$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer File: BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer (raw, json) Hash identifier: kstOve8vlLv/EO5KMn/ri3TySGKA13ty/BQsKF+UU60= Subject key identifier: BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4B212F79900FEAC5DBF3F83DF1A543B67417D1ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:00:37 +0000 Certificate not after: Sun 02 May 2027 02:05:37 +0000 Subordinate resources: IP: 103.22.98.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:21:2f:79:90:0f:ea:c5:db:f3:f8:3d:f1:a5:43:b6:74:17:d1:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:00:37 2026 GMT Not After : May 2 02:05:37 2027 GMT Subject: CN=BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:b4:f7:e8:6a:28:1c:3e:bb:ad:d1:01:9d: fd:db:68:cc:ed:27:ac:23:e5:1e:16:12:0f:03:3a: 17:f0:0b:01:4f:a7:83:d0:6a:7e:42:31:32:29:9d: aa:d3:47:79:64:ce:fb:c3:8a:7c:ea:00:e2:27:d0: c6:cd:ff:00:e7:94:2c:fb:13:e9:d5:1c:e2:d8:23: a0:66:02:b6:69:8b:a4:94:be:86:21:7b:b3:28:8b: 60:ff:2e:c5:83:66:6f:36:3a:22:21:05:ec:ca:ce: b2:c0:32:fb:5b:aa:c6:45:f6:fe:63:0c:00:b7:c0: 25:cf:fa:8d:75:34:b9:7d:e2:6c:ee:41:40:dd:4a: 66:ce:16:6d:f8:71:43:b3:5a:6a:e3:c7:02:5a:8d: 2a:35:88:9a:58:76:9d:53:f7:2c:ea:97:d8:85:0b: a6:86:f6:a9:0e:e5:cf:d4:57:c3:1d:10:bc:00:c4: fb:42:f8:46:6e:c6:dd:1c:90:74:d8:95:2d:d9:15: 46:b8:1e:6c:bd:38:3d:f6:d0:89:b6:00:87:12:99: 18:79:73:30:15:cc:6b:34:be:8a:4a:07:70:e8:12: 5d:23:a4:2f:9c:d6:e5:99:97:9d:3e:3a:3b:37:7c: 58:02:5c:23:5e:72:c8:66:06:bd:84:8c:a0:99:20: 38:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.22.98.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:19:1c:fa:cb:93:67:f5:42:32:29:9f:d8:5d:ac:1d:88:53: c4:53:71:e5:c7:18:81:29:09:1d:d1:28:54:d7:2f:fb:dc:c9: 40:ef:8a:60:5b:d0:86:8b:e4:a3:c4:2b:b3:4e:b4:12:26:d0: b0:94:74:59:9d:98:24:8a:cb:8e:ad:c7:46:ec:fa:81:5e:5a: 79:86:71:d7:55:ce:5e:05:40:26:60:ac:fb:f9:c9:da:f2:70: 01:a0:d7:a6:80:65:a4:a1:22:0f:83:0a:49:f1:b7:ce:69:67: ac:27:2b:7a:da:68:19:5a:be:fc:5c:88:64:98:3a:f3:47:66: 42:9a:02:4b:ec:40:57:6a:4b:73:b7:7c:80:8e:63:08:93:89: d3:23:3a:07:dd:95:7e:93:9b:d8:ca:e0:68:d6:06:08:dd:a8: 7d:1f:d7:fe:89:da:a1:be:75:c2:80:e6:cd:6e:bc:ff:c8:a3: 7b:82:c1:e7:22:95:12:49:1d:d9:ec:ec:0d:5d:cd:10:4e:00: d4:08:d2:50:28:24:91:3b:8c:3e:6c:3f:2f:3c:00:3b:d9:8c: 9c:34:3b:7a:ae:ed:b6:2a:86:67:ae:74:41:f3:a2:be:71:76: a4:52:5d:4d:03:f1:c3:44:c7:6f:68:6a:77:01:86:54:da:9c: fc:8e:32:d8 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUSyEveZAP6sXb8/g98aVDtnQX0e0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDAzN1oX DTI3MDUwMjAyMDUzN1owMzExMC8GA1UEAxMoQkE5REEzRDU1ODBENTk5Nzc3NEVC Mjc1RTk3NzhDMkFGNEQzQTFBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMcYtPfoaigcPrut0QGd/dtozO0nrCPlHhYSDwM6F/ALAU+ng9BqfkIxMimd qtNHeWTO+8OKfOoA4ifQxs3/AOeULPsT6dUc4tgjoGYCtmmLpJS+hiF7syiLYP8u xYNmbzY6IiEF7MrOssAy+1uqxkX2/mMMALfAJc/6jXU0uX3ibO5BQN1KZs4Wbfhx Q7NaauPHAlqNKjWImlh2nVP3LOqX2IULpob2qQ7lz9RXwx0QvADE+0L4Rm7G3RyQ dNiVLdkVRrgebL04PfbQibYAhxKZGHlzMBXMazS+ikoHcOgSXSOkL5zW5ZmXnT46 Ozd8WAJcI15yyGYGvYSMoJkgOK0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLqdo9VYDVmXd06ydel3jCr006GuMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q3MDFiMjc3LWM4MGMtNDVkNS04MDg5LWE5ZWZhMzQwNTQyYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kNzAxYjI3 Ny1jODBjLTQ1ZDUtODA4OS1hOWVmYTM0MDU0MmEvMC9CQTlEQTNENTU4MEQ1OTk3 Nzc0RUIyNzVFOTc3OEMyQUY0RDNBMUFFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZxZiMA0GCSqGSIb3DQEBCwUAA4IBAQBNGRz6y5Nn9UIyKZ/YXawdiFPEU3Hl xxiBKQkd0ShU1y/73MlA74pgW9CGi+SjxCuzTrQSJtCwlHRZnZgkisuOrcdG7PqB Xlp5hnHXVc5eBUAmYKz7+cna8nABoNemgGWkoSIPgwpJ8bfOaWesJyt62mgZWr78 XIhkmDrzR2ZCmgJL7EBXaktzt3yAjmMIk4nTIzoH3ZV+k5vYyuBo1gYI3ah9H9f+ idqhvnXCgObNbrz/yKN7gsHnIpUSSR3Z7OwNXc0QTgDUCNJQKCSRO4w+bD8vPAA7 2YycNDt6ru22KoZnrnRB86K+cXakUl1NA/HDRMdvaGp3AYZU2pz8jjLY -----END CERTIFICATE-----Generated at Tue May 12 22:10:35 2026 by rpki-client