$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer File: B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer (raw, json) Hash identifier: VqNGKB94/Zkc5mHbdJy+2edUfGE014LxB+Jt4obvQzM= Subject key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2962471696371805586A5DA130BA566B57ED1C35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:51:47 +0000 Certificate not after: Sun 02 May 2027 00:56:47 +0000 Subordinate resources: IP: 103.109.124.0/22 IP: 116.90.176.0/21 IP: 2402:7ac0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:62:47:16:96:37:18:05:58:6a:5d:a1:30:ba:56:6b:57:ed:1c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:51:47 2026 GMT Not After : May 2 00:56:47 2027 GMT Subject: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1f:3c:ad:33:94:86:33:3a:4e:af:a2:c2:db: 14:0f:c9:f0:ca:d7:c4:dd:ac:af:81:89:cc:7b:5b: 11:b7:20:58:27:22:00:59:1d:90:5b:f3:ae:09:7e: 2e:8c:1e:c6:90:c3:9b:cd:32:42:97:c5:93:97:70: b7:45:05:c1:56:4f:a4:8b:35:a0:6a:4b:80:f0:91: 9f:c4:e0:97:4d:d4:29:42:a1:d9:e9:86:f7:3f:ee: 1a:6d:5e:c5:de:65:c4:b6:d2:29:a1:c4:7e:52:6d: c1:30:e0:b3:28:75:ef:55:a5:02:ca:2a:15:37:35: ed:7f:38:0d:31:99:25:1c:15:f1:78:f2:fc:9f:94: cc:85:2e:33:63:2b:f3:e1:8a:7f:ba:87:c7:52:9a: 10:a4:aa:ef:fc:75:8e:9e:40:84:6f:57:44:ab:26: 44:e4:99:01:bc:94:95:34:80:ec:f7:5a:a3:62:eb: 6b:9c:67:f8:53:96:08:7f:0e:51:30:b5:73:64:1b: 8b:89:38:13:dc:47:de:b7:b9:9a:02:90:3f:d1:9c: a1:0b:ad:90:81:a5:eb:e2:60:65:14:d8:e1:ce:8e: 10:22:0c:b6:70:73:35:dd:60:94:3f:ee:64:ce:31: a9:0f:2e:23:8f:48:97:5e:fe:15:2f:a7:cd:72:9c: 3e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.109.124.0/22 116.90.176.0/21 IPv6: 2402:7ac0::/32 Signature Algorithm: sha256WithRSAEncryption 5e:9a:8e:44:67:09:fe:92:f0:94:94:b8:18:56:c0:89:1b:b6: e4:a9:10:8b:6c:a3:c0:6e:bf:4b:ff:e0:6f:64:c4:54:12:65: 46:93:5d:b2:48:ad:34:8c:31:71:44:c3:82:d2:01:50:13:20: 37:ac:ef:e5:a1:47:60:ca:74:9c:3b:8b:c8:8d:5e:cf:be:96: a9:46:46:f4:36:fb:ad:e2:50:27:05:7f:96:dd:05:93:38:2b: f6:e4:e9:eb:e6:a9:7a:68:5d:a0:c0:6f:32:f0:a9:0f:73:18: be:05:ad:13:e4:9b:a8:92:07:05:8f:20:15:21:ff:c8:fd:ba: 75:3f:de:ae:21:b8:5c:c1:6f:2f:60:d1:6f:06:3b:64:1a:eb: 0d:7d:38:49:a7:d8:5b:02:ba:7d:a1:c7:bc:62:e7:3e:82:8f: f0:c2:a0:09:43:22:58:51:73:e5:ec:83:56:6b:bf:d6:7c:9c: a6:ca:85:39:16:39:8d:9a:58:90:c8:dd:cd:43:76:fa:82:7c: 11:f1:f7:e2:34:e4:c1:4c:1c:f9:2e:da:78:34:49:a3:33:fb: ce:b4:73:7b:bc:ee:08:a9:e2:8b:31:3e:02:19:60:9e:ed:0d: 30:80:96:ad:d1:4b:e5:db:ae:fc:69:3c:fd:b7:b4:94:9c:54: 04:28:ac:a5 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUKWJHFpY3GAVYal2hMLpWa1ftHDUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTE0N1oX DTI3MDUwMjAwNTY0N1owMzExMC8GA1UEAxMoQjFDMDFDMkQzMTAwN0ZBOUY3Nzg1 NzBBMzNBMEJCQjMyMTUwOUU4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKAfPK0zlIYzOk6vosLbFA/J8MrXxN2sr4GJzHtbEbcgWCciAFkdkFvzrgl+ LowexpDDm80yQpfFk5dwt0UFwVZPpIs1oGpLgPCRn8Tgl03UKUKh2emG9z/uGm1e xd5lxLbSKaHEflJtwTDgsyh171WlAsoqFTc17X84DTGZJRwV8Xjy/J+UzIUuM2Mr 8+GKf7qHx1KaEKSq7/x1jp5AhG9XRKsmROSZAbyUlTSA7Pdao2Lra5xn+FOWCH8O UTC1c2Qbi4k4E9xH3re5mgKQP9GcoQutkIGl6+JgZRTY4c6OECIMtnBzNd1glD/u ZM4xqQ8uI49Il17+FS+nzXKcPgUCAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLHAHC0xAH+p93hXCjOgu7MhUJ6KMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZjYzQ2MmE1LThmNzQtNDJhZi04ODNiLTVlODllZTVmMmRmMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82Y2M0NjJh NS04Zjc0LTQyYWYtODgzYi01ZTg5ZWU1ZjJkZjMvMC9CMUMwMUMyRDMxMDA3RkE5 Rjc3ODU3MEEzM0EwQkJCMzIxNTA5RThBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQCZ218AwQDdFqwMA0EAgACMAcDBQAkAnrAMA0GCSqGSIb3DQEBCwUAA4IBAQBe mo5EZwn+kvCUlLgYVsCJG7bkqRCLbKPAbr9L/+BvZMRUEmVGk12ySK00jDFxRMOC 0gFQEyA3rO/loUdgynScO4vIjV7PvpapRkb0Nvut4lAnBX+W3QWTOCv25Onr5ql6 aF2gwG8y8KkPcxi+Ba0T5JuokgcFjyAVIf/I/bp1P96uIbhcwW8vYNFvBjtkGusN fThJp9hbArp9oce8Yuc+go/wwqAJQyJYUXPl7INWa7/WfJymyoU5FjmNmliQyN3N Q3b6gnwR8ffiNOTBTBz5Ltp4NEmjM/vOtHN7vO4IqeKLMT4CGWCe7Q0wgJat0Uvl 2678aTz9t7SUnFQEKKyl -----END CERTIFICATE-----Generated at Tue May 12 22:03:07 2026 by rpki-client