$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.cer File: B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.cer (raw, json) Hash identifier: 2NN6u4yOKB6o9WE1ltWupR3tEcwNbolJ31ucmUnwp10= Subject key identifier: B3:26:20:A4:DF:41:96:D2:A3:CE:BA:2C:CC:78:73:54:9A:AC:61:05 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7F63E39776739FEABA06813DF92BA56F01800525 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:41:44 +0000 Certificate not after: Sun 02 May 2027 00:46:44 +0000 Subordinate resources: IP: 103.19.158.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:63:e3:97:76:73:9f:ea:ba:06:81:3d:f9:2b:a5:6f:01:80:05:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:41:44 2026 GMT Not After : May 2 00:46:44 2027 GMT Subject: CN=B32620A4DF4196D2A3CEBA2CCC7873549AAC6105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1d:c3:1d:88:2f:e5:ad:59:2e:90:b9:ca:51: 5c:40:ea:ca:eb:fa:07:04:a7:f6:7c:4b:3f:86:61: 95:89:ca:86:1a:f2:21:23:8e:e1:eb:15:17:e9:54: 3b:5e:23:22:da:ab:d6:20:00:c4:d2:a7:23:8e:d8: c1:9e:00:2b:80:24:da:4d:8c:b2:cc:b7:28:d7:9c: 56:69:93:e4:fd:e5:85:24:23:60:af:0d:6e:4b:69: 03:9d:98:1d:97:88:22:ee:c5:32:7a:1e:c0:d8:63: a1:27:9e:2e:bd:ff:3f:a8:60:de:6e:29:f0:5d:77: ee:63:23:56:22:31:b1:f0:2e:91:f4:7e:a3:64:fd: 68:0b:be:a1:00:7b:67:f6:a5:48:eb:53:15:28:b0: 8b:d5:e7:5f:5d:a5:1f:e2:bf:72:c2:c5:d6:9b:88: 8e:3b:26:24:e7:da:aa:54:01:95:30:b8:4f:a5:80: 18:b5:c8:48:54:ec:72:79:f0:19:7d:2d:b7:8f:d6: d6:a6:4d:c1:a3:32:e0:56:ab:bb:b6:0f:ea:b8:e5: 0b:0c:30:25:53:4a:f5:d6:56:5a:4a:fc:da:09:b5: aa:d7:1f:90:fa:d8:b6:1e:8d:29:c1:47:ad:de:6f: 8b:50:57:d6:44:63:ee:3d:c6:21:35:06:a1:5d:05: e0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:26:20:A4:DF:41:96:D2:A3:CE:BA:2C:CC:78:73:54:9A:AC:61:05 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.19.158.0/23 Signature Algorithm: sha256WithRSAEncryption 11:1c:29:b1:f6:c5:77:3c:37:69:e7:c6:c9:d7:bf:b8:71:02: 1d:df:77:e5:44:39:90:53:e9:67:3f:96:b1:fe:ad:78:b0:fa: 32:13:1c:b9:79:fb:7e:e1:f3:e3:19:e5:a8:4a:e6:27:5e:dc: f4:8a:0a:d6:68:0d:21:42:34:1a:30:ca:a2:ff:88:a2:66:a1: a1:f7:84:d1:eb:df:f4:a2:27:60:9e:ba:ce:8b:80:ac:b0:67: 51:79:d6:de:a0:85:f2:54:df:9a:69:ce:53:83:75:f5:81:5c: 2f:48:bf:d6:2b:89:14:5c:23:9d:40:de:68:b7:cd:d7:ce:c6: a5:df:df:7e:24:59:75:64:e3:11:b2:42:ab:09:fe:d8:69:01: b3:64:b6:ae:9d:59:8f:54:5a:a2:5c:e7:b8:4c:d2:1c:9a:09: 81:6d:9a:a4:89:db:a9:7a:db:6b:66:11:9c:3a:a3:00:64:34: 02:e9:5c:59:cf:0f:af:fb:c8:63:d3:cc:29:ad:f0:18:d5:fc: 63:7a:c4:6d:9e:cc:58:96:17:d9:49:f8:8c:ca:78:a8:d6:fd: 59:a4:be:87:19:28:84:1e:4f:bf:78:c1:d3:e3:59:b4:28:ee: 3a:ac:1e:0b:5f:f0:ac:09:4a:55:42:a9:24:1b:d2:a5:79:e6: 77:28:03:99 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUf2Pjl3Zzn+q6BoE9+SulbwGABSUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDE0NFoX DTI3MDUwMjAwNDY0NFowMzExMC8GA1UEAxMoQjMyNjIwQTRERjQxOTZEMkEzQ0VC QTJDQ0M3ODczNTQ5QUFDNjEwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKQdwx2IL+WtWS6QucpRXEDqyuv6BwSn9nxLP4ZhlYnKhhryISOO4esVF+lU O14jItqr1iAAxNKnI47YwZ4AK4Ak2k2Mssy3KNecVmmT5P3lhSQjYK8NbktpA52Y HZeIIu7FMnoewNhjoSeeLr3/P6hg3m4p8F137mMjViIxsfAukfR+o2T9aAu+oQB7 Z/alSOtTFSiwi9XnX12lH+K/csLF1puIjjsmJOfaqlQBlTC4T6WAGLXISFTscnnw GX0tt4/W1qZNwaMy4Faru7YP6rjlCwwwJVNK9dZWWkr82gm1qtcfkPrYth6NKcFH rd5vi1BX1kRj7j3GITUGoV0F4GECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLMmIKTfQZbSo866LMx4c1SarGEFMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVjZGU4ZWNlLTk3YTItNGIwZC1hMDY0LTE3Y2VhNjFmNDVjYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81Y2RlOGVj ZS05N2EyLTRiMGQtYTA2NC0xN2NlYTYxZjQ1Y2MvMC9CMzI2MjBBNERGNDE5NkQy QTNDRUJBMkNDQzc4NzM1NDlBQUM2MTA1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZxOeMA0GCSqGSIb3DQEBCwUAA4IBAQARHCmx9sV3PDdp58bJ17+4cQId33fl RDmQU+lnP5ax/q14sPoyExy5eft+4fPjGeWoSuYnXtz0igrWaA0hQjQaMMqi/4ii ZqGh94TR69/0oidgnrrOi4CssGdRedbeoIXyVN+aac5Tg3X1gVwvSL/WK4kUXCOd QN5ot83Xzsal399+JFl1ZOMRskKrCf7YaQGzZLaunVmPVFqiXOe4TNIcmgmBbZqk idupettrZhGcOqMAZDQC6VxZzw+v+8hj08wprfAY1fxjesRtnsxYlhfZSfiMynio 1v1ZpL6HGSiEHk+/eMHT41m0KO46rB4LX/CsCUpVQqkkG9KleeZ3KAOZ -----END CERTIFICATE-----Generated at Tue May 12 22:10:22 2026 by rpki-client