$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer File: B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer (raw, json) Hash identifier: GIRoZGcHMLdlIjvyqRwFpHK8aHrpQrtpLCF55fkuSnU= Subject key identifier: B1:9F:4F:9B:34:D9:08:8B:8C:F2:AC:E3:B0:A5:6A:7E:DF:52:3A:B5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3D2F5B176BF62B93699637075726B5CF7C16582A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:45:40 +0000 Certificate not after: Sun 02 May 2027 00:50:40 +0000 Subordinate resources: IP: 103.176.180.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:2f:5b:17:6b:f6:2b:93:69:96:37:07:57:26:b5:cf:7c:16:58:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:45:40 2026 GMT Not After : May 2 00:50:40 2027 GMT Subject: CN=B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0b:f0:02:ff:e9:2b:76:aa:45:0f:7c:22:a4: a9:af:bb:03:58:ff:fe:b5:21:9b:2c:e2:2a:f3:1e: da:92:d4:56:34:6a:98:5f:c1:34:de:45:f6:6a:b3: ca:c7:32:db:c9:9d:f8:31:e2:98:8a:a7:fa:55:d0: d1:3f:2e:12:42:f6:ce:9b:fd:b6:4c:bf:40:82:38: 92:fa:fd:c8:ae:c4:80:5c:af:75:70:77:83:d7:79: 05:d0:de:5f:d0:3a:e2:d5:dc:de:8d:b3:71:62:cb: 29:06:16:c4:60:70:9a:77:9a:93:d0:00:5a:18:92: 81:d1:24:31:5d:66:5d:a0:f5:15:9c:d5:6b:9c:24: ae:fe:de:64:af:9a:c5:fc:7c:07:b1:64:fa:5a:a9: 04:85:f8:d3:a9:98:26:4d:8e:19:e3:16:11:d8:05: d3:3c:81:15:d5:de:68:17:b7:87:ca:50:46:33:e6: 4c:90:eb:0e:6f:75:b8:4a:e1:e9:93:c6:08:e9:26: 7b:eb:f8:de:35:0d:71:95:86:3a:f2:77:19:a9:9c: be:4d:a4:48:99:1f:7e:0a:2e:89:71:64:85:fb:47: 45:03:9d:5d:22:5f:63:17:4c:6d:ae:6b:b8:24:53: c9:a3:7e:33:2d:2e:47:7d:0e:1c:c1:e3:10:4a:5d: f7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B1:9F:4F:9B:34:D9:08:8B:8C:F2:AC:E3:B0:A5:6A:7E:DF:52:3A:B5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.176.180.0/23 Signature Algorithm: sha256WithRSAEncryption 90:ae:66:ea:c0:6c:72:c4:3c:47:e6:6a:ed:6b:11:ec:98:a5: 7c:0a:bf:60:91:aa:16:74:af:a9:6d:0c:78:f1:bb:3c:2f:a1: 04:ea:09:96:47:59:22:4e:51:4f:2e:f3:0c:82:89:fe:4c:06: 9a:e6:10:09:34:df:a1:32:74:40:28:35:4f:f9:44:33:9e:75: a3:51:7c:19:07:90:4a:f5:5f:63:cf:2f:f2:50:dc:f0:5a:19: 9b:ac:19:13:6f:88:4b:1a:3e:7b:a9:74:c3:bc:6d:ef:97:25: 9a:b2:4f:f1:ea:73:de:40:40:ac:70:bd:a8:70:a6:84:91:d8: de:78:11:eb:12:bc:d5:95:d0:0e:cc:27:e2:59:9c:58:36:8b: 74:b0:d6:1e:c9:07:4c:30:d9:ea:e5:c8:46:16:31:bf:64:fa: fc:f4:b4:6b:af:3e:c0:20:74:e0:4e:aa:96:c7:3b:bd:30:ec: 89:0e:32:e7:82:d0:0d:cf:21:6c:d3:37:a8:13:83:ba:3b:56: 3b:9a:52:c1:f3:65:9b:5e:9a:b1:54:5b:6d:08:1f:48:c4:e7: b8:cf:81:f9:6d:66:bc:30:f8:ee:f1:1d:2a:13:7e:00:5d:5a: f6:28:17:a0:99:97:6e:b3:d9:2e:48:46:d6:b7:80:49:04:69: 5c:32:42:17 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUPS9bF2v2K5NpljcHVya1z3wWWCowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDU0MFoX DTI3MDUwMjAwNTA0MFowMzExMC8GA1UEAxMoQjE5RjRGOUIzNEQ5MDg4QjhDRjJB Q0UzQjBBNTZBN0VERjUyM0FCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMEL8AL/6St2qkUPfCKkqa+7A1j//rUhmyziKvMe2pLUVjRqmF/BNN5F9mqz yscy28md+DHimIqn+lXQ0T8uEkL2zpv9tky/QII4kvr9yK7EgFyvdXB3g9d5BdDe X9A64tXc3o2zcWLLKQYWxGBwmneak9AAWhiSgdEkMV1mXaD1FZzVa5wkrv7eZK+a xfx8B7Fk+lqpBIX406mYJk2OGeMWEdgF0zyBFdXeaBe3h8pQRjPmTJDrDm91uErh 6ZPGCOkme+v43jUNcZWGOvJ3Gamcvk2kSJkffgouiXFkhftHRQOdXSJfYxdMba5r uCRTyaN+My0uR30OHMHjEEpd97kCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLGfT5s02QiLjPKs47Clan7fUjq1MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzYyOGRlODZiLWEyNmUtNGIwZi1hODNjLTA1ZmFiNGEzMGM3Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82MjhkZTg2 Yi1hMjZlLTRiMGYtYTgzYy0wNWZhYjRhMzBjNzcvMC9CMTlGNEY5QjM0RDkwODhC OENGMkFDRTNCMEE1NkE3RURGNTIzQUI1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7C0MA0GCSqGSIb3DQEBCwUAA4IBAQCQrmbqwGxyxDxH5mrtaxHsmKV8Cr9g kaoWdK+pbQx48bs8L6EE6gmWR1kiTlFPLvMMgon+TAaa5hAJNN+hMnRAKDVP+UQz nnWjUXwZB5BK9V9jzy/yUNzwWhmbrBkTb4hLGj57qXTDvG3vlyWask/x6nPeQECs cL2ocKaEkdjeeBHrErzVldAOzCfiWZxYNot0sNYeyQdMMNnq5chGFjG/ZPr89LRr rz7AIHTgTqqWxzu9MOyJDjLngtANzyFs0zeoE4O6O1Y7mlLB82WbXpqxVFttCB9I xOe4z4H5bWa8MPju8R0qE34AXVr2KBegmZdus9kuSEbWt4BJBGlcMkIX -----END CERTIFICATE-----Generated at Tue May 12 22:10:13 2026 by rpki-client