$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer File: 97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer (raw, json) Hash identifier: bYQdTvUdA+nOwk9p6Gky1J2UHWnrxom2aCAuXeJdL/M= Subject key identifier: 97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 4F984871A4CCD8EF11DDCD299C4017C8989B679B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:42:54 +0000 Certificate not after: Sat 01 May 2027 23:47:54 +0000 Subordinate resources: IP: 160.30.224.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:98:48:71:a4:cc:d8:ef:11:dd:cd:29:9c:40:17:c8:98:9b:67:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 23:42:54 2026 GMT Not After : May 1 23:47:54 2027 GMT Subject: CN=97F8E949F6F9949E17CCA8BD66A34372BF61C549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:43:92:4d:2f:0e:6e:aa:31:bf:79:71:a4:e8: cb:65:6f:39:f2:ae:ce:63:07:e9:cf:7b:3d:55:1a: bf:25:50:e3:a4:d0:4d:b0:b4:d0:d6:2f:3d:a4:c8: 4a:a3:26:f2:8c:01:b8:8c:80:94:ea:1d:3d:29:ef: 29:09:84:21:32:6b:42:28:9b:95:02:7f:dc:e0:a1: 9f:b3:f3:f6:15:85:74:7e:29:bc:a9:02:95:46:d7: 4b:d9:bf:72:26:ae:30:27:48:73:b3:66:53:b7:c8: a8:35:70:1d:03:79:7d:28:b0:71:7c:b5:b4:66:94: 64:84:1d:c6:ba:86:5e:3d:29:8a:f0:bf:b2:1f:c5: 88:c7:47:17:28:8e:9c:bd:47:e4:8e:9d:cc:c5:da: 29:d5:b4:66:c8:fb:c7:37:3e:9d:60:a0:a2:7b:85: e2:9e:96:f6:b2:0a:5c:73:36:70:95:bf:d3:9b:e2: e7:78:e2:87:64:f0:7b:68:1b:3a:8d:b5:b8:10:79: 83:74:42:05:4e:b1:be:f1:89:05:c4:96:9b:5e:85: 77:85:5a:3d:62:8f:c4:a0:4b:e3:d0:a2:ac:d0:b8: a8:ec:3f:ea:9f:b3:d5:86:a4:e8:ab:5b:46:2e:f6: 3f:2e:56:52:4d:33:8b:cb:7b:39:f4:6d:01:9f:64: 08:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.30.224.0/23 Signature Algorithm: sha256WithRSAEncryption 09:57:f4:7b:25:b7:e9:4a:c8:3e:f1:e9:58:76:b2:3d:02:ee: 2d:14:c7:5a:0f:ad:b3:5b:03:c5:85:4f:67:f9:7d:f9:5a:75: 3c:47:65:75:a9:b5:8a:77:4d:19:ba:a4:bf:08:2b:b1:25:30: c0:e4:b9:97:d4:ab:f2:93:c7:4f:66:51:50:8a:53:dc:99:d4: 08:ef:27:da:90:19:f1:58:74:6a:17:e2:92:e7:9e:4c:e6:7b: 0b:14:d0:cf:75:d7:f7:08:32:5f:58:f0:6e:20:eb:4c:09:13: ea:10:f5:90:79:ba:a4:d6:11:d1:ce:16:27:a3:3c:17:0e:87: 53:91:ae:53:cd:28:fc:96:bd:a7:6e:a8:93:82:1d:40:ad:3d: db:59:a0:57:e6:c9:ec:1d:24:3b:e9:58:78:7a:47:4d:50:9f: be:35:de:57:32:71:a1:d0:d7:e7:ca:bb:03:1c:9a:c5:87:30: f7:3e:82:cf:5c:c2:49:76:b2:ec:49:e5:40:1a:e7:30:f2:2e: 61:fe:9c:10:ff:0b:ba:05:5a:9b:40:09:6b:56:ee:cf:95:87: ef:f5:8d:b7:ac:57:60:7f:21:68:c3:e8:bf:91:f9:5a:91:f0: ff:1c:d5:37:e6:50:fe:8c:0e:09:34:13:89:af:ae:9e:94:65: be:e0:68:7d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUT5hIcaTM2O8R3c0pnEAXyJibZ5swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjIzNDI1NFoX DTI3MDUwMTIzNDc1NFowMzExMC8GA1UEAxMoOTdGOEU5NDlGNkY5OTQ5RTE3Q0NB OEJENjZBMzQzNzJCRjYxQzU0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALVDkk0vDm6qMb95caToy2VvOfKuzmMH6c97PVUavyVQ46TQTbC00NYvPaTI SqMm8owBuIyAlOodPSnvKQmEITJrQiiblQJ/3OChn7Pz9hWFdH4pvKkClUbXS9m/ ciauMCdIc7NmU7fIqDVwHQN5fSiwcXy1tGaUZIQdxrqGXj0pivC/sh/FiMdHFyiO nL1H5I6dzMXaKdW0Zsj7xzc+nWCgonuF4p6W9rIKXHM2cJW/05vi53jih2Twe2gb Oo21uBB5g3RCBU6xvvGJBcSWm16Fd4VaPWKPxKBL49CirNC4qOw/6p+z1Yak6Ktb Ri72Py5WUk0zi8t7OfRtAZ9kCOcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJf46Un2+ZSeF8yovWajQ3K/YcVJMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzA0NTY1MTllLWFiNjEtNDk0My1iM2U4LTEwYmRkNjA4MGZkYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wNDU2NTE5 ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMC85N0Y4RTk0OUY2Rjk5NDlF MTdDQ0E4QkQ2NkEzNDM3MkJGNjFDNTQ5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoB7gMA0GCSqGSIb3DQEBCwUAA4IBAQAJV/R7JbfpSsg+8elYdrI9Au4tFMda D62zWwPFhU9n+X35WnU8R2V1qbWKd00ZuqS/CCuxJTDA5LmX1Kvyk8dPZlFQilPc mdQI7yfakBnxWHRqF+KS555M5nsLFNDPddf3CDJfWPBuIOtMCRPqEPWQebqk1hHR zhYnozwXDodTka5TzSj8lr2nbqiTgh1ArT3bWaBX5snsHSQ76Vh4ekdNUJ++Nd5X MnGh0NfnyrsDHJrFhzD3PoLPXMJJdrLsSeVAGucw8i5h/pwQ/wu6BVqbQAlrVu7P lYfv9Y23rFdgfyFow+i/kflakfD/HNU35lD+jA4JNBOJr66elGW+4Gh9 -----END CERTIFICATE-----Generated at Tue May 12 22:32:31 2026 by rpki-client