$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer File: B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer (raw, json) Hash identifier: 45jf7hv2jy5s4mJX49ENvenzTZsLAbjqZxOlRTXns7Q= Subject key identifier: B4:C6:D0:60:37:58:2F:D0:F7:22:39:B7:AE:DC:BD:0F:33:42:E2:30 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7CC21DD986F2957418785B20D98A9F56BD87EC45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:30:50 +0000 Certificate not after: Sun 02 May 2027 01:35:50 +0000 Subordinate resources: IP: 45.113.228.0/22 IP: 103.91.0.0/22 IP: 2001:df0:ef00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 10:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:c2:1d:d9:86:f2:95:74:18:78:5b:20:d9:8a:9f:56:bd:87:ec:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:30:50 2026 GMT Not After : May 2 01:35:50 2027 GMT Subject: CN=B4C6D06037582FD0F72239B7AEDCBD0F3342E230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:08:ce:8f:cd:11:0f:92:56:23:62:33:65:a8: 76:d6:27:5c:9e:11:2c:12:dd:4e:6a:38:4b:b1:a5: 98:d3:14:70:72:9d:0b:3e:05:17:a4:1a:ea:ec:8c: f3:4e:2a:eb:47:c0:48:ab:73:b2:9e:e2:5b:2b:0f: 9c:f3:b0:71:26:14:ce:44:04:5e:d8:85:25:4b:e1: 54:76:dc:d7:d7:0d:c5:e6:1b:a2:5f:52:63:bc:11: 8e:b1:b9:03:56:ba:8c:62:a5:60:6d:ab:21:90:6b: 9f:98:9c:32:92:18:bf:ca:9c:8b:31:ea:66:5e:3b: 24:b6:f9:40:2f:68:98:a3:88:8b:04:23:cb:20:55: be:85:b2:1b:68:61:5a:1a:a5:e5:2a:55:ed:92:28: 8b:1b:7d:2c:14:e8:16:fe:ee:34:fe:05:72:79:76: e7:40:1d:62:fb:31:15:7b:79:3d:89:6f:eb:a4:a9: 1f:6d:dd:12:42:88:9d:9f:30:0b:4f:ac:9f:b4:19: 03:cb:90:41:36:ea:22:4c:68:5b:ad:8e:ae:25:96: c0:c8:93:f7:f4:9f:cc:a6:36:9e:fd:52:bf:84:b7: 76:44:0e:17:55:c2:c4:db:bf:2e:17:71:97:6d:ad: 52:d3:ef:28:5c:b7:cf:f6:6c:ea:19:46:07:c3:a3: 71:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B4:C6:D0:60:37:58:2F:D0:F7:22:39:B7:AE:DC:BD:0F:33:42:E2:30 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.113.228.0/22 103.91.0.0/22 IPv6: 2001:df0:ef00::/48 Signature Algorithm: sha256WithRSAEncryption 45:6e:99:16:81:eb:5a:c7:07:c6:b7:3c:c3:43:1b:cd:5b:46: c5:81:ce:5e:6b:ce:c6:28:0d:85:ab:e9:78:a0:f2:ed:0c:75: e3:96:88:ca:77:35:a7:3e:cd:3f:09:b9:a7:ec:26:b5:d5:83: 32:62:0a:66:01:87:7e:7c:ce:49:b9:6b:89:93:0b:d1:ce:9e: 96:47:f0:e3:2f:57:c2:91:03:c8:dc:73:95:70:cf:6f:85:a2: f4:11:0a:98:eb:d1:06:86:bc:ad:1d:96:61:e8:51:96:e9:df: c3:36:b3:1a:86:10:cc:20:a3:f0:b4:a1:a3:a7:8c:94:75:c4: a7:b0:56:ff:79:d8:bb:5e:06:66:9e:2b:7d:c9:0e:ff:0d:74: e8:98:60:f1:c5:4a:70:8d:8c:42:5a:c8:14:16:4a:b9:1d:95: ba:0b:b5:c6:f3:0c:ab:8d:cd:3b:45:c7:28:06:91:83:b8:6d: 47:0f:0f:6e:9d:8b:80:e1:1f:fc:5a:23:20:82:57:41:70:8a: 5c:7c:e1:3d:9a:42:07:5c:f3:62:30:c7:88:43:81:26:c2:b5: c3:3a:08:8b:84:68:d8:89:ed:37:28:b1:d3:b2:9f:2f:fe:98: d6:d3:78:91:00:4c:22:11:29:75:18:1d:87:3b:2e:0c:0f:f8: 5e:de:0b:ed -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUfMId2YbylXQYeFsg2YqfVr2H7EUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzA1MFoX DTI3MDUwMjAxMzU1MFowMzExMC8GA1UEAxMoQjRDNkQwNjAzNzU4MkZEMEY3MjIz OUI3QUVEQ0JEMEYzMzQyRTIzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMcIzo/NEQ+SViNiM2WodtYnXJ4RLBLdTmo4S7GlmNMUcHKdCz4FF6Qa6uyM 804q60fASKtzsp7iWysPnPOwcSYUzkQEXtiFJUvhVHbc19cNxeYbol9SY7wRjrG5 A1a6jGKlYG2rIZBrn5icMpIYv8qcizHqZl47JLb5QC9omKOIiwQjyyBVvoWyG2hh Whql5SpV7ZIoixt9LBToFv7uNP4Fcnl250AdYvsxFXt5PYlv66SpH23dEkKInZ8w C0+sn7QZA8uQQTbqIkxoW62OriWWwMiT9/SfzKY2nv1Sv4S3dkQOF1XCxNu/Lhdx l22tUtPvKFy3z/Zs6hlGB8OjcfMCAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLTG0GA3WC/Q9yI5t67cvQ8zQuIwMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E2MzY1NWYxLTM4YjYtNDQxNS04ZmFmLTJiNWI5MTUzZTUyZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hNjM2NTVm MS0zOGI2LTQ0MTUtOGZhZi0yYjViOTE1M2U1MmQvMC9CNEM2RDA2MDM3NTgyRkQw RjcyMjM5QjdBRURDQkQwRjMzNDJFMjMwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQCLXHkAwQCZ1sAMA8EAgACMAkDBwAgAQ3w7wAwDQYJKoZIhvcNAQELBQADggEB AEVumRaB61rHB8a3PMNDG81bRsWBzl5rzsYoDYWr6Xig8u0MdeOWiMp3Nac+zT8J uafsJrXVgzJiCmYBh358zkm5a4mTC9HOnpZH8OMvV8KRA8jcc5Vwz2+FovQRCpjr 0QaGvK0dlmHoUZbp38M2sxqGEMwgo/C0oaOnjJR1xKewVv952LteBmaeK33JDv8N dOiYYPHFSnCNjEJayBQWSrkdlboLtcbzDKuNzTtFxygGkYO4bUcPD26di4DhH/xa IyCCV0Fwilx84T2aQgdc82Iwx4hDgSbCtcM6CIuEaNiJ7TcosdOyny/+mNbTeJEA TCIRKXUYHYc7LgwP+F7eC+0= -----END CERTIFICATE-----Generated at Sun May 3 11:41:26 2026 by rpki-client