$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer File: B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer (raw, json) Hash identifier: hpYjck0ZPo2V5Gqto/ErbaYYXrDC7EINy5TojRCGcD4= Subject key identifier: B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 79AF9A54F793A8B8C0E8D7A83F443FD976FFB236 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:41:16 +0000 Certificate not after: Sun 02 May 2027 00:46:16 +0000 Subordinate resources: IP: 103.174.180.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:af:9a:54:f7:93:a8:b8:c0:e8:d7:a8:3f:44:3f:d9:76:ff:b2:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:41:16 2026 GMT Not After : May 2 00:46:16 2027 GMT Subject: CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5b:d0:1a:3f:69:85:58:9b:9a:20:e3:62:8b: 27:29:0a:c7:6a:da:ed:ca:c6:f4:2c:47:d3:2a:62: 8a:6b:0d:a8:a2:6d:a0:48:1e:49:99:0a:5e:db:03: db:9f:16:75:80:ab:b1:6b:5f:c7:9f:9e:5e:03:49: 0e:54:fe:e1:e7:a1:11:81:f7:d9:87:15:0c:7c:0c: 5e:75:d2:5b:f6:64:4b:94:92:14:dc:9b:e8:96:7e: dc:8b:69:44:12:3e:41:14:be:38:27:84:24:66:41: e6:28:8c:8b:e9:2b:91:ad:8c:ac:6b:74:79:11:25: 06:10:57:64:9f:95:1c:ec:6a:13:07:0f:61:a6:69: 22:e8:f9:ac:83:68:06:5e:29:05:a5:df:3a:95:33: ed:e6:40:93:81:32:1b:be:d5:7b:91:33:5c:f0:f2: 63:9d:e7:af:c3:3d:f7:2a:52:4e:2b:07:23:2b:47: b9:11:f9:ce:8a:84:3b:fe:7c:8a:d2:27:d8:39:9a: 59:e8:c2:05:d6:68:7e:f6:34:5e:bf:4d:5a:88:15: 99:0a:e7:62:c2:2e:23:be:36:43:b0:5d:41:32:58: c0:7e:0d:26:ea:e1:37:3e:55:26:2f:e2:da:a2:f1: 10:fc:65:10:07:bc:cc:bc:43:ff:0e:48:78:46:3a: aa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.180.0/23 Signature Algorithm: sha256WithRSAEncryption 99:05:3f:e0:b3:1b:cb:cb:21:79:22:de:e5:18:a1:98:91:e3: 6e:fc:d9:48:45:5f:c6:6d:49:bd:a4:dd:4d:53:5d:63:9e:23: b1:a9:03:a8:74:cf:98:e4:b1:41:c2:0c:12:3b:03:39:52:a7: e4:9e:16:1b:00:ac:f0:3d:30:82:a5:1a:c5:af:da:d4:0c:a2: 7d:e4:31:cc:0b:69:0c:88:b0:f0:96:0b:ad:7d:2f:f3:44:8b: a5:c1:c5:8b:a0:56:b5:87:78:06:01:56:4a:7e:ac:45:eb:82: 3b:53:27:ee:32:12:ae:36:0e:b6:63:01:43:d8:7f:38:95:3d: 3e:5b:db:18:5d:44:f2:aa:c6:a3:b1:96:bf:be:e4:1d:3a:49: 6e:82:a1:73:96:eb:d0:ff:aa:61:ea:6f:c3:65:4c:23:b5:2a: 35:3a:47:5d:e9:db:3c:a0:e8:6c:83:da:de:8f:3e:e2:02:35: a3:e8:75:d4:20:b6:5e:27:46:57:ac:1b:cb:2b:4e:50:7d:9f: ea:14:9e:2f:c2:7e:1d:ce:ce:7b:6c:9e:0d:ff:40:84:11:af: 77:e6:06:e5:0b:33:7c:14:ea:29:60:fd:a6:43:1a:c0:bb:59: 9b:a1:60:bf:b6:8a:d7:d0:3e:fe:43:73:60:2e:2b:0d:ef:9b: 22:1e:a1:f4 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUea+aVPeTqLjA6NeoP0Q/2Xb/sjYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDExNloX DTI3MDUwMjAwNDYxNlowMzExMC8GA1UEAxMoQjJGNTcyRjU2NjZEMkIwQkI2NkUz RUM4MjhBQzQzQTIwN0NCMDAxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMhb0Bo/aYVYm5og42KLJykKx2ra7crG9CxH0ypiimsNqKJtoEgeSZkKXtsD 258WdYCrsWtfx5+eXgNJDlT+4eehEYH32YcVDHwMXnXSW/ZkS5SSFNyb6JZ+3Itp RBI+QRS+OCeEJGZB5iiMi+krka2MrGt0eRElBhBXZJ+VHOxqEwcPYaZpIuj5rINo Bl4pBaXfOpUz7eZAk4EyG77Ve5EzXPDyY53nr8M99ypSTisHIytHuRH5zoqEO/58 itIn2DmaWejCBdZofvY0Xr9NWogVmQrnYsIuI742Q7BdQTJYwH4NJurhNz5VJi/i 2qLxEPxlEAe8zLxD/w5IeEY6qn8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLL1cvVmbSsLtm4+yCisQ6IHywAaMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVjMjg1MjkxLWNlOTItNDE0NC05YzE4LTllOGMxOTFkZGVjNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81YzI4NTI5 MS1jZTkyLTQxNDQtOWMxOC05ZThjMTkxZGRlYzYvMC9CMkY1NzJGNTY2NkQyQjBC QjY2RTNFQzgyOEFDNDNBMjA3Q0IwMDFBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ660MA0GCSqGSIb3DQEBCwUAA4IBAQCZBT/gsxvLyyF5It7lGKGYkeNu/NlI RV/GbUm9pN1NU11jniOxqQOodM+Y5LFBwgwSOwM5UqfknhYbAKzwPTCCpRrFr9rU DKJ95DHMC2kMiLDwlgutfS/zRIulwcWLoFa1h3gGAVZKfqxF64I7UyfuMhKuNg62 YwFD2H84lT0+W9sYXUTyqsajsZa/vuQdOklugqFzluvQ/6ph6m/DZUwjtSo1Okdd 6ds8oOhsg9rejz7iAjWj6HXUILZeJ0ZXrBvLK05QfZ/qFJ4vwn4dzs57bJ4N/0CE Ea935gblCzN8FOopYP2mQxrAu1mboWC/torX0D7+Q3NgLisN75siHqH0 -----END CERTIFICATE-----Generated at Tue May 12 22:03:29 2026 by rpki-client