$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B806053521FE6FECB8809B52E561CCCA002004C5.cer File: B806053521FE6FECB8809B52E561CCCA002004C5.cer (raw, json) Hash identifier: 885A8NAU8cVqvyq/hkPIO3YvRtNl+a0aiA6IRcqoJYA= Subject key identifier: B8:06:05:35:21:FE:6F:EC:B8:80:9B:52:E5:61:CC:CA:00:20:04:C5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5BE97F16A83DD9AE48E8212063E141377ABC69F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:06:38 +0000 Certificate not after: Sun 02 May 2027 01:11:38 +0000 Subordinate resources: IP: 103.174.62.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:e9:7f:16:a8:3d:d9:ae:48:e8:21:20:63:e1:41:37:7a:bc:69:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:06:38 2026 GMT Not After : May 2 01:11:38 2027 GMT Subject: CN=B806053521FE6FECB8809B52E561CCCA002004C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:db:94:31:6f:13:ff:7c:be:63:29:be:16:ab: 6c:93:6b:47:be:6c:8b:c2:63:4c:63:fd:57:90:39: 71:aa:03:b5:2b:3e:07:27:39:02:7e:63:99:ac:8a: 36:65:55:bc:e5:4d:35:90:8e:68:96:66:77:d8:4d: 32:95:af:c0:c8:82:52:01:20:4f:65:8e:66:97:98: 84:6b:3c:a1:57:b6:0f:ba:e9:87:6f:29:f2:a9:7f: 75:99:9b:6c:8c:eb:a7:ae:57:7e:28:9b:84:3a:17: 8f:b7:f5:22:49:82:05:f2:57:c3:d5:1f:fe:60:14: 2c:83:7d:a1:3b:f5:a3:e6:34:e9:9b:0f:48:78:72: 98:96:1a:a7:27:9b:f4:ac:0f:08:85:bf:04:65:96: 69:c7:43:58:ed:24:9c:0d:7c:05:85:b3:0f:03:a0: 8e:bd:69:01:52:17:c9:55:6d:07:74:75:34:21:3f: bc:99:e7:fb:39:fe:c1:97:7b:0d:95:8f:7e:a8:60: 36:22:78:7a:66:a2:2a:44:c1:6d:b3:e0:c6:7e:70: cb:9a:63:2c:d7:22:fa:5c:44:16:96:e1:bc:9e:5b: 35:1d:eb:c4:61:29:b6:0e:d8:2c:8c:3c:0b:d0:91: 62:11:2f:6e:57:fa:ba:bf:35:02:dc:59:f2:60:52: e7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:06:05:35:21:FE:6F:EC:B8:80:9B:52:E5:61:CC:CA:00:20:04:C5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.62.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:ff:af:6c:8b:47:62:c2:e8:82:4e:c6:45:2c:b9:ea:42:75: 10:5c:e0:38:06:d6:0c:ce:a0:37:69:c5:cc:1e:15:29:9d:89: 5a:be:76:ff:b0:8a:f4:38:2b:e8:4b:1b:3c:f0:f8:d8:fd:24: a2:29:85:f0:9d:35:2a:a0:ea:a8:7b:60:74:9d:82:7c:06:7a: 5b:34:3d:88:2b:7c:46:d5:6f:5d:80:84:20:3f:83:c6:db:95: 0a:61:de:b6:ba:b2:2f:49:a5:45:a3:67:59:e3:52:96:a3:03: 52:d4:14:8e:7d:c7:0d:67:63:bc:48:ac:00:b3:5e:cf:44:8e: 88:9e:68:61:76:0a:48:6c:01:69:9f:3f:91:8e:a4:9b:27:76: b1:17:47:93:80:9d:75:3e:dc:9b:2d:27:fa:aa:81:10:61:15: 05:8e:5e:db:8f:1f:7e:55:8c:13:21:4b:75:92:85:8d:ec:67: c8:d4:aa:7f:5f:86:f7:78:04:84:9c:7e:a3:e1:7d:d8:7b:32: 41:c0:e8:48:9c:78:98:7a:46:a0:9e:da:e7:9f:df:ee:dc:be: 56:83:d4:f3:d4:0d:99:6a:7f:a4:d4:32:fd:a9:ec:5f:c4:be: fc:bf:ef:cc:32:90:13:c2:ab:5b:5f:df:7d:28:ad:3b:d1:69: 14:a8:7e:4d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUW+l/Fqg92a5I6CEgY+FBN3q8afIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDYzOFoX DTI3MDUwMjAxMTEzOFowMzExMC8GA1UEAxMoQjgwNjA1MzUyMUZFNkZFQ0I4ODA5 QjUyRTU2MUNDQ0EwMDIwMDRDNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALnblDFvE/98vmMpvharbJNrR75si8JjTGP9V5A5caoDtSs+Byc5An5jmayK NmVVvOVNNZCOaJZmd9hNMpWvwMiCUgEgT2WOZpeYhGs8oVe2D7rph28p8ql/dZmb bIzrp65XfiibhDoXj7f1IkmCBfJXw9Uf/mAULIN9oTv1o+Y06ZsPSHhymJYapyeb 9KwPCIW/BGWWacdDWO0knA18BYWzDwOgjr1pAVIXyVVtB3R1NCE/vJnn+zn+wZd7 DZWPfqhgNiJ4emaiKkTBbbPgxn5wy5pjLNci+lxEFpbhvJ5bNR3rxGEptg7YLIw8 C9CRYhEvblf6ur81AtxZ8mBS59kCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLgGBTUh/m/suICbUuVhzMoAIATFMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzgxMzY0NWQ0LTU0M2ItNDQ0Yi1hM2E1LWZkY2Q0MTgxMWMyMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84MTM2NDVk NC01NDNiLTQ0NGItYTNhNS1mZGNkNDE4MTFjMjEvMC9CODA2MDUzNTIxRkU2RkVD Qjg4MDlCNTJFNTYxQ0NDQTAwMjAwNEM1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ64+MA0GCSqGSIb3DQEBCwUAA4IBAQCc/69si0diwuiCTsZFLLnqQnUQXOA4 BtYMzqA3acXMHhUpnYlavnb/sIr0OCvoSxs88PjY/SSiKYXwnTUqoOqoe2B0nYJ8 BnpbND2IK3xG1W9dgIQgP4PG25UKYd62urIvSaVFo2dZ41KWowNS1BSOfccNZ2O8 SKwAs17PRI6InmhhdgpIbAFpnz+RjqSbJ3axF0eTgJ11PtybLSf6qoEQYRUFjl7b jx9+VYwTIUt1koWN7GfI1Kp/X4b3eASEnH6j4X3YezJBwOhInHiYekagntrnn9/u 3L5Wg9Tz1A2Zan+k1DL9qexfxL78v+/MMpATwqtbX999KK070WkUqH5N -----END CERTIFICATE-----Generated at Tue May 12 22:47:44 2026 by rpki-client