$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer File: 096E75D80B559B9824609BA61681D845A0CB0F77.cer (raw, json) Hash identifier: zoc31jU7FeGnEGWZmRGN64E9QiEiskO43PJYrpd59RA= Subject key identifier: 09:6E:75:D8:0B:55:9B:98:24:60:9B:A6:16:81:D8:45:A0:CB:0F:77 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 49054E88637D6A388915E3ABA8E70CF87B6B6F1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft caRepository: rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:35:45 +0000 Certificate not after: Sun 02 May 2027 00:40:45 +0000 Subordinate resources: IP: 103.173.142.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:05:4e:88:63:7d:6a:38:89:15:e3:ab:a8:e7:0c:f8:7b:6b:6f:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:35:45 2026 GMT Not After : May 2 00:40:45 2027 GMT Subject: CN=096E75D80B559B9824609BA61681D845A0CB0F77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:89:81:03:11:e4:ae:f1:4c:aa:5d:73:8b:a0: 33:6f:58:a2:5a:84:0f:80:f7:e7:41:f9:63:63:b8: 6b:66:40:a1:78:19:81:be:64:40:25:8f:29:c5:a6: 7b:ce:c9:e3:0a:cb:1f:e8:b7:ed:40:87:93:65:71: 17:5a:f2:87:1a:75:80:7d:cc:fb:e4:0d:1e:4c:7a: c4:3b:72:c3:3d:87:91:3a:26:f9:a2:b9:8e:a3:53: 8b:49:c3:7b:b5:b4:06:56:0a:c1:b6:7d:57:e0:dc: 5e:d6:8b:c3:6d:b9:64:4e:71:3a:d2:08:ed:08:cd: 91:22:53:6b:41:eb:2d:b4:2e:50:8e:76:8f:eb:f7: 96:5d:82:8b:e1:50:19:68:2a:d2:c6:60:d8:7f:a0: 31:86:e5:27:4e:96:5f:40:81:4b:53:30:42:75:6a: 20:7d:15:12:9a:8b:b9:ae:7f:53:7a:16:8b:74:8d: db:39:74:92:bd:9c:2f:92:7c:86:76:bb:7c:83:1f: 32:4f:cb:17:f3:78:8a:da:e4:1f:70:2e:e2:f8:95: 6f:93:c5:0d:1f:5e:c4:c8:63:c6:69:25:e9:1a:2e: 2d:45:2e:fd:59:3a:b4:a5:29:70:2a:cd:f7:8b:a6: 9e:ba:4e:1a:68:2e:29:a5:86:56:78:3d:67:2c:91: 3e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:6E:75:D8:0B:55:9B:98:24:60:9B:A6:16:81:D8:45:A0:CB:0F:77 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.173.142.0/23 Signature Algorithm: sha256WithRSAEncryption 23:23:10:b3:66:d7:5e:98:3a:6c:aa:62:8d:21:65:d3:11:0a: ac:36:00:a4:d0:7e:57:3a:6c:a9:80:5f:ff:24:b1:82:48:c2: f4:ac:d8:b3:6c:ea:64:12:bf:62:93:5f:40:77:63:2c:04:57: fa:a2:44:02:8f:43:8f:16:5c:e1:a3:76:43:88:ed:c2:42:41: da:79:87:89:6b:26:3b:ed:c0:bf:57:22:c5:cc:81:c2:39:98: 0e:2e:68:61:36:7a:40:12:ca:e4:c2:cb:52:e7:6b:a5:bc:9b: 33:8e:f7:aa:16:24:5a:4b:af:05:d8:da:6a:b7:56:66:33:60: 3d:97:d9:89:aa:a9:cc:51:43:e9:a4:2a:92:ef:c9:03:bd:f9: 89:0a:6d:29:cc:35:4c:1d:6e:18:bd:1b:93:68:b2:78:a8:03: 83:16:0c:65:f4:ba:b3:8b:61:97:fc:5f:28:88:61:26:00:3d: d1:7e:3c:68:6a:92:c7:9b:8a:12:43:4a:bf:48:ed:ab:3a:11: 83:91:e5:87:38:e7:f9:c6:45:5b:11:04:a9:11:8b:ad:24:1b: 18:41:4b:50:44:a4:57:1e:3c:cb:6e:1c:55:2f:f4:f7:90:2d: f8:09:71:6b:6f:0c:64:44:e7:21:2e:38:3c:33:10:af:16:55: 41:33:a5:d2 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUSQVOiGN9ajiJFeOrqOcM+HtrbxowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzU0NVoX DTI3MDUwMjAwNDA0NVowMzExMC8GA1UEAxMoMDk2RTc1RDgwQjU1OUI5ODI0NjA5 QkE2MTY4MUQ4NDVBMENCMEY3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKuJgQMR5K7xTKpdc4ugM29YolqED4D350H5Y2O4a2ZAoXgZgb5kQCWPKcWm e87J4wrLH+i37UCHk2VxF1ryhxp1gH3M++QNHkx6xDtywz2HkTom+aK5jqNTi0nD e7W0BlYKwbZ9V+DcXtaLw225ZE5xOtII7QjNkSJTa0HrLbQuUI52j+v3ll2Ci+FQ GWgq0sZg2H+gMYblJ06WX0CBS1MwQnVqIH0VEpqLua5/U3oWi3SN2zl0kr2cL5J8 hna7fIMfMk/LF/N4itrkH3Au4viVb5PFDR9exMhjxmkl6RouLUUu/Vk6tKUpcCrN 94umnrpOGmguKaWGVng9ZyyRPmMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAluddgLVZuYJGCbphaB2EWgyw93MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzU0ZjEzNzJjLTQzYTYtNGZkYS1iNTBlLWQwMWViNDJjNjg5Zi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81NGYxMzcy Yy00M2E2LTRmZGEtYjUwZS1kMDFlYjQyYzY4OWYvMC8wOTZFNzVEODBCNTU5Qjk4 MjQ2MDlCQTYxNjgxRDg0NUEwQ0IwRjc3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ62OMA0GCSqGSIb3DQEBCwUAA4IBAQAjIxCzZtdemDpsqmKNIWXTEQqsNgCk 0H5XOmypgF//JLGCSML0rNizbOpkEr9ik19Ad2MsBFf6okQCj0OPFlzho3ZDiO3C QkHaeYeJayY77cC/VyLFzIHCOZgOLmhhNnpAEsrkwstS52ulvJszjveqFiRaS68F 2Npqt1ZmM2A9l9mJqqnMUUPppCqS78kDvfmJCm0pzDVMHW4YvRuTaLJ4qAODFgxl 9Lqzi2GX/F8oiGEmAD3RfjxoapLHm4oSQ0q/SO2rOhGDkeWHOOf5xkVbEQSpEYut JBsYQUtQRKRXHjzLbhxVL/T3kC34CXFrbwxkROchLjg8MxCvFlVBM6XS -----END CERTIFICATE-----Generated at Tue May 12 22:16:50 2026 by rpki-client