$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.cer File: B63B54AD0E764DB5250CE7F12EDB432F0C02897C.cer (raw, json) Hash identifier: 2fdz0In1AXyQwdjepsRGeRpxNX4HmrnLgAqAPl4CvmQ= Subject key identifier: B6:3B:54:AD:0E:76:4D:B5:25:0C:E7:F1:2E:DB:43:2F:0C:02:89:7C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 04A7780FDE9925FE517A5FC0C30D1B1EA8435F50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:14:50 +0000 Certificate not after: Sun 02 May 2027 02:19:50 +0000 Subordinate resources: IP: 103.55.28.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a7:78:0f:de:99:25:fe:51:7a:5f:c0:c3:0d:1b:1e:a8:43:5f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:14:50 2026 GMT Not After : May 2 02:19:50 2027 GMT Subject: CN=B63B54AD0E764DB5250CE7F12EDB432F0C02897C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:83:b6:77:5c:90:e3:aa:67:3c:00:6a:e0:a0: e1:6c:0e:eb:f1:ab:e5:15:4b:10:0d:19:00:8a:5a: d5:54:0f:ef:25:25:3d:07:0e:9d:1a:84:d8:02:1c: 2d:c4:a0:79:7b:7b:16:4a:7d:38:17:73:a6:a8:4f: a4:34:89:71:18:6a:92:be:e6:7a:bb:6f:78:81:2c: 5d:a2:a9:07:ab:06:c3:3c:1b:18:29:7f:fa:2f:f3: b3:13:a8:26:be:b8:7e:f9:0f:d5:42:92:4f:d9:59: f6:81:63:db:c5:d4:d9:08:bb:d8:b7:5b:09:e3:8b: 46:c1:f9:76:60:67:e4:c0:fd:ea:b7:ab:23:9a:a4: bc:bb:01:59:48:9c:6d:8a:65:9f:b3:c1:c0:bb:a8: 0c:15:41:9d:0d:59:ca:d8:c0:8c:fc:75:44:94:33: 92:0e:6f:86:45:f1:30:eb:d4:eb:23:e1:bc:e1:7d: 1a:fe:ff:2f:cf:66:4e:0f:aa:63:7c:81:28:db:a1: fa:46:1b:e2:7e:26:d4:94:24:34:b1:e5:12:16:76: f7:08:87:58:de:2e:e8:2f:3f:fb:48:d1:e1:13:7e: 60:fb:7b:73:66:58:6d:6b:de:d8:aa:60:ed:c7:28: 2a:ac:92:d9:68:31:80:24:7d:63:42:f1:81:79:b1: 22:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B6:3B:54:AD:0E:76:4D:B5:25:0C:E7:F1:2E:DB:43:2F:0C:02:89:7C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.55.28.0/23 Signature Algorithm: sha256WithRSAEncryption 69:cc:da:5d:e8:fa:1a:d7:70:79:76:a7:5f:99:58:17:46:88: 26:6a:d3:44:21:91:cd:16:7e:16:c1:cf:07:71:16:61:fc:ae: ee:d3:8e:8f:11:12:08:aa:4d:dc:47:93:63:12:c0:8d:7b:f8: 7a:ec:1e:1e:69:d8:18:70:1a:a5:68:0c:f9:ca:e9:3d:1a:07: 02:4a:9a:28:48:d7:6e:25:84:13:55:0a:fa:89:ba:b8:54:4e: 84:b3:83:9b:5d:ac:c3:69:21:e6:b1:cc:05:d5:d0:e8:95:b6: de:c9:bd:aa:aa:9a:2c:71:a6:a8:c8:9a:9b:67:8a:88:81:a1: 90:1c:87:92:cd:e0:df:a4:b1:54:ef:49:12:54:99:aa:81:92: fb:44:ec:37:49:88:3b:7e:90:db:88:e4:e4:cc:3f:9d:99:35: 1d:ed:1c:b9:be:99:70:6d:25:42:7d:74:d4:95:6b:d1:b9:b5: 1f:7e:29:b5:8d:4a:85:cf:2d:2d:11:44:7b:9c:23:bc:18:cc: 0c:8e:db:13:31:4b:f5:a6:08:8d:b2:b4:25:3e:ac:d7:15:81: 17:78:60:ff:f9:cb:cd:89:90:6c:f2:ca:04:f0:ff:c6:49:32: 45:7a:4c:bc:74:74:cc:08:a7:74:10:a6:03:c6:a8:41:27:c9: a0:95:4d:c5 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUBKd4D96ZJf5Rel/Aww0bHqhDX1AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTQ1MFoX DTI3MDUwMjAyMTk1MFowMzExMC8GA1UEAxMoQjYzQjU0QUQwRTc2NERCNTI1MENF N0YxMkVEQjQzMkYwQzAyODk3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKGDtndckOOqZzwAauCg4WwO6/Gr5RVLEA0ZAIpa1VQP7yUlPQcOnRqE2AIc LcSgeXt7Fkp9OBdzpqhPpDSJcRhqkr7mertveIEsXaKpB6sGwzwbGCl/+i/zsxOo Jr64fvkP1UKST9lZ9oFj28XU2Qi72LdbCeOLRsH5dmBn5MD96rerI5qkvLsBWUic bYpln7PBwLuoDBVBnQ1ZytjAjPx1RJQzkg5vhkXxMOvU6yPhvOF9Gv7/L89mTg+q Y3yBKNuh+kYb4n4m1JQkNLHlEhZ29wiHWN4u6C8/+0jR4RN+YPt7c2ZYbWve2Kpg 7ccoKqyS2WgxgCR9Y0LxgXmxIikCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLY7VK0Odk21JQzn8S7bQy8MAol8MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2U1MDQ3OTNjLWMyMDktNDY5YS04ZTNjLWViM2Y1YTgzODYzZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lNTA0Nzkz Yy1jMjA5LTQ2OWEtOGUzYy1lYjNmNWE4Mzg2M2YvMC9CNjNCNTRBRDBFNzY0REI1 MjUwQ0U3RjEyRURCNDMyRjBDMDI4OTdDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZzccMA0GCSqGSIb3DQEBCwUAA4IBAQBpzNpd6Poa13B5dqdfmVgXRogmatNE IZHNFn4Wwc8HcRZh/K7u046PERIIqk3cR5NjEsCNe/h67B4eadgYcBqlaAz5yuk9 GgcCSpooSNduJYQTVQr6ibq4VE6Es4ObXazDaSHmscwF1dDolbbeyb2qqposcaao yJqbZ4qIgaGQHIeSzeDfpLFU70kSVJmqgZL7ROw3SYg7fpDbiOTkzD+dmTUd7Ry5 vplwbSVCfXTUlWvRubUffim1jUqFzy0tEUR7nCO8GMwMjtsTMUv1pgiNsrQlPqzX FYEXeGD/+cvNiZBs8soE8P/GSTJFeky8dHTMCKd0EKYDxqhBJ8mglU3F -----END CERTIFICATE-----Generated at Tue May 12 22:45:43 2026 by rpki-client