$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.cer File: 9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.cer (raw, json) Hash identifier: CNg9DTJR2pm6dKqtiWaUgeSyiXPEpJjtN+KIeNcp5UQ= Subject key identifier: 91:76:CB:6B:BE:53:90:8A:B2:1A:EF:FC:4F:8F:15:1D:9A:74:7E:75 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5B20FD64C0FA6FF12BD741BD70C79D0764AD790D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:04:56 +0000 Certificate not after: Sun 02 May 2027 01:09:56 +0000 Subordinate resources: IP: 103.253.0.0/22 IP: 116.0.0.0/21 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:20:fd:64:c0:fa:6f:f1:2b:d7:41:bd:70:c7:9d:07:64:ad:79:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:04:56 2026 GMT Not After : May 2 01:09:56 2027 GMT Subject: CN=9176CB6BBE53908AB21AEFFC4F8F151D9A747E75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f4:68:8b:cc:23:29:aa:b8:48:ee:55:3e:dd: f4:fe:7a:e2:f0:15:98:61:0e:d8:3d:c1:b8:0e:82: 30:02:e4:b4:0c:27:da:e5:53:3b:7b:16:02:66:c2: db:fd:5f:73:13:2e:a1:f7:1c:49:98:ff:72:ae:49: 84:1d:6d:bc:47:cf:8f:53:9b:8e:c3:58:c5:fe:ad: b4:b2:3a:71:d4:21:a4:fe:33:4a:d8:70:0d:a0:d9: e7:1a:0a:92:6a:4d:8c:eb:39:ec:32:3e:de:2f:21: 08:9b:b7:bc:df:47:ce:88:e4:7d:f3:25:de:8d:7b: 4a:27:33:97:fa:f6:f4:c1:c2:07:0d:86:08:52:1e: 42:e0:da:84:8e:3c:4e:2c:8f:a9:c9:94:2c:73:41: 16:06:82:c3:6b:1d:18:75:81:3f:d8:2c:53:85:d9: dc:17:3b:00:ce:df:cf:f2:25:a1:6a:65:44:a8:b5: b0:32:16:c8:ac:8a:5c:97:11:24:1a:f7:d4:29:27: d2:a4:df:ec:b2:c0:c9:63:20:c3:46:22:07:b1:48: 2a:a1:9a:66:f1:cc:54:a3:62:48:43:d0:ef:84:85: 4c:dc:a5:91:2d:f9:c8:29:48:c8:2d:c2:0d:93:4a: 07:76:3a:d6:ac:cb:75:e2:26:6d:db:25:6e:6d:04: ef:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 91:76:CB:6B:BE:53:90:8A:B2:1A:EF:FC:4F:8F:15:1D:9A:74:7E:75 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.253.0.0/22 116.0.0.0/21 Signature Algorithm: sha256WithRSAEncryption 21:78:42:cb:db:58:fc:99:cc:d6:a3:49:91:a4:09:ee:bd:4f: 6d:2c:43:1d:8d:b9:e9:42:40:76:c8:bd:b6:ab:ef:7e:25:dd: f9:2e:35:e3:ca:93:23:6f:80:67:c4:28:91:5b:fa:a9:32:a1: d8:b0:fb:d5:71:f1:90:b1:70:7a:e9:61:5c:78:51:bf:51:80: ec:33:86:8e:12:63:38:ab:c3:23:00:ca:38:c5:f0:bd:56:cb: 0f:b2:7c:f2:d0:d3:f9:25:3f:cf:da:0f:58:68:fd:28:4b:2e: 3d:58:3d:49:f9:30:6b:af:3c:d2:f8:31:67:f1:ec:2d:7e:cd: 06:48:06:ea:f1:8d:c0:ec:50:f3:ab:0b:15:f3:10:6a:6d:69: 10:98:94:4a:b6:91:aa:c0:b4:d8:ef:1a:10:8b:7c:48:a3:24: 50:a8:38:45:ec:5d:0d:c9:ec:d8:fb:85:07:8b:8d:ea:13:3a: ab:2a:61:5a:e8:4b:cb:4a:da:84:d2:99:b1:4f:42:6a:4f:54: 9c:26:55:59:aa:95:c6:32:14:6c:49:14:6a:f3:5a:51:de:2d: 40:c3:93:45:2f:4d:3e:4a:7a:ba:10:88:02:49:a2:01:7f:0d: c5:9e:cc:34:fa:1f:b4:3c:e6:e3:b0:ee:53:8a:95:fd:53:82: e9:1d:e9:69 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUWyD9ZMD6b/Er10G9cMedB2SteQ0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDQ1NloX DTI3MDUwMjAxMDk1NlowMzExMC8GA1UEAxMoOTE3NkNCNkJCRTUzOTA4QUIyMUFF RkZDNEY4RjE1MUQ5QTc0N0U3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALn0aIvMIymquEjuVT7d9P564vAVmGEO2D3BuA6CMALktAwn2uVTO3sWAmbC 2/1fcxMuofccSZj/cq5JhB1tvEfPj1ObjsNYxf6ttLI6cdQhpP4zSthwDaDZ5xoK kmpNjOs57DI+3i8hCJu3vN9HzojkffMl3o17Siczl/r29MHCBw2GCFIeQuDahI48 TiyPqcmULHNBFgaCw2sdGHWBP9gsU4XZ3Bc7AM7fz/IloWplRKi1sDIWyKyKXJcR JBr31Ckn0qTf7LLAyWMgw0YiB7FIKqGaZvHMVKNiSEPQ74SFTNylkS35yClIyC3C DZNKB3Y61qzLdeImbdslbm0E788CAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJF2y2u+U5CKshrv/E+PFR2adH51MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdlOGNkOTdlLTU2ZjUtNGNhNS1hODVjLTU1YTMyM2YwNjA4Yy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83ZThjZDk3 ZS01NmY1LTRjYTUtYTg1Yy01NWEzMjNmMDYwOGMvMC85MTc2Q0I2QkJFNTM5MDhB QjIxQUVGRkM0RjhGMTUxRDlBNzQ3RTc1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQCZ/0AAwQDdAAAMA0GCSqGSIb3DQEBCwUAA4IBAQAheELL21j8mczWo0mRpAnu vU9tLEMdjbnpQkB2yL22q+9+Jd35LjXjypMjb4BnxCiRW/qpMqHYsPvVcfGQsXB6 6WFceFG/UYDsM4aOEmM4q8MjAMo4xfC9VssPsnzy0NP5JT/P2g9YaP0oSy49WD1J +TBrrzzS+DFn8ewtfs0GSAbq8Y3A7FDzqwsV8xBqbWkQmJRKtpGqwLTY7xoQi3xI oyRQqDhF7F0NyezY+4UHi43qEzqrKmFa6EvLStqE0pmxT0JqT1ScJlVZqpXGMhRs SRRq81pR3i1Aw5NFL00+Snq6EIgCSaIBfw3Fnsw0+h+0PObjsO5TipX9U4LpHelp -----END CERTIFICATE-----Generated at Tue May 12 22:52:55 2026 by rpki-client