$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B68CA352FD19570302F874C669E957D75A73CB1A.cer File: B68CA352FD19570302F874C669E957D75A73CB1A.cer (raw, json) Hash identifier: GjaE/91OvUs8YhevlhofRUTARAbwvHK8Mm16EUc7c/I= Subject key identifier: B6:8C:A3:52:FD:19:57:03:02:F8:74:C6:69:E9:57:D7:5A:73:CB:1A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 74FFD2FCC0D46C7DE6549E4A11DA66EC3847FD38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:00:21 +0000 Certificate not after: Sun 02 May 2027 00:05:21 +0000 Subordinate resources: IP: 103.145.14.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ff:d2:fc:c0:d4:6c:7d:e6:54:9e:4a:11:da:66:ec:38:47:fd:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:00:21 2026 GMT Not After : May 2 00:05:21 2027 GMT Subject: CN=B68CA352FD19570302F874C669E957D75A73CB1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:eb:62:1e:b4:b8:9e:04:14:1e:76:e0:0a:f0: 8e:4b:e6:c9:4c:28:0d:65:d8:0c:bd:5b:84:95:ba: e0:30:f8:1c:c4:dd:00:75:a8:92:5f:bf:9b:aa:aa: b7:a1:05:35:cb:a2:91:d3:a2:60:62:02:a4:2c:09: 14:f7:1f:df:57:d1:33:67:c3:08:ef:68:07:a0:9e: d0:50:c2:be:03:ff:8a:82:41:55:5c:8c:13:69:d7: fb:b5:c5:d9:61:8c:04:db:2b:e3:63:21:32:bc:71: 8a:69:bd:b5:4e:f7:5e:cc:45:cb:d0:0f:ca:13:15: 6f:87:06:8e:fd:a0:c2:c9:b1:cb:0d:a4:8a:0b:de: d9:85:ca:99:59:a4:20:03:fa:18:0e:b8:d4:df:73: fe:d4:da:a3:05:72:9d:d1:c6:d5:39:36:27:52:50: 6d:da:34:4e:9c:85:69:2e:c8:f3:cd:71:c9:f8:e6: b7:f9:14:b1:7c:69:1e:b0:68:ed:99:9f:39:a3:fe: 95:37:8f:18:17:e8:90:4d:95:b3:73:04:d1:91:65: b5:b9:98:e3:c8:55:f8:af:d8:74:1b:ec:df:22:da: 0c:87:46:db:e3:83:a2:f1:67:58:94:de:09:64:fe: f3:98:fb:76:1d:a4:a5:ff:3e:cb:7f:25:21:71:bc: 34:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B6:8C:A3:52:FD:19:57:03:02:F8:74:C6:69:E9:57:D7:5A:73:CB:1A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.14.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:b2:64:9a:99:20:bf:97:32:d1:3a:35:ea:26:65:cb:89:6b: c5:31:b4:db:81:dd:90:59:b3:6f:34:f8:ac:3e:98:9a:7b:1d: 9b:7e:d1:98:93:8e:d6:e0:d7:74:8e:01:8b:fc:1f:78:ac:98: 80:4e:32:18:d7:5e:b2:1c:6b:91:5a:3c:6a:d9:e8:ac:5a:ac: 60:25:7e:b9:15:d7:4f:9c:a6:6d:b2:88:2c:aa:99:3a:5f:78: 0a:80:1b:b3:ff:e2:0f:0a:81:7f:4e:a1:30:61:9d:2a:cf:44: 0d:ae:21:b3:cd:fa:b4:50:6d:67:73:9d:96:d7:54:03:2f:62: fb:e3:67:87:b5:84:43:f1:b6:48:cd:68:44:05:89:b9:87:fe: aa:73:15:5c:1f:ef:ca:a8:6f:df:04:04:74:41:ab:82:5b:6f: a3:3f:7e:1b:99:7f:a5:9d:7b:ea:02:92:6e:4f:30:5a:52:93: 1b:4d:f3:3a:7d:38:de:63:dd:8d:0a:0a:6a:f3:f2:a0:c1:00: 76:98:55:90:2d:02:ff:16:2e:af:33:f0:df:8a:81:b6:31:0d: 01:1e:ff:9b:53:a5:ae:4c:01:38:b7:33:3a:05:72:ff:6e:51: bb:34:9f:bd:c2:1a:3d:ab:8d:ca:7f:bd:83:82:26:e4:81:00: 8d:68:f4:67 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUdP/S/MDUbH3mVJ5KEdpm7DhH/TgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDAyMVoX DTI3MDUwMjAwMDUyMVowMzExMC8GA1UEAxMoQjY4Q0EzNTJGRDE5NTcwMzAyRjg3 NEM2NjlFOTU3RDc1QTczQ0IxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKjrYh60uJ4EFB524ArwjkvmyUwoDWXYDL1bhJW64DD4HMTdAHWokl+/m6qq t6EFNcuikdOiYGICpCwJFPcf31fRM2fDCO9oB6Ce0FDCvgP/ioJBVVyME2nX+7XF 2WGMBNsr42MhMrxximm9tU73XsxFy9APyhMVb4cGjv2gwsmxyw2kigve2YXKmVmk IAP6GA641N9z/tTaowVyndHG1Tk2J1JQbdo0TpyFaS7I881xyfjmt/kUsXxpHrBo 7ZmfOaP+lTePGBfokE2Vs3ME0ZFltbmY48hV+K/YdBvs3yLaDIdG2+ODovFnWJTe CWT+85j7dh2kpf8+y38lIXG8NEcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLaMo1L9GVcDAvh0xmnpV9dac8saMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzIwMDQyMzNmLWJiMmMtNDdkNy05MDFjLWUzYzgyZjhkNDIzYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yMDA0MjMz Zi1iYjJjLTQ3ZDctOTAxYy1lM2M4MmY4ZDQyM2MvMC9CNjhDQTM1MkZEMTk1NzAz MDJGODc0QzY2OUU5NTdENzVBNzNDQjFBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ5EOMA0GCSqGSIb3DQEBCwUAA4IBAQAKsmSamSC/lzLROjXqJmXLiWvFMbTb gd2QWbNvNPisPpiaex2bftGYk47W4Nd0jgGL/B94rJiATjIY116yHGuRWjxq2eis WqxgJX65FddPnKZtsogsqpk6X3gKgBuz/+IPCoF/TqEwYZ0qz0QNriGzzfq0UG1n c52W11QDL2L742eHtYRD8bZIzWhEBYm5h/6qcxVcH+/KqG/fBAR0QauCW2+jP34b mX+lnXvqApJuTzBaUpMbTfM6fTjeY92NCgpq8/KgwQB2mFWQLQL/Fi6vM/DfioG2 MQ0BHv+bU6WuTAE4tzM6BXL/blG7NJ+9who9q43Kf72DgibkgQCNaPRn -----END CERTIFICATE-----Generated at Tue May 12 22:02:35 2026 by rpki-client