$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/916E287AE269B0C98717609DCBC5E6BE1BC00871.cer File: 916E287AE269B0C98717609DCBC5E6BE1BC00871.cer (raw, json) Hash identifier: oGRE1VShM0FwcroxsjYHDNn57egYdruuVjJEg/RpJT4= Subject key identifier: 91:6E:28:7A:E2:69:B0:C9:87:17:60:9D:CB:C5:E6:BE:1B:C0:08:71 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 405A24EAAD157105408B12CC5AE88CAAEB4ACCD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/916E287AE269B0C98717609DCBC5E6BE1BC00871.mft caRepository: rsync://rpki-rsync.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:32:49 +0000 Certificate not after: Sun 02 May 2027 00:37:49 +0000 Subordinate resources: IP: 103.165.148.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:5a:24:ea:ad:15:71:05:40:8b:12:cc:5a:e8:8c:aa:eb:4a:cc:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:32:49 2026 GMT Not After : May 2 00:37:49 2027 GMT Subject: CN=916E287AE269B0C98717609DCBC5E6BE1BC00871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:be:66:5a:96:8a:0f:5b:f8:f0:bf:f1:12:97: ca:38:1b:86:cf:a8:f6:a5:1e:09:06:20:7f:7d:12: 59:0f:8a:fc:61:d5:cd:f5:fa:9f:7b:90:55:69:4b: 00:cb:c7:25:35:52:b4:9b:a3:4d:f2:c0:85:ea:d0: 9d:e6:6c:31:f0:15:57:cc:2f:f3:36:40:d0:f7:a4: df:ff:b9:01:d5:5b:26:6a:9a:55:d8:30:d2:86:d8: 6a:7e:2b:38:5e:ea:c6:e7:d1:5f:e8:6d:0c:23:f7: 19:a3:d4:d1:f3:6d:24:76:b7:46:2b:77:f5:84:d8: f1:64:64:cd:be:1d:b9:67:ed:87:8d:54:68:f3:2f: 99:35:e7:a8:30:3b:80:6a:c4:07:2d:c9:1d:ec:40: e0:d2:df:e8:45:74:fc:05:d4:16:5e:98:53:54:70: f2:91:3c:40:7e:1d:ea:32:ba:05:26:42:d5:4e:c6: 0e:6f:76:10:84:f0:a0:2b:28:be:0d:3e:4c:95:c1: 47:3b:eb:42:65:05:11:3f:e0:62:71:5d:89:06:be: 0e:7e:ff:8f:2f:1e:f9:ea:01:cc:38:8a:81:38:d6: bb:a7:40:fd:22:74:72:ca:7f:c2:5f:26:82:a7:49: 92:a5:bd:c7:46:0b:30:18:eb:de:72:9f:05:cf:b9: 30:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 91:6E:28:7A:E2:69:B0:C9:87:17:60:9D:CB:C5:E6:BE:1B:C0:08:71 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/916E287AE269B0C98717609DCBC5E6BE1BC00871.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.165.148.0/23 Signature Algorithm: sha256WithRSAEncryption 85:c4:ad:75:a1:f5:d2:52:ba:01:f7:00:2e:2b:94:84:cc:f2: f5:db:b9:92:bc:cb:f7:d3:86:4f:8c:22:97:d4:ad:6b:26:3a: 4c:15:7e:f6:db:d9:7f:f5:01:1b:fc:04:1c:ad:7b:73:5c:06: 2e:1e:91:af:e4:55:48:80:e6:b8:ff:fe:d7:3a:69:85:57:ce: c2:3f:53:b1:30:5a:88:fc:5c:5e:aa:f7:96:d0:10:1c:dc:af: b1:eb:6d:53:f8:f9:3f:c0:2e:b4:7c:c7:79:08:b2:53:65:1b: 7f:4e:83:6d:26:c2:71:7c:80:fd:8c:5a:e1:1a:3b:76:bd:2d: c1:e3:6b:64:75:c6:30:97:a2:9e:2a:79:55:63:7d:ad:24:0b: fc:94:ef:26:97:ef:2b:15:44:f8:84:a5:d8:f1:07:95:e5:09: 60:a9:11:f7:5b:36:1c:c0:42:9c:4f:10:83:52:f5:f8:2b:71: 41:7c:b0:44:b5:08:a3:01:00:fd:90:b0:40:fe:78:c4:c2:96: 74:7c:76:9e:95:22:9d:2a:b0:5b:96:3a:22:7d:4d:70:af:8b: c8:5c:ad:ad:7f:9a:c9:02:68:d2:b8:4b:da:1b:27:a6:51:fa: ed:fb:c9:6e:06:7b:53:be:37:1f:e2:d7:a4:02:b9:e5:cc:72: 6a:b0:12:03 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUQFok6q0VcQVAixLMWuiMqutKzNIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzI0OVoX DTI3MDUwMjAwMzc0OVowMzExMC8GA1UEAxMoOTE2RTI4N0FFMjY5QjBDOTg3MTc2 MDlEQ0JDNUU2QkUxQkMwMDg3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMq+ZlqWig9b+PC/8RKXyjgbhs+o9qUeCQYgf30SWQ+K/GHVzfX6n3uQVWlL AMvHJTVStJujTfLAherQneZsMfAVV8wv8zZA0Pek3/+5AdVbJmqaVdgw0obYan4r OF7qxufRX+htDCP3GaPU0fNtJHa3Rit39YTY8WRkzb4duWfth41UaPMvmTXnqDA7 gGrEBy3JHexA4NLf6EV0/AXUFl6YU1Rw8pE8QH4d6jK6BSZC1U7GDm92EITwoCso vg0+TJXBRzvrQmUFET/gYnFdiQa+Dn7/jy8e+eoBzDiKgTjWu6dA/SJ0csp/wl8m gqdJkqW9x0YLMBjr3nKfBc+5MMECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJFuKHriabDJhxdgncvF5r4bwAhxMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzUwYzc5N2I1LTczMGEtNDg0MS1hNzU2LTgzM2UyNmIxY2EwYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81MGM3OTdi NS03MzBhLTQ4NDEtYTc1Ni04MzNlMjZiMWNhMGMvMC85MTZFMjg3QUUyNjlCMEM5 ODcxNzYwOURDQkM1RTZCRTFCQzAwODcxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6WUMA0GCSqGSIb3DQEBCwUAA4IBAQCFxK11ofXSUroB9wAuK5SEzPL127mS vMv304ZPjCKX1K1rJjpMFX7229l/9QEb/AQcrXtzXAYuHpGv5FVIgOa4//7XOmmF V87CP1OxMFqI/FxeqveW0BAc3K+x621T+Pk/wC60fMd5CLJTZRt/ToNtJsJxfID9 jFrhGjt2vS3B42tkdcYwl6KeKnlVY32tJAv8lO8ml+8rFUT4hKXY8QeV5QlgqRH3 WzYcwEKcTxCDUvX4K3FBfLBEtQijAQD9kLBA/njEwpZ0fHaelSKdKrBbljoifU1w r4vIXK2tf5rJAmjSuEvaGyemUfrt+8luBntTvjcf4tekArnlzHJqsBID -----END CERTIFICATE-----Generated at Tue May 12 22:32:40 2026 by rpki-client