$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.cer File: B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.cer (raw, json) Hash identifier: zRoz3hwp+/+uemronJcqc5kKDxKjCgfDuc5M0YRUi4Y= Subject key identifier: B1:B8:0E:10:A5:B0:AA:BA:24:92:9E:33:CD:EF:91:29:59:A6:E4:FD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 73B4C357D90D9FC483C767E3C00CFA59CA9C81DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.mft caRepository: rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:45:48 +0000 Certificate not after: Sat 01 May 2027 23:50:48 +0000 Subordinate resources: IP: 103.177.100.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:b4:c3:57:d9:0d:9f:c4:83:c7:67:e3:c0:0c:fa:59:ca:9c:81:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:45:48 2026 GMT Not After : May 1 23:50:48 2027 GMT Subject: CN=B1B80E10A5B0AABA24929E33CDEF912959A6E4FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:11:35:1e:8e:2e:f6:3f:6d:9d:d9:ce:4d:ab: 28:d6:cc:f5:52:09:05:71:bb:fa:9b:ca:90:2f:55: 23:5d:58:a8:ab:d6:9d:a7:4e:a7:4b:9f:21:25:59: 00:7c:8f:e8:2d:1f:82:3c:2c:f9:dc:26:48:ca:66: 4a:26:04:e1:71:f7:b5:f7:e5:65:ea:22:2e:c8:4d: 0c:a8:80:f9:5e:cc:aa:68:8b:aa:ba:0e:21:b7:e6: 8c:6f:40:41:44:9b:02:d5:37:86:02:4f:cf:29:f8: 83:2a:ee:31:15:df:bc:94:6d:36:8e:3a:cc:86:6a: c6:82:a8:6f:0b:b4:c7:e8:31:6b:79:e7:42:5d:22: e0:17:82:be:3a:bc:3a:3d:f0:77:b6:36:70:be:23: 47:83:06:a6:8c:dd:c4:ee:c8:ea:9a:43:59:a5:e2: f8:c7:3e:9b:0c:89:6a:73:06:f5:b0:aa:a7:77:a8: 02:63:6a:00:1d:e0:c7:9b:b8:ed:6e:eb:a0:de:66: e6:16:1b:81:06:a1:dc:b4:90:0c:05:74:bd:9d:4d: 5b:2e:cd:31:c6:83:2d:82:2b:8e:1c:ec:bc:27:41: b6:ef:d5:6d:57:89:d9:fe:b9:77:b9:e4:98:80:a0: 46:f0:a9:af:c7:2b:af:60:8e:56:28:97:d9:ef:4d: 40:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B1:B8:0E:10:A5:B0:AA:BA:24:92:9E:33:CD:EF:91:29:59:A6:E4:FD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.100.0/23 Signature Algorithm: sha256WithRSAEncryption 42:57:7b:b8:ad:3d:2d:d0:b5:3a:c4:d4:e3:9b:ad:57:43:49: 05:92:b3:a9:bc:08:e6:ff:6f:11:a6:09:67:23:e3:8a:c5:90: 66:4c:56:4f:47:18:14:f9:2f:31:a3:3b:32:29:f0:cb:bd:dd: 43:58:30:8b:4a:8e:2c:0e:a6:6b:32:f9:fd:ac:52:2f:65:1b: 51:c2:34:d3:48:3b:0c:b5:44:86:79:5d:28:19:43:9c:a5:3f: 1b:ae:07:6d:da:09:f9:cd:cf:a7:09:d9:30:07:ec:1b:f4:3e: 2a:d8:fe:1e:09:5f:d0:a0:88:76:c8:2c:ba:c1:96:f5:fc:15: 34:1c:ec:40:cd:6e:a7:5b:63:9d:ee:a7:ea:4d:70:ac:81:d4: 4d:0a:7d:c1:10:16:7e:b5:24:17:63:4d:8c:90:c2:31:e7:50: eb:ec:3a:14:22:e9:fb:d6:ac:24:d8:12:fc:df:db:97:83:2d: 06:1c:91:97:cd:a9:15:c4:2c:58:a8:59:b6:eb:64:8b:5d:d3: 94:52:7f:97:25:73:10:8c:bc:b6:af:4a:78:e5:32:1e:32:4b: 08:06:b0:4e:ed:50:4d:dc:be:55:df:0c:b0:52:ce:4e:59:15: 88:2e:0f:21:c4:27:74:5f:08:75:0a:d8:af:8e:d3:eb:b3:b3: 88:80:f9:3f -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUc7TDV9kNn8SDx2fjwAz6Wcqcgd0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDU0OFoX DTI3MDUwMTIzNTA0OFowMzExMC8GA1UEAxMoQjFCODBFMTBBNUIwQUFCQTI0OTI5 RTMzQ0RFRjkxMjk1OUE2RTRGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPcRNR6OLvY/bZ3Zzk2rKNbM9VIJBXG7+pvKkC9VI11YqKvWnadOp0ufISVZ AHyP6C0fgjws+dwmSMpmSiYE4XH3tfflZeoiLshNDKiA+V7MqmiLqroOIbfmjG9A QUSbAtU3hgJPzyn4gyruMRXfvJRtNo46zIZqxoKobwu0x+gxa3nnQl0i4BeCvjq8 Oj3wd7Y2cL4jR4MGpozdxO7I6ppDWaXi+Mc+mwyJanMG9bCqp3eoAmNqAB3gx5u4 7W7roN5m5hYbgQah3LSQDAV0vZ1NWy7NMcaDLYIrjhzsvCdBtu/VbVeJ2f65d7nk mICgRvCpr8crr2COViiX2e9NQOUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLG4DhClsKq6JJKeM83vkSlZpuT9MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzA4OTg1ZjU5LTBlZTYtNDIwOC05YTkwLTI5YzEwODYwMGNmYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wODk4NWY1 OS0wZWU2LTQyMDgtOWE5MC0yOWMxMDg2MDBjZmMvMC9CMUI4MEUxMEE1QjBBQUJB MjQ5MjlFMzNDREVGOTEyOTU5QTZFNEZELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7FkMA0GCSqGSIb3DQEBCwUAA4IBAQBCV3u4rT0t0LU6xNTjm61XQ0kFkrOp vAjm/28RpglnI+OKxZBmTFZPRxgU+S8xozsyKfDLvd1DWDCLSo4sDqZrMvn9rFIv ZRtRwjTTSDsMtUSGeV0oGUOcpT8brgdt2gn5zc+nCdkwB+wb9D4q2P4eCV/QoIh2 yCy6wZb1/BU0HOxAzW6nW2Od7qfqTXCsgdRNCn3BEBZ+tSQXY02MkMIx51Dr7DoU Iun71qwk2BL839uXgy0GHJGXzakVxCxYqFm262SLXdOUUn+XJXMQjLy2r0p45TIe MksIBrBO7VBN3L5V3wywUs5OWRWILg8hxCd0Xwh1CtivjtPrs7OIgPk/ -----END CERTIFICATE-----Generated at Tue May 12 22:03:24 2026 by rpki-client