$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer File: B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer (raw, json) Hash identifier: CRYoJkoFfD/5PYwls66qAPqSJkPLAdvDj1jYz0OQSTo= Subject key identifier: B9:A5:C7:ED:38:66:D3:CA:D2:44:DA:B3:64:D5:DE:AB:01:B4:1B:27 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3366B8A79D4F7FED1121F59AE6548C23619AC9D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:02:17 +0000 Certificate not after: Sun 02 May 2027 02:07:17 +0000 Subordinate resources: IP: 103.186.202.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:66:b8:a7:9d:4f:7f:ed:11:21:f5:9a:e6:54:8c:23:61:9a:c9:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:02:17 2026 GMT Not After : May 2 02:07:17 2027 GMT Subject: CN=B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fd:14:20:7e:be:4a:34:b3:89:5f:88:7d:41: 1a:30:d6:6f:59:09:39:6c:4f:f3:39:03:0d:56:4b: 8e:46:23:b9:b7:b7:34:93:21:28:f0:93:f4:28:d5: 3d:8c:2a:0b:48:1e:01:12:0f:96:07:b2:56:48:1e: ff:59:f1:3f:da:4c:13:f5:d2:5a:53:3c:74:e8:1c: fc:fd:f3:1b:83:5a:d5:6e:49:e4:c4:be:73:e8:dc: ab:74:80:ca:ea:64:1b:2c:12:42:90:8b:69:5d:bb: 87:ce:48:9c:08:7d:d3:12:f6:ad:4f:65:7b:8b:13: 04:88:3a:bd:a1:f8:83:12:49:5a:1f:6c:fb:ae:d7: 19:ce:36:41:46:96:ca:03:70:9d:b2:62:0f:be:92: 16:00:32:ff:08:59:08:67:e8:d7:01:cf:90:58:34: 67:43:79:64:69:99:1f:20:0f:17:e2:98:d6:f6:66: 12:51:d1:27:40:fc:d1:0b:81:ba:72:fb:f7:75:7c: df:f1:6f:8a:0e:57:ee:2a:62:7c:3b:68:db:6c:d5: 5a:a6:52:8a:d8:48:07:ac:ff:ce:a0:1f:88:58:0b: 84:dc:55:ea:ae:eb:c7:06:bf:0b:8b:8d:2d:fa:02: 88:7d:be:7b:da:b3:34:6c:37:e4:39:63:0a:1c:47: ab:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B9:A5:C7:ED:38:66:D3:CA:D2:44:DA:B3:64:D5:DE:AB:01:B4:1B:27 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.202.0/23 Signature Algorithm: sha256WithRSAEncryption 67:4e:9b:dc:99:c1:ed:82:ce:a0:89:04:93:af:c6:1d:9a:b6: 56:05:d0:d3:fd:11:0a:14:0a:18:49:14:1a:a0:58:de:4c:09: f1:aa:68:99:3f:f7:65:9c:49:9d:59:eb:1a:1c:bc:de:e1:0c: 95:d8:52:7f:3d:fa:2f:94:63:cf:f7:7b:61:e6:a2:3b:60:72: 6f:3a:b1:4d:7e:d0:b9:a3:f2:0e:ff:62:43:5c:68:22:41:79: b7:e3:55:bd:c0:2e:fd:4c:ad:b0:73:34:cb:fa:4c:69:89:ae: d1:8b:67:2f:fa:73:54:df:52:23:47:ad:0f:65:d3:77:57:86: d8:9e:86:fa:f9:45:c1:d2:90:34:52:f3:69:a3:11:7b:03:bb: 60:68:d5:e8:6c:2c:a8:71:71:c9:92:ee:1c:11:7f:a9:65:61: 5d:77:67:13:73:94:72:7d:ff:49:6f:1e:38:d2:96:c9:3a:16: cd:77:74:37:06:fd:bd:73:c7:55:63:ad:4b:01:33:a1:87:04: 95:e3:0d:af:88:18:46:d6:05:8d:60:1d:ce:ff:ee:95:12:13: c9:9c:0a:4b:27:cf:31:3f:ac:21:4d:68:80:ba:df:4c:81:53: fe:1d:2d:4c:33:da:d9:1c:8d:e6:65:d9:b1:f9:6e:68:41:81: 05:d8:7a:93 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUM2a4p51Pf+0RIfWa5lSMI2GaydcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDIxN1oX DTI3MDUwMjAyMDcxN1owMzExMC8GA1UEAxMoQjlBNUM3RUQzODY2RDNDQUQyNDRE QUIzNjRENURFQUIwMUI0MUIyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKf9FCB+vko0s4lfiH1BGjDWb1kJOWxP8zkDDVZLjkYjube3NJMhKPCT9CjV PYwqC0geARIPlgeyVkge/1nxP9pME/XSWlM8dOgc/P3zG4Na1W5J5MS+c+jcq3SA yupkGywSQpCLaV27h85InAh90xL2rU9le4sTBIg6vaH4gxJJWh9s+67XGc42QUaW ygNwnbJiD76SFgAy/whZCGfo1wHPkFg0Z0N5ZGmZHyAPF+KY1vZmElHRJ0D80QuB unL793V83/Fvig5X7ipifDto22zVWqZSithIB6z/zqAfiFgLhNxV6q7rxwa/C4uN LfoCiH2+e9qzNGw35DljChxHq3sCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLmlx+04ZtPK0kTas2TV3qsBtBsnMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q5MTA2ODI3LTg2NmUtNGFjMy04Zjc5LWE2ZTMyMGIyMGRlNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kOTEwNjgy Ny04NjZlLTRhYzMtOGY3OS1hNmUzMjBiMjBkZTcvMC9COUE1QzdFRDM4NjZEM0NB RDI0NERBQjM2NEQ1REVBQjAxQjQxQjI3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7rKMA0GCSqGSIb3DQEBCwUAA4IBAQBnTpvcmcHtgs6giQSTr8YdmrZWBdDT /REKFAoYSRQaoFjeTAnxqmiZP/dlnEmdWesaHLze4QyV2FJ/PfovlGPP93th5qI7 YHJvOrFNftC5o/IO/2JDXGgiQXm341W9wC79TK2wczTL+kxpia7Ri2cv+nNU31Ij R60PZdN3V4bYnob6+UXB0pA0UvNpoxF7A7tgaNXobCyocXHJku4cEX+pZWFdd2cT c5Ryff9Jbx440pbJOhbNd3Q3Bv29c8dVY61LATOhhwSV4w2viBhG1gWNYB3O/+6V EhPJnApLJ88xP6whTWiAut9MgVP+HS1MM9rZHI3mZdmx+W5oQYEF2HqT -----END CERTIFICATE-----Generated at Tue May 12 22:02:47 2026 by rpki-client