$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/B1A312C7C11F797456AB6D3485174C6A0420A1A6.cer File: B1A312C7C11F797456AB6D3485174C6A0420A1A6.cer (raw, json) Hash identifier: iyzWR8xDyF7AoAqKfhy1fjGtIFYLgMPqNiWOn32HwD4= Subject key identifier: B1:A3:12:C7:C1:1F:79:74:56:AB:6D:34:85:17:4C:6A:04:20:A1:A6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0DF35615AAE4343DE43472C34CA5B7CAD7039694 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer CRL Distribution Point: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Manifest: rsync://rpki-rsync.idnic.net/repo/393b50ee-ec43-404c-a575-bef4e8627a1a/0/B1A312C7C11F797456AB6D3485174C6A0420A1A6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/393b50ee-ec43-404c-a575-bef4e8627a1a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Tue 13 Oct 2026 07:21:28 +0000 Certificate not after: Tue 12 Oct 2027 07:26:28 +0000 Subordinate resources: AS: 133468 IP: 163.52.251.0/24 IP: 2001:df7:96c0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f3:56:15:aa:e4:34:3d:e4:34:72:c3:4c:a5:b7:ca:d7:03:96:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 13 07:21:28 2026 GMT Not After : Oct 12 07:26:28 2027 GMT Subject: CN=B1A312C7C11F797456AB6D3485174C6A0420A1A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:40:c8:93:ea:05:22:25:71:e5:27:5d:4b:84: 3f:35:11:6e:6c:bc:4a:74:ec:44:22:2f:9b:ba:c3: 5a:ea:1a:d3:a9:6e:59:0b:1a:8a:c3:8a:95:fa:24: 5a:24:c2:77:dc:7f:31:4b:d8:0b:96:49:6e:5e:be: ce:32:43:10:c4:04:2f:4b:e1:7b:a9:41:6c:8a:f3: 52:30:83:fd:11:8d:82:c5:0e:f9:1a:89:ee:1c:ce: a5:cc:2c:35:0f:0f:b7:62:e5:66:62:85:7a:a6:0d: 3f:25:b5:a2:a1:e6:39:c9:78:ef:21:2d:8e:0b:89: b5:77:97:a6:39:ad:4c:82:dd:9b:bb:d3:ba:bb:27: a3:ac:49:dd:3a:e2:ed:bf:fc:05:6e:56:25:49:a0: ff:f4:87:1c:d4:7a:ee:0c:b9:1d:16:81:10:5d:30: 5c:77:51:b1:b8:4f:b0:c1:d3:04:a8:98:14:75:ea: e1:26:52:25:86:fa:70:e5:e1:42:0f:71:58:40:6f: aa:68:13:21:6e:96:8d:c6:1f:e7:03:40:74:1c:04: f3:25:bd:32:e7:03:73:ee:6f:e3:d3:71:bd:0f:c6: 7a:c5:88:43:30:3c:0f:44:a3:37:31:1b:a5:8b:fc: ee:d2:26:d3:76:52:f1:85:81:dd:4a:04:88:37:e9: dd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B1:A3:12:C7:C1:1F:79:74:56:AB:6D:34:85:17:4C:6A:04:20:A1:A6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/393b50ee-ec43-404c-a575-bef4e8627a1a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/393b50ee-ec43-404c-a575-bef4e8627a1a/0/B1A312C7C11F797456AB6D3485174C6A0420A1A6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.251.0/24 IPv6: 2001:df7:96c0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 133468 Signature Algorithm: sha256WithRSAEncryption a6:db:de:27:48:a9:9b:08:cc:d8:8b:51:41:1e:c5:48:6f:b2: 70:48:90:44:a5:df:b3:41:0e:2c:58:ea:4c:c6:7d:1f:a9:bd: f4:56:d0:49:6d:13:41:56:15:6e:93:fd:70:39:37:70:d0:f1: 38:01:d4:1e:6a:d0:7d:08:97:03:87:02:3f:ff:75:3e:82:0a: b3:e7:ed:af:c6:15:fe:83:41:36:8c:97:35:65:37:f3:b7:29: 88:ef:30:90:4a:49:96:21:04:89:07:bf:e0:bb:67:fc:9c:76: 76:48:85:4d:39:13:22:51:79:73:1f:ce:25:0d:c0:4a:4f:b7: b8:a3:8e:cd:2e:bf:4e:54:e2:a6:6a:9b:9b:59:ae:a7:84:63: 84:fe:52:15:df:23:cc:7a:dc:bb:d1:6f:b5:aa:67:e7:cd:24: 9d:e0:8a:95:c1:a9:4c:9d:39:24:d8:04:e3:f1:43:92:4f:9d: e3:bf:ee:cd:25:ea:2e:63:88:cd:b8:ae:dc:64:2c:63:21:df: fb:f9:77:e0:05:ac:80:5a:a6:fc:36:9c:4d:68:ef:61:cf:a4: 6f:34:ab:a1:96:da:b7:fb:8c:5f:1c:c2:94:d7:61:08:ef:f5: 59:d9:59:4f:c0:9d:d8:e5:90:cd:99:80:d0:d0:1a:a6:a9:6d: 71:c9:11:78 -----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgIUDfNWFarkND3kNHLDTKW3ytcDlpQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAxMzA3MjEyOFoX DTI3MTAxMjA3MjYyOFowMzExMC8GA1UEAxMoQjFBMzEyQzdDMTFGNzk3NDU2QUI2 RDM0ODUxNzRDNkEwNDIwQTFBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALVAyJPqBSIlceUnXUuEPzURbmy8SnTsRCIvm7rDWuoa06luWQsaisOKlfok WiTCd9x/MUvYC5ZJbl6+zjJDEMQEL0vhe6lBbIrzUjCD/RGNgsUO+RqJ7hzOpcws NQ8Pt2LlZmKFeqYNPyW1oqHmOcl47yEtjguJtXeXpjmtTILdm7vTursno6xJ3Tri 7b/8BW5WJUmg//SHHNR67gy5HRaBEF0wXHdRsbhPsMHTBKiYFHXq4SZSJYb6cOXh Qg9xWEBvqmgTIW6WjcYf5wNAdBwE8yW9MucDc+5v49NxvQ/GesWIQzA8D0SjNzEb pYv87tIm03ZS8YWB3UoEiDfp3dMCAwEAAaOCAuYwggLiMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLGjEsfBH3l0VqttNIUXTGoEIKGmMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM5M2I1MGVlLWVjNDMtNDA0Yy1hNTc1LWJlZjRlODYyN2ExYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zOTNiNTBl ZS1lYzQzLTQwNGMtYTU3NS1iZWY0ZTg2MjdhMWEvMC9CMUEzMTJDN0MxMUY3OTc0 NTZBQjZEMzQ4NTE3NEM2QTA0MjBBMUE2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAozT7MA8EAgACMAkDBwAgAQ33lsAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AglcMA0GCSqGSIb3DQEBCwUAA4IBAQCm294nSKmbCMzYi1FBHsVIb7JwSJBEpd+z QQ4sWOpMxn0fqb30VtBJbRNBVhVuk/1wOTdw0PE4AdQeatB9CJcDhwI//3U+ggqz 5+2vxhX+g0E2jJc1ZTfztymI7zCQSkmWIQSJB7/gu2f8nHZ2SIVNORMiUXlzH84l DcBKT7e4o47NLr9OVOKmapubWa6nhGOE/lIV3yPMety70W+1qmfnzSSd4IqVwalM nTkk2ATj8UOST53jv+7NJeouY4jNuK7cZCxjId/7+XfgBayAWqb8NpxNaO9hz6Rv NKuhltq3+4xfHMKU12EI7/VZ2VlPwJ3Y5ZDNmYDQ0BqmqW1xyRF4 -----END CERTIFICATE-----Generated at Sun Nov 15 19:23:09 2026 by rpki-client