$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C1B31DA38AE18C533BF3125B438DFED7920609DE.cer File: C1B31DA38AE18C533BF3125B438DFED7920609DE.cer (raw, json) Hash identifier: CjY4dOJvR4Bg5+g9LWmCG6201lXGw7JHeKhHeALe6dg= Subject key identifier: C1:B3:1D:A3:8A:E1:8C:53:3B:F3:12:5B:43:8D:FE:D7:92:06:09:DE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4F4D3A4C57DECCC393705BB2895DDEDC19B9725C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:39:17 +0000 Certificate not after: Sun 02 May 2027 02:44:17 +0000 Subordinate resources: IP: 103.181.138.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:4d:3a:4c:57:de:cc:c3:93:70:5b:b2:89:5d:de:dc:19:b9:72:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:39:17 2026 GMT Not After : May 2 02:44:17 2027 GMT Subject: CN=C1B31DA38AE18C533BF3125B438DFED7920609DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c5:8e:ee:40:50:8a:ca:3d:86:e5:4b:f1:7c: e3:4f:87:c5:1e:c4:b4:6d:9b:15:34:1b:3c:51:a5: aa:4d:fd:e0:17:b8:76:71:f3:56:b8:4a:05:54:41: 94:a1:ee:ac:54:3b:c4:17:d5:36:fd:f4:b6:de:31: 94:6e:ed:e9:24:47:1e:19:2f:b7:04:be:c5:55:a3: f8:2c:37:b2:a2:25:e8:29:4b:7d:ad:f3:57:3e:0c: 98:13:62:68:e7:f2:c1:24:90:a6:04:f3:57:28:af: 1b:35:43:66:6b:a7:0e:eb:c9:73:12:1f:e9:5d:60: 06:8c:9d:16:96:d2:48:0c:8d:a5:d8:59:fd:e6:cc: 6f:52:72:d3:0e:6a:1a:5d:72:a8:b7:68:ef:a9:28: 96:42:7f:10:0a:17:53:bb:f2:9b:8d:7d:59:62:61: 42:d1:2f:c7:09:f5:84:d9:4d:60:62:1b:8d:36:0f: e0:5d:bd:9a:d4:2e:6e:a4:a6:49:dc:23:ba:ca:9e: a9:05:f9:fc:54:c5:18:55:fa:fc:94:18:05:55:13: 26:c7:9f:48:59:66:72:ed:a4:9b:42:91:ca:fe:98: d8:2b:f4:4c:29:61:37:16:ee:c8:99:56:b0:e7:77: f9:47:ae:52:0f:df:46:d3:5b:bb:e3:f6:4e:8b:fb: cc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C1:B3:1D:A3:8A:E1:8C:53:3B:F3:12:5B:43:8D:FE:D7:92:06:09:DE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/C1B31DA38AE18C533BF3125B438DFED7920609DE.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.181.138.0/23 Signature Algorithm: sha256WithRSAEncryption 20:a0:d1:ca:47:99:d7:3b:e2:3b:28:63:cf:cc:b6:e8:3b:29: ba:d3:67:58:fa:b7:f3:0b:b1:71:1f:60:27:95:0d:3b:7f:48: 99:a8:38:9f:de:ab:d0:ae:69:d2:fd:24:e9:e0:f1:5f:70:c6: 83:4f:90:b0:ce:8c:a6:ed:38:b1:c5:0c:27:ec:07:c7:e7:90: 74:39:ac:9d:1c:45:21:69:e5:c1:4a:ab:5a:97:3d:69:93:56: 4d:f5:16:2b:b3:45:46:8b:37:3e:1a:a4:9a:e8:10:05:b0:6b: 6a:f6:c8:ec:1b:c4:af:65:d6:88:ac:d8:60:a8:b2:e0:79:0c: 65:4a:1d:97:3d:27:07:dc:12:9a:46:d7:be:3b:fe:a1:f7:36: 7f:b4:e5:e7:e6:0d:d1:7f:64:93:45:31:c3:6d:19:55:7e:9b: 58:52:e8:a5:42:d6:52:0f:8d:bc:b9:38:b9:80:ed:68:07:83: 40:d2:f7:35:16:b5:5c:d2:d1:48:2c:2e:a3:32:37:eb:19:4a: ae:3f:c2:02:3d:ed:be:25:a5:ef:9f:7c:fe:63:eb:ee:ca:26: f2:0e:40:a8:10:48:51:bb:3d:f0:b1:9d:84:7e:73:91:38:2d: f0:a6:e8:1e:1d:f2:d0:2e:51:af:58:c1:8d:a2:6b:2a:c9:b1: e7:bd:a5:2b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUT006TFfezMOTcFuyiV3e3Bm5clwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzkxN1oX DTI3MDUwMjAyNDQxN1owMzExMC8GA1UEAxMoQzFCMzFEQTM4QUUxOEM1MzNCRjMx MjVCNDM4REZFRDc5MjA2MDlERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKXFju5AUIrKPYblS/F840+HxR7EtG2bFTQbPFGlqk394Be4dnHzVrhKBVRB lKHurFQ7xBfVNv30tt4xlG7t6SRHHhkvtwS+xVWj+Cw3sqIl6ClLfa3zVz4MmBNi aOfywSSQpgTzVyivGzVDZmunDuvJcxIf6V1gBoydFpbSSAyNpdhZ/ebMb1Jy0w5q Gl1yqLdo76kolkJ/EAoXU7vym419WWJhQtEvxwn1hNlNYGIbjTYP4F29mtQubqSm SdwjusqeqQX5/FTFGFX6/JQYBVUTJsefSFlmcu2km0KRyv6Y2Cv0TClhNxbuyJlW sOd3+UeuUg/fRtNbu+P2Tov7zK0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMGzHaOK4YxTO/MSW0ON/teSBgneMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y3YTExMGU4LWI4YzItNDI3Ny1iZWIzLTkyYWE1YjM2OTBmMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mN2ExMTBl OC1iOGMyLTQyNzctYmViMy05MmFhNWIzNjkwZjAvMC9DMUIzMURBMzhBRTE4QzUz M0JGMzEyNUI0MzhERkVENzkyMDYwOURFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7WKMA0GCSqGSIb3DQEBCwUAA4IBAQAgoNHKR5nXO+I7KGPPzLboOym602dY +rfzC7FxH2AnlQ07f0iZqDif3qvQrmnS/STp4PFfcMaDT5Cwzoym7TixxQwn7AfH 55B0OaydHEUhaeXBSqtalz1pk1ZN9RYrs0VGizc+GqSa6BAFsGtq9sjsG8SvZdaI rNhgqLLgeQxlSh2XPScH3BKaRte+O/6h9zZ/tOXn5g3Rf2STRTHDbRlVfptYUuil QtZSD428uTi5gO1oB4NA0vc1FrVc0tFILC6jMjfrGUquP8ICPe2+JaXvn3z+Y+vu yibyDkCoEEhRuz3wsZ2EfnOROC3wpugeHfLQLlGvWMGNomsqybHnvaUr -----END CERTIFICATE-----Generated at Tue May 12 22:02:52 2026 by rpki-client