$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.cer File: B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.cer (raw, json) Hash identifier: rcTYxTn7UR1470Bc0wQVFAoqDexRsAgY2rCeX33gois= Subject key identifier: B5:E7:F6:FF:0C:34:6A:48:8F:01:A9:EF:AA:BD:E1:51:1D:7E:6C:96 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7231B3DE869383E721CDD54C95381D2D16629F93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.mft caRepository: rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:45:09 +0000 Certificate not after: Sun 02 May 2027 01:50:09 +0000 Subordinate resources: IP: 103.108.156.0/22 IP: 2402:6ac0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:31:b3:de:86:93:83:e7:21:cd:d5:4c:95:38:1d:2d:16:62:9f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:45:09 2026 GMT Not After : May 2 01:50:09 2027 GMT Subject: CN=B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:24:eb:6e:67:22:ce:fe:13:d0:8a:50:bc:cd: 69:c8:1a:e6:d9:db:4f:01:67:41:32:fd:23:06:fc: 3d:da:0d:65:9e:92:95:17:46:26:aa:30:6c:d0:81: 14:5a:9f:19:7c:32:4b:e4:39:75:03:88:4f:4b:3d: d9:dc:e1:ea:8a:4c:a0:10:21:32:c9:01:fe:76:b1: a2:a4:f5:fd:7e:cc:23:08:eb:b0:ba:8a:a1:33:df: 9c:d6:0d:a8:60:bf:10:61:21:3c:7d:24:bb:bf:ee: 55:a1:82:49:ca:8e:0f:1e:59:7f:15:93:bf:f8:b0: b6:f1:c5:a4:d8:f9:e8:ed:bb:52:77:65:57:6d:7a: 01:5a:cd:ee:9d:02:cd:34:13:c6:f9:c5:38:b8:94: 53:00:a2:ea:1f:01:79:0d:b5:fd:32:56:42:e4:e2: 4b:f6:9f:33:94:92:0e:26:74:9b:ce:9a:59:be:cb: 41:8f:5c:54:69:cd:51:3a:91:3c:dd:3b:2c:44:07: 6f:96:18:62:da:9b:70:67:c1:eb:bc:2f:fc:88:1f: e5:93:51:4d:f4:ee:ed:f6:ba:f4:5a:02:40:c0:d0: 49:e6:f8:7c:2d:37:b3:02:d4:55:e6:8a:78:da:da: 8d:b9:d6:56:10:7f:57:36:90:8e:9f:e4:08:ea:91: 66:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:E7:F6:FF:0C:34:6A:48:8F:01:A9:EF:AA:BD:E1:51:1D:7E:6C:96 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.108.156.0/22 IPv6: 2402:6ac0::/32 Signature Algorithm: sha256WithRSAEncryption 35:fb:31:d8:66:47:73:a4:04:9b:76:17:f5:a0:28:8c:a9:61: d8:4c:3d:4a:06:01:d3:f2:92:82:21:ed:c3:bf:db:2d:e3:f0: 0b:1b:9c:23:35:c1:12:31:8a:78:b3:86:40:9d:69:da:b9:6f: 85:1d:29:99:c0:b1:ba:d4:ac:dc:64:c9:44:ea:3b:52:53:68: e7:1e:4c:d8:73:67:b9:65:e2:c1:f5:d8:f0:49:dd:13:5f:7f: c4:70:ea:fc:be:c9:87:c6:a3:02:49:2e:44:79:22:8f:e4:89: 23:49:d7:93:b1:6c:86:65:db:b3:f7:2e:e7:8d:78:f4:e6:be: fd:33:97:af:0f:1e:40:93:fe:81:20:19:d4:79:93:88:55:a4: cb:1f:f4:92:03:3b:e2:a4:f4:21:51:7b:1a:6f:3c:77:59:03: e5:54:ad:82:e5:f8:35:33:4d:4c:81:3e:22:8c:01:66:70:b1: 8e:80:78:8f:98:5d:6b:cc:68:c7:c7:c6:e6:ab:ac:01:71:c6: 27:84:14:8f:9a:82:39:db:1e:0b:8c:d4:d5:58:1e:95:f0:a1: 28:ff:1a:3c:5b:ad:f0:51:ef:36:0b:fc:29:d4:26:40:0d:20: ee:b4:32:a7:10:24:73:5f:39:d5:15:07:f4:82:a6:e3:c0:8f: 36:71:14:6f -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUcjGz3oaTg+chzdVMlTgdLRZin5MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDUwOVoX DTI3MDUwMjAxNTAwOVowMzExMC8GA1UEAxMoQjVFN0Y2RkYwQzM0NkE0ODhGMDFB OUVGQUFCREUxNTExRDdFNkM5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALEk625nIs7+E9CKULzNacga5tnbTwFnQTL9Iwb8PdoNZZ6SlRdGJqowbNCB FFqfGXwyS+Q5dQOIT0s92dzh6opMoBAhMskB/naxoqT1/X7MIwjrsLqKoTPfnNYN qGC/EGEhPH0ku7/uVaGCScqODx5ZfxWTv/iwtvHFpNj56O27UndlV216AVrN7p0C zTQTxvnFOLiUUwCi6h8BeQ21/TJWQuTiS/afM5SSDiZ0m86aWb7LQY9cVGnNUTqR PN07LEQHb5YYYtqbcGfB67wv/Igf5ZNRTfTu7fa69FoCQMDQSeb4fC03swLUVeaK eNrajbnWVhB/VzaQjp/kCOqRZsECAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLXn9v8MNGpIjwGp76q94VEdfmyWMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2JkMzViZjc5LWU4NGEtNDBlMC04ZmQ0LWYxNjljMTg2YmU4Zi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iZDM1YmY3 OS1lODRhLTQwZTAtOGZkNC1mMTY5YzE4NmJlOGYvMC9CNUU3RjZGRjBDMzQ2QTQ4 OEYwMUE5RUZBQUJERTE1MTFEN0U2Qzk2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ2ycMA0EAgACMAcDBQAkAmrAMA0GCSqGSIb3DQEBCwUAA4IBAQA1+zHYZkdz pASbdhf1oCiMqWHYTD1KBgHT8pKCIe3Dv9st4/ALG5wjNcESMYp4s4ZAnWnauW+F HSmZwLG61KzcZMlE6jtSU2jnHkzYc2e5ZeLB9djwSd0TX3/EcOr8vsmHxqMCSS5E eSKP5IkjSdeTsWyGZduz9y7njXj05r79M5evDx5Ak/6BIBnUeZOIVaTLH/SSAzvi pPQhUXsabzx3WQPlVK2C5fg1M01MgT4ijAFmcLGOgHiPmF1rzGjHx8bmq6wBccYn hBSPmoI52x4LjNTVWB6V8KEo/xo8W63wUe82C/wp1CZADSDutDKnECRzXznVFQf0 gqbjwI82cRRv -----END CERTIFICATE-----Generated at Tue May 12 22:32:29 2026 by rpki-client