$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer File: B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer (raw, json) Hash identifier: pdmKIzhz6g82hInIU70ON/ex2UBm2Bdgc7CsIDe8mZI= Subject key identifier: B2:B4:8A:9C:04:8B:51:CD:13:3A:D0:AE:E6:F5:F9:EB:73:DA:16:85 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4B53586847A20BF241FBCB6F7B108D2A3968D9A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:30:33 +0000 Certificate not after: Sun 02 May 2027 01:35:33 +0000 Subordinate resources: IP: 103.187.226.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:53:58:68:47:a2:0b:f2:41:fb:cb:6f:7b:10:8d:2a:39:68:d9:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:30:33 2026 GMT Not After : May 2 01:35:33 2027 GMT Subject: CN=B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:16:28:05:20:c9:de:5e:81:3c:d6:31:cf:2a: f0:7e:f9:56:ff:f9:d1:b2:eb:76:20:7c:1c:1f:0a: a5:68:53:e5:e7:6e:13:b7:84:03:e3:db:16:17:b1: 01:a2:99:38:91:be:a4:79:42:99:56:42:8d:a0:2e: 40:cc:1c:fa:79:13:1e:89:8b:28:2e:ec:ea:69:b1: d5:e5:15:ff:cc:82:7d:9a:7f:b9:f1:5c:bb:65:b9: 5c:68:66:c3:12:25:97:1d:77:a5:35:a4:48:2e:bb: f1:22:8d:cd:73:7a:15:fc:fa:28:8b:fc:e7:a5:3c: ad:1c:37:69:c5:1e:a7:6b:86:f0:ef:66:2e:3a:73: 2f:64:23:93:bc:51:62:72:17:d1:b2:f2:a5:1f:24: 52:1b:73:5d:0a:24:ce:36:0c:bf:90:b4:76:21:e0: 48:ab:94:3a:55:76:10:2f:66:b1:01:b0:ad:67:a0: 29:5b:cc:36:67:de:e1:5d:ac:1f:f2:11:fd:07:f8: 9d:b3:9c:a6:f5:a5:e0:f2:6e:40:75:10:77:c4:41: d0:14:99:8f:c8:6c:3a:86:21:af:c9:10:54:4b:24: ce:67:00:f9:e9:f1:1c:a8:11:29:fb:5a:a3:fe:87: 42:e7:95:4c:99:d9:e1:c7:32:1d:69:6e:a4:5a:08: 97:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B2:B4:8A:9C:04:8B:51:CD:13:3A:D0:AE:E6:F5:F9:EB:73:DA:16:85 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.187.226.0/23 Signature Algorithm: sha256WithRSAEncryption 38:ab:a4:7b:7b:cf:0f:4b:5f:54:e7:7e:0f:38:91:ef:0b:ee: 34:6e:ec:bf:f5:86:6a:2e:33:fc:3a:b9:41:61:92:bb:1c:36: 16:c5:df:e1:d3:06:e5:ad:4e:a4:32:84:6b:8f:39:08:c4:cf: dc:f0:3b:1d:4f:63:38:4e:f1:8a:35:54:59:bf:b5:6f:66:78: 99:63:2d:8b:e7:4d:21:ea:20:ac:ee:1f:08:9e:25:af:15:6a: 21:58:41:5e:81:68:2c:7b:4d:9b:87:d0:6f:34:0b:a9:54:a2: 8d:c2:51:64:73:28:f6:69:a4:d7:2e:f0:67:84:68:a8:4a:cd: 77:f2:38:ef:3f:6b:e1:c4:f3:06:fc:69:47:72:0c:51:21:94: fe:19:a7:14:97:fd:26:c2:7a:94:20:72:25:d7:ef:ea:f8:a2: 31:42:b1:c2:49:e0:d6:f5:48:dd:83:bc:f9:0d:77:8c:b8:b8: 5b:2f:e0:de:23:40:a1:08:26:bc:2c:e5:a0:b7:36:e4:56:a1: de:c7:f4:e5:c0:fc:f9:e4:b0:62:c1:06:79:e1:37:ad:dc:d2: 9e:57:b7:1c:7c:ef:98:16:22:92:55:74:08:eb:54:56:f3:5b: 44:21:d5:2c:5d:1a:26:cd:73:68:21:90:ee:48:59:93:cc:00: 54:80:bf:c8 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUS1NYaEeiC/JB+8tvexCNKjlo2aEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzAzM1oX DTI3MDUwMjAxMzUzM1owMzExMC8GA1UEAxMoQjJCNDhBOUMwNDhCNTFDRDEzM0FE MEFFRTZGNUY5RUI3M0RBMTY4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN0WKAUgyd5egTzWMc8q8H75Vv/50bLrdiB8HB8KpWhT5eduE7eEA+PbFhex AaKZOJG+pHlCmVZCjaAuQMwc+nkTHomLKC7s6mmx1eUV/8yCfZp/ufFcu2W5XGhm wxIllx13pTWkSC678SKNzXN6Ffz6KIv856U8rRw3acUep2uG8O9mLjpzL2Qjk7xR YnIX0bLypR8kUhtzXQokzjYMv5C0diHgSKuUOlV2EC9msQGwrWegKVvMNmfe4V2s H/IR/Qf4nbOcpvWl4PJuQHUQd8RB0BSZj8hsOoYhr8kQVEskzmcA+enxHKgRKfta o/6HQueVTJnZ4ccyHWlupFoIl6MCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLK0ipwEi1HNEzrQrub1+etz2haFMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E2MzA5N2YwLTM5NzgtNDljZS1iNjljLTRiMjBiNGRjZmI3ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hNjMwOTdm MC0zOTc4LTQ5Y2UtYjY5Yy00YjIwYjRkY2ZiN2UvMC9CMkI0OEE5QzA0OEI1MUNE MTMzQUQwQUVFNkY1RjlFQjczREExNjg1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7viMA0GCSqGSIb3DQEBCwUAA4IBAQA4q6R7e88PS19U534POJHvC+40buy/ 9YZqLjP8OrlBYZK7HDYWxd/h0wblrU6kMoRrjzkIxM/c8DsdT2M4TvGKNVRZv7Vv ZniZYy2L500h6iCs7h8IniWvFWohWEFegWgse02bh9BvNAupVKKNwlFkcyj2aaTX LvBnhGioSs138jjvP2vhxPMG/GlHcgxRIZT+GacUl/0mwnqUIHIl1+/q+KIxQrHC SeDW9Ujdg7z5DXeMuLhbL+DeI0ChCCa8LOWgtzbkVqHex/TlwPz55LBiwQZ54Tet 3NKeV7ccfO+YFiKSVXQI61RW81tEIdUsXRomzXNoIZDuSFmTzABUgL/I -----END CERTIFICATE-----Generated at Tue May 12 22:52:32 2026 by rpki-client