$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.cer File: B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.cer (raw, json) Hash identifier: RW3mrUCZvrAHGfIrMiHNDO04i6VdtQNY4lWJb/XjZK0= Subject key identifier: B5:6B:A6:6A:CB:6B:28:A7:5C:F8:B9:26:29:F3:89:88:E6:BC:E5:F0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3D7C3F8E56F757A22EF557D674B06F22A91AD15D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:52:53 +0000 Certificate not after: Sat 01 May 2027 23:57:53 +0000 Subordinate resources: IP: 103.121.238.0/23 IP: 2001:df6:5900::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:7c:3f:8e:56:f7:57:a2:2e:f5:57:d6:74:b0:6f:22:a9:1a:d1:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:52:53 2026 GMT Not After : May 1 23:57:53 2027 GMT Subject: CN=B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:53:f5:9b:e5:79:42:02:7a:91:05:5b:12:ef: 19:2d:ae:0b:cf:30:ad:c4:58:38:2a:bd:1b:6f:ae: fb:2f:77:32:e9:04:28:0c:07:0e:6b:c4:de:5a:a7: 81:21:94:bb:97:98:f2:34:63:71:78:a8:ec:6e:30: fe:54:01:c1:e4:7c:22:93:cb:b6:56:44:2f:65:af: cd:03:7a:8a:ca:44:3a:b3:25:3e:97:c9:cd:f9:d3: 21:c6:f6:df:d6:73:09:bc:e0:53:62:0d:44:34:a5: 70:4d:ee:f6:5c:65:2c:c2:ba:87:20:4b:95:4f:d0: b8:2f:b1:d9:c2:5c:f0:0c:fb:2e:fb:88:96:77:11: 17:ba:94:39:16:6c:81:04:d2:8c:bb:8c:a5:86:39: c9:1e:44:e0:9d:b8:37:63:ad:b1:57:f9:74:3c:28: ac:02:bb:48:a5:fb:53:e9:ac:47:bd:3a:14:cb:fe: d0:e5:d6:92:6e:cf:16:c2:f6:97:08:7c:24:8a:cc: ab:3e:c4:e6:64:f9:1d:57:39:6b:70:3c:61:12:88: 96:02:ab:ea:c5:69:15:f9:7f:ce:cb:31:28:c1:30: e9:72:dd:7f:cd:4d:60:98:5f:ea:70:e2:d0:fa:a9: a4:70:55:bb:b4:5f:43:fc:32:f7:8a:0b:7f:53:75: 23:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:6B:A6:6A:CB:6B:28:A7:5C:F8:B9:26:29:F3:89:88:E6:BC:E5:F0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.238.0/23 IPv6: 2001:df6:5900::/48 Signature Algorithm: sha256WithRSAEncryption 4c:8c:70:f2:85:99:c3:bc:7f:6d:e8:01:98:c2:58:7f:13:b6: fd:b3:46:24:88:17:9a:6d:b0:56:4e:f3:5e:fb:bd:e7:d0:dd: 43:a7:ff:64:dc:56:14:33:f8:d2:61:b4:c9:67:7b:f8:dc:67: 97:0e:1c:40:13:e3:7f:5b:c5:94:c7:b2:29:d5:11:14:6f:e5: a6:df:99:ab:f0:f5:f1:03:e6:36:cb:2d:55:fb:fc:a8:d5:73: 70:0d:54:85:37:0a:1f:8c:8d:43:56:c3:4c:fb:02:b4:83:b6: 58:67:e4:0e:b1:8d:a7:70:e4:59:0c:65:c0:f2:51:7c:a3:46: 01:dd:4d:3f:57:7f:13:b9:bb:39:1e:69:85:67:61:ae:6c:2d: 7f:db:7f:7e:01:9c:f0:02:1b:6a:7a:4e:69:02:84:02:0e:e7: 3c:2f:f6:26:90:88:46:ef:4c:d0:af:16:7b:d2:cf:51:b2:9f: 58:53:bb:d5:6e:a7:bf:af:39:33:39:1b:66:95:5a:20:41:a4: e1:c0:cb:d1:a4:ca:e5:8a:9f:47:7d:50:3b:e1:ac:01:ed:6d: ec:08:0f:6a:6f:6d:53:d7:52:ce:32:08:70:14:37:8c:f1:e1: 78:50:76:c9:01:d7:df:82:eb:66:44:0b:0c:77:12:90:8c:f1: 98:14:0d:9e -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUPXw/jlb3V6Iu9VfWdLBvIqka0V0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTI1M1oX DTI3MDUwMTIzNTc1M1owMzExMC8GA1UEAxMoQjU2QkE2NkFDQjZCMjhBNzVDRjhC OTI2MjlGMzg5ODhFNkJDRTVGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANBT9ZvleUICepEFWxLvGS2uC88wrcRYOCq9G2+u+y93MukEKAwHDmvE3lqn gSGUu5eY8jRjcXio7G4w/lQBweR8IpPLtlZEL2WvzQN6ispEOrMlPpfJzfnTIcb2 39ZzCbzgU2INRDSlcE3u9lxlLMK6hyBLlU/QuC+x2cJc8Az7LvuIlncRF7qUORZs gQTSjLuMpYY5yR5E4J24N2OtsVf5dDworAK7SKX7U+msR706FMv+0OXWkm7PFsL2 lwh8JIrMqz7E5mT5HVc5a3A8YRKIlgKr6sVpFfl/zssxKMEw6XLdf81NYJhf6nDi 0PqppHBVu7RfQ/wy94oLf1N1Iz8CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLVrpmrLayinXPi5JinziYjmvOXwMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE0ZWYxOTIwLTg1MjMtNGVkNC1iMzU3LTlkZTlhMGM5MTcxMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xNGVmMTky MC04NTIzLTRlZDQtYjM1Ny05ZGU5YTBjOTE3MTAvMC9CNTZCQTY2QUNCNkIyOEE3 NUNGOEI5MjYyOUYzODk4OEU2QkNFNUYwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ3nuMA8EAgACMAkDBwAgAQ32WQAwDQYJKoZIhvcNAQELBQADggEBAEyMcPKF mcO8f23oAZjCWH8Ttv2zRiSIF5ptsFZO8177vefQ3UOn/2TcVhQz+NJhtMlne/jc Z5cOHEAT439bxZTHsinVERRv5abfmavw9fED5jbLLVX7/KjVc3ANVIU3Ch+MjUNW w0z7ArSDtlhn5A6xjadw5FkMZcDyUXyjRgHdTT9XfxO5uzkeaYVnYa5sLX/bf34B nPACG2p6TmkChAIO5zwv9iaQiEbvTNCvFnvSz1Gyn1hTu9Vup7+vOTM5G2aVWiBB pOHAy9GkyuWKn0d9UDvhrAHtbewID2pvbVPXUs4yCHAUN4zx4XhQdskB19+C62ZE Cwx3EpCM8ZgUDZ4= -----END CERTIFICATE-----Generated at Wed May 13 00:44:29 2026 by rpki-client