$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer File: B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer (raw, json) Hash identifier: Ql7VwCiKfxCbXOcOVZpKANXL7yceZfcXqVdGQVCsfjs= Subject key identifier: B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3EAB78E76D69C5A7D97FFFC67392011321394F33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:16:30 +0000 Certificate not after: Sun 02 May 2027 01:21:30 +0000 Subordinate resources: IP: 103.166.226.0/23 IP: 2401:4fa0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ab:78:e7:6d:69:c5:a7:d9:7f:ff:c6:73:92:01:13:21:39:4f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:16:30 2026 GMT Not After : May 2 01:21:30 2027 GMT Subject: CN=B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0e:2c:91:c3:a7:a7:8c:d7:e9:93:59:f1:a2: e4:3b:6e:e5:9e:70:06:48:94:00:63:eb:84:9d:ef: eb:d8:ab:f5:e8:b2:85:1f:92:b1:0b:a0:30:0d:a5: 85:9c:50:41:1e:e9:c4:df:a5:54:d5:c1:e0:c1:ef: 71:26:51:68:77:d8:02:1e:eb:9e:2d:2b:5a:cb:10: dd:e2:17:4a:91:6f:ba:30:ee:b8:a3:09:a2:a5:b0: de:01:15:aa:25:0c:61:04:79:21:da:b4:e1:54:74: 28:f5:a9:0f:b5:ca:4f:4b:aa:aa:1a:ad:9c:6a:bb: 61:85:8e:92:30:58:50:13:a4:0c:7c:21:7d:6f:51: 7c:7f:c7:d2:1a:d5:7a:15:cd:12:ef:14:ec:d8:3a: a7:f0:86:a3:50:bd:5b:89:ea:49:3b:1c:2e:7d:7a: e6:ea:11:ee:00:13:5e:35:1e:dc:8c:33:17:7f:37: e1:58:d5:0b:38:11:00:e2:02:c1:52:e6:3d:f0:23: ef:7c:2c:c1:f3:a8:fe:4c:ec:4f:92:fd:95:ff:63: 9a:13:89:73:25:98:d3:78:a7:45:c0:12:5c:2a:5f: d7:e4:90:36:c8:7d:7c:2c:b2:7d:2d:eb:e7:dc:32: b1:f7:1d:6c:08:bd:ea:38:9f:9c:12:3a:18:98:8d: 7a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.226.0/23 IPv6: 2401:4fa0::/32 Signature Algorithm: sha256WithRSAEncryption 6a:94:af:3e:42:99:d7:03:e6:d7:7f:fb:e3:25:2b:12:c2:fb: a0:f5:f4:f9:64:1d:44:52:de:5f:95:48:af:a5:23:77:c0:05: a5:2c:5e:95:27:f3:44:6d:2b:af:f1:2f:29:44:6f:d4:fc:31: 64:2e:7e:62:42:bc:fe:00:7b:82:53:6b:5d:53:52:67:99:5f: 9a:08:2a:5b:0b:d4:38:79:22:21:4d:e3:74:e6:46:3e:1d:46: d8:b8:91:d3:c6:19:89:77:14:cc:af:a7:90:78:01:59:ae:35: 97:87:d5:40:9f:99:ff:31:50:aa:f7:ea:c9:8d:31:32:fb:55: a0:52:c6:de:e2:ab:55:e9:7b:8c:27:a0:81:8f:0f:17:00:a8: 6e:db:28:58:b0:35:93:05:27:6c:54:83:da:81:c6:29:17:08: 94:39:9f:7e:f0:e8:82:f9:52:1f:31:fb:54:41:a6:6d:a9:2f: ae:f7:8d:a4:70:20:9a:94:3b:53:d4:ad:f2:72:89:23:e7:78: 12:4a:42:96:a9:eb:a2:fe:7f:8e:f4:9f:ae:77:b5:0d:01:3a: 9b:8e:74:35:4c:39:52:83:d3:fc:67:65:bf:c0:02:aa:02:88: e6:9e:81:0f:06:57:c4:34:72:29:65:24:19:1d:98:ca:35:5a: e4:46:fe:c1 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUPqt4521pxafZf//Gc5IBEyE5TzMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTYzMFoX DTI3MDUwMjAxMjEzMFowMzExMC8GA1UEAxMoQjMxNkM2M0QyREExMzg3RDE5MUE3 RUE2REMwQjU5QzVFQ0QyRDcwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKQOLJHDp6eM1+mTWfGi5Dtu5Z5wBkiUAGPrhJ3v69ir9eiyhR+SsQugMA2l hZxQQR7pxN+lVNXB4MHvcSZRaHfYAh7rni0rWssQ3eIXSpFvujDuuKMJoqWw3gEV qiUMYQR5Idq04VR0KPWpD7XKT0uqqhqtnGq7YYWOkjBYUBOkDHwhfW9RfH/H0hrV ehXNEu8U7Ng6p/CGo1C9W4nqSTscLn165uoR7gATXjUe3IwzF3834VjVCzgRAOIC wVLmPfAj73wswfOo/kzsT5L9lf9jmhOJcyWY03inRcASXCpf1+SQNsh9fCyyfS3r 59wysfcdbAi96jifnBI6GJiNepsCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLMWxj0toTh9GRp+ptwLWcXs0tcJMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzhmZjA5NTg0LTkxMTAtNGIwZC04ZjZkLTJjZTUyNThlODQ2Yi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84ZmYwOTU4 NC05MTEwLTRiMGQtOGY2ZC0yY2U1MjU4ZTg0NmIvMC9CMzE2QzYzRDJEQTEzODdE MTkxQTdFQTZEQzBCNTlDNUVDRDJENzA5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ6biMA0EAgACMAcDBQAkAU+gMA0GCSqGSIb3DQEBCwUAA4IBAQBqlK8+QpnX A+bXf/vjJSsSwvug9fT5ZB1EUt5flUivpSN3wAWlLF6VJ/NEbSuv8S8pRG/U/DFk Ln5iQrz+AHuCU2tdU1JnmV+aCCpbC9Q4eSIhTeN05kY+HUbYuJHTxhmJdxTMr6eQ eAFZrjWXh9VAn5n/MVCq9+rJjTEy+1WgUsbe4qtV6XuMJ6CBjw8XAKhu2yhYsDWT BSdsVIPagcYpFwiUOZ9+8OiC+VIfMftUQaZtqS+u942kcCCalDtT1K3ycokj53gS SkKWqeui/n+O9J+ud7UNATqbjnQ1TDlSg9P8Z2W/wAKqAojmnoEPBlfENHIpZSQZ HZjKNVrkRv7B -----END CERTIFICATE-----Generated at Tue May 12 22:45:42 2026 by rpki-client