$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/B10811E98433E40D5FC6AFC366AA6FEE28172365.cer File: B10811E98433E40D5FC6AFC366AA6FEE28172365.cer (raw, json) Hash identifier: eB3mp5Mipns+H4EBKb7cA5jT8p8RqvOvwi5MfdQOEns= Subject key identifier: B1:08:11:E9:84:33:E4:0D:5F:C6:AF:C3:66:AA:6F:EE:28:17:23:65 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 21809B81C647D96BB310F2F2A43BD29AA179764E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/B10811E98433E40D5FC6AFC366AA6FEE28172365.mft caRepository: rsync://rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Tue 13 Oct 2026 07:26:00 +0000 Certificate not after: Tue 12 Oct 2027 07:31:00 +0000 Subordinate resources: IP: 45.249.216.0/23 IP: 103.218.166.0/23 IP: 103.230.48.0/23 IP: 192.145.228.0/23 IP: 2001:df2:1a00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 04:20:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:80:9b:81:c6:47:d9:6b:b3:10:f2:f2:a4:3b:d2:9a:a1:79:76:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 13 07:26:00 2026 GMT Not After : Oct 12 07:31:00 2027 GMT Subject: CN=B10811E98433E40D5FC6AFC366AA6FEE28172365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6b:85:fc:ea:f3:a1:d2:7e:a1:01:bc:28:73: c0:0b:93:02:63:36:15:5c:9d:b3:77:78:e7:bb:69: 6d:02:17:8a:44:07:7d:24:30:2a:0f:5f:76:8f:5d: 10:b7:bb:65:5c:a2:dd:af:4c:c0:7b:8c:3a:3a:09: 31:d4:9e:d9:65:c2:3f:50:7c:99:47:ca:5b:eb:18: 0f:7f:4a:a6:5d:8d:94:e0:65:97:c9:14:f6:92:5a: 4b:82:b9:ed:8f:6c:a7:40:92:e0:84:55:c0:d4:68: 3c:88:fd:34:1d:26:df:ac:f2:82:46:02:25:c1:67: 16:2c:d6:f9:e1:5c:55:4c:c9:50:15:a2:98:f1:5f: d6:d8:7d:7f:43:17:3a:1f:e3:8a:d6:16:1e:4b:20: b1:d5:d9:39:a0:e8:5d:37:52:c4:ac:c0:ca:fd:3f: d2:95:d0:c6:d4:f1:f5:d8:7c:20:ff:e8:74:a8:8d: af:ee:81:10:dd:5a:19:a5:0a:65:2d:9f:ba:22:3b: 79:17:af:1c:45:cf:4d:3f:dd:fa:f9:9c:26:06:9f: 20:be:96:9c:12:31:84:72:0d:f4:42:7f:f0:8f:eb: b9:56:aa:d6:18:5c:7b:a1:c2:3f:d1:89:ee:bb:45: 4f:8c:a0:d8:e1:0a:ec:a6:3a:65:82:17:9e:dd:ef: c1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B1:08:11:E9:84:33:E4:0D:5F:C6:AF:C3:66:AA:6F:EE:28:17:23:65 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/B10811E98433E40D5FC6AFC366AA6FEE28172365.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.249.216.0/23 103.218.166.0/23 103.230.48.0/23 192.145.228.0/23 IPv6: 2001:df2:1a00::/48 Signature Algorithm: sha256WithRSAEncryption 7c:28:6e:27:9b:0f:f5:a0:cf:c4:1c:9b:cc:16:14:8b:a1:47: 40:fb:70:87:56:86:4b:b4:c3:03:e3:57:85:02:91:96:0b:f6: 53:82:10:fc:e1:9d:1f:55:d6:9b:65:91:a7:aa:fd:ca:bc:8c: 2e:43:3b:45:af:4b:a1:ae:b3:08:ff:0d:f1:a5:01:75:35:d1: 7b:a4:57:5d:6b:11:f8:07:05:ba:7a:e1:a2:f2:c0:85:c9:e5: be:61:22:24:a5:8f:c9:79:c8:2c:2a:6e:60:36:48:0b:40:a3: 53:80:e6:3c:90:ca:bc:fe:5f:62:46:87:58:b0:a4:44:b1:fe: fa:a1:ac:6c:19:eb:b9:d9:f1:e5:71:c7:5a:3e:fa:5c:13:40: d2:ff:a0:3f:c7:1b:87:e2:3a:66:e0:aa:a0:a9:62:23:5e:41: 8d:cf:d8:c9:b3:bc:05:92:a0:a7:5e:18:b6:9a:e8:62:91:23: e3:57:35:7a:39:b4:87:4a:a6:c2:56:1e:72:12:9f:50:ce:f0: 6a:c1:2a:7d:e2:41:2b:10:e4:bb:21:57:2f:cf:89:a6:b3:77: 67:f8:7d:4b:22:e2:e2:1a:d8:4c:4e:21:6e:db:50:1f:92:2f: ad:bc:78:0b:c3:3b:1d:47:32:55:94:c6:f0:93:09:84:db:91: a7:f1:4b:6e -----BEGIN CERTIFICATE----- MIIF6TCCBNGgAwIBAgIUIYCbgcZH2WuzEPLypDvSmqF5dk4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAxMzA3MjYwMFoX DTI3MTAxMjA3MzEwMFowMzExMC8GA1UEAxMoQjEwODExRTk4NDMzRTQwRDVGQzZB RkMzNjZBQTZGRUUyODE3MjM2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANFrhfzq86HSfqEBvChzwAuTAmM2FVyds3d457tpbQIXikQHfSQwKg9fdo9d ELe7ZVyi3a9MwHuMOjoJMdSe2WXCP1B8mUfKW+sYD39Kpl2NlOBll8kU9pJaS4K5 7Y9sp0CS4IRVwNRoPIj9NB0m36zygkYCJcFnFizW+eFcVUzJUBWimPFf1th9f0MX Oh/jitYWHksgsdXZOaDoXTdSxKzAyv0/0pXQxtTx9dh8IP/odKiNr+6BEN1aGaUK ZS2fuiI7eRevHEXPTT/d+vmcJgafIL6WnBIxhHIN9EJ/8I/ruVaq1hhce6HCP9GJ 7rtFT4yg2OEK7KY6ZYIXnt3vwZUCAwEAAaOCAtwwggLYMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLEIEemEM+QNX8avw2aqb+4oFyNlMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ZjZmMyMjU1LWU0YWEtNDNkMC04OTllLWU0NGJhY2JiMDMyMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mY2ZjMjI1 NS1lNGFhLTQzZDAtODk5ZS1lNDRiYWNiYjAzMjEvMC9CMTA4MTFFOTg0MzNFNDBE NUZDNkFGQzM2NkFBNkZFRTI4MTcyMzY1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAY AwQBLfnYAwQBZ9qmAwQBZ+YwAwQBwJHkMA8EAgACMAkDBwAgAQ3yGgAwDQYJKoZI hvcNAQELBQADggEBAHwobiebD/Wgz8Qcm8wWFIuhR0D7cIdWhku0wwPjV4UCkZYL 9lOCEPzhnR9V1ptlkaeq/cq8jC5DO0WvS6Guswj/DfGlAXU10XukV11rEfgHBbp6 4aLywIXJ5b5hIiSlj8l5yCwqbmA2SAtAo1OA5jyQyrz+X2JGh1iwpESx/vqhrGwZ 67nZ8eVxx1o++lwTQNL/oD/HG4fiOmbgqqCpYiNeQY3P2MmzvAWSoKdeGLaa6GKR I+NXNXo5tIdKpsJWHnISn1DO8GrBKn3iQSsQ5LshVy/Piaazd2f4fUsi4uIa2ExO IW7bUB+SL628eAvDOx1HMlWUxvCTCYTbkafxS24= -----END CERTIFICATE-----Generated at Tue Nov 10 03:17:36 2026 by rpki-client