$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/19B95601293E4FA827B74012327843B2622893C0.cer File: 19B95601293E4FA827B74012327843B2622893C0.cer (raw, json) Hash identifier: c/znkX6PoBMPp2sr+52vDGFJlSb2lzpieYEFnaZYu0Y= Subject key identifier: 19:B9:56:01:29:3E:4F:A8:27:B7:40:12:32:78:43:B2:62:28:93:C0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3FC34D9713B4978DB52678671C4861281188FFF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/19B95601293E4FA827B74012327843B2622893C0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:00:15 +0000 Certificate not after: Sun 02 May 2027 01:05:15 +0000 Subordinate resources: IP: 103.168.184.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c3:4d:97:13:b4:97:8d:b5:26:78:67:1c:48:61:28:11:88:ff:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:00:15 2026 GMT Not After : May 2 01:05:15 2027 GMT Subject: CN=19B95601293E4FA827B74012327843B2622893C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2b:ed:1c:77:84:27:82:a9:df:26:72:fd:89: 9f:ba:58:51:97:4e:c9:01:10:79:a9:30:15:66:f1: 37:2e:d0:5c:66:3b:c2:bc:db:a8:f6:c8:b1:da:31: 35:30:80:95:df:be:04:22:45:a7:ed:ce:17:48:3b: 49:fd:10:34:76:11:cd:f5:e7:bc:be:2c:5e:11:00: 8b:02:27:b2:90:fb:97:4c:66:2e:0a:cf:5b:a7:f0: 00:cb:ba:63:95:6a:6c:91:48:9a:d4:fd:56:26:48: e4:e3:32:77:7c:91:d9:e9:6d:12:df:28:26:02:04: e3:15:00:2c:d7:16:cc:ff:e5:7f:45:bf:74:b6:0c: c5:2a:86:b6:de:ff:a7:45:3b:e3:0c:fd:25:ce:22: 6d:2f:51:70:12:95:fd:1b:53:ba:8d:06:2e:e4:83: a0:60:28:28:c1:9e:95:df:26:b0:58:ae:68:0e:ba: ef:1a:38:7c:ad:ff:d6:46:6d:59:a1:09:8d:45:6c: 96:aa:de:20:42:91:3c:29:da:38:ac:30:5e:13:91: 97:52:e3:d1:af:20:af:b9:e8:1a:c1:63:c9:e0:1f: dc:64:01:a9:6d:28:d4:1b:90:60:2b:66:7e:da:48: 1e:6d:b6:fc:51:4a:06:f0:0c:8d:ac:47:f9:d6:95: 81:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:B9:56:01:29:3E:4F:A8:27:B7:40:12:32:78:43:B2:62:28:93:C0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/19B95601293E4FA827B74012327843B2622893C0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.184.0/23 Signature Algorithm: sha256WithRSAEncryption 25:77:0b:98:6b:e1:14:4a:55:d3:58:64:df:85:de:81:10:ad: 98:4c:e0:1c:0a:69:b1:33:17:e5:63:34:5d:70:ba:da:ee:a3: eb:47:f3:ff:99:72:78:9a:7c:7b:aa:20:26:e3:02:2b:12:a9: a9:0b:18:bd:60:42:4f:46:e9:be:87:15:fc:92:4b:e8:48:db: 56:3c:bf:28:f0:e0:2b:ec:e4:fc:74:12:c8:ab:b4:f7:8b:df: 90:43:e5:54:1c:2c:52:0c:25:c4:36:ac:11:6d:c5:b9:2d:87: bb:17:4b:3e:38:18:58:7b:08:85:af:31:67:f4:5c:db:ac:67: 60:51:2b:e3:41:da:1f:c9:fd:29:83:71:9e:90:b9:4e:63:08: 44:98:52:7c:fa:07:29:bb:a0:0c:9a:e8:d3:81:e7:8a:95:b1: b2:a0:d2:bb:58:62:f9:d5:aa:02:10:3b:fb:25:1d:fd:1e:9d: 8b:c9:07:4a:d8:c1:37:ee:74:ba:59:c6:89:fd:1c:fc:2c:09: d3:d8:b9:40:7c:26:3b:e2:7f:b5:71:59:45:a3:41:e3:ce:1d: f1:1b:c8:07:67:40:4b:1a:13:6d:10:a0:78:bc:82:64:ee:e7: 54:93:72:58:c3:42:4a:9e:46:10:2b:a4:27:9a:d2:dc:5e:ca: 82:30:f2:df -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUP8NNlxO0l421JnhnHEhhKBGI//QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDAxNVoX DTI3MDUwMjAxMDUxNVowMzExMC8GA1UEAxMoMTlCOTU2MDEyOTNFNEZBODI3Qjc0 MDEyMzI3ODQzQjI2MjI4OTNDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUr7Rx3hCeCqd8mcv2Jn7pYUZdOyQEQeakwFWbxNy7QXGY7wrzbqPbIsdox NTCAld++BCJFp+3OF0g7Sf0QNHYRzfXnvL4sXhEAiwInspD7l0xmLgrPW6fwAMu6 Y5VqbJFImtT9ViZI5OMyd3yR2eltEt8oJgIE4xUALNcWzP/lf0W/dLYMxSqGtt7/ p0U74wz9Jc4ibS9RcBKV/RtTuo0GLuSDoGAoKMGeld8msFiuaA667xo4fK3/1kZt WaEJjUVslqreIEKRPCnaOKwwXhORl1Lj0a8gr7noGsFjyeAf3GQBqW0o1BuQYCtm ftpIHm22/FFKBvAMjaxH+daVgZkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBm5VgEpPk+oJ7dAEjJ4Q7JiKJPAMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc4ZTc4ZWUwLTAwMDItNGE2Ny1hNzM5LTMwMzNkNWI1YmE2MS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83OGU3OGVl MC0wMDAyLTRhNjctYTczOS0zMDMzZDViNWJhNjEvMC8xOUI5NTYwMTI5M0U0RkE4 MjdCNzQwMTIzMjc4NDNCMjYyMjg5M0MwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6i4MA0GCSqGSIb3DQEBCwUAA4IBAQAldwuYa+EUSlXTWGTfhd6BEK2YTOAc CmmxMxflYzRdcLra7qPrR/P/mXJ4mnx7qiAm4wIrEqmpCxi9YEJPRum+hxX8kkvo SNtWPL8o8OAr7OT8dBLIq7T3i9+QQ+VUHCxSDCXENqwRbcW5LYe7F0s+OBhYewiF rzFn9FzbrGdgUSvjQdofyf0pg3GekLlOYwhEmFJ8+gcpu6AMmujTgeeKlbGyoNK7 WGL51aoCEDv7JR39Hp2LyQdK2ME37nS6WcaJ/Rz8LAnT2LlAfCY74n+1cVlFo0Hj zh3xG8gHZ0BLGhNtEKB4vIJk7udUk3JYw0JKnkYQK6QnmtLcXsqCMPLf -----END CERTIFICATE-----Generated at Tue May 5 17:52:37 2026 by rpki-client