$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/098D1D612D535CED249CDB01EC5565063EBACEEF.cer File: 098D1D612D535CED249CDB01EC5565063EBACEEF.cer (raw, json) Hash identifier: YTVqlrs8naBtfXkRBgJnxuAZWsgVcG+VAoiZlqL2YhU= Subject key identifier: 09:8D:1D:61:2D:53:5C:ED:24:9C:DB:01:EC:55:65:06:3E:BA:CE:EF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5681BB75BBDB802C3C39452726838F673E9BDBA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:41:14 +0000 Certificate not after: Sun 02 May 2027 02:46:14 +0000 Subordinate resources: IP: 103.156.16.0/23 IP: 2406:7bc0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:81:bb:75:bb:db:80:2c:3c:39:45:27:26:83:8f:67:3e:9b:db:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:41:14 2026 GMT Not After : May 2 02:46:14 2027 GMT Subject: CN=098D1D612D535CED249CDB01EC5565063EBACEEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:40:c6:39:a6:ba:43:5a:cf:37:27:e3:83:da: 56:8d:81:b9:49:3c:0d:91:55:91:9a:6a:f3:5e:a3: a4:82:b1:12:3c:76:aa:db:c5:8e:d4:1d:3f:30:86: ee:43:a5:95:35:09:a9:b6:ae:04:36:c7:a4:5f:e5: 69:03:fa:73:27:19:bc:d9:1a:a6:19:2b:db:4b:fc: ac:8c:dc:eb:5e:f4:42:5b:13:30:72:a5:6f:67:e2: c0:cf:0a:7b:f3:e8:d3:6b:19:e1:e8:af:1a:a5:28: 67:14:69:f9:53:07:24:fa:5f:79:4b:54:69:81:e4: db:99:1d:9b:b8:4a:38:2b:ed:77:04:03:eb:90:79: 4e:35:4e:6d:6e:11:43:31:8e:f7:b3:a3:e1:2c:a0: 9e:e7:4f:38:a7:98:38:af:f0:9c:58:14:b0:f6:6d: eb:7c:ee:30:6b:26:46:7a:54:55:6a:c3:c5:39:ab: 6e:82:09:a0:40:a5:5d:67:41:39:7e:f2:65:14:7c: e0:16:e6:0d:fd:83:b8:62:b5:2a:24:3d:ae:45:7c: b7:27:6f:92:2d:04:ac:9b:78:61:b4:d6:e8:a1:a9: c0:ae:07:b0:b7:ca:1c:a5:e0:e4:c8:39:d3:c5:1e: b9:d5:52:dd:20:b9:30:09:b4:9a:82:97:bf:05:52: f1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:8D:1D:61:2D:53:5C:ED:24:9C:DB:01:EC:55:65:06:3E:BA:CE:EF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/098D1D612D535CED249CDB01EC5565063EBACEEF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.16.0/23 IPv6: 2406:7bc0::/32 Signature Algorithm: sha256WithRSAEncryption 06:a7:e7:15:d0:cb:ef:ac:1f:1e:f8:a2:3e:a8:3e:87:b6:d2: 17:30:12:61:0d:0d:f7:95:12:c2:f0:40:78:24:64:e3:f8:3d: 28:00:95:fa:4f:73:ae:9a:2e:f9:a2:f7:87:cc:b9:46:aa:fc: 3a:98:b6:a4:a0:a4:b8:73:89:f8:a2:5c:0c:d7:44:48:a8:f5: 7b:de:2d:ff:a4:24:c1:a0:0c:d4:7b:ef:a8:92:01:0f:a3:46: 4f:ba:b7:1a:07:87:99:99:cc:01:62:28:4a:62:d7:3e:9d:6e: 1c:10:62:ca:48:b9:32:f1:4d:24:5b:57:5d:6c:a6:e7:fc:3f: 41:9b:c3:3f:f8:2e:dc:e7:00:20:ff:b6:7b:cf:5c:fc:33:60: f0:68:40:82:c1:c6:7a:11:2f:e2:ff:92:7d:00:ba:50:2e:9e: 4a:03:aa:5f:1d:d7:0c:23:0a:87:f0:fa:7c:92:9e:30:61:3e: ee:4b:20:c7:c3:07:e1:af:bc:8f:18:44:5a:78:40:16:40:ee: fb:4c:7f:aa:e2:02:2c:9b:bc:b4:2c:9c:3a:12:ba:2f:4a:85: e6:77:58:db:1b:4f:11:27:89:8b:dc:63:3f:45:c1:98:45:11: cf:9f:bf:68:39:9e:93:39:35:cf:0b:8a:b8:e4:51:ca:c7:cd: 5d:30:ba:7c -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUVoG7dbvbgCw8OUUnJoOPZz6b26AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyNDExNFoX DTI3MDUwMjAyNDYxNFowMzExMC8GA1UEAxMoMDk4RDFENjEyRDUzNUNFRDI0OUNE QjAxRUM1NTY1MDYzRUJBQ0VFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdAxjmmukNazzcn44PaVo2BuUk8DZFVkZpq816jpIKxEjx2qtvFjtQdPzCG 7kOllTUJqbauBDbHpF/laQP6cycZvNkaphkr20v8rIzc6170QlsTMHKlb2fiwM8K e/Po02sZ4eivGqUoZxRp+VMHJPpfeUtUaYHk25kdm7hKOCvtdwQD65B5TjVObW4R QzGO97Oj4SygnudPOKeYOK/wnFgUsPZt63zuMGsmRnpUVWrDxTmrboIJoEClXWdB OX7yZRR84BbmDf2DuGK1KiQ9rkV8tydvki0ErJt4YbTW6KGpwK4HsLfKHKXg5Mg5 08UeudVS3SC5MAm0moKXvwVS8QkCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAmNHWEtU1ztJJzbAexVZQY+us7vMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y5NjQwMWUzLTlmNjItNGIzYy1iZmZiLTc4MzM1NWFlNjc3MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mOTY0MDFl My05ZjYyLTRiM2MtYmZmYi03ODMzNTVhZTY3NzAvMC8wOThEMUQ2MTJENTM1Q0VE MjQ5Q0RCMDFFQzU1NjUwNjNFQkFDRUVGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5wQMA0EAgACMAcDBQAkBnvAMA0GCSqGSIb3DQEBCwUAA4IBAQAGp+cV0Mvv rB8e+KI+qD6HttIXMBJhDQ33lRLC8EB4JGTj+D0oAJX6T3Oumi75oveHzLlGqvw6 mLakoKS4c4n4olwM10RIqPV73i3/pCTBoAzUe++okgEPo0ZPurcaB4eZmcwBYihK Ytc+nW4cEGLKSLky8U0kW1ddbKbn/D9Bm8M/+C7c5wAg/7Z7z1z8M2DwaECCwcZ6 ES/i/5J9ALpQLp5KA6pfHdcMIwqH8Pp8kp4wYT7uSyDHwwfhr7yPGERaeEAWQO77 TH+q4gIsm7y0LJw6ErovSoXmd1jbG08RJ4mL3GM/RcGYRRHPn79oOZ6TOTXPC4q4 5FHKx81dMLp8 -----END CERTIFICATE-----Generated at Tue May 12 22:10:35 2026 by rpki-client