$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1B06933632B5A267F98A1716F3CB78EA840D6E65.cer File: 1B06933632B5A267F98A1716F3CB78EA840D6E65.cer (raw, json) Hash identifier: MDab6GX5lG6dvaoZs3eTKZKQiTAEMT0P+/28KRZxnYo= Subject key identifier: 1B:06:93:36:32:B5:A2:67:F9:8A:17:16:F3:CB:78:EA:84:0D:6E:65 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6948973618425EEB61F7B4CF0318B6333741E0D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:41:40 +0000 Certificate not after: Sun 02 May 2027 00:46:40 +0000 Subordinate resources: IP: 103.225.44.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:48:97:36:18:42:5e:eb:61:f7:b4:cf:03:18:b6:33:37:41:e0:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:41:40 2026 GMT Not After : May 2 00:46:40 2027 GMT Subject: CN=1B06933632B5A267F98A1716F3CB78EA840D6E65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c0:5f:e4:3e:8d:21:c6:3d:65:92:9b:25:f3: 6a:34:2d:d0:d5:84:14:a7:aa:96:b9:70:27:a4:7c: 5b:29:3f:3d:69:dd:48:10:e2:d6:11:41:58:e7:86: cf:10:b3:05:86:41:9a:77:46:56:4d:2a:d0:8e:f7: b5:fc:ed:73:f4:a5:93:95:90:9a:fb:83:17:37:fc: 54:e3:f9:53:da:7d:be:84:42:c9:3f:f4:ef:60:96: fd:78:9f:2a:50:ee:8c:07:86:d2:71:ce:c4:f8:15: af:f3:ea:6e:97:02:7b:ef:50:37:fb:0e:98:4b:a9: 1b:25:82:59:28:80:78:11:af:a9:dd:1e:46:21:fc: 93:5f:75:b0:12:22:ee:11:dd:5e:5c:c8:92:b9:86: 85:8b:10:4a:b8:0e:26:70:98:ef:60:43:a2:1c:fe: a6:07:a2:3d:57:82:f1:e7:b1:9b:6c:bb:55:4a:08: 2b:1a:bd:93:db:4d:f5:5d:15:3d:23:ce:5c:74:fd: 4c:99:53:70:77:00:ad:0d:25:d2:aa:6b:45:f9:27: 39:bc:39:16:8c:06:26:32:d2:b9:75:b4:b3:6d:90: a9:21:e3:b8:34:13:69:93:c5:2a:05:7a:22:07:1b: b0:37:25:12:e7:62:6a:02:fc:21:07:58:6c:e7:8b: 31:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:06:93:36:32:B5:A2:67:F9:8A:17:16:F3:CB:78:EA:84:0D:6E:65 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/1B06933632B5A267F98A1716F3CB78EA840D6E65.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.225.44.0/23 Signature Algorithm: sha256WithRSAEncryption 22:07:15:08:79:a0:b1:83:95:87:40:e8:d7:0c:17:71:b6:50: 7d:60:8d:55:ea:1e:06:fb:30:ab:59:45:c5:75:d6:65:3e:2b: 47:62:a9:c6:0f:c9:f9:95:63:87:60:7e:30:59:8c:76:54:64: 27:dc:31:4d:08:72:07:a0:31:81:6f:89:75:04:83:7b:8e:68: bd:62:dc:c8:3e:d7:2e:98:e2:11:be:04:46:ec:cc:d6:bf:6a: fb:65:e4:ab:91:82:81:1d:7e:d8:17:1d:f0:dc:cd:53:b5:c2: 6e:9b:50:e1:d7:52:42:87:b6:d4:f3:8f:c1:ac:69:2d:48:94: 4f:71:3b:c1:01:b5:8c:43:0d:03:6a:1a:81:53:48:7a:d8:c9: f4:78:17:65:93:7c:5a:69:25:1c:11:6f:b4:ff:d5:d7:90:5d: 08:97:a4:8d:8b:41:c6:9e:ce:5e:c5:44:2a:6e:b6:1d:9f:9c: 54:49:17:3a:2b:00:94:e7:62:0a:81:06:ce:e1:30:24:9b:41: fc:ca:13:06:be:17:df:09:34:f8:4e:ec:da:db:e6:df:ef:49: a6:5b:0f:d9:78:1d:c1:9f:bc:7b:0b:44:77:f9:ff:f0:99:10: 9f:3b:59:fa:80:c5:45:d0:11:55:e2:2d:4e:21:8a:f7:c1:24: d9:59:a5:a0 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUaUiXNhhCXuth97TPAxi2MzdB4NcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDE0MFoX DTI3MDUwMjAwNDY0MFowMzExMC8GA1UEAxMoMUIwNjkzMzYzMkI1QTI2N0Y5OEEx NzE2RjNDQjc4RUE4NDBENkU2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKPAX+Q+jSHGPWWSmyXzajQt0NWEFKeqlrlwJ6R8Wyk/PWndSBDi1hFBWOeG zxCzBYZBmndGVk0q0I73tfztc/Slk5WQmvuDFzf8VOP5U9p9voRCyT/072CW/Xif KlDujAeG0nHOxPgVr/PqbpcCe+9QN/sOmEupGyWCWSiAeBGvqd0eRiH8k191sBIi 7hHdXlzIkrmGhYsQSrgOJnCY72BDohz+pgeiPVeC8eexm2y7VUoIKxq9k9tN9V0V PSPOXHT9TJlTcHcArQ0l0qprRfknObw5FowGJjLSuXW0s22QqSHjuDQTaZPFKgV6 IgcbsDclEudiagL8IQdYbOeLMdsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBsGkzYytaJn+YoXFvPLeOqEDW5lMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVjZTZhYzAxLThlYWMtNDZjNS05NDY5LTM1ZWZhMzYwOTlmZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81Y2U2YWMw MS04ZWFjLTQ2YzUtOTQ2OS0zNWVmYTM2MDk5ZmQvMC8xQjA2OTMzNjMyQjVBMjY3 Rjk4QTE3MTZGM0NCNzhFQTg0MEQ2RTY1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ+EsMA0GCSqGSIb3DQEBCwUAA4IBAQAiBxUIeaCxg5WHQOjXDBdxtlB9YI1V 6h4G+zCrWUXFddZlPitHYqnGD8n5lWOHYH4wWYx2VGQn3DFNCHIHoDGBb4l1BIN7 jmi9YtzIPtcumOIRvgRG7MzWv2r7ZeSrkYKBHX7YFx3w3M1TtcJum1Dh11JCh7bU 84/BrGktSJRPcTvBAbWMQw0DahqBU0h62Mn0eBdlk3xaaSUcEW+0/9XXkF0Il6SN i0HGns5exUQqbrYdn5xUSRc6KwCU52IKgQbO4TAkm0H8yhMGvhffCTT4Tuza2+bf 70mmWw/ZeB3Bn7x7C0R3+f/wmRCfO1n6gMVF0BFV4i1OIYr3wSTZWaWg -----END CERTIFICATE-----Generated at Wed May 13 02:51:06 2026 by rpki-client