$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer File: B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.cer (raw, json) Hash identifier: QVHwvDoM/1KkyLSsS9cOvLtSV1aLwxCkH3SH6DNHhoE= Subject key identifier: B1:9C:65:68:2D:11:78:4D:7D:2A:BD:8D:4B:EB:C7:C4:5E:ED:88:D1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 55AC969253B64AF10E5D2F1BF045689E45ACFCE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:39:53 +0000 Certificate not after: Sun 02 May 2027 02:44:53 +0000 Subordinate resources: IP: 43.242.132.0/23 IP: 103.28.106.0/23 IP: 103.72.110.0/23 IP: 2001:df0:26f::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ac:96:92:53:b6:4a:f1:0e:5d:2f:1b:f0:45:68:9e:45:ac:fc:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:39:53 2026 GMT Not After : May 2 02:44:53 2027 GMT Subject: CN=B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a3:67:31:af:0b:f4:70:04:63:80:76:bc:83: 57:d2:6b:4b:a7:bf:11:b2:ef:9c:69:52:1b:14:f4: cb:96:3b:3d:26:11:dd:6b:5c:77:bf:25:ec:f9:59: c0:d0:e6:de:48:48:73:01:a2:6c:d5:37:b3:17:e7: f4:37:31:eb:ec:b4:05:e8:cd:6d:14:8d:d2:a8:ed: db:ce:3e:27:49:bd:f9:e2:a8:2f:8f:1b:af:4b:4a: 88:04:99:e2:50:c5:3f:f0:bf:39:67:c9:67:6f:d7: 53:ae:43:04:97:77:a2:3e:bb:a4:32:c1:6a:70:19: 00:9a:52:ab:84:01:6d:b9:94:42:60:68:4c:92:40: f5:f0:a6:18:b8:f5:6c:23:f6:80:12:a1:a3:7a:d4: 40:c1:1a:17:8c:77:9c:c8:ae:ea:75:c2:b0:50:95: 72:c9:46:1a:21:f2:64:91:f9:07:e4:85:37:b7:46: 20:1f:5f:6c:f1:0d:7f:67:6b:94:f3:93:57:13:f9: 91:c6:38:de:cf:05:fa:3e:54:38:21:df:c4:23:86: 7a:7e:f6:1d:fd:14:1b:b8:e2:6e:dd:0c:dd:df:cf: bb:e3:d0:7a:17:09:41:78:28:ba:aa:42:49:f8:3b: 40:30:71:d0:f7:c6:16:f0:99:42:07:7d:d8:bf:cd: d2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B1:9C:65:68:2D:11:78:4D:7D:2A:BD:8D:4B:EB:C7:C4:5E:ED:88:D1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B19C65682D11784D7D2ABD8D4BEBC7C45EED88D1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.242.132.0/23 103.28.106.0/23 103.72.110.0/23 IPv6: 2001:df0:26f::/48 Signature Algorithm: sha256WithRSAEncryption 73:fe:ed:b5:97:17:55:9b:5c:1e:48:4a:b3:df:83:0c:ac:78: 63:ad:cf:9a:18:9e:a2:01:87:d8:f3:27:98:af:2e:30:cb:90: 6d:a3:7d:3b:ed:f9:26:27:d8:d6:f2:94:0d:04:bc:f1:fa:36: c0:fa:fe:1d:c4:0f:14:ce:61:2d:6d:d3:82:a2:bb:95:77:cb: 14:3c:2e:b8:20:b5:9c:18:b6:71:06:03:59:b5:ba:35:76:fa: 7c:ce:fb:be:b4:34:5a:27:d7:7d:55:1e:94:a1:93:54:41:f7: 30:d9:ef:1e:80:01:71:7b:c1:2d:f0:36:39:2e:2e:11:d3:06: fd:24:1b:3f:9c:ed:75:a2:ae:e7:bb:86:b9:c3:77:ea:70:fa: 06:cf:e7:e3:e9:56:f9:cc:b4:17:f3:b3:b3:81:b4:b5:35:c9: 00:ff:16:b5:b8:ee:a6:5e:97:c6:20:b5:5b:ef:c1:54:90:97: 76:2c:91:7e:9b:8f:dd:b3:c5:03:e8:82:09:9a:72:e8:5b:56: e7:7c:59:89:90:37:05:f2:f3:a7:10:f0:99:55:b1:8b:ad:98: 3b:2f:e1:1f:42:81:58:fc:73:09:75:a4:1d:49:70:38:dc:97: 68:c2:dd:1b:f9:61:86:ba:d3:4f:74:bb:db:ab:90:a4:ae:91: 15:6b:c6:73 -----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgIUVayWklO2SvEOXS8b8EVonkWs/OMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzk1M1oX DTI3MDUwMjAyNDQ1M1owMzExMC8GA1UEAxMoQjE5QzY1NjgyRDExNzg0RDdEMkFC RDhENEJFQkM3QzQ1RUVEODhEMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJyjZzGvC/RwBGOAdryDV9JrS6e/EbLvnGlSGxT0y5Y7PSYR3Wtcd78l7PlZ wNDm3khIcwGibNU3sxfn9Dcx6+y0BejNbRSN0qjt284+J0m9+eKoL48br0tKiASZ 4lDFP/C/OWfJZ2/XU65DBJd3oj67pDLBanAZAJpSq4QBbbmUQmBoTJJA9fCmGLj1 bCP2gBKho3rUQMEaF4x3nMiu6nXCsFCVcslGGiHyZJH5B+SFN7dGIB9fbPENf2dr lPOTVxP5kcY43s8F+j5UOCHfxCOGen72Hf0UG7jibt0M3d/Pu+PQehcJQXgouqpC Sfg7QDBx0PfGFvCZQgd92L/N0ikCAwEAAaOCAtYwggLSMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLGcZWgtEXhNfSq9jUvrx8Re7YjRMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y3ZjQ5MDY4LWMwY2EtNGEyMS05YThhLWVlZDI2ZmNkZDFhYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mN2Y0OTA2 OC1jMGNhLTRhMjEtOWE4YS1lZWQyNmZjZGQxYWEvMC9CMTlDNjU2ODJEMTE3ODRE N0QyQUJEOEQ0QkVCQzdDNDVFRUQ4OEQxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATAS AwQBK/KEAwQBZxxqAwQBZ0huMA8EAgACMAkDBwAgAQ3wAm8wDQYJKoZIhvcNAQEL BQADggEBAHP+7bWXF1WbXB5ISrPfgwyseGOtz5oYnqIBh9jzJ5ivLjDLkG2jfTvt +SYn2NbylA0EvPH6NsD6/h3EDxTOYS1t04Kiu5V3yxQ8LrggtZwYtnEGA1m1ujV2 +nzO+760NFon131VHpShk1RB9zDZ7x6AAXF7wS3wNjkuLhHTBv0kGz+c7XWirue7 hrnDd+pw+gbP5+PpVvnMtBfzs7OBtLU1yQD/FrW47qZel8YgtVvvwVSQl3YskX6b j92zxQPoggmacuhbVud8WYmQNwXy86cQ8JlVsYutmDsv4R9CgVj8cwl1pB1JcDjc l2jC3Rv5YYa60090u9urkKSukRVrxnM= -----END CERTIFICATE-----Generated at Tue May 12 22:10:21 2026 by rpki-client