$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.cer File: 1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.cer (raw, json) Hash identifier: oo+P6ag4r25zy1j/yXjVM1VQw+RUwH5dakykxeJdV8Y= Subject key identifier: 1B:61:A1:1A:0A:76:62:A1:FB:A2:20:B1:A0:0F:ED:8B:7E:03:D9:5C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 27C34196C48A836B384496CEC6D226FDE54F7386 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:05:27 +0000 Certificate not after: Sun 02 May 2027 00:10:27 +0000 Subordinate resources: IP: 103.164.84.0/24 IP: 103.217.76.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:c3:41:96:c4:8a:83:6b:38:44:96:ce:c6:d2:26:fd:e5:4f:73:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:05:27 2026 GMT Not After : May 2 00:10:27 2027 GMT Subject: CN=1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:00:68:ec:2a:e2:3b:5b:6e:db:ab:97:4d:b2: 24:1b:19:ac:4e:e0:b1:e1:ca:9c:00:f3:a9:61:8c: af:6e:be:c3:7b:c6:89:51:7b:7b:80:d0:03:a9:f5: eb:e9:0c:34:e4:e4:bb:07:05:3e:8b:81:b2:45:55: 58:bf:8e:2b:cc:5b:6b:e6:d0:89:90:1c:87:c8:aa: 32:6e:cf:67:86:79:79:1d:26:7d:ca:c2:af:81:8d: e0:eb:9e:56:b4:17:ce:8e:95:df:72:8e:53:19:34: 7d:98:ef:90:00:33:14:4a:e0:e7:8a:31:7f:d3:88: 10:20:5d:09:43:82:34:4e:c6:75:9f:4d:fd:22:fc: a7:9f:db:08:e8:88:58:9a:3e:25:50:cd:3a:6e:df: 48:16:48:46:5f:18:a0:80:96:c3:51:63:c6:60:18: 49:11:2b:6d:64:eb:d2:74:84:06:d0:fc:3d:0b:59: 66:f1:d7:a1:e0:e1:75:f5:a0:d7:c0:9e:ff:e0:88: c1:cb:a6:6e:7d:2b:c5:cf:9c:7f:b3:89:15:f9:5b: d5:3f:8e:d7:20:14:94:1b:90:da:ca:9c:83:f3:42: 2c:e0:30:80:80:41:9c:7d:2a:2f:5f:b0:0c:3d:7c: ca:12:94:d3:5e:f4:44:e1:44:87:1f:0d:ed:2c:1c: 0b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:61:A1:1A:0A:76:62:A1:FB:A2:20:B1:A0:0F:ED:8B:7E:03:D9:5C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/1B61A11A0A7662A1FBA220B1A00FED8B7E03D95C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.84.0/24 103.217.76.0/24 Signature Algorithm: sha256WithRSAEncryption a6:e8:c7:82:f5:6c:08:03:f1:e8:d5:ec:42:54:b4:e3:eb:be: a0:ab:87:6d:05:00:75:ca:41:6e:8b:03:c5:81:02:93:84:2a: 13:51:35:10:ee:b8:f4:a5:1a:81:07:f9:3f:e0:c7:e9:59:de: 0e:c0:93:be:18:84:a2:bb:56:2e:ab:64:84:bb:e7:b6:c3:70: c3:70:29:59:1b:ea:b1:19:95:39:96:74:07:9a:ed:84:ad:e7: 49:0f:e0:3c:14:54:4b:0a:c8:ba:ce:cf:83:b3:85:3b:a5:9f: d1:bc:64:00:fc:bd:c7:85:f3:70:5f:5a:64:7f:45:bd:dd:9f: 21:89:2a:7a:86:e9:d6:33:42:ca:91:44:e6:62:9d:61:b8:a3: 07:7f:7f:5e:b5:43:89:f6:11:cd:01:d4:65:94:2d:c0:2f:88: c9:09:cc:da:ba:c9:ea:5f:4f:e7:9c:74:fa:3b:38:a4:1f:2f: 2d:3b:2b:09:03:89:88:52:05:91:69:38:fc:81:b3:6e:9e:4e: 17:c4:c8:8e:d4:5b:44:f7:85:fe:03:0b:26:74:0d:3b:8f:5b: ac:79:2a:3f:bc:1d:e4:48:55:02:7e:a1:3b:e7:83:38:c8:9f: 83:fd:cf:8f:f0:d6:8d:80:c1:0e:eb:b3:00:32:e0:28:1d:d7: 84:19:bd:26 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUJ8NBlsSKg2s4RJbOxtIm/eVPc4YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDUyN1oX DTI3MDUwMjAwMTAyN1owMzExMC8GA1UEAxMoMUI2MUExMUEwQTc2NjJBMUZCQTIy MEIxQTAwRkVEOEI3RTAzRDk1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKwAaOwq4jtbbturl02yJBsZrE7gseHKnADzqWGMr26+w3vGiVF7e4DQA6n1 6+kMNOTkuwcFPouBskVVWL+OK8xba+bQiZAch8iqMm7PZ4Z5eR0mfcrCr4GN4Oue VrQXzo6V33KOUxk0fZjvkAAzFErg54oxf9OIECBdCUOCNE7GdZ9N/SL8p5/bCOiI WJo+JVDNOm7fSBZIRl8YoICWw1FjxmAYSRErbWTr0nSEBtD8PQtZZvHXoeDhdfWg 18Ce/+CIwcumbn0rxc+cf7OJFflb1T+O1yAUlBuQ2sqcg/NCLOAwgIBBnH0qL1+w DD18yhKU0170ROFEhx8N7SwcCzUCAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBthoRoKdmKh+6IgsaAP7Yt+A9lcMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzI3ZWU2YmYzLTJiZGEtNGNhNC1hNWU3LTZlNzA2MzI0MDRiNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yN2VlNmJm My0yYmRhLTRjYTQtYTVlNy02ZTcwNjMyNDA0YjQvMC8xQjYxQTExQTBBNzY2MkEx RkJBMjIwQjFBMDBGRUQ4QjdFMDNEOTVDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQAZ6RUAwQAZ9lMMA0GCSqGSIb3DQEBCwUAA4IBAQCm6MeC9WwIA/Ho1exCVLTj 676gq4dtBQB1ykFuiwPFgQKThCoTUTUQ7rj0pRqBB/k/4MfpWd4OwJO+GISiu1Yu q2SEu+e2w3DDcClZG+qxGZU5lnQHmu2EredJD+A8FFRLCsi6zs+Ds4U7pZ/RvGQA /L3HhfNwX1pkf0W93Z8hiSp6hunWM0LKkUTmYp1huKMHf39etUOJ9hHNAdRllC3A L4jJCczausnqX0/nnHT6OzikHy8tOysJA4mIUgWRaTj8gbNunk4XxMiO1FtE94X+ AwsmdA07j1useSo/vB3kSFUCfqE754M4yJ+D/c+P8NaNgMEO67MAMuAoHdeEGb0m -----END CERTIFICATE-----Generated at Tue May 12 22:16:33 2026 by rpki-client