$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.cer File: 1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.cer (raw, json) Hash identifier: NOfyfv9YXtICCcFsWXAOzsxBJCAmCAwGtHiH3AF8bAQ= Subject key identifier: 1B:65:90:9C:14:04:B0:F0:7F:8F:36:7C:E3:EE:6E:FA:3F:88:1D:E5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6AFDDEB2F948F3D50BC44FB11109A8D04507AE5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:08:19 +0000 Certificate not after: Sun 02 May 2027 01:13:19 +0000 Subordinate resources: IP: 103.146.196.0/23 IP: 2405:9ec0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:fd:de:b2:f9:48:f3:d5:0b:c4:4f:b1:11:09:a8:d0:45:07:ae:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:08:19 2026 GMT Not After : May 2 01:13:19 2027 GMT Subject: CN=1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0e:d7:ae:fb:70:21:81:15:19:bb:a9:6a:d0: c7:eb:de:df:d3:2d:f6:10:54:ec:c6:60:0d:8b:27: 6b:b9:92:dc:b6:07:7d:42:49:6c:6b:ef:92:2d:14: 82:de:0f:2d:23:87:97:24:0e:7d:f3:de:99:53:d8: 0e:d5:5c:bc:52:52:4b:82:df:9a:51:f6:d8:e3:eb: a2:10:5b:86:dd:83:ad:80:38:75:a5:ad:95:7a:87: 5e:fb:ca:5c:7f:9e:9a:7d:96:5c:e9:32:54:a7:b6: d9:cb:ad:14:50:5d:c3:54:9e:aa:fc:0f:ca:bd:a3: 37:47:7b:9a:a7:7a:27:3c:8c:5a:8a:63:73:39:54: 78:fd:39:96:8e:c5:f7:6a:32:c7:25:60:ea:db:c7: 82:f6:31:76:9c:18:44:bc:1b:ae:a2:8c:d2:39:1f: c9:7a:53:ad:c2:1d:1f:2c:32:15:93:21:97:c5:5a: 93:e3:75:f4:7b:47:e8:ba:a5:11:97:cc:96:84:e0: 29:e9:1e:37:5e:22:88:5b:f8:48:6d:60:73:d3:b2: 4d:16:8c:55:0f:46:86:cb:a2:50:87:e5:6b:c0:14: 93:3a:23:43:68:ea:7d:1f:c9:7a:5e:1d:8f:1f:2c: 08:4a:8e:f0:f9:3f:77:29:85:5f:c1:24:75:65:46: 41:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:65:90:9C:14:04:B0:F0:7F:8F:36:7C:E3:EE:6E:FA:3F:88:1D:E5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/1B65909C1404B0F07F8F367CE3EE6EFA3F881DE5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.196.0/23 IPv6: 2405:9ec0::/32 Signature Algorithm: sha256WithRSAEncryption 0d:11:42:76:e2:09:28:5b:5a:46:85:ce:98:44:ac:4b:39:dd: d4:05:f5:12:39:c1:4c:25:d0:56:b3:90:e0:c7:87:5a:28:82: 8e:50:e7:cc:2b:ab:9c:1c:84:35:76:d3:00:a7:c3:22:2b:7b: 0a:df:c0:ed:33:d6:4e:0f:70:eb:fb:b6:90:bd:37:7c:04:99: c1:47:32:ea:c6:9d:88:0f:a5:3d:06:45:73:e7:75:fd:6b:b5: 45:c0:cf:15:5a:19:89:9b:d4:5f:aa:8c:89:8a:12:1e:ff:78: f2:92:cc:a0:32:7a:3b:21:82:45:57:c7:59:41:aa:19:13:70: 7c:ed:2c:a1:de:3a:1f:d2:93:bc:81:58:9a:72:28:1c:c2:51: f7:d8:9b:eb:e9:45:47:47:86:e3:ea:ac:57:cc:89:49:76:b7: e5:2a:39:3f:d3:4a:23:25:95:88:61:fa:cc:ac:45:98:53:76: f3:18:c8:59:9b:eb:60:f4:b6:e7:e1:bf:17:88:7a:ab:7b:39: f6:5b:dc:2c:33:e3:7c:96:6e:fd:96:84:26:d7:c7:f6:40:9e: a5:9b:04:c4:c3:43:37:e4:f8:c6:21:22:64:33:4c:fb:0a:3e: 98:fe:50:dd:38:11:bd:fe:dd:c3:0c:09:8b:f2:03:54:44:49: cd:70:93:16 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUav3esvlI89ULxE+xEQmo0EUHrl0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDgxOVoX DTI3MDUwMjAxMTMxOVowMzExMC8GA1UEAxMoMUI2NTkwOUMxNDA0QjBGMDdGOEYz NjdDRTNFRTZFRkEzRjg4MURFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKoO1677cCGBFRm7qWrQx+ve39Mt9hBU7MZgDYsna7mS3LYHfUJJbGvvki0U gt4PLSOHlyQOffPemVPYDtVcvFJSS4LfmlH22OProhBbht2DrYA4daWtlXqHXvvK XH+emn2WXOkyVKe22cutFFBdw1SeqvwPyr2jN0d7mqd6JzyMWopjczlUeP05lo7F 92oyxyVg6tvHgvYxdpwYRLwbrqKM0jkfyXpTrcIdHywyFZMhl8Vak+N19HtH6Lql EZfMloTgKekeN14iiFv4SG1gc9OyTRaMVQ9GhsuiUIfla8AUkzojQ2jqfR/Jel4d jx8sCEqO8Pk/dymFX8EkdWVGQakCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBtlkJwUBLDwf482fOPubvo/iB3lMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzgzNTA0OGM2LThjY2QtNDYzZC1hZDM0LWFlNzQyODY0N2E5Yy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84MzUwNDhj Ni04Y2NkLTQ2M2QtYWQzNC1hZTc0Mjg2NDdhOWMvMC8xQjY1OTA5QzE0MDRCMEYw N0Y4RjM2N0NFM0VFNkVGQTNGODgxREU1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5LEMA0EAgACMAcDBQAkBZ7AMA0GCSqGSIb3DQEBCwUAA4IBAQANEUJ24gko W1pGhc6YRKxLOd3UBfUSOcFMJdBWs5Dgx4daKIKOUOfMK6ucHIQ1dtMAp8MiK3sK 38DtM9ZOD3Dr+7aQvTd8BJnBRzLqxp2ID6U9BkVz53X9a7VFwM8VWhmJm9RfqoyJ ihIe/3jyksygMno7IYJFV8dZQaoZE3B87Syh3jof0pO8gViacigcwlH32Jvr6UVH R4bj6qxXzIlJdrflKjk/00ojJZWIYfrMrEWYU3bzGMhZm+tg9Lbn4b8XiHqrezn2 W9wsM+N8lm79loQm18f2QJ6lmwTEw0M35PjGISJkM0z7Cj6Y/lDdOBG9/t3DDAmL 8gNUREnNcJMW -----END CERTIFICATE-----Generated at Tue May 12 22:38:47 2026 by rpki-client