$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1999BB98DD3286D92E84D7C206C749F4D1AE508D.cer File: 1999BB98DD3286D92E84D7C206C749F4D1AE508D.cer (raw, json) Hash identifier: sxSCzp2P2oN21BQ6sBO0USk/F0aZwHZPKl0JHHwyMwY= Subject key identifier: 19:99:BB:98:DD:32:86:D9:2E:84:D7:C2:06:C7:49:F4:D1:AE:50:8D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 09202682ADD15D107DA0DA3A8DDEF8272501B221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:00:11 +0000 Certificate not after: Sun 02 May 2027 02:05:11 +0000 Subordinate resources: IP: 103.165.246.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:20:26:82:ad:d1:5d:10:7d:a0:da:3a:8d:de:f8:27:25:01:b2:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:00:11 2026 GMT Not After : May 2 02:05:11 2027 GMT Subject: CN=1999BB98DD3286D92E84D7C206C749F4D1AE508D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b0:8a:e6:53:fc:8e:c8:07:30:eb:4d:db:ec: 3b:04:6f:32:67:e6:b9:0f:d2:8b:d5:65:85:82:14: d4:0d:e3:8e:95:38:4a:cd:4f:0a:77:db:62:e4:b4: 18:d7:01:ed:aa:00:30:bc:95:b4:56:6c:e2:44:88: 6c:32:7b:a2:6e:d7:05:5e:ad:22:9e:b9:fc:c5:bf: 6e:32:0d:06:31:f1:6b:d0:81:39:61:ad:bc:2c:39: 22:89:64:96:1d:be:8f:be:e2:24:7c:99:a1:44:98: 8b:8f:f0:7c:f9:08:ed:2d:5c:c5:23:25:2a:2d:95: ad:8a:cb:be:8d:9c:54:ec:56:02:36:9f:52:88:13: 10:97:26:12:41:12:70:32:18:bf:fd:78:a0:99:b6: 9f:09:13:fc:d8:e3:7b:d1:bc:83:d2:bc:d9:8f:79: f0:2a:98:56:14:87:75:df:2b:e6:fc:7c:c6:e8:15: 9e:7a:d2:f6:e9:54:29:9d:da:a3:5d:44:75:6b:5b: af:5e:0a:10:7e:a4:7b:ca:f5:2a:51:f5:ee:ac:b8: dd:b9:ee:25:a2:bd:c8:d0:df:7a:72:5e:2b:c6:f1: 33:bf:13:d1:da:a2:13:b5:c0:e6:c4:6f:a8:b2:97: 33:51:da:76:c4:f1:5b:00:48:9f:e2:00:56:63:d5: e8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:99:BB:98:DD:32:86:D9:2E:84:D7:C2:06:C7:49:F4:D1:AE:50:8D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/1999BB98DD3286D92E84D7C206C749F4D1AE508D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.165.246.0/23 Signature Algorithm: sha256WithRSAEncryption 25:3b:43:d8:07:6a:1c:5e:a2:86:44:c1:25:bf:6f:cd:2b:64: 4f:08:d4:47:c1:cf:34:99:24:ee:ae:f3:b7:cc:23:77:40:f9: cc:52:5c:9a:97:d7:f3:a9:92:0a:ef:b2:2e:0d:17:e0:f5:9a: f3:cd:4e:2f:c9:67:08:d5:26:34:1b:4f:b6:37:b7:a1:4f:cd: 31:65:71:8f:49:38:c3:2f:f7:df:08:d2:b4:7b:52:3f:03:8e: 62:e6:2b:35:ce:6a:9d:aa:5f:55:9f:34:ff:56:71:ae:9d:60: 03:47:a6:bc:ca:89:1f:7b:f0:12:d9:6a:bc:a4:ea:29:6a:7d: af:bd:e8:dc:4c:f8:05:be:e7:f7:35:a2:8a:eb:16:7e:71:8b: f7:78:e2:bd:84:9d:c5:07:0a:6c:fc:ed:eb:f4:68:a9:b9:8b: 47:3f:2a:b5:70:e9:53:79:a3:d1:e8:dd:7c:ea:d4:3e:92:dc: 7f:92:f0:5a:da:ec:43:8f:c0:9a:d5:fc:dd:9d:a8:d7:17:7e: 21:96:23:8d:2f:c4:43:8c:4c:07:41:54:89:ee:07:7a:de:27: b0:01:07:41:91:c4:0a:e5:80:1c:16:ee:5e:83:0f:12:47:8c: 38:e1:a3:63:0d:9a:ed:53:e5:bf:38:4c:74:b4:29:0b:6b:96: ce:b0:30:2a -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUCSAmgq3RXRB9oNo6jd74JyUBsiEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDAxMVoX DTI3MDUwMjAyMDUxMVowMzExMC8GA1UEAxMoMTk5OUJCOThERDMyODZEOTJFODRE N0MyMDZDNzQ5RjREMUFFNTA4RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWwiuZT/I7IBzDrTdvsOwRvMmfmuQ/Si9VlhYIU1A3jjpU4Ss1PCnfbYuS0 GNcB7aoAMLyVtFZs4kSIbDJ7om7XBV6tIp65/MW/bjINBjHxa9CBOWGtvCw5Iolk lh2+j77iJHyZoUSYi4/wfPkI7S1cxSMlKi2VrYrLvo2cVOxWAjafUogTEJcmEkES cDIYv/14oJm2nwkT/Njje9G8g9K82Y958CqYVhSHdd8r5vx8xugVnnrS9ulUKZ3a o11EdWtbr14KEH6ke8r1KlH17qy43bnuJaK9yNDfenJeK8bxM78T0dqiE7XA5sRv qLKXM1HadsTxWwBIn+IAVmPV6E0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBmZu5jdMobZLoTXwgbHSfTRrlCNMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q2OGM3YTM0LWJhMzEtNGQyOS04Mzg0LTE4Njc4OWIzODRmMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kNjhjN2Ez NC1iYTMxLTRkMjktODM4NC0xODY3ODliMzg0ZjEvMC8xOTk5QkI5OEREMzI4NkQ5 MkU4NEQ3QzIwNkM3NDlGNEQxQUU1MDhELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6X2MA0GCSqGSIb3DQEBCwUAA4IBAQAlO0PYB2ocXqKGRMElv2/NK2RPCNRH wc80mSTurvO3zCN3QPnMUlyal9fzqZIK77IuDRfg9ZrzzU4vyWcI1SY0G0+2N7eh T80xZXGPSTjDL/ffCNK0e1I/A45i5is1zmqdql9VnzT/VnGunWADR6a8yokfe/AS 2Wq8pOopan2vvejcTPgFvuf3NaKK6xZ+cYv3eOK9hJ3FBwps/O3r9GipuYtHPyq1 cOlTeaPR6N186tQ+ktx/kvBa2uxDj8Ca1fzdnajXF34hliONL8RDjEwHQVSJ7gd6 3iewAQdBkcQK5YAcFu5egw8SR4w44aNjDZrtU+W/OEx0tCkLa5bOsDAq -----END CERTIFICATE-----Generated at Tue May 12 22:16:43 2026 by rpki-client