$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B030517A0B1BD65FBFEE74838496299F0BA05F7F.cer File: B030517A0B1BD65FBFEE74838496299F0BA05F7F.cer (raw, json) Hash identifier: ZCJaiFUIoSz9350UCP/FUR+qi93D+EVGnQol97O8dmk= Subject key identifier: B0:30:51:7A:0B:1B:D6:5F:BF:EE:74:83:84:96:29:9F:0B:A0:5F:7F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 583D63AEEB03C554E774A3B3B502EDB2B8C49F6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/B030517A0B1BD65FBFEE74838496299F0BA05F7F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:33:37 +0000 Certificate not after: Sun 02 May 2027 00:38:37 +0000 Subordinate resources: IP: 103.121.144.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:3d:63:ae:eb:03:c5:54:e7:74:a3:b3:b5:02:ed:b2:b8:c4:9f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:33:37 2026 GMT Not After : May 2 00:38:37 2027 GMT Subject: CN=B030517A0B1BD65FBFEE74838496299F0BA05F7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b8:57:80:f3:c7:3e:24:f3:cc:a8:4a:b5:6f: 16:10:02:0d:e9:ff:2b:27:9b:64:51:c0:35:57:c9: db:2a:90:08:b3:90:7d:98:35:65:e3:55:6e:80:3b: c0:eb:96:73:77:3a:8f:a0:b1:c5:53:f7:29:21:52: bb:e8:cf:c0:a2:3d:2e:f6:c0:d8:77:44:dc:1e:e2: d3:cf:ca:fc:5d:66:91:d5:52:be:e9:b9:c2:94:f0: ac:34:95:59:a0:75:7d:93:4c:e7:22:89:d8:c3:87: 70:57:97:06:8c:c7:22:eb:8d:61:28:2f:29:24:f6: 37:9a:0a:27:29:86:2c:ae:47:74:47:4d:77:37:c8: 1f:70:a3:8e:6f:26:b7:03:7b:3e:59:1f:b4:9b:00: d4:e0:4a:d4:ef:85:6d:2b:4d:18:af:2f:6d:68:38: d5:cb:bb:86:de:aa:76:f2:1e:1d:09:6e:22:25:9c: 22:9b:c0:d0:77:58:48:f0:fa:8e:c4:0c:e9:6e:dd: 4d:83:4a:25:92:0b:11:46:df:55:8a:79:a4:90:ba: cf:a6:c3:a2:d0:5f:5b:c6:95:d3:81:8e:bf:6b:12: 4c:e3:6b:f7:23:3e:e6:8d:41:88:c2:e5:fe:a8:9b: 53:a4:b9:a9:15:6b:84:d0:78:6e:ed:b2:c2:38:06: 5c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B0:30:51:7A:0B:1B:D6:5F:BF:EE:74:83:84:96:29:9F:0B:A0:5F:7F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/B030517A0B1BD65FBFEE74838496299F0BA05F7F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.144.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:7f:64:56:cf:6d:fc:80:70:85:71:75:c2:a2:22:a2:1d:e0: 73:af:c4:ac:76:40:fc:91:c4:9c:0f:de:6b:35:d6:c9:af:de: 2f:5f:c6:08:49:79:ea:89:74:2b:14:88:bd:9a:74:9c:c4:a2: d3:5f:36:80:18:8b:63:82:6e:bb:9a:2f:1b:39:81:2b:7f:16: 20:61:75:4e:c4:b4:fa:e4:b8:85:d9:c7:67:56:06:10:f2:d0: 81:94:94:fc:4a:7f:a2:54:6d:b2:8b:a9:14:59:3d:71:dc:cb: e7:b1:ca:81:36:8a:06:97:4c:70:6f:93:99:19:cf:4b:fc:cc: ee:72:d1:52:df:ca:db:4a:4a:87:a5:c3:d8:79:d5:b5:51:17: b1:ef:c3:86:87:e4:31:44:98:66:a9:78:83:4b:9a:48:ae:83: bd:95:f0:64:c9:7c:e8:31:89:fc:81:26:9b:99:a0:7f:db:5f: 2b:4c:57:22:e1:9e:7e:8a:c8:c5:cd:3b:02:7e:ee:4d:02:8e: 0e:2b:cf:c2:8a:c6:a4:c9:09:d9:4c:3c:d7:97:c4:44:67:1a: e0:03:c9:86:65:a7:d6:e6:37:7f:a1:e0:56:1b:ae:73:fd:11: d5:ab:3b:e4:ea:1d:84:39:59:f6:5e:7d:09:7b:cb:29:58:a1: 2b:18:d6:7d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUWD1jrusDxVTndKOztQLtsrjEn24wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzMzN1oX DTI3MDUwMjAwMzgzN1owMzExMC8GA1UEAxMoQjAzMDUxN0EwQjFCRDY1RkJGRUU3 NDgzODQ5NjI5OUYwQkEwNUY3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKm4V4Dzxz4k88yoSrVvFhACDen/KyebZFHANVfJ2yqQCLOQfZg1ZeNVboA7 wOuWc3c6j6CxxVP3KSFSu+jPwKI9LvbA2HdE3B7i08/K/F1mkdVSvum5wpTwrDSV WaB1fZNM5yKJ2MOHcFeXBozHIuuNYSgvKST2N5oKJymGLK5HdEdNdzfIH3Cjjm8m twN7PlkftJsA1OBK1O+FbStNGK8vbWg41cu7ht6qdvIeHQluIiWcIpvA0HdYSPD6 jsQM6W7dTYNKJZILEUbfVYp5pJC6z6bDotBfW8aV04GOv2sSTONr9yM+5o1BiMLl /qibU6S5qRVrhNB4bu2ywjgGXO0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLAwUXoLG9Zfv+50g4SWKZ8LoF9/MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzUxZTAwNzc5LTRhMzktNDdmMC04MzM4LTQ0Zjg4YzI5MTcwNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81MWUwMDc3 OS00YTM5LTQ3ZjAtODMzOC00NGY4OGMyOTE3MDYvMC9CMDMwNTE3QTBCMUJENjVG QkZFRTc0ODM4NDk2Mjk5RjBCQTA1RjdGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3mQMA0GCSqGSIb3DQEBCwUAA4IBAQBqf2RWz238gHCFcXXCoiKiHeBzr8Ss dkD8kcScD95rNdbJr94vX8YISXnqiXQrFIi9mnScxKLTXzaAGItjgm67mi8bOYEr fxYgYXVOxLT65LiF2cdnVgYQ8tCBlJT8Sn+iVG2yi6kUWT1x3MvnscqBNooGl0xw b5OZGc9L/MzuctFS38rbSkqHpcPYedW1URex78OGh+QxRJhmqXiDS5pIroO9lfBk yXzoMYn8gSabmaB/218rTFci4Z5+isjFzTsCfu5NAo4OK8/CisakyQnZTDzXl8RE ZxrgA8mGZafW5jd/oeBWG65z/RHVqzvk6h2EOVn2Xn0Je8spWKErGNZ9 -----END CERTIFICATE-----Generated at Tue May 12 22:02:54 2026 by rpki-client