$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1BC98AF3C1EF6C07DFFD097E41E4116920987307.cer File: 1BC98AF3C1EF6C07DFFD097E41E4116920987307.cer (raw, json) Hash identifier: 3N8Ujo42AGiC9wgb6K4LsxnAXJuJTsfUOHhZhR/a/rM= Subject key identifier: 1B:C9:8A:F3:C1:EF:6C:07:DF:FD:09:7E:41:E4:11:69:20:98:73:07 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 03FE647CA16D74147BD7AEEA59CEC439940F1EB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:09:45 +0000 Certificate not after: Sun 02 May 2027 02:14:45 +0000 Subordinate resources: IP: 103.189.170.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:fe:64:7c:a1:6d:74:14:7b:d7:ae:ea:59:ce:c4:39:94:0f:1e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:09:45 2026 GMT Not After : May 2 02:14:45 2027 GMT Subject: CN=1BC98AF3C1EF6C07DFFD097E41E4116920987307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e7:9d:36:07:28:a7:89:ef:e9:a0:61:49:6d: ee:52:51:03:07:97:30:a7:c6:82:46:63:7f:ca:58: f9:1e:b7:bd:25:c4:5d:d1:ac:dc:5b:30:ea:57:67: 2d:6a:bf:cd:b6:b3:c1:3f:c3:e2:b7:2a:71:89:2b: 67:b8:26:69:ed:18:a6:ec:02:2f:df:5a:9f:a7:d2: d9:f1:5d:57:66:08:0a:54:24:2e:07:a4:d9:cc:ee: dc:f4:14:75:df:3f:e2:0e:3f:8e:27:f9:2a:86:e4: 06:e8:a5:a0:1c:5c:dd:a4:8a:85:ad:8a:a5:36:36: 25:72:3c:d0:82:00:b5:55:ca:5e:ac:14:e0:92:24: 08:c4:1c:7e:13:2e:5d:52:3d:81:f4:5c:92:04:d4: b6:15:83:db:06:9e:e9:6c:d2:fb:0a:66:b2:91:61: 44:b6:e9:3d:83:51:53:98:55:86:08:f8:f3:5f:71: 83:0c:df:b9:d9:46:d9:7d:c7:c2:46:8c:ba:9c:8f: cd:73:c0:32:ae:17:7e:b6:b6:ec:13:0e:01:d9:b7: bb:15:c4:72:64:b9:40:6a:b3:8b:19:1d:4b:22:15: c9:8a:ef:7d:ab:24:1c:03:4d:b0:0c:96:29:12:0e: 01:89:74:d2:9e:bb:62:6a:97:8a:e4:23:44:74:eb: 0d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:C9:8A:F3:C1:EF:6C:07:DF:FD:09:7E:41:E4:11:69:20:98:73:07 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.170.0/23 Signature Algorithm: sha256WithRSAEncryption 36:9a:49:98:61:4d:c7:60:24:65:6d:b2:c1:9f:b2:88:24:b7: 92:b0:5b:b7:f6:26:d0:ae:07:f2:9f:ca:ab:14:a2:7e:33:71: a0:06:61:11:68:77:9f:62:b3:21:0e:96:0f:a7:95:42:1d:ff: f8:e0:71:27:36:44:a1:35:3b:4a:60:09:f7:c3:9b:fe:7b:55: 5f:e6:5c:17:ac:59:16:be:e7:87:4e:d4:6c:4d:e7:b0:52:0f: ab:ba:37:e3:08:8d:b6:06:94:05:1b:3c:a6:85:03:68:f2:88: 23:26:42:56:28:7f:2e:49:66:2f:40:89:a2:29:28:84:41:2a: 36:aa:4e:ab:ab:30:61:f0:54:5d:ad:55:94:8a:4b:15:70:02: 0b:8b:75:ae:9d:0e:bc:19:c6:0d:05:91:50:d1:8c:c8:8b:bf: d3:59:65:0a:1e:ad:4e:6a:b0:6e:e8:29:d9:9f:7e:d3:ff:62: b2:98:cf:11:c8:b3:62:52:56:2c:eb:86:86:8d:4d:6a:6f:ab: ed:0d:1f:2a:83:86:47:b1:ad:b3:64:7a:c7:4b:3f:77:e8:97: a4:a9:61:bf:f2:33:e8:ee:6b:a9:20:48:c1:8b:d8:bf:4f:84: 5a:05:9d:81:d2:2e:ba:49:d1:75:73:0e:19:c9:be:82:16:78: 38:2c:26:c6 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUA/5kfKFtdBR7167qWc7EOZQPHrkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDk0NVoX DTI3MDUwMjAyMTQ0NVowMzExMC8GA1UEAxMoMUJDOThBRjNDMUVGNkMwN0RGRkQw OTdFNDFFNDExNjkyMDk4NzMwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMXnnTYHKKeJ7+mgYUlt7lJRAweXMKfGgkZjf8pY+R63vSXEXdGs3Fsw6ldn LWq/zbazwT/D4rcqcYkrZ7gmae0YpuwCL99an6fS2fFdV2YIClQkLgek2czu3PQU dd8/4g4/jif5KobkBuiloBxc3aSKha2KpTY2JXI80IIAtVXKXqwU4JIkCMQcfhMu XVI9gfRckgTUthWD2wae6WzS+wpmspFhRLbpPYNRU5hVhgj4819xgwzfudlG2X3H wkaMupyPzXPAMq4Xfra27BMOAdm3uxXEcmS5QGqzixkdSyIVyYrvfaskHANNsAyW KRIOAYl00p67YmqXiuQjRHTrDRECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBvJivPB72wH3/0JfkHkEWkgmHMHMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2UwOWI1MWEyLTYzZDUtNDRiMi04MmIyLWQ5NGM1MTZkZDVmOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lMDliNTFh Mi02M2Q1LTQ0YjItODJiMi1kOTRjNTE2ZGQ1ZjgvMC8xQkM5OEFGM0MxRUY2QzA3 REZGRDA5N0U0MUU0MTE2OTIwOTg3MzA3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ72qMA0GCSqGSIb3DQEBCwUAA4IBAQA2mkmYYU3HYCRlbbLBn7KIJLeSsFu3 9ibQrgfyn8qrFKJ+M3GgBmERaHefYrMhDpYPp5VCHf/44HEnNkShNTtKYAn3w5v+ e1Vf5lwXrFkWvueHTtRsTeewUg+rujfjCI22BpQFGzymhQNo8ogjJkJWKH8uSWYv QImiKSiEQSo2qk6rqzBh8FRdrVWUiksVcAILi3WunQ68GcYNBZFQ0YzIi7/TWWUK Hq1OarBu6CnZn37T/2KymM8RyLNiUlYs64aGjU1qb6vtDR8qg4ZHsa2zZHrHSz93 6JekqWG/8jPo7mupIEjBi9i/T4RaBZ2B0i66SdF1cw4Zyb6CFng4LCbG -----END CERTIFICATE-----Generated at Tue May 12 22:15:53 2026 by rpki-client