$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.cer File: B4EA91A6AB8247898ABE5F6A973AC83C2D981279.cer (raw, json) Hash identifier: g50Pf793IH44UUEAQKoPOrSEM+/SGvOmG08qTjHd+Ww= Subject key identifier: B4:EA:91:A6:AB:82:47:89:8A:BE:5F:6A:97:3A:C8:3C:2D:98:12:79 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 45CADEE3C319D4CB243432EC9405E236F0F87BCE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:17:46 +0000 Certificate not after: Sun 02 May 2027 02:22:46 +0000 Subordinate resources: IP: 103.159.92.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ca:de:e3:c3:19:d4:cb:24:34:32:ec:94:05:e2:36:f0:f8:7b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:17:46 2026 GMT Not After : May 2 02:22:46 2027 GMT Subject: CN=B4EA91A6AB8247898ABE5F6A973AC83C2D981279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2b:35:f1:a1:ca:58:d3:33:ba:03:13:99:5f: 9a:02:44:d6:0b:33:d5:da:7f:f1:8f:50:63:9e:ea: b6:b6:4f:27:e7:11:ce:86:97:c9:6b:0f:f1:0b:59: 5e:33:07:a6:d0:9f:d8:85:c7:3a:81:57:9e:d6:b8: 15:7e:89:cf:9c:e7:a2:da:86:ab:4b:39:16:8a:7f: d3:1d:66:33:c0:6d:d9:d6:20:34:4d:06:15:60:15: 1b:2d:07:f5:2b:6f:00:38:aa:c3:34:c5:c5:1b:30: 2d:c3:cb:62:a3:0f:01:6f:fb:ab:a0:0b:1d:c9:69: 95:81:25:bc:0a:f4:df:00:6b:1f:e9:69:e4:bb:ea: 13:94:17:12:07:50:0d:cf:01:53:c1:3a:c8:0f:30: 7a:ae:af:3a:e0:b0:2d:11:50:2a:69:32:3b:35:a8: b5:55:90:37:02:b1:23:9e:d1:19:d8:68:6c:84:0b: 31:77:74:ff:02:a2:8c:c5:af:65:cb:8f:b9:94:73: 27:cd:f8:4a:0b:5a:0e:85:09:81:3b:94:26:5b:6f: 6f:38:55:ae:62:a7:f3:4f:c7:46:5b:4c:d9:5c:26: b9:c1:79:f2:89:9e:f2:b9:9e:f5:8b:cb:30:70:24: 9a:5b:f8:59:14:b0:12:f9:12:22:93:41:e9:c7:0c: 07:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B4:EA:91:A6:AB:82:47:89:8A:BE:5F:6A:97:3A:C8:3C:2D:98:12:79 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.92.0/23 Signature Algorithm: sha256WithRSAEncryption 72:76:bc:cf:f0:f8:52:ee:37:76:f6:b9:c3:1b:52:5a:bc:df: 50:85:2d:ce:ae:96:bb:c4:e1:e0:b1:f4:48:1b:1e:a1:d5:a7: 75:f4:36:65:85:66:9e:7c:82:f5:0b:04:5c:85:9d:c9:db:19: 3b:4f:0e:3b:f3:fd:fb:82:56:2e:df:62:c0:84:52:81:96:32: 68:97:fb:3f:12:d9:19:db:d7:ac:dd:99:38:76:d0:5a:4e:b8: 64:34:fe:a6:d3:08:13:e7:d1:97:f7:d5:3c:c8:82:ad:8b:22: 9a:68:14:bb:2f:0e:df:0e:f6:c7:3c:86:a1:bc:50:54:a5:ae: e6:a0:fa:2e:90:aa:e9:0d:88:de:47:c5:30:b8:ac:d3:22:1c: f7:5a:f3:a1:b4:70:d3:f8:92:1c:9d:92:8b:2a:b7:c2:a7:4d: 5a:17:e8:4c:41:76:38:07:bc:24:c8:c1:fb:ad:ff:6b:6c:cc: 9c:6a:ea:28:0f:39:88:f6:57:fc:db:13:c6:50:f7:13:8f:08: fa:f1:53:ba:62:ef:64:60:42:62:c7:f9:47:44:46:52:ab:44: 29:0a:0c:a1:0d:af:e5:e9:26:95:4f:e0:06:c4:c9:4e:05:d6: f1:22:51:b6:6e:ae:0d:2a:8a:85:f1:53:ee:45:ef:3e:fc:0b: ca:c3:ef:a1 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIURcre48MZ1MskNDLslAXiNvD4e84wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTc0NloX DTI3MDUwMjAyMjI0NlowMzExMC8GA1UEAxMoQjRFQTkxQTZBQjgyNDc4OThBQkU1 RjZBOTczQUM4M0MyRDk4MTI3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJQrNfGhyljTM7oDE5lfmgJE1gsz1dp/8Y9QY57qtrZPJ+cRzoaXyWsP8QtZ XjMHptCf2IXHOoFXnta4FX6Jz5znotqGq0s5Fop/0x1mM8Bt2dYgNE0GFWAVGy0H 9StvADiqwzTFxRswLcPLYqMPAW/7q6ALHclplYElvAr03wBrH+lp5LvqE5QXEgdQ Dc8BU8E6yA8weq6vOuCwLRFQKmkyOzWotVWQNwKxI57RGdhobIQLMXd0/wKijMWv ZcuPuZRzJ834SgtaDoUJgTuUJltvbzhVrmKn80/HRltM2VwmucF58ome8rme9YvL MHAkmlv4WRSwEvkSIpNB6ccMB7kCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLTqkaargkeJir5fapc6yDwtmBJ5MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2U3MzQxOWI5LTU0MjItNGZjMi1hM2UwLWM0OWE4YWEwN2Y3My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lNzM0MTli OS01NDIyLTRmYzItYTNlMC1jNDlhOGFhMDdmNzMvMC9CNEVBOTFBNkFCODI0Nzg5 OEFCRTVGNkE5NzNBQzgzQzJEOTgxMjc5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ59cMA0GCSqGSIb3DQEBCwUAA4IBAQBydrzP8PhS7jd29rnDG1JavN9QhS3O rpa7xOHgsfRIGx6h1ad19DZlhWaefIL1CwRchZ3J2xk7Tw478/37glYu32LAhFKB ljJol/s/EtkZ29es3Zk4dtBaTrhkNP6m0wgT59GX99U8yIKtiyKaaBS7Lw7fDvbH PIahvFBUpa7moPoukKrpDYjeR8UwuKzTIhz3WvOhtHDT+JIcnZKLKrfCp01aF+hM QXY4B7wkyMH7rf9rbMycauooDzmI9lf82xPGUPcTjwj68VO6Yu9kYEJix/lHREZS q0QpCgyhDa/l6SaVT+AGxMlOBdbxIlG2bq4NKoqF8VPuRe8+/AvKw++h -----END CERTIFICATE-----Generated at Tue May 12 22:16:58 2026 by rpki-client