$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer File: 20960DA2C8391ACA821C6A472677485F6C49F24B.cer (raw, json) Hash identifier: KTasRahl8eLd+qIQsF38YSiEeTHx6bkdZASnJGUNyWQ= Subject key identifier: 20:96:0D:A2:C8:39:1A:CA:82:1C:6A:47:26:77:48:5F:6C:49:F2:4B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6A29B1E0C653B77AF36AAB7EAC704E5EF75FF5B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:03:19 +0000 Certificate not after: Sun 02 May 2027 01:08:19 +0000 Subordinate resources: IP: 103.163.230.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:29:b1:e0:c6:53:b7:7a:f3:6a:ab:7e:ac:70:4e:5e:f7:5f:f5:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:03:19 2026 GMT Not After : May 2 01:08:19 2027 GMT Subject: CN=20960DA2C8391ACA821C6A472677485F6C49F24B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:de:92:1f:65:05:75:a6:b2:96:19:bf:32:a7: cd:bb:72:d2:32:e7:ac:19:3e:c4:3c:90:45:44:5c: d9:f7:38:69:37:28:9d:02:a4:e4:a5:6e:eb:e7:e0: 76:f8:d1:81:12:eb:d4:07:63:8b:3f:bd:af:0a:5a: 7f:9d:d2:78:42:b3:05:5f:59:6b:ff:40:7c:05:83: a3:d3:2e:09:ce:34:bf:1a:94:31:1f:f6:6a:19:9a: d4:50:8c:f2:92:7a:05:fa:18:95:be:fe:5e:88:f8: 28:d9:fc:f2:e7:69:3d:b5:2f:3c:f0:e4:74:99:83: ec:ff:36:73:0a:da:0a:a7:bc:41:c4:10:8d:9c:6d: c0:7f:b2:96:6b:d3:8b:37:40:b0:e7:06:b0:f8:60: b3:1f:ea:14:3d:06:3c:35:67:50:e5:be:92:a2:ad: 26:d5:b3:6d:4b:d9:fd:74:db:b8:c3:e7:10:56:3f: b3:a4:ae:2a:1d:5f:8e:d8:d0:41:28:99:4f:fc:d1: 71:eb:5f:d5:17:3b:e4:d6:77:e2:8b:77:ee:34:e1: fb:39:cd:09:1a:44:53:b7:a0:b1:5b:25:6f:84:0c: f3:db:e4:6d:10:41:03:22:17:5e:e4:7b:7d:bf:55: 4a:1b:a3:d5:23:a2:c2:c7:45:80:65:5b:94:59:57: 83:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:96:0D:A2:C8:39:1A:CA:82:1C:6A:47:26:77:48:5F:6C:49:F2:4B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.163.230.0/23 Signature Algorithm: sha256WithRSAEncryption 22:e3:cd:ab:35:97:6a:be:fe:6a:c8:ce:6a:6b:7e:0f:73:ef: 3e:2f:aa:ef:bf:e6:b0:c1:01:e6:3f:2f:95:1a:43:51:65:46: 5a:4a:30:ac:1a:c6:76:61:7c:4d:19:89:f1:f7:fb:74:c1:c6: 35:cd:4b:0e:8d:84:76:5f:06:6e:7e:1a:9b:d1:6d:07:43:72: 14:3a:82:9e:50:cb:1d:08:1c:ee:f1:1e:a0:81:7b:b2:4d:8c: 50:8b:87:e4:5c:63:f1:f4:c4:d7:bf:6f:6a:82:4e:06:ed:50: 91:28:e9:01:eb:e3:8f:46:8f:8c:12:ab:0a:b3:36:6e:37:ab: 99:ea:97:ff:2f:34:5f:cf:f3:65:ca:32:f3:fa:bc:06:f5:99: 70:e6:8a:2f:63:6d:7c:6f:15:ce:44:76:57:ac:20:c9:8f:66: f4:db:83:f2:30:e7:71:74:fb:bf:48:ae:9d:f1:80:be:29:af: 79:80:46:f3:70:4d:f1:10:00:5c:c5:92:7f:12:ec:15:26:af: 4c:8c:44:4a:84:f3:4f:6e:a2:31:2f:70:4d:dc:49:fe:8f:f6: 47:05:6a:8f:82:c9:9f:b7:6c:cd:a3:1b:c6:e8:53:59:f9:88: 16:99:c6:61:bc:78:3e:fa:88:6c:97:60:55:be:95:44:6f:aa: 39:68:c8:66 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUaimx4MZTt3rzaqt+rHBOXvdf9bAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDMxOVoX DTI3MDUwMjAxMDgxOVowMzExMC8GA1UEAxMoMjA5NjBEQTJDODM5MUFDQTgyMUM2 QTQ3MjY3NzQ4NUY2QzQ5RjI0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALTekh9lBXWmspYZvzKnzbty0jLnrBk+xDyQRURc2fc4aTconQKk5KVu6+fg dvjRgRLr1Adjiz+9rwpaf53SeEKzBV9Za/9AfAWDo9MuCc40vxqUMR/2ahma1FCM 8pJ6BfoYlb7+Xoj4KNn88udpPbUvPPDkdJmD7P82cwraCqe8QcQQjZxtwH+ylmvT izdAsOcGsPhgsx/qFD0GPDVnUOW+kqKtJtWzbUvZ/XTbuMPnEFY/s6SuKh1fjtjQ QSiZT/zRcetf1Rc75NZ34ot37jTh+znNCRpEU7egsVslb4QM89vkbRBBAyIXXuR7 fb9VShuj1SOiwsdFgGVblFlXg2sCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCCWDaLIORrKghxqRyZ3SF9sSfJLMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdkMDM1YjNiLWU2YzUtNDdmOC05OWI0LTFjYjAzMjZlZGFlNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83ZDAzNWIz Yi1lNmM1LTQ3ZjgtOTliNC0xY2IwMzI2ZWRhZTUvMC8yMDk2MERBMkM4MzkxQUNB ODIxQzZBNDcyNjc3NDg1RjZDNDlGMjRCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6PmMA0GCSqGSIb3DQEBCwUAA4IBAQAi482rNZdqvv5qyM5qa34Pc+8+L6rv v+awwQHmPy+VGkNRZUZaSjCsGsZ2YXxNGYnx9/t0wcY1zUsOjYR2XwZufhqb0W0H Q3IUOoKeUMsdCBzu8R6ggXuyTYxQi4fkXGPx9MTXv29qgk4G7VCRKOkB6+OPRo+M EqsKszZuN6uZ6pf/LzRfz/NlyjLz+rwG9Zlw5oovY218bxXORHZXrCDJj2b024Py MOdxdPu/SK6d8YC+Ka95gEbzcE3xEABcxZJ/EuwVJq9MjERKhPNPbqIxL3BN3En+ j/ZHBWqPgsmft2zNoxvG6FNZ+YgWmcZhvHg++ohsl2BVvpVEb6o5aMhm -----END CERTIFICATE-----Generated at Tue May 12 22:02:33 2026 by rpki-client