd:e6:8d:d1:0f:9b: aa:41:42:33:c1:de:7f:b6:0c:f2:ed:70:07:1e:d9:8a:6a:ce: f5:0e:b0:be:11:9a:5f:37:9e:0e:a6:02:a7:d1:37:d2:91:50: 9a:ab:7c:38:b2:2d:e6:8c:98:3c:a9:c3:97:6f:7a:e0:85:7b: 1e:5e:98:96:43:94:dc:9c:5c:5e:9d:13:b4:d4:fc:2f:36:9d: 1f:cb:99:9c -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUWFfTKHfLm/nMaZRgggIcUqjq+4IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDI0NFoX DTI3MDUwMjAwMDc0NFowMzExMC8GA1UEAxMoMTkxMDEyODFDOTUxRENFNDM0RjFC NzEzQUU1NzBGNTlFRTQxM0EwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANFq2LxULeE2oBAX0h9NMIeZZVXH91SpnGkT5zwo/Bs9d2Rks3O/+VfuQ9sg 9eN0du2PeF5g8VhFfb8UUEL2GHYPJrEdMhLYF/ZRHR1XLxetsItuXOcLUeUsfiY0 QueDFvp7lxweKaE49mrUAg4lOwSD6mPGhBv5VodpD/8bzcnX5BvI1LRI2WTbRcht kYubkGmLWTZxQ0Ktqq2LLIqOUKOoH+T5KQsPDL16vkAcywKKzmWaygj+BSJeVCIK g4v8WwEE7Oq44cbJz1lzEpWo9U07aTERHswEkVh0qpeBizNquTHpEwHf8P2bbWqG TX7EAISW0ZxJTwSY0HpwEp14EOUCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBkQEoHJUdzkNPG3E65XD1nuQToJMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzIyYzY5NDQwLThiMTctNGE2OC1hMGZhLTY2MTU5ZTIxNjJlMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yMmM2OTQ0 MC04YjE3LTRhNjgtYTBmYS02NjE1OWUyMTYyZTAvMC8xOTEwMTI4MUM5NTFEQ0U0 MzRGMUI3MTNBRTU3MEY1OUVFNDEzQTA5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ9BkMA0EAgACMAcDBQAkBD6AMA0GCSqGSIb3DQEBCwUAA4IBAQBcTfLWb11n JteSaNBzVkD2ZlDi33mxsMRdxwP3QuHhtdySl1wQeZan/efhdKpHaT0o2OLflND0 3E6GlQdcV1qmTr+L5ht5rhhZpXicJfUnRefbCnNmFfVsPYHxb9iPF4nJ+nE7l3kK wHz79dH/j+B9WCL+X4BvuuOWNoyAbgGUrsp4DhyrEJ/LJCNqJVBiHQP5T5VUAEkY ElIs18kYcvGlDcVO17Gj8krIdMvGkN3N5o3RD5uqQUIzwd5/tgzy7XAHHtmKas71 DrC+EZpfN54OpgKn0TfSkVCaq3w4si3mjJg8qcOXb3rghXseXpiWQ5TcnFxenRO0 1PwvNp0fy5mc -----END CERTIFICATE-----Generated at Tue May 12 22:03:47 2026 by rpki-client