$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer File: 197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.cer (raw, json) Hash identifier: YKgViF/nuJje0rGeaW3+zq88/RFopt27mpr38p7Tvx0= Subject key identifier: 19:7B:1D:CA:49:5B:B9:DA:F5:65:AA:D1:2E:5E:36:1A:7A:0B:68:FC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6599B287B2508C9992B32B5143B79CC8B7CA3DC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:49:41 +0000 Certificate not after: Sun 02 May 2027 01:54:41 +0000 Subordinate resources: IP: 103.75.66.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:99:b2:87:b2:50:8c:99:92:b3:2b:51:43:b7:9c:c8:b7:ca:3d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:49:41 2026 GMT Not After : May 2 01:54:41 2027 GMT Subject: CN=197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9b:c2:76:15:55:59:63:ab:00:95:46:b3:35: 40:87:de:9c:6a:7d:d8:78:b7:59:10:2f:2f:d7:ed: 7b:09:78:43:4d:2d:d4:0f:c3:90:95:6b:6a:71:5e: 0d:fa:98:28:99:e1:86:de:91:e2:e4:12:1c:84:61: 3b:d4:ae:da:94:8c:7a:79:8e:0c:88:46:e7:71:06: 5f:cb:9c:4c:05:bb:d1:96:41:d9:32:78:9b:6d:c3: c3:07:fa:40:b8:37:02:a0:4c:dd:f4:c1:21:25:ee: b8:95:74:3b:bf:ea:19:dd:7a:29:9f:06:8f:c7:79: c1:76:13:9d:93:80:e3:c9:38:1b:be:0e:4c:59:a6: f9:e2:a9:f8:bc:e8:e2:69:23:17:d5:8a:65:25:bb: d4:e3:6e:77:c8:6f:57:70:05:4d:4e:ec:02:4f:61: 78:cb:49:4b:79:ce:0a:cb:7d:f8:df:d5:45:0f:27: b7:5d:79:24:04:ab:c2:d5:45:99:e3:5c:d9:92:f4: c0:f5:f0:43:49:41:e0:7f:5f:cb:d7:a5:01:29:2b: 0c:b8:ac:95:18:aa:0a:b6:3b:e8:70:80:5d:c1:e3: 57:db:99:c1:10:64:2e:a6:f6:87:b9:aa:d4:73:a1: e7:6d:d4:08:ed:30:3e:f2:15:f1:96:81:9b:21:fe: 93:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:7B:1D:CA:49:5B:B9:DA:F5:65:AA:D1:2E:5E:36:1A:7A:0B:68:FC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/197B1DCA495BB9DAF565AAD12E5E361A7A0B68FC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.75.66.0/23 Signature Algorithm: sha256WithRSAEncryption 80:03:c3:27:1f:08:99:13:4f:da:db:6c:05:c2:9f:b5:3b:80: 21:05:5e:5d:a5:f2:4c:ba:a8:d8:d9:1c:4a:0b:21:af:07:e9: ad:d9:50:62:09:9f:31:c9:b2:6d:f9:c9:5f:ac:eb:de:55:8f: 9b:b6:79:8f:1a:f0:24:48:93:c3:cf:43:12:fc:a6:ce:d6:91: 0a:5c:0d:ef:a1:b2:cd:41:14:88:b2:3d:db:0b:82:8f:f7:a5: 22:ca:bf:19:9d:d8:6a:29:34:ff:7a:27:75:ee:2e:2f:e6:28: 15:ff:95:88:46:3d:7e:d9:d1:e6:c4:b2:32:b8:2a:62:45:72: c8:c7:d6:da:ea:16:bc:2f:dc:1e:80:3d:f1:1c:91:6a:5c:da: 6a:7b:0a:33:42:f0:83:47:12:03:ff:11:35:d3:20:e2:f2:2c: a1:ba:e8:08:41:5b:ee:0f:18:0a:3a:e0:90:98:1f:de:3c:92: 64:a5:d4:cf:0f:0a:54:d6:fa:ab:a1:92:8a:72:6a:be:fd:90: 5d:ca:f8:5e:9e:55:5e:60:6e:28:d3:cc:73:c2:aa:1e:db:4b: 5c:84:3c:79:a6:2a:a5:1d:94:89:9d:59:56:6a:c9:4c:57:32: e4:0e:09:18:e0:d1:c2:e5:09:cc:df:55:3d:c3:9b:a7:5c:64: b5:f7:86:e1 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUZZmyh7JQjJmSsytRQ7ecyLfKPcgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDk0MVoX DTI3MDUwMjAxNTQ0MVowMzExMC8GA1UEAxMoMTk3QjFEQ0E0OTVCQjlEQUY1NjVB QUQxMkU1RTM2MUE3QTBCNjhGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKKbwnYVVVljqwCVRrM1QIfenGp92Hi3WRAvL9ftewl4Q00t1A/DkJVranFe DfqYKJnhht6R4uQSHIRhO9Su2pSMenmODIhG53EGX8ucTAW70ZZB2TJ4m23Dwwf6 QLg3AqBM3fTBISXuuJV0O7/qGd16KZ8Gj8d5wXYTnZOA48k4G74OTFmm+eKp+Lzo 4mkjF9WKZSW71ONud8hvV3AFTU7sAk9heMtJS3nOCst9+N/VRQ8nt115JASrwtVF meNc2ZL0wPXwQ0lB4H9fy9elASkrDLislRiqCrY76HCAXcHjV9uZwRBkLqb2h7mq 1HOh523UCO0wPvIV8ZaBmyH+kxkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBl7HcpJW7na9WWq0S5eNhp6C2j8MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2MzZjc2YzZkLWY4NTAtNGM0OS04NTRjLTU1ZjM4Mjg0NGM5Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jM2Y3NmM2 ZC1mODUwLTRjNDktODU0Yy01NWYzODI4NDRjOTcvMC8xOTdCMURDQTQ5NUJCOURB RjU2NUFBRDEyRTVFMzYxQTdBMEI2OEZDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ0tCMA0GCSqGSIb3DQEBCwUAA4IBAQCAA8MnHwiZE0/a22wFwp+1O4AhBV5d pfJMuqjY2RxKCyGvB+mt2VBiCZ8xybJt+clfrOveVY+btnmPGvAkSJPDz0MS/KbO 1pEKXA3vobLNQRSIsj3bC4KP96Uiyr8ZndhqKTT/eid17i4v5igV/5WIRj1+2dHm xLIyuCpiRXLIx9ba6ha8L9wegD3xHJFqXNpqewozQvCDRxID/xE10yDi8iyhuugI QVvuDxgKOuCQmB/ePJJkpdTPDwpU1vqroZKKcmq+/ZBdyvhenlVeYG4o08xzwqoe 20tchDx5piqlHZSJnVlWaslMVzLkDgkY4NHC5QnM31U9w5unXGS194bh -----END CERTIFICATE-----Generated at Tue May 12 22:03:51 2026 by rpki-client