$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.cer File: 13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.cer (raw, json) Hash identifier: QJCuPYyJAdK9efF2ADRSnlk36PCDei5UvQsYoPn2nCg= Subject key identifier: 13:A9:3A:BF:25:B2:9F:4F:42:FB:71:8C:CE:18:1B:65:D3:B5:4B:CB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0C4768AF4CF0A37DF056813A15DF094FDD6C6104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:41:02 +0000 Certificate not after: Sun 02 May 2027 01:46:02 +0000 Subordinate resources: IP: 103.13.136.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:47:68:af:4c:f0:a3:7d:f0:56:81:3a:15:df:09:4f:dd:6c:61:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:41:02 2026 GMT Not After : May 2 01:46:02 2027 GMT Subject: CN=13A93ABF25B29F4F42FB718CCE181B65D3B54BCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5e:b3:a1:04:66:e4:e3:56:fb:9b:34:68:94: a2:8e:27:3e:8b:fa:cb:f0:78:c1:a7:07:e2:e1:1e: 3c:12:5e:dc:bc:5a:70:4b:74:95:36:e8:8c:ff:f5: e8:7f:c9:6b:46:79:c8:3d:15:5d:d1:10:ad:26:ab: 9b:2c:47:1c:0d:51:b7:0b:74:ba:e5:11:04:e2:eb: 17:94:d0:13:a6:1e:09:a1:e5:e0:f7:75:fe:f8:5f: 95:84:e9:dd:39:08:c4:96:f1:94:c9:63:06:be:a9: 19:8b:16:30:d9:bd:4a:a7:48:75:02:d4:9f:87:59: a3:92:19:99:db:27:74:99:fa:24:42:c1:28:78:a1: 4e:88:0d:db:c1:d3:b1:b7:c8:a1:6d:d7:ab:3b:69: e9:17:8b:98:e7:f3:34:6d:41:26:0b:15:f3:26:62: 70:05:e0:55:9d:77:52:52:24:43:ae:24:59:b1:ff: 95:2a:32:83:cc:81:6a:8f:72:89:ee:05:1c:7b:07: 00:a7:b8:77:b9:bf:2d:6b:d1:da:50:81:6f:24:2d: 58:6f:38:9d:a0:93:9b:f9:16:da:16:ff:26:e2:80: ce:5b:79:6c:7b:8f:b1:09:66:3c:3c:4c:5b:80:92: 2f:a4:58:0f:ee:17:89:a2:ee:ad:c5:e8:1a:48:9e: b9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:A9:3A:BF:25:B2:9F:4F:42:FB:71:8C:CE:18:1B:65:D3:B5:4B:CB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.13.136.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:f5:5c:f8:83:0f:1f:e7:8f:df:10:de:96:01:62:ab:3e:e7: 95:c9:be:c2:4c:9d:96:7a:b1:5a:4e:ea:fc:ff:5d:77:ab:50: c8:ce:c6:df:e7:11:28:85:81:89:50:24:15:44:d5:af:e3:86: 92:ae:aa:db:4e:8b:ed:a7:85:1a:02:1e:14:59:b0:18:85:66: 92:23:ea:5f:a8:1d:eb:93:18:d7:7e:a8:c8:99:40:04:a2:da: 84:94:81:55:04:b2:d1:a4:02:58:da:18:b6:85:d2:f3:09:14: 77:0f:c0:51:0e:12:41:b4:4a:7f:98:2a:6d:13:f8:9b:1c:cb: ca:f1:a1:be:8b:d1:99:97:11:49:2b:6b:0b:6e:b8:c0:4b:f5: 83:bc:d7:44:6e:12:32:b9:e1:46:fb:ed:33:a4:35:fa:de:51: 0a:9c:21:ee:2a:ee:4c:39:02:68:d3:de:f3:a0:89:ba:dc:b9: ec:17:42:94:b9:f3:91:ff:c0:d7:15:f5:2b:81:13:bd:36:a8: e3:12:f3:ab:e3:c4:52:fa:ef:4e:bd:f6:26:57:54:de:cf:bf: 08:8b:45:7c:29:b0:46:69:8a:c4:80:ee:07:69:5f:7e:32:ee: 36:d4:65:e8:ec:ec:b1:b1:aa:08:5a:56:6b:76:49:43:44:9a: 3a:31:50:b5 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUDEdor0zwo33wVoE6Fd8JT91sYQQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDEwMloX DTI3MDUwMjAxNDYwMlowMzExMC8GA1UEAxMoMTNBOTNBQkYyNUIyOUY0RjQyRkI3 MThDQ0UxODFCNjVEM0I1NEJDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO5es6EEZuTjVvubNGiUoo4nPov6y/B4wacH4uEePBJe3LxacEt0lTbojP/1 6H/Ja0Z5yD0VXdEQrSarmyxHHA1Rtwt0uuURBOLrF5TQE6YeCaHl4Pd1/vhflYTp 3TkIxJbxlMljBr6pGYsWMNm9SqdIdQLUn4dZo5IZmdsndJn6JELBKHihTogN28HT sbfIoW3Xqztp6ReLmOfzNG1BJgsV8yZicAXgVZ13UlIkQ64kWbH/lSoyg8yBao9y ie4FHHsHAKe4d7m/LWvR2lCBbyQtWG84naCTm/kW2hb/JuKAzlt5bHuPsQlmPDxM W4CSL6RYD+4XiaLurcXoGkieuZECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBOpOr8lsp9PQvtxjM4YG2XTtUvLMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2I1NWFmOGFmLWE0MGYtNDJjNy05ZjRjLTE4ZTBjYTVjZDQ3ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iNTVhZjhh Zi1hNDBmLTQyYzctOWY0Yy0xOGUwY2E1Y2Q0N2UvMC8xM0E5M0FCRjI1QjI5RjRG NDJGQjcxOENDRTE4MUI2NUQzQjU0QkNCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZw2IMA0GCSqGSIb3DQEBCwUAA4IBAQCc9Vz4gw8f54/fEN6WAWKrPueVyb7C TJ2WerFaTur8/113q1DIzsbf5xEohYGJUCQVRNWv44aSrqrbTovtp4UaAh4UWbAY hWaSI+pfqB3rkxjXfqjImUAEotqElIFVBLLRpAJY2hi2hdLzCRR3D8BRDhJBtEp/ mCptE/ibHMvK8aG+i9GZlxFJK2sLbrjAS/WDvNdEbhIyueFG++0zpDX63lEKnCHu Ku5MOQJo097zoIm63LnsF0KUufOR/8DXFfUrgRO9NqjjEvOr48RS+u9OvfYmV1Te z78Ii0V8KbBGaYrEgO4HaV9+Mu421GXo7OyxsaoIWlZrdklDRJo6MVC1 -----END CERTIFICATE-----Generated at Tue May 5 17:51:08 2026 by rpki-client