$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer File: 19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer (raw, json) Hash identifier: rHZq+U96YezugbRYFbEmgw6K9bCGJ6ZpIq/69Sj4DN8= Subject key identifier: 19:A7:D2:47:3F:AA:6B:72:E3:99:A4:A1:0F:4B:64:0A:DF:1B:BB:37 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 16753746ECF1C8E9F626F1C7607EF2D060F4A53E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft caRepository: rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:46:44 +0000 Certificate not after: Sun 02 May 2027 00:51:44 +0000 Subordinate resources: IP: 103.181.246.0/23 IP: 2001:df0:7bc0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:75:37:46:ec:f1:c8:e9:f6:26:f1:c7:60:7e:f2:d0:60:f4:a5:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:46:44 2026 GMT Not After : May 2 00:51:44 2027 GMT Subject: CN=19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:22:58:c9:3d:02:28:22:01:3f:2a:4e:bb:17: 52:1d:5e:ad:34:cb:9e:bd:89:d9:73:08:e9:cf:14: e9:69:9c:8f:04:0c:4c:52:c5:af:df:5c:e1:2b:02: 4d:74:04:20:33:2c:a4:3d:18:48:4f:8d:59:89:ce: 7b:31:89:d6:9d:91:3c:65:8d:9b:c7:05:e6:9d:af: ce:b0:73:da:c9:f3:82:74:ba:cc:36:e5:c6:8a:ea: 9f:80:e6:60:4e:27:f2:a9:9b:15:b9:67:e8:74:e3: fa:7c:96:93:3a:d5:29:85:de:2b:6b:1e:8b:7b:5d: 99:52:ce:f4:ba:38:97:d2:ad:62:a9:59:8a:7d:45: 39:66:5b:77:17:51:d3:b5:57:98:90:c6:c9:1f:a7: 32:da:21:90:db:bd:cf:e2:9b:6d:c1:f8:1b:ca:63: 93:b0:9c:22:cb:24:fa:66:a0:24:d2:f2:eb:33:cf: d5:a5:ae:1a:6c:5d:21:6c:13:33:90:22:b1:ad:b2: d6:6d:3f:d3:6a:c1:b0:48:48:c7:fb:85:73:58:62: 64:77:fb:81:c0:f6:76:7d:4f:12:2e:06:d2:56:3b: 0c:c6:70:06:8d:23:e3:a5:d5:76:59:aa:51:4b:86: 03:5b:dc:d8:47:a0:74:16:0d:06:ea:f7:a7:14:f5: 15:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:A7:D2:47:3F:AA:6B:72:E3:99:A4:A1:0F:4B:64:0A:DF:1B:BB:37 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.181.246.0/23 IPv6: 2001:df0:7bc0::/48 Signature Algorithm: sha256WithRSAEncryption 7c:c3:f1:e8:84:18:b7:9e:d3:3a:27:25:3c:b8:4d:15:8b:9c: e8:7e:83:fc:8a:90:82:ed:f0:a0:4f:f3:23:07:7f:f5:80:51: 4b:72:f1:37:bf:57:2a:67:11:a8:6d:07:82:ec:30:ec:7b:f2: 1d:6c:5c:f4:20:81:43:f8:a0:82:5f:c9:fd:f2:40:79:83:11: e6:76:2e:7a:e5:09:c4:e7:25:c3:bf:ed:22:59:1d:8a:4e:13: 52:91:f5:a6:ee:b5:22:eb:2d:b2:78:64:7f:bd:e1:56:6a:f6: 40:f0:aa:23:b2:c3:13:da:a8:9e:81:fe:dd:5f:c8:9c:da:4f: b5:f5:1a:dd:99:ce:cc:29:78:dd:d1:57:b1:bb:bc:b8:44:8b: 4e:c0:fe:71:89:24:87:c4:6a:9b:96:13:73:d6:3e:87:92:d5: ed:72:0d:4f:fb:4b:19:68:22:07:19:3f:15:bd:31:ca:76:fe: e0:88:9a:af:c8:81:0e:1e:f7:9f:61:6b:77:a2:bc:97:87:f4: 81:b3:db:a2:5c:f8:7d:1c:65:20:dc:71:8d:af:6e:4b:c9:55: ef:a8:20:50:c2:71:0c:cb:a7:7a:ee:ac:72:1c:d9:30:c4:94: 8b:eb:aa:cf:fd:d9:6f:26:11:39:fd:d8:24:ab:c0:56:4d:4c: 24:f6:68:2e -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUFnU3RuzxyOn2JvHHYH7y0GD0pT4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDY0NFoX DTI3MDUwMjAwNTE0NFowMzExMC8GA1UEAxMoMTlBN0QyNDczRkFBNkI3MkUzOTlB NEExMEY0QjY0MEFERjFCQkIzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsiWMk9AigiAT8qTrsXUh1erTTLnr2J2XMI6c8U6WmcjwQMTFLFr99c4SsC TXQEIDMspD0YSE+NWYnOezGJ1p2RPGWNm8cF5p2vzrBz2snzgnS6zDblxorqn4Dm YE4n8qmbFbln6HTj+nyWkzrVKYXeK2sei3tdmVLO9Lo4l9KtYqlZin1FOWZbdxdR 07VXmJDGyR+nMtohkNu9z+KbbcH4G8pjk7CcIssk+magJNLy6zPP1aWuGmxdIWwT M5Aisa2y1m0/02rBsEhIx/uFc1hiZHf7gcD2dn1PEi4G0lY7DMZwBo0j46XVdlmq UUuGA1vc2EegdBYNBur3pxT1Fb0CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBmn0kc/qmty45mkoQ9LZArfG7s3MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzY0MWUwOGVmLTNhZTYtNGI5MC1iNDc3LTBlOTE0MGQwNDM4MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82NDFlMDhl Zi0zYWU2LTRiOTAtYjQ3Ny0wZTkxNDBkMDQzODAvMC8xOUE3RDI0NzNGQUE2Qjcy RTM5OUE0QTEwRjRCNjQwQURGMUJCQjM3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ7X2MA8EAgACMAkDBwAgAQ3we8AwDQYJKoZIhvcNAQELBQADggEBAHzD8eiE GLee0zonJTy4TRWLnOh+g/yKkILt8KBP8yMHf/WAUUty8Te/VypnEahtB4LsMOx7 8h1sXPQggUP4oIJfyf3yQHmDEeZ2LnrlCcTnJcO/7SJZHYpOE1KR9abutSLrLbJ4 ZH+94VZq9kDwqiOywxPaqJ6B/t1fyJzaT7X1Gt2ZzswpeN3RV7G7vLhEi07A/nGJ JIfEapuWE3PWPoeS1e1yDU/7SxloIgcZPxW9Mcp2/uCImq/IgQ4e959ha3eivJeH 9IGz26Jc+H0cZSDccY2vbkvJVe+oIFDCcQzLp3rurHIc2TDElIvrqs/92W8mETn9 2CSrwFZNTCT2aC4= -----END CERTIFICATE-----Generated at Tue May 12 22:32:07 2026 by rpki-client