$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0B9143CD5D2A8357E2011E7843995E4FB1F95339.cer File: 0B9143CD5D2A8357E2011E7843995E4FB1F95339.cer (raw, json) Hash identifier: lOKj2UskhG+j9jez6Y/rgbwtYmBGYGUS9u2nO1Awjz0= Subject key identifier: 0B:91:43:CD:5D:2A:83:57:E2:01:1E:78:43:99:5E:4F:B1:F9:53:39 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 13E4FD46BAA7DA07A6B2FDC0FEAE831BFB83B74C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft caRepository: rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:04:25 +0000 Certificate not after: Sun 02 May 2027 02:09:25 +0000 Subordinate resources: IP: 103.107.187.0/24 IP: 2001:df3:e900::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:e4:fd:46:ba:a7:da:07:a6:b2:fd:c0:fe:ae:83:1b:fb:83:b7:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:04:25 2026 GMT Not After : May 2 02:09:25 2027 GMT Subject: CN=0B9143CD5D2A8357E2011E7843995E4FB1F95339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f7:a9:ef:86:2e:52:86:39:8a:b4:77:53:51: 4b:50:0e:0c:46:2a:06:15:e3:43:b7:b7:fa:ed:0d: 62:66:80:74:09:33:c9:90:cc:c8:cc:0b:17:df:9e: bf:f3:1f:ec:d0:c7:23:f8:60:e8:45:28:2b:db:35: 88:fc:f7:89:da:f4:cd:91:c1:09:e8:22:61:1c:d7: 35:21:38:d1:ac:36:42:1e:30:87:17:5f:33:a9:f1: a1:31:bc:9e:6f:31:bf:b0:75:05:c3:30:a3:08:b8: fe:c0:50:59:dc:50:6f:ad:73:29:59:dc:4c:17:e6: 23:0a:f6:14:e8:2a:68:2c:af:ad:4d:59:87:b6:9a: 8c:c9:00:89:29:22:dc:f0:a2:05:e6:cb:c9:b3:56: 62:9a:1d:62:88:6c:1e:93:ae:14:33:85:99:b2:58: 7d:03:b5:24:c8:62:d3:0f:04:78:2e:4a:1b:f9:36: b2:3f:64:4a:0a:f2:1a:04:19:dd:9d:93:64:33:9b: ee:48:aa:c3:b6:eb:b2:95:8b:71:bc:36:0f:17:d9: 09:8b:c2:73:e4:61:1b:12:0a:4c:b3:c1:a3:07:18: d3:27:21:c1:66:d7:35:d9:20:fa:f9:62:53:c5:05: 5b:0c:0c:b8:a8:33:78:1b:a5:70:59:72:a0:5a:54: 58:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0B:91:43:CD:5D:2A:83:57:E2:01:1E:78:43:99:5E:4F:B1:F9:53:39 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.107.187.0/24 IPv6: 2001:df3:e900::/48 Signature Algorithm: sha256WithRSAEncryption 9b:d4:3f:12:de:86:b3:6e:a9:f1:55:52:0a:61:d8:20:bc:fd: 41:72:82:82:ad:87:2f:ed:6e:de:d1:42:58:06:b8:b8:6f:1c: d3:6c:ce:b2:ed:fa:4d:77:80:b3:4c:c4:ec:83:58:82:b3:9e: 86:b2:42:a4:d5:89:f5:e4:ae:5a:7e:17:d9:c7:b2:39:ef:1f: d6:a5:7c:a4:e9:47:48:d9:88:ce:1c:57:89:eb:4d:72:d7:3a: fc:6b:9a:3a:b3:4a:fc:32:73:e5:29:b1:24:a6:40:63:ff:79: 69:80:19:63:75:02:31:4a:f3:93:ce:e6:17:ed:2d:d9:16:87: d4:72:1c:40:c4:2a:7e:d5:a5:8e:d6:0e:3e:02:50:fe:7a:e0: f6:1f:98:31:98:4d:03:07:62:cb:9e:48:96:0b:99:88:c7:01: 49:3c:61:d9:f0:8e:ce:63:16:97:18:31:12:f2:c8:81:08:d0: 5f:01:22:b8:d5:27:20:0e:94:80:77:92:32:41:f6:88:05:ee: 6c:c9:3f:3a:70:be:32:a5:cc:71:25:1c:ff:43:12:5c:83:56: f3:2c:5c:a2:23:48:48:b5:81:46:3a:8c:b1:d0:bf:e9:e4:16: 04:92:04:97:2a:65:cc:83:31:1c:a8:23:05:71:8a:b0:e3:f3: c6:04:5d:17 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUE+T9Rrqn2gemsv3A/q6DG/uDt0wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDQyNVoX DTI3MDUwMjAyMDkyNVowMzExMC8GA1UEAxMoMEI5MTQzQ0Q1RDJBODM1N0UyMDEx RTc4NDM5OTVFNEZCMUY5NTMzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKj3qe+GLlKGOYq0d1NRS1AODEYqBhXjQ7e3+u0NYmaAdAkzyZDMyMwLF9+e v/Mf7NDHI/hg6EUoK9s1iPz3idr0zZHBCegiYRzXNSE40aw2Qh4whxdfM6nxoTG8 nm8xv7B1BcMwowi4/sBQWdxQb61zKVncTBfmIwr2FOgqaCyvrU1Zh7aajMkAiSki 3PCiBebLybNWYpodYohsHpOuFDOFmbJYfQO1JMhi0w8EeC5KG/k2sj9kSgryGgQZ 3Z2TZDOb7kiqw7brspWLcbw2DxfZCYvCc+RhGxIKTLPBowcY0ychwWbXNdkg+vli U8UFWwwMuKgzeBulcFlyoFpUWH0CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAuRQ81dKoNX4gEeeEOZXk+x+VM5MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RkNDhiZDA0LWY3ODctNDE0YS1hNTAxLTUxMzhhNmQ2YjNlMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kZDQ4YmQw NC1mNzg3LTQxNGEtYTUwMS01MTM4YTZkNmIzZTEvMC8wQjkxNDNDRDVEMkE4MzU3 RTIwMTFFNzg0Mzk5NUU0RkIxRjk1MzM5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ2u7MA8EAgACMAkDBwAgAQ3z6QAwDQYJKoZIhvcNAQELBQADggEBAJvUPxLe hrNuqfFVUgph2CC8/UFygoKthy/tbt7RQlgGuLhvHNNszrLt+k13gLNMxOyDWIKz noayQqTVifXkrlp+F9nHsjnvH9alfKTpR0jZiM4cV4nrTXLXOvxrmjqzSvwyc+Up sSSmQGP/eWmAGWN1AjFK85PO5hftLdkWh9RyHEDEKn7VpY7WDj4CUP564PYfmDGY TQMHYsueSJYLmYjHAUk8Ydnwjs5jFpcYMRLyyIEI0F8BIrjVJyAOlIB3kjJB9ogF 7mzJPzpwvjKlzHElHP9DElyDVvMsXKIjSEi1gUY6jLHQv+nkFgSSBJcqZcyDMRyo IwVxirDj88YEXRc= -----END CERTIFICATE-----Generated at Tue May 12 22:03:00 2026 by rpki-client