$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer File: BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer (raw, json) Hash identifier: NT2vVx67YzuCpklTdnEt5W7HRSjEEsZVb+/GendfuHs= Subject key identifier: BA:18:8A:25:E9:FD:BB:93:24:1A:28:F2:C8:B9:94:17:EC:7D:91:9B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1D7EB7C68CD17AD68A84CEA8E7A30F0ECC3010A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:14:33 +0000 Certificate not after: Sun 02 May 2027 00:19:33 +0000 Subordinate resources: IP: 103.140.36.0/24 IP: 2001:df0:a680::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:7e:b7:c6:8c:d1:7a:d6:8a:84:ce:a8:e7:a3:0f:0e:cc:30:10:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:14:33 2026 GMT Not After : May 2 00:19:33 2027 GMT Subject: CN=BA188A25E9FDBB93241A28F2C8B99417EC7D919B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:20:a7:59:e7:37:da:18:b0:26:bf:77:f3:88: 07:91:5e:57:6c:b4:7b:80:75:1a:bd:7b:6c:40:9a: fb:e8:1c:81:44:29:62:60:4e:57:88:99:d2:d3:55: 2b:e5:b6:35:8b:9d:71:71:50:9c:fe:12:c7:e8:37: 5e:31:f1:30:6c:65:c5:06:64:9a:62:50:1b:b3:4a: 25:68:6e:68:c1:04:d0:ce:68:3d:97:93:b1:58:0d: f5:3c:d4:7d:05:e2:3a:0d:d6:1b:a6:57:fb:f7:a0: 85:7b:4b:a2:96:e0:f0:1f:db:9c:d2:da:94:9a:8d: f7:cf:d0:da:90:c9:96:bd:de:03:ea:1d:1e:80:95: bd:0a:b0:7f:0d:9b:3a:63:d2:70:7c:95:17:a3:c6: 46:a7:45:69:35:53:83:99:47:2c:4c:a7:52:a0:c1: e7:a9:14:c0:ae:34:73:60:39:fd:81:b7:c6:fd:bc: e6:f4:59:8f:f5:5e:a5:67:91:de:55:43:fb:00:b1: 45:80:62:1d:ee:ea:bc:ae:24:83:bd:a8:3d:39:8d: af:3b:32:0d:f7:f8:e4:78:d9:7c:9e:2f:83:30:e2: 3a:63:f6:fe:fc:27:11:8a:40:fd:9d:5c:2b:12:97: 0e:73:d8:cf:a7:82:78:50:34:bd:4c:ce:22:bf:93: 61:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BA:18:8A:25:E9:FD:BB:93:24:1A:28:F2:C8:B9:94:17:EC:7D:91:9B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.36.0/24 IPv6: 2001:df0:a680::/48 Signature Algorithm: sha256WithRSAEncryption 3f:2c:ce:2e:9e:57:ef:42:81:72:fd:4e:05:74:0a:b9:e4:07: 09:e2:ac:b8:c3:86:63:e6:83:c5:4e:dc:52:bd:00:58:8f:79: ed:2d:a2:b4:a4:b2:b9:67:50:fb:50:7c:e9:d9:90:3a:43:6d: fb:cd:7b:5e:1d:7c:6e:9d:25:2f:9a:1e:dc:a0:1d:25:9e:19: ae:77:f4:35:9e:65:6a:36:5e:29:fd:c5:1e:bd:69:36:1b:e7: 23:6e:91:f9:de:6a:6e:f9:1f:4c:8e:dd:9a:07:60:45:cd:16: 62:07:95:64:7a:de:e6:07:96:77:a3:0b:cb:ed:3e:f3:f7:2d: 86:30:cf:f5:e6:be:94:61:30:d4:2a:11:b9:b2:6f:b4:ec:af: ad:f2:2c:f7:82:06:0e:cb:44:8d:a3:87:be:7a:12:cc:e1:8a: 63:a0:e3:90:a0:60:a9:f9:1a:86:60:27:c7:49:9e:5f:5c:b6: ef:6d:4f:9a:e1:ca:6c:ce:d6:c7:dd:c2:26:c2:40:b0:ee:e2: ca:45:37:c9:ed:7d:c9:df:87:11:8f:6d:e1:c9:95:bb:17:b5: 49:1d:42:4f:6e:8b:8d:e2:5e:76:9a:10:a4:32:59:f7:c1:b4: 1e:ab:f5:4f:f3:de:67:de:42:e3:f8:36:d3:fc:94:38:99:1c: d6:14:bd:b7 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUHX63xozRetaKhM6o56MPDswwEKAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTQzM1oX DTI3MDUwMjAwMTkzM1owMzExMC8GA1UEAxMoQkExODhBMjVFOUZEQkI5MzI0MUEy OEYyQzhCOTk0MTdFQzdEOTE5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ0gp1nnN9oYsCa/d/OIB5FeV2y0e4B1Gr17bECa++gcgUQpYmBOV4iZ0tNV K+W2NYudcXFQnP4Sx+g3XjHxMGxlxQZkmmJQG7NKJWhuaMEE0M5oPZeTsVgN9TzU fQXiOg3WG6ZX+/eghXtLopbg8B/bnNLalJqN98/Q2pDJlr3eA+odHoCVvQqwfw2b OmPScHyVF6PGRqdFaTVTg5lHLEynUqDB56kUwK40c2A5/YG3xv285vRZj/VepWeR 3lVD+wCxRYBiHe7qvK4kg72oPTmNrzsyDff45HjZfJ4vgzDiOmP2/vwnEYpA/Z1c KxKXDnPYz6eCeFA0vUzOIr+TYX8CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLoYiiXp/buTJBoo8si5lBfsfZGbMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM0MDRiYWQxLTJiM2UtNDE0MS05ZmM1LWRmOTliMmJkMGEyMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zNDA0YmFk MS0yYjNlLTQxNDEtOWZjNS1kZjk5YjJiZDBhMjIvMC9CQTE4OEEyNUU5RkRCQjkz MjQxQTI4RjJDOEI5OTQxN0VDN0Q5MTlCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ4wkMA8EAgACMAkDBwAgAQ3wpoAwDQYJKoZIhvcNAQELBQADggEBAD8szi6e V+9CgXL9TgV0CrnkBwnirLjDhmPmg8VO3FK9AFiPee0torSksrlnUPtQfOnZkDpD bfvNe14dfG6dJS+aHtygHSWeGa539DWeZWo2Xin9xR69aTYb5yNukfneam75H0yO 3ZoHYEXNFmIHlWR63uYHlnejC8vtPvP3LYYwz/XmvpRhMNQqEbmyb7Tsr63yLPeC Bg7LRI2jh756EszhimOg45CgYKn5GoZgJ8dJnl9ctu9tT5rhymzO1sfdwibCQLDu 4spFN8ntfcnfhxGPbeHJlbsXtUkdQk9ui43iXnaaEKQyWffBtB6r9U/z3mfeQuP4 NtP8lDiZHNYUvbc= -----END CERTIFICATE-----Generated at Tue May 12 22:10:11 2026 by rpki-client