$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer File: 12099D13750CE0704F5D87C255E4B056E703B28D.cer (raw, json) Hash identifier: Kbqzm98MousinVIuTLF+qWta8IpYr2DrSBfE1HfgjEc= Subject key identifier: 12:09:9D:13:75:0C:E0:70:4F:5D:87:C2:55:E4:B0:56:E7:03:B2:8D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 45E472C8FB13E87F80A683486B2EB0DDEC2A4604 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:39:44 +0000 Certificate not after: Sun 02 May 2027 02:44:44 +0000 Subordinate resources: IP: 103.247.242.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e4:72:c8:fb:13:e8:7f:80:a6:83:48:6b:2e:b0:dd:ec:2a:46:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:39:44 2026 GMT Not After : May 2 02:44:44 2027 GMT Subject: CN=12099D13750CE0704F5D87C255E4B056E703B28D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:07:2e:fb:b8:1e:a4:5c:5a:df:95:93:14:90: 0a:aa:92:98:48:57:27:9f:50:17:a7:4e:9a:04:fa: 74:97:58:22:7f:d2:13:be:97:b3:93:c5:3f:2b:8a: 1c:9f:43:b1:19:5e:24:0f:af:a8:e4:12:2e:b6:de: d7:de:85:bd:8b:9d:38:74:19:45:df:8e:f2:a5:35: 9f:7b:31:6b:bb:cf:72:d3:b3:84:33:d3:d2:f5:c4: 82:eb:06:16:fb:76:1d:d5:f4:f9:19:5e:b8:da:57: d4:ed:39:3c:7d:d7:b3:da:4f:7b:ba:74:5f:9d:9e: a8:67:d4:3a:21:14:14:8a:35:66:f2:a2:0e:98:81: 76:cf:64:5d:8e:8c:7d:0b:34:16:69:fc:c6:2f:98: 6e:3b:f6:1d:cc:21:31:06:0d:ce:7b:59:c4:05:a4: ca:ff:65:ae:69:4f:73:e1:ae:1b:f6:af:98:06:44: c5:7f:67:67:eb:9a:a3:c8:ad:f4:00:27:af:ea:9e: c0:14:8f:17:2b:68:db:9b:82:6e:0b:f9:a5:9c:13: 48:dd:66:5f:88:1d:69:b9:34:93:23:5c:13:8d:0a: 11:45:24:fe:b1:9a:b2:3d:23:ff:c8:05:ba:b7:a9: fb:de:b2:f1:c4:00:45:62:d7:a4:94:08:43:0e:fb: 2f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 12:09:9D:13:75:0C:E0:70:4F:5D:87:C2:55:E4:B0:56:E7:03:B2:8D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.247.242.0/23 Signature Algorithm: sha256WithRSAEncryption 95:87:7e:aa:29:5b:ef:50:28:25:78:c1:1e:f8:7b:b8:28:f1: a6:cb:2f:80:c6:20:66:ba:ab:1f:01:2b:0d:47:6e:a4:49:4f: 53:65:cd:90:20:5e:c2:75:32:e4:48:ab:ff:03:ef:a6:d4:88: 4d:d9:5b:b1:e6:d0:c5:4c:17:b7:72:b2:0a:fe:25:e5:32:98: 68:32:7b:a2:db:bd:71:e3:62:c0:66:2f:4f:e9:29:2f:18:60: b0:7f:f2:6a:34:b1:17:79:9a:e2:c6:f0:40:8f:74:17:3f:c0: f7:0f:01:65:10:af:98:0f:9c:7e:99:5d:48:65:7d:2e:a5:28: 36:3a:ff:8d:5b:13:a9:28:73:5b:cd:32:8b:33:f8:50:ac:6e: 67:bd:48:c8:08:ee:47:d2:f8:ec:cd:46:72:cb:5c:87:23:8b: 47:ac:a8:2b:e9:f2:47:23:3b:2a:74:b7:6f:1f:ad:84:ee:cd: c6:45:d9:aa:53:b6:b5:83:f2:dc:87:09:5c:dc:64:63:9c:25: 25:9b:99:f4:c4:ac:ba:c3:27:55:1b:a5:ff:8d:d4:0a:ad:1e: 85:87:d6:19:0b:54:78:f5:17:ad:0c:bd:74:e5:7b:bb:55:78: 48:f4:c5:b6:5a:04:0c:ba:4e:c3:6e:fd:f0:79:68:9a:e1:e2: be:a3:36:62 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUReRyyPsT6H+ApoNIay6w3ewqRgQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzk0NFoX DTI3MDUwMjAyNDQ0NFowMzExMC8GA1UEAxMoMTIwOTlEMTM3NTBDRTA3MDRGNUQ4 N0MyNTVFNEIwNTZFNzAzQjI4RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8HLvu4HqRcWt+VkxSQCqqSmEhXJ59QF6dOmgT6dJdYIn/SE76Xs5PFPyuK HJ9DsRleJA+vqOQSLrbe196FvYudOHQZRd+O8qU1n3sxa7vPctOzhDPT0vXEgusG Fvt2HdX0+RleuNpX1O05PH3Xs9pPe7p0X52eqGfUOiEUFIo1ZvKiDpiBds9kXY6M fQs0Fmn8xi+Ybjv2HcwhMQYNzntZxAWkyv9lrmlPc+GuG/avmAZExX9nZ+uao8it 9AAnr+qewBSPFyto25uCbgv5pZwTSN1mX4gdabk0kyNcE40KEUUk/rGasj0j/8gF urep+96y8cQARWLXpJQIQw77LwkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBIJnRN1DOBwT12HwlXksFbnA7KNMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y3ZWYyOGFmLWE5YWUtNGMzMy04Yzk4LTUxMjA5ZmIyM2RiYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mN2VmMjhh Zi1hOWFlLTRjMzMtOGM5OC01MTIwOWZiMjNkYmEvMC8xMjA5OUQxMzc1MENFMDcw NEY1RDg3QzI1NUU0QjA1NkU3MDNCMjhELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ/fyMA0GCSqGSIb3DQEBCwUAA4IBAQCVh36qKVvvUCgleMEe+Hu4KPGmyy+A xiBmuqsfASsNR26kSU9TZc2QIF7CdTLkSKv/A++m1IhN2Vux5tDFTBe3crIK/iXl MphoMnui271x42LAZi9P6SkvGGCwf/JqNLEXeZrixvBAj3QXP8D3DwFlEK+YD5x+ mV1IZX0upSg2Ov+NWxOpKHNbzTKLM/hQrG5nvUjICO5H0vjszUZyy1yHI4tHrKgr 6fJHIzsqdLdvH62E7s3GRdmqU7a1g/Lchwlc3GRjnCUlm5n0xKy6wydVG6X/jdQK rR6Fh9YZC1R49RetDL105Xu7VXhI9MW2WgQMuk7Dbv3weWia4eK+ozZi -----END CERTIFICATE-----Generated at Tue May 12 22:15:59 2026 by rpki-client