$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer File: 22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer (raw, json) Hash identifier: vfPJYDfXWW/bSZipyKp2E0p6oOxstpMwCrZUVqDLcBU= Subject key identifier: 22:41:9B:EC:88:19:6C:A2:A5:AA:BF:54:30:4B:61:04:EB:7A:9B:D0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 797F17D850B395768EB7BC87AD3CC7296DF8B1F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:03:28 +0000 Certificate not after: Sun 02 May 2027 00:08:28 +0000 Subordinate resources: IP: 103.112.5.0/24 IP: 103.112.44.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:7f:17:d8:50:b3:95:76:8e:b7:bc:87:ad:3c:c7:29:6d:f8:b1:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:03:28 2026 GMT Not After : May 2 00:08:28 2027 GMT Subject: CN=22419BEC88196CA2A5AABF54304B6104EB7A9BD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:af:79:40:26:0a:f7:80:b2:7e:b5:c0:b5:7c: 28:a2:71:4f:fa:95:e9:65:56:c6:3d:52:e6:60:33: 5d:c1:40:97:79:52:ef:1a:e2:28:38:33:7a:fb:71: a7:90:03:e4:62:42:9b:25:2c:10:3c:9d:08:61:4b: 66:f3:10:20:c9:b2:fd:d4:e0:c1:73:26:04:5d:39: e4:e7:55:fe:d8:6d:c7:81:0b:25:eb:d2:6e:01:2d: b9:1e:24:ce:a5:fa:28:cd:0d:c0:6f:76:bb:91:64: cc:b3:86:e0:db:61:38:c9:cd:c7:ab:94:d0:14:cd: c8:11:32:34:a5:29:01:a4:62:07:6f:0b:70:57:4f: d2:1d:1a:bf:20:8d:bd:08:1f:28:96:a7:8d:67:e6: 0c:7f:da:47:99:fa:34:f2:f9:b5:84:59:91:91:30: c3:1b:36:ed:af:76:1e:36:4b:43:26:65:6a:de:0e: fd:64:9c:c5:63:29:76:c9:e0:3e:ed:66:82:60:7b: 86:1f:a1:09:f7:d3:6d:1d:1c:6b:08:23:60:14:51: 1f:cb:b6:4a:59:e7:42:fc:bf:5c:04:ae:5e:61:8d: b8:ce:40:b3:5e:43:92:a5:7b:c6:9c:b3:f0:51:c5: ce:f1:c6:51:c2:66:74:50:45:ca:75:97:e3:8d:9d: 53:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:41:9B:EC:88:19:6C:A2:A5:AA:BF:54:30:4B:61:04:EB:7A:9B:D0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.5.0/24 103.112.44.0/23 Signature Algorithm: sha256WithRSAEncryption 01:62:49:fb:bd:e5:af:86:33:33:e0:a5:cf:33:6b:14:d6:44: 2c:5d:12:60:52:a5:ae:28:c3:f1:bc:f7:eb:16:88:70:46:a9: 88:f7:c9:dc:e2:d6:bf:86:47:cd:08:af:19:d7:72:6e:14:fa: d0:2e:7b:b2:cb:95:3b:f8:92:41:3e:67:a7:25:2d:76:54:da: 70:ce:77:94:7e:94:67:04:64:c1:6e:37:e9:ef:0c:4a:17:a4: fd:e7:8f:5d:0a:f9:cb:fd:27:70:a2:1f:11:5f:91:26:33:40: 89:f1:f5:ea:13:73:7b:42:9e:6e:ca:df:32:b1:85:49:17:1d: 02:3c:65:58:65:32:c9:5e:3a:9a:e6:af:a2:56:6f:27:c8:3b: 46:b7:18:dc:47:13:12:31:45:61:56:27:35:1d:db:14:70:e5: 6c:78:04:2b:52:22:a9:d7:96:d4:20:8d:f4:2d:98:c0:50:19: 35:f5:c6:0d:9d:0e:40:b7:87:2d:be:f9:eb:1b:b9:dc:3e:97: dd:56:ff:98:90:e0:dc:04:ba:82:09:c3:7a:d2:c2:1d:a7:f9: 7a:57:04:8f:ea:fc:4b:59:a9:6f:bc:31:4e:84:39:17:4a:ee: 1a:11:34:19:dc:4d:1e:4f:16:49:c4:1b:7a:91:ea:a4:48:82: a8:98:7f:23 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUeX8X2FCzlXaOt7yHrTzHKW34sfEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDMyOFoX DTI3MDUwMjAwMDgyOFowMzExMC8GA1UEAxMoMjI0MTlCRUM4ODE5NkNBMkE1QUFC RjU0MzA0QjYxMDRFQjdBOUJEMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALqveUAmCveAsn61wLV8KKJxT/qV6WVWxj1S5mAzXcFAl3lS7xriKDgzevtx p5AD5GJCmyUsEDydCGFLZvMQIMmy/dTgwXMmBF055OdV/thtx4ELJevSbgEtuR4k zqX6KM0NwG92u5FkzLOG4NthOMnNx6uU0BTNyBEyNKUpAaRiB28LcFdP0h0avyCN vQgfKJanjWfmDH/aR5n6NPL5tYRZkZEwwxs27a92HjZLQyZlat4O/WScxWMpdsng Pu1mgmB7hh+hCffTbR0cawgjYBRRH8u2SlnnQvy/XASuXmGNuM5As15DkqV7xpyz 8FHFzvHGUcJmdFBFynWX442dU1MCAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCJBm+yIGWyipaq/VDBLYQTrepvQMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzI0MWJjM2VjLTg2YjgtNGFmYi04YThmLWEwYTg2YTRjMjljNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yNDFiYzNl Yy04NmI4LTRhZmItOGE4Zi1hMGE4NmE0YzI5YzYvMC8yMjQxOUJFQzg4MTk2Q0Ey QTVBQUJGNTQzMDRCNjEwNEVCN0E5QkQwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQAZ3AFAwQBZ3AsMA0GCSqGSIb3DQEBCwUAA4IBAQABYkn7veWvhjMz4KXPM2sU 1kQsXRJgUqWuKMPxvPfrFohwRqmI98nc4ta/hkfNCK8Z13JuFPrQLnuyy5U7+JJB PmenJS12VNpwzneUfpRnBGTBbjfp7wxKF6T9549dCvnL/Sdwoh8RX5EmM0CJ8fXq E3N7Qp5uyt8ysYVJFx0CPGVYZTLJXjqa5q+iVm8nyDtGtxjcRxMSMUVhVic1HdsU cOVseAQrUiKp15bUII30LZjAUBk19cYNnQ5At4ctvvnrG7ncPpfdVv+YkODcBLqC CcN60sIdp/l6VwSP6vxLWalvvDFOhDkXSu4aETQZ3E0eTxZJxBt6keqkSIKomH8j -----END CERTIFICATE-----Generated at Tue May 12 22:32:25 2026 by rpki-client