$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer File: B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer (raw, json) Hash identifier: KYztACumoEyTEwzY3pkBgzaoIS6jMTgdrk8l2eB3SgE= Subject key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 38C39C9937A852FBB4799D4C1D859E25470A0C8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:53:41 +0000 Certificate not after: Sun 02 May 2027 00:58:41 +0000 Subordinate resources: IP: 202.173.64.0/19 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c3:9c:99:37:a8:52:fb:b4:79:9d:4c:1d:85:9e:25:47:0a:0c:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:53:41 2026 GMT Not After : May 2 00:58:41 2027 GMT Subject: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:87:6a:e3:27:5b:85:0c:05:db:e8:b5:fd:b8: 79:ca:41:0d:9b:cd:2a:59:f5:24:de:c5:80:c3:3c: ed:4b:b1:25:51:ae:bf:80:88:b7:91:0c:93:0d:ba: 6d:77:d9:f8:3a:18:31:0b:e2:68:2a:03:46:88:b5: 3d:9b:61:4b:59:51:2d:b6:e4:f1:c1:ab:b3:f0:bb: 3c:31:c2:70:03:58:aa:92:8b:0e:ef:dd:a8:08:02: 44:e9:41:fd:e4:7e:d1:4a:0c:c5:24:b3:85:92:5b: f3:f7:42:30:e1:d1:97:88:06:2e:71:04:03:b6:3a: da:a2:b5:af:43:e9:e3:4f:90:da:f9:d8:d4:f9:0d: 7a:96:df:ff:7d:85:f7:c6:a6:9e:a9:44:ce:dd:f3: 14:f6:b9:23:f4:a4:82:5e:38:ce:14:a1:84:26:8d: 95:70:2b:aa:8a:5b:9c:b3:55:80:00:f7:1d:41:f0: d7:1b:fe:5f:fd:72:5a:8c:1f:3b:59:38:d6:23:a0: 7f:d6:cc:bf:39:17:8d:65:c9:9d:d6:d4:53:3b:d9: d7:4e:82:4e:50:53:7c:3e:b6:f2:66:79:86:4f:a6: 45:10:1b:d8:12:cf:aa:f9:2b:c5:4d:55:32:b2:5c: 4c:08:59:aa:55:d2:3a:3f:47:10:da:7d:6b:e9:79: bc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.173.64.0/19 Signature Algorithm: sha256WithRSAEncryption 4c:62:e5:6f:e6:68:3f:e6:be:a5:eb:86:15:0a:19:b3:99:a8: 99:5b:ca:f5:56:97:29:22:7c:53:33:fc:1b:c6:5a:1b:68:94: 51:22:8a:2d:d8:76:5a:ad:82:c3:23:4b:9c:ee:e8:f4:eb:00: b0:13:2d:1e:94:7e:15:34:20:62:14:1b:6d:33:ac:05:0c:9e: 66:42:20:71:c0:be:04:1e:0d:19:3d:85:51:0b:45:c0:65:31: 93:7d:59:bb:43:ac:1f:b2:f2:6e:07:6c:43:91:59:d8:41:c8: cd:59:8d:95:5f:37:95:ed:3c:ab:e0:f5:b5:21:c5:29:fc:ca: 28:10:85:d1:07:04:50:a7:32:3b:67:30:4a:83:21:d6:c3:cf: c4:0c:3f:a4:6a:65:fa:9b:41:08:42:b7:5c:76:a6:9c:aa:31: 00:ec:3e:60:76:8b:85:3e:0b:30:6b:6a:1f:be:12:65:71:f8: 64:56:8b:87:fe:44:bc:de:79:94:f6:0d:4e:a4:86:71:02:3a: c3:b0:3b:49:30:c3:d1:e8:7d:59:2e:4d:e0:59:e7:a5:fa:c2: ba:98:d3:51:14:9e:f9:7a:3a:4c:7a:f7:de:5c:70:09:d1:1c: dd:91:9e:bb:f0:23:69:a3:68:53:e5:79:c4:c8:fd:75:2e:6c: 50:1b:97:cc -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUOMOcmTeoUvu0eZ1MHYWeJUcKDIswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTM0MVoX DTI3MDUwMjAwNTg0MVowMzExMC8GA1UEAxMoQjE2RjNCNDdCQjAyMUM2MUQyNjhG MEE0REJFQTE1NjlGMDlGM0U1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIeHauMnW4UMBdvotf24ecpBDZvNKln1JN7FgMM87UuxJVGuv4CIt5EMkw26 bXfZ+DoYMQviaCoDRoi1PZthS1lRLbbk8cGrs/C7PDHCcANYqpKLDu/dqAgCROlB /eR+0UoMxSSzhZJb8/dCMOHRl4gGLnEEA7Y62qK1r0Pp40+Q2vnY1PkNepbf/32F 98amnqlEzt3zFPa5I/Skgl44zhShhCaNlXArqopbnLNVgAD3HUHw1xv+X/1yWowf O1k41iOgf9bMvzkXjWXJndbUUzvZ106CTlBTfD628mZ5hk+mRRAb2BLPqvkrxU1V MrJcTAhZqlXSOj9HENp9a+l5vJ8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLFvO0e7Ahxh0mjwpNvqFWnwnz5eMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZmMGYyYmQ5LTQyYWUtNDQ5YS04ZDU3LWIyNmRhMDRkN2VlMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82ZjBmMmJk OS00MmFlLTQ0OWEtOGQ1Ny1iMjZkYTA0ZDdlZTEvMC9CMTZGM0I0N0JCMDIxQzYx RDI2OEYwQTREQkVBMTU2OUYwOUYzRTVFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQFyq1AMA0GCSqGSIb3DQEBCwUAA4IBAQBMYuVv5mg/5r6l64YVChmzmaiZW8r1 VpcpInxTM/wbxlobaJRRIoot2HZarYLDI0uc7uj06wCwEy0elH4VNCBiFBttM6wF DJ5mQiBxwL4EHg0ZPYVRC0XAZTGTfVm7Q6wfsvJuB2xDkVnYQcjNWY2VXzeV7Tyr 4PW1IcUp/MooEIXRBwRQpzI7ZzBKgyHWw8/EDD+kamX6m0EIQrdcdqacqjEA7D5g douFPgswa2ofvhJlcfhkVouH/kS83nmU9g1OpIZxAjrDsDtJMMPR6H1ZLk3gWeel +sK6mNNRFJ75ejpMevfeXHAJ0RzdkZ678CNpo2hT5XnEyP11LmxQG5fM -----END CERTIFICATE-----Generated at Tue May 12 22:33:12 2026 by rpki-client