$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/BA730019A764CE08DFEDCCED34F19CB1993086B7.cer File: BA730019A764CE08DFEDCCED34F19CB1993086B7.cer (raw, json) Hash identifier: RzxTto5d/YnXAkF5mHYaKQTzl1vavdtCw+7HLSqxCZA= Subject key identifier: BA:73:00:19:A7:64:CE:08:DF:ED:CC:ED:34:F1:9C:B1:99:30:86:B7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 690634F9C04C2F62FF8984F3567B5C43ED9C73E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:13:16 +0000 Certificate not after: Sun 02 May 2027 01:18:16 +0000 Subordinate resources: IP: 103.110.184.0/23 IP: 2001:df4:6d00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:06:34:f9:c0:4c:2f:62:ff:89:84:f3:56:7b:5c:43:ed:9c:73:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:13:16 2026 GMT Not After : May 2 01:18:16 2027 GMT Subject: CN=BA730019A764CE08DFEDCCED34F19CB1993086B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:9b:c8:33:ae:60:a3:c8:70:ec:1d:3c:c6: 9f:56:87:a0:85:e5:8f:1c:d3:19:f0:ec:51:82:d7: 38:e8:7d:9d:7f:04:8b:07:4d:43:1c:f1:da:77:27: 96:ec:f9:16:4a:29:d8:8b:8b:c0:b6:f7:98:fc:20: de:d5:16:1c:5e:63:a5:40:aa:cf:27:1b:ec:d5:12: e4:33:a1:08:72:f9:3e:88:61:b6:4e:b0:db:ed:7c: e9:e8:38:b7:ea:10:b0:25:04:cb:08:b5:63:e1:09: f0:a1:e8:31:12:53:fe:bc:53:ee:f8:2a:23:5a:1b: 18:8a:98:91:43:91:83:09:69:71:9d:56:c8:ce:ee: ba:e5:95:60:57:f0:63:65:fc:da:b2:59:1b:96:ae: 1b:fc:65:a8:33:5b:44:83:fe:3c:08:ed:9d:5e:b2: 71:ec:1c:e7:ee:8d:b4:09:1d:69:38:4d:0b:47:8e: f4:7e:80:7b:34:a8:3d:e7:84:b3:8a:ac:fe:74:99: f9:e0:9f:34:c2:60:7b:ec:04:f8:79:25:9e:c5:6a: 30:82:f3:3d:ad:75:b7:94:aa:ee:c7:c9:fe:33:ec: cf:95:93:fc:d1:dc:3d:d2:c4:aa:33:0b:53:1b:cc: fd:c1:37:c4:4e:ab:19:8d:8a:91:22:9d:02:21:4f: f1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BA:73:00:19:A7:64:CE:08:DF:ED:CC:ED:34:F1:9C:B1:99:30:86:B7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.110.184.0/23 IPv6: 2001:df4:6d00::/48 Signature Algorithm: sha256WithRSAEncryption 7d:b2:d5:ae:37:68:1d:e2:51:4c:f7:63:3c:e4:04:61:43:df: 06:3a:db:78:bd:ab:31:62:15:79:c6:66:c6:ff:d2:7d:ea:dd: 56:97:ff:c5:e2:6c:41:18:d9:b3:90:b2:2a:6d:f3:34:b9:06: 7e:68:98:26:1f:a0:78:15:4e:82:4f:2d:5d:b4:f8:6f:12:ce: 36:cb:1e:6f:31:df:22:c9:7b:00:77:cf:28:35:4c:11:d7:52: 6f:6b:45:f9:bf:a9:32:3e:48:5c:d3:72:ba:de:f0:92:47:d5: 04:01:19:11:d7:48:0b:da:93:34:7e:b8:6a:1f:ec:81:3c:42: 18:26:97:1a:b0:ff:fd:37:d9:8c:e5:dd:8c:2c:b1:10:09:0e: 1f:3f:aa:b8:d6:bc:e6:40:c8:cd:3f:1d:b9:f9:a4:7d:c0:15: ff:f0:dc:3a:e0:88:b0:80:8a:56:2e:e9:f3:82:22:91:c7:84: 44:75:20:77:44:f9:82:71:15:b4:e1:fd:3c:89:f7:c0:15:6b: 75:00:d0:f0:fe:66:7d:44:52:35:25:e5:9d:f6:50:cf:9b:0a: 27:07:68:70:9d:2e:9b:bd:69:f5:a8:93:e4:4b:12:e3:fa:f2: 0a:63:4d:67:d9:d7:2b:ac:76:8c:9b:4b:aa:1a:5d:38:6c:3f: e5:8e:3b:ce -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUaQY0+cBML2L/iYTzVntcQ+2cc+cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTMxNloX DTI3MDUwMjAxMTgxNlowMzExMC8GA1UEAxMoQkE3MzAwMTlBNzY0Q0UwOERGRURD Q0VEMzRGMTlDQjE5OTMwODZCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2am8gzrmCjyHDsHTzGn1aHoIXljxzTGfDsUYLXOOh9nX8EiwdNQxzx2ncn luz5Fkop2IuLwLb3mPwg3tUWHF5jpUCqzycb7NUS5DOhCHL5Pohhtk6w2+186eg4 t+oQsCUEywi1Y+EJ8KHoMRJT/rxT7vgqI1obGIqYkUORgwlpcZ1WyM7uuuWVYFfw Y2X82rJZG5auG/xlqDNbRIP+PAjtnV6ycewc5+6NtAkdaThNC0eO9H6AezSoPeeE s4qs/nSZ+eCfNMJge+wE+HklnsVqMILzPa11t5Sq7sfJ/jPsz5WT/NHcPdLEqjML UxvM/cE3xE6rGY2KkSKdAiFP8VkCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLpzABmnZM4I3+3M7TTxnLGZMIa3MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzhhNjZmMzUwLWU2NDItNDAyZi04YWMzLTZhZWY3ZTExYWFjMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84YTY2ZjM1 MC1lNjQyLTQwMmYtOGFjMy02YWVmN2UxMWFhYzMvMC9CQTczMDAxOUE3NjRDRTA4 REZFRENDRUQzNEYxOUNCMTk5MzA4NkI3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ264MA8EAgACMAkDBwAgAQ30bQAwDQYJKoZIhvcNAQELBQADggEBAH2y1a43 aB3iUUz3YzzkBGFD3wY623i9qzFiFXnGZsb/0n3q3VaX/8XibEEY2bOQsipt8zS5 Bn5omCYfoHgVToJPLV20+G8SzjbLHm8x3yLJewB3zyg1TBHXUm9rRfm/qTI+SFzT crre8JJH1QQBGRHXSAvakzR+uGof7IE8Qhgmlxqw//032Yzl3YwssRAJDh8/qrjW vOZAyM0/Hbn5pH3AFf/w3DrgiLCAilYu6fOCIpHHhER1IHdE+YJxFbTh/TyJ98AV a3UA0PD+Zn1EUjUl5Z32UM+bCicHaHCdLpu9afWok+RLEuP68gpjTWfZ1yusdoyb S6oaXThsP+WOO84= -----END CERTIFICATE-----Generated at Tue May 12 22:10:25 2026 by rpki-client