$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.cer File: B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.cer (raw, json) Hash identifier: w7JgMh5umnQJVUutI2yXbQ+V7SOqwfGr9VQN4HxcV5I= Subject key identifier: B1:8A:EF:ED:66:08:A6:B3:AD:72:FC:CB:B8:52:AD:9A:DF:B8:C4:9E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 78901D10CAA18CAD33FF08411945A49DD3370B6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:38:04 +0000 Certificate not after: Sun 02 May 2027 01:43:04 +0000 Subordinate resources: IP: 103.182.52.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:90:1d:10:ca:a1:8c:ad:33:ff:08:41:19:45:a4:9d:d3:37:0b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:38:04 2026 GMT Not After : May 2 01:43:04 2027 GMT Subject: CN=B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e2:31:e0:ce:98:5e:39:67:b7:b9:7c:b2:8c: 00:12:6b:b7:27:04:f3:0e:79:45:49:90:e8:29:bb: 1c:0d:ba:1c:e7:08:e4:0b:1f:5b:6c:07:1d:db:1e: 7b:7e:78:84:66:04:75:73:dd:cf:e2:38:32:3c:0a: f5:1e:e8:43:34:65:52:5b:ee:a9:db:fc:1e:a5:41: f1:ef:42:5d:3f:49:18:b0:9f:90:40:93:4d:10:95: 63:52:43:cb:59:79:90:b6:59:dd:cc:2b:b4:1d:75: ae:30:cc:83:72:40:1b:29:e8:38:c1:04:4f:b2:0d: 56:e0:31:82:82:5d:6f:a8:b6:58:66:32:79:ef:b6: 41:73:45:c5:8e:37:49:38:0c:24:b2:a2:6c:54:ca: 51:c2:ff:e5:11:ee:7d:2c:52:f9:04:be:83:07:45: 60:fc:22:ae:03:dd:64:80:77:be:a0:a0:02:b5:95: 67:ca:80:28:ee:cf:0d:84:00:62:59:26:6e:31:de: f4:9f:99:e5:23:09:d5:dd:99:e4:05:36:e0:43:30: 3a:80:c0:cb:fe:a6:31:ea:e9:5f:71:3f:74:71:8f: d0:cc:21:9c:6a:10:08:e1:8f:b7:ea:93:30:71:a5: ee:32:2d:67:dd:0b:45:73:0f:27:f6:a1:d6:f0:43: 79:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B1:8A:EF:ED:66:08:A6:B3:AD:72:FC:CB:B8:52:AD:9A:DF:B8:C4:9E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b082ba0d-27e1-4000-acfa-a19eb9e0f637/0/B18AEFED6608A6B3AD72FCCBB852AD9ADFB8C49E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.182.52.0/23 Signature Algorithm: sha256WithRSAEncryption 38:0f:f4:91:5d:20:34:e5:d7:2a:41:1a:07:ff:45:57:29:12: 20:60:4b:4c:83:4b:b7:bb:90:97:ae:41:47:ee:6d:e4:fb:30: da:c9:c9:86:a2:f7:ef:82:c2:2a:29:e2:37:73:dd:86:da:13: 30:8a:02:80:ce:40:cb:ab:97:4b:ee:19:c0:2d:a2:30:51:3b: ea:c1:c0:9a:0d:68:02:44:89:52:db:80:2b:2e:bc:8b:5e:7f: 1b:fe:8d:4e:6f:6b:d3:07:3a:94:11:e4:eb:3f:9f:55:52:81: 75:d9:db:51:cf:70:96:36:ab:46:bd:b5:64:15:4e:e6:8f:de: 0e:a7:c0:41:dd:60:48:ae:f0:a0:a5:f9:3f:6a:de:77:09:f8: 17:e6:6c:77:10:36:47:59:53:7a:22:8e:c9:19:8d:b6:79:24: d5:a0:f6:a1:c6:00:29:98:c4:be:d8:56:ce:dd:63:7c:5f:00: eb:30:00:55:e9:05:4f:ef:02:00:21:42:c9:fc:25:3c:0b:98: 25:35:7a:a3:92:df:55:40:ae:fb:c6:95:b8:db:31:21:d4:12: 13:13:5e:ed:b2:bc:20:d8:23:b4:c9:da:29:39:e4:1a:fa:60: e6:76:df:fc:46:0a:47:6c:15:66:de:bf:83:71:a1:01:c2:c3: 32:f2:2d:06 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUeJAdEMqhjK0z/whBGUWkndM3C28wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzgwNFoX DTI3MDUwMjAxNDMwNFowMzExMC8GA1UEAxMoQjE4QUVGRUQ2NjA4QTZCM0FENzJG Q0NCQjg1MkFEOUFERkI4QzQ5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKDiMeDOmF45Z7e5fLKMABJrtycE8w55RUmQ6Cm7HA26HOcI5AsfW2wHHdse e354hGYEdXPdz+I4MjwK9R7oQzRlUlvuqdv8HqVB8e9CXT9JGLCfkECTTRCVY1JD y1l5kLZZ3cwrtB11rjDMg3JAGynoOMEET7INVuAxgoJdb6i2WGYyee+2QXNFxY43 STgMJLKibFTKUcL/5RHufSxS+QS+gwdFYPwirgPdZIB3vqCgArWVZ8qAKO7PDYQA YlkmbjHe9J+Z5SMJ1d2Z5AU24EMwOoDAy/6mMerpX3E/dHGP0MwhnGoQCOGPt+qT MHGl7jItZ90LRXMPJ/ah1vBDeZsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLGK7+1mCKazrXL8y7hSrZrfuMSeMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2IwODJiYTBkLTI3ZTEtNDAwMC1hY2ZhLWExOWViOWUwZjYzNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iMDgyYmEw ZC0yN2UxLTQwMDAtYWNmYS1hMTllYjllMGY2MzcvMC9CMThBRUZFRDY2MDhBNkIz QUQ3MkZDQ0JCODUyQUQ5QURGQjhDNDlFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7Y0MA0GCSqGSIb3DQEBCwUAA4IBAQA4D/SRXSA05dcqQRoH/0VXKRIgYEtM g0u3u5CXrkFH7m3k+zDaycmGovfvgsIqKeI3c92G2hMwigKAzkDLq5dL7hnALaIw UTvqwcCaDWgCRIlS24ArLryLXn8b/o1Ob2vTBzqUEeTrP59VUoF12dtRz3CWNqtG vbVkFU7mj94Op8BB3WBIrvCgpfk/at53CfgX5mx3EDZHWVN6Io7JGY22eSTVoPah xgApmMS+2FbO3WN8XwDrMABV6QVP7wIAIULJ/CU8C5glNXqjkt9VQK77xpW42zEh 1BITE17tsrwg2CO0ydopOeQa+mDmdt/8RgpHbBVm3r+DcaEBwsMy8i0G -----END CERTIFICATE-----Generated at Tue May 12 22:45:45 2026 by rpki-client