$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B977405A3167FC0E8490C54AB080E37B0920C4B4.cer File: B977405A3167FC0E8490C54AB080E37B0920C4B4.cer (raw, json) Hash identifier: 2blfWZaow1vykZL65RgPgew15tJbq8nj4v13HooR6tA= Subject key identifier: B9:77:40:5A:31:67:FC:0E:84:90:C5:4A:B0:80:E3:7B:09:20:C4:B4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 41316A400A0F3685DEDB46CED422731A2160AF87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:09:56 +0000 Certificate not after: Sun 02 May 2027 02:14:56 +0000 Subordinate resources: IP: 103.175.154.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:31:6a:40:0a:0f:36:85:de:db:46:ce:d4:22:73:1a:21:60:af:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:09:56 2026 GMT Not After : May 2 02:14:56 2027 GMT Subject: CN=B977405A3167FC0E8490C54AB080E37B0920C4B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2b:f7:e6:bc:ae:49:d1:07:fc:ee:ee:1b:c9: 7e:ba:3a:81:a9:91:22:31:4f:93:92:01:22:21:82: 59:91:95:df:9c:8d:49:f0:95:77:2a:ff:b9:1d:61: 49:c9:c1:68:36:47:da:28:76:e3:0d:fd:22:66:86: 66:40:78:8e:b1:66:4d:dd:ef:d3:fe:b1:6f:80:11: 04:4e:84:61:97:48:2f:64:8d:8a:43:7b:c2:f7:61: 45:f4:bc:8d:03:60:76:15:1e:09:e9:21:22:bd:23: 97:ac:07:2c:67:4d:32:eb:eb:aa:8a:88:91:d3:20: 90:d7:0e:cc:b5:47:d4:27:86:81:f1:2a:00:6d:2c: a5:12:61:e9:10:89:13:62:83:ef:a7:e7:df:6e:25: 97:57:b9:82:aa:3d:c6:91:7b:4b:32:40:82:ae:99: 62:6e:7f:b8:65:69:71:cd:bd:9c:05:3c:8f:52:de: f7:ed:66:78:e1:0e:50:5f:74:16:fd:16:b0:0d:53: e4:20:7d:c6:e9:21:04:cc:8d:7d:20:58:c5:d5:f6: 65:b7:1b:c3:17:63:18:a0:33:b7:a1:90:06:19:dc: 13:89:fe:6b:22:ec:c5:3e:51:27:f4:40:a3:2c:82: 50:fc:0e:61:f8:de:7a:d7:5f:b9:61:d3:7e:3f:f7: 3f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B9:77:40:5A:31:67:FC:0E:84:90:C5:4A:B0:80:E3:7B:09:20:C4:B4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.154.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:b5:63:0e:68:5b:98:b0:86:55:60:48:d2:da:c5:70:dc:c5: 0d:ce:46:bc:64:69:9d:62:cc:33:1e:63:c4:d4:32:fb:57:fb: bb:6b:d1:29:1a:62:00:77:95:e0:0f:fe:05:33:63:e1:01:eb: fc:1c:9b:e6:de:34:fc:5d:d9:13:72:dd:4a:b9:ce:7b:3d:98: 44:60:9d:98:c3:28:0e:d6:93:6e:fc:87:8a:95:44:e3:74:83: 3e:90:a6:31:ef:a5:66:de:0a:cf:8d:18:9f:cd:20:a6:bb:f0: 83:49:a5:af:3a:af:46:a1:de:fc:2a:ce:96:03:7e:89:1e:80: b6:01:6a:e1:84:71:0a:b5:49:9d:d7:94:87:c9:9b:80:8c:cb: d8:79:05:8e:e8:99:ef:cd:cd:bd:76:e0:98:fd:6f:2d:7f:ae: fd:ea:6e:f2:94:cf:f9:9d:e8:aa:8f:9f:e0:ff:2b:67:7a:f3: 92:0f:f7:68:a9:ff:90:b1:19:b1:ea:37:cd:5b:df:32:78:ee: 88:23:02:9b:23:a2:ed:6b:d3:09:4b:d4:db:ef:72:da:ce:39: de:22:c7:19:54:5d:55:e3:bc:ac:f7:ff:fe:76:ee:c3:b7:21: 26:88:75:1a:91:1e:f0:62:7a:e9:1e:26:cb:04:b0:ba:3c:14: 23:30:78:c3 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUQTFqQAoPNoXe20bO1CJzGiFgr4cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDk1NloX DTI3MDUwMjAyMTQ1NlowMzExMC8GA1UEAxMoQjk3NzQwNUEzMTY3RkMwRTg0OTBD NTRBQjA4MEUzN0IwOTIwQzRCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOsr9+a8rknRB/zu7hvJfro6gamRIjFPk5IBIiGCWZGV35yNSfCVdyr/uR1h ScnBaDZH2ih24w39ImaGZkB4jrFmTd3v0/6xb4ARBE6EYZdIL2SNikN7wvdhRfS8 jQNgdhUeCekhIr0jl6wHLGdNMuvrqoqIkdMgkNcOzLVH1CeGgfEqAG0spRJh6RCJ E2KD76fn324ll1e5gqo9xpF7SzJAgq6ZYm5/uGVpcc29nAU8j1Le9+1meOEOUF90 Fv0WsA1T5CB9xukhBMyNfSBYxdX2ZbcbwxdjGKAzt6GQBhncE4n+ayLsxT5RJ/RA oyyCUPwOYfjeetdfuWHTfj/3P70CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLl3QFoxZ/wOhJDFSrCA43sJIMS0MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2UwYmUyZGY4LTJjMzYtNDY1Mi1hNTBjLWY2NDIwZDJjZDlkMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lMGJlMmRm OC0yYzM2LTQ2NTItYTUwYy1mNjQyMGQyY2Q5ZDMvMC9COTc3NDA1QTMxNjdGQzBF ODQ5MEM1NEFCMDgwRTM3QjA5MjBDNEI0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6+aMA0GCSqGSIb3DQEBCwUAA4IBAQCNtWMOaFuYsIZVYEjS2sVw3MUNzka8 ZGmdYswzHmPE1DL7V/u7a9EpGmIAd5XgD/4FM2PhAev8HJvm3jT8XdkTct1Kuc57 PZhEYJ2YwygO1pNu/IeKlUTjdIM+kKYx76Vm3grPjRifzSCmu/CDSaWvOq9God78 Ks6WA36JHoC2AWrhhHEKtUmd15SHyZuAjMvYeQWO6Jnvzc29duCY/W8tf6796m7y lM/5neiqj5/g/ytnevOSD/doqf+QsRmx6jfNW98yeO6IIwKbI6Lta9MJS9Tb73La zjneIscZVF1V47ys9//+du7DtyEmiHUakR7wYnrpHibLBLC6PBQjMHjD -----END CERTIFICATE-----Generated at Tue May 12 22:02:32 2026 by rpki-client