$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.cer File: B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.cer (raw, json) Hash identifier: MZpTNMBv6R9S9HfsFz9sHLO8RHWjSKh6RMaB1UlF9Io= Subject key identifier: B4:C9:B2:D8:5C:9E:AF:67:51:FD:7F:92:2E:E0:80:8E:CC:42:F1:44 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 74AA2B5F687488A187693CFC023B2DB68F7B44E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:23:44 +0000 Certificate not after: Sun 02 May 2027 01:28:44 +0000 Subordinate resources: IP: 103.23.196.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:aa:2b:5f:68:74:88:a1:87:69:3c:fc:02:3b:2d:b6:8f:7b:44:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:23:44 2026 GMT Not After : May 2 01:28:44 2027 GMT Subject: CN=B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7f:4f:83:f6:10:ea:4e:5c:47:2c:87:1b:af: 6f:ea:72:90:7b:36:40:2e:73:64:cd:c8:7c:bc:3a: 6e:3f:66:69:45:b3:ff:9a:02:6d:84:3d:d2:7f:67: bd:5b:e1:f5:0a:94:97:37:ff:09:39:75:9d:5f:b1: 31:cf:7e:19:72:69:10:aa:51:e7:50:11:0f:ab:f1: 47:28:9b:df:66:fc:8e:52:2c:bc:0d:97:7a:5c:78: 02:f7:78:cb:92:27:33:72:fc:59:0a:c2:a6:5f:fe: 73:07:48:03:f4:26:40:ca:58:89:93:df:7f:2a:b7: 83:94:dc:22:f2:dc:5c:71:4f:5d:94:bb:4c:27:3e: 82:0f:0a:b1:44:44:ab:1b:4c:f5:af:42:57:84:3c: 99:ec:4b:3e:a7:10:4c:09:9a:a9:3f:5b:52:fb:d0: f6:74:35:c6:ef:70:02:be:23:35:26:10:00:cb:5e: 56:94:41:a7:fa:cb:57:68:a4:c6:37:b2:40:d4:ef: e0:d7:d8:02:64:02:91:a6:b7:da:83:9c:fc:c5:23: 87:16:c6:59:a0:d1:85:2f:bb:35:22:67:58:22:95: 00:67:0d:d4:5a:a2:f9:43:ba:0f:f2:8e:0a:24:92: e6:a4:87:38:9c:38:50:03:cf:c1:7c:f8:f7:9b:3b: 82:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B4:C9:B2:D8:5C:9E:AF:67:51:FD:7F:92:2E:E0:80:8E:CC:42:F1:44 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/B4C9B2D85C9EAF6751FD7F922EE0808ECC42F144.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.23.196.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:28:f2:97:44:8f:08:d4:ee:b6:50:97:66:09:97:5c:09:ec: 5d:9f:0d:87:2e:9a:38:e8:25:2c:c9:f5:ba:65:25:b9:f3:e4: c0:74:57:9b:28:6e:39:11:9e:71:45:57:6c:73:03:4f:78:aa: 4e:e1:3e:ed:1c:e1:50:54:74:35:76:52:1f:18:0c:5b:ac:ae: 69:a8:d7:0d:f3:72:f7:68:a9:33:47:c0:d2:87:58:ed:13:31: ea:e6:1e:6b:43:b6:92:59:92:4e:6b:46:4f:df:9f:83:05:3c: fe:35:b9:60:5d:99:9d:6d:82:3a:08:20:68:cf:d0:e8:0a:95: bc:50:ed:50:2a:32:fa:dd:10:5a:29:62:5f:31:1e:e8:c4:55: ed:2b:cd:15:4b:d5:fd:fb:01:f1:14:34:d3:e2:82:a1:ab:e7: 6d:43:e7:c9:d2:49:ee:34:09:9b:70:80:37:e8:79:5d:28:36: d2:47:b9:74:31:3d:eb:8b:35:b6:b9:85:22:f6:6a:e2:b0:9d: 52:3d:e4:26:f8:92:8f:a0:a8:6e:3b:7f:cc:1a:52:81:63:18: 19:15:14:3f:c6:d4:36:99:b7:82:4a:a9:2f:21:e6:f6:89:1d: 9a:43:bc:c0:8a:d2:a8:19:47:13:6b:ff:08:d1:23:bd:46:b1: 8f:a0:72:32 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUdKorX2h0iKGHaTz8Ajstto97ROQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjM0NFoX DTI3MDUwMjAxMjg0NFowMzExMC8GA1UEAxMoQjRDOUIyRDg1QzlFQUY2NzUxRkQ3 RjkyMkVFMDgwOEVDQzQyRjE0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1/T4P2EOpOXEcshxuvb+pykHs2QC5zZM3IfLw6bj9maUWz/5oCbYQ90n9n vVvh9QqUlzf/CTl1nV+xMc9+GXJpEKpR51ARD6vxRyib32b8jlIsvA2Xelx4Avd4 y5InM3L8WQrCpl/+cwdIA/QmQMpYiZPffyq3g5TcIvLcXHFPXZS7TCc+gg8KsURE qxtM9a9CV4Q8mexLPqcQTAmaqT9bUvvQ9nQ1xu9wAr4jNSYQAMteVpRBp/rLV2ik xjeyQNTv4NfYAmQCkaa32oOc/MUjhxbGWaDRhS+7NSJnWCKVAGcN1Fqi+UO6D/KO CiSS5qSHOJw4UAPPwXz495s7giMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLTJsthcnq9nUf1/ki7ggI7MQvFEMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzliM2IyMzBhLWZmZjEtNDdmMC1iZjkxLTdjZWI4ZDM2MDk2ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85YjNiMjMw YS1mZmYxLTQ3ZjAtYmY5MS03Y2ViOGQzNjA5NmUvMC9CNEM5QjJEODVDOUVBRjY3 NTFGRDdGOTIyRUUwODA4RUNDNDJGMTQ0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZxfEMA0GCSqGSIb3DQEBCwUAA4IBAQA7KPKXRI8I1O62UJdmCZdcCexdnw2H Lpo46CUsyfW6ZSW58+TAdFebKG45EZ5xRVdscwNPeKpO4T7tHOFQVHQ1dlIfGAxb rK5pqNcN83L3aKkzR8DSh1jtEzHq5h5rQ7aSWZJOa0ZP35+DBTz+NblgXZmdbYI6 CCBoz9DoCpW8UO1QKjL63RBaKWJfMR7oxFXtK80VS9X9+wHxFDTT4oKhq+dtQ+fJ 0knuNAmbcIA36HldKDbSR7l0MT3rizW2uYUi9mrisJ1SPeQm+JKPoKhuO3/MGlKB YxgZFRQ/xtQ2mbeCSqkvIeb2iR2aQ7zAitKoGUcTa/8I0SO9RrGPoHIy -----END CERTIFICATE-----Generated at Tue May 12 22:46:02 2026 by rpki-client