$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer File: 0987C7F8639A5EC739826F640C8E04FD53A0800E.cer (raw, json) Hash identifier: 9ycoBy03xCyk4n7b2awKhaY1fEggjGmpaW5oOburs30= Subject key identifier: 09:87:C7:F8:63:9A:5E:C7:39:82:6F:64:0C:8E:04:FD:53:A0:80:0E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 53DC863C8B8C29C41AC150BD235238135AB151E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:26:27 +0000 Certificate not after: Sun 02 May 2027 00:31:27 +0000 Subordinate resources: IP: 103.175.46.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:dc:86:3c:8b:8c:29:c4:1a:c1:50:bd:23:52:38:13:5a:b1:51:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:26:27 2026 GMT Not After : May 2 00:31:27 2027 GMT Subject: CN=0987C7F8639A5EC739826F640C8E04FD53A0800E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2b:7a:09:20:0f:43:ed:62:eb:bc:50:3f:3c: 22:03:7a:1c:f3:71:81:48:f8:9f:24:07:76:4b:3c: 20:b5:89:55:63:18:2d:46:bc:4d:eb:a3:b9:3d:86: f9:9c:df:85:89:87:85:48:c9:9a:59:c3:f8:fa:7f: 3a:d9:11:6a:f8:65:98:ce:68:7c:f0:a5:38:6f:9c: 4d:0c:9d:3f:a7:b7:75:e0:43:6c:29:5a:4a:0e:42: 34:17:eb:b9:07:78:68:90:df:75:5a:89:71:a1:a5: b2:80:11:68:de:3a:96:10:fd:d8:56:e3:d6:ba:83: 83:9e:c9:95:06:df:5d:17:ee:09:51:38:ec:9f:e7: 41:ee:9c:3f:e1:eb:e3:d3:f0:2c:3f:42:5e:44:31: 37:f3:d7:05:65:e6:e9:6b:6c:67:d4:dc:76:ca:9f: af:22:fe:fc:32:cb:06:34:0e:68:89:c5:e0:96:5b: bb:20:a6:3b:6c:25:96:b8:22:0b:b7:6c:39:b5:4a: bb:bd:22:e9:e5:41:4b:6e:d3:81:93:08:ca:46:ec: 0b:c8:7c:0f:3a:06:fc:de:4d:4d:35:86:8b:d2:95: 2c:cb:b1:1f:73:cd:bf:75:a4:04:03:ef:e1:62:17: e9:4d:c0:fc:ab:9f:82:ea:18:52:0f:01:c3:97:86: 00:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:87:C7:F8:63:9A:5E:C7:39:82:6F:64:0C:8E:04:FD:53:A0:80:0E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.46.0/23 Signature Algorithm: sha256WithRSAEncryption 99:56:23:1f:46:10:c0:87:f0:e5:3a:e0:83:60:db:ae:19:f4: 81:47:67:17:e0:5c:85:a7:b3:f1:ff:04:f6:b7:f6:26:1c:50: ba:e6:3f:89:aa:dc:d5:9d:c3:de:00:1f:ab:49:cd:e9:cd:76: 9a:44:5d:4e:c7:86:f0:dc:b7:26:46:c6:1f:11:b0:58:09:7a: 25:c4:c8:64:91:3d:89:33:5a:d3:0b:08:64:61:be:b0:fa:5a: 6d:e0:e3:45:56:6a:21:37:84:08:95:2c:fe:57:a9:3e:b1:9b: 68:b8:a5:27:24:70:9f:22:13:7b:c6:02:c3:49:6d:cc:07:9e: d3:d3:09:e1:c2:63:d8:6a:10:d0:0b:2c:23:c7:85:6e:aa:c0: 1f:80:ea:68:b0:97:52:c0:75:71:b4:1c:f4:24:a5:42:4a:7b: 3e:08:8b:5c:66:49:67:6d:12:b9:d1:1c:11:09:a8:70:a4:3b: db:82:ef:52:72:80:2d:a8:68:fc:8a:50:b0:43:d1:95:20:90: 18:4f:53:7d:70:20:37:9f:f4:fb:92:cb:9c:f6:27:02:df:6a: 47:d4:39:64:0e:26:3e:59:60:22:4f:6a:f8:7b:48:11:e6:fa: 33:6f:e8:a3:b2:2a:fe:4e:48:80:ea:bb:22:d3:6f:ed:bc:11: a4:80:b3:7c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUU9yGPIuMKcQawVC9I1I4E1qxUeIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjYyN1oX DTI3MDUwMjAwMzEyN1owMzExMC8GA1UEAxMoMDk4N0M3Rjg2MzlBNUVDNzM5ODI2 RjY0MEM4RTA0RkQ1M0EwODAwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALMregkgD0PtYuu8UD88IgN6HPNxgUj4nyQHdks8ILWJVWMYLUa8TeujuT2G +ZzfhYmHhUjJmlnD+Pp/OtkRavhlmM5ofPClOG+cTQydP6e3deBDbClaSg5CNBfr uQd4aJDfdVqJcaGlsoARaN46lhD92Fbj1rqDg57JlQbfXRfuCVE47J/nQe6cP+Hr 49PwLD9CXkQxN/PXBWXm6WtsZ9TcdsqfryL+/DLLBjQOaInF4JZbuyCmO2wllrgi C7dsObVKu70i6eVBS27TgZMIykbsC8h8DzoG/N5NTTWGi9KVLMuxH3PNv3WkBAPv 4WIX6U3A/KufguoYUg8Bw5eGAGECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAmHx/hjml7HOYJvZAyOBP1ToIAOMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQ2MzhiZDIxLWJlNTYtNDJiNC04Mjc4LTA1NDA1ZGNlNWU4OC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80NjM4YmQy MS1iZTU2LTQyYjQtODI3OC0wNTQwNWRjZTVlODgvMC8wOTg3QzdGODYzOUE1RUM3 Mzk4MjZGNjQwQzhFMDRGRDUzQTA4MDBFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ68uMA0GCSqGSIb3DQEBCwUAA4IBAQCZViMfRhDAh/DlOuCDYNuuGfSBR2cX 4FyFp7Px/wT2t/YmHFC65j+JqtzVncPeAB+rSc3pzXaaRF1Ox4bw3LcmRsYfEbBY CXolxMhkkT2JM1rTCwhkYb6w+lpt4ONFVmohN4QIlSz+V6k+sZtouKUnJHCfIhN7 xgLDSW3MB57T0wnhwmPYahDQCywjx4VuqsAfgOposJdSwHVxtBz0JKVCSns+CItc ZklnbRK50RwRCahwpDvbgu9ScoAtqGj8ilCwQ9GVIJAYT1N9cCA3n/T7ksuc9icC 32pH1DlkDiY+WWAiT2r4e0gR5vozb+ijsir+TkiA6rsi02/tvBGkgLN8 -----END CERTIFICATE-----Generated at Tue May 12 22:47:38 2026 by rpki-client