$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/935DD14314C92CCD3B1B65E68751DA3E87B1057C.cer File: 935DD14314C92CCD3B1B65E68751DA3E87B1057C.cer (raw, json) Hash identifier: u+0MNLwvR7di2daU39LTunYhuUmdK+sPAW+XDhv2dZ8= Subject key identifier: 93:5D:D1:43:14:C9:2C:CD:3B:1B:65:E6:87:51:DA:3E:87:B1:05:7C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 79DB1C0064AFC7FE50D13CD1157EDAA8D6942CA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:39:33 +0000 Certificate not after: Sun 02 May 2027 00:44:33 +0000 Subordinate resources: IP: 103.211.143.0/24 IP: 2001:df1:2200::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:db:1c:00:64:af:c7:fe:50:d1:3c:d1:15:7e:da:a8:d6:94:2c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:39:33 2026 GMT Not After : May 2 00:44:33 2027 GMT Subject: CN=935DD14314C92CCD3B1B65E68751DA3E87B1057C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e7:c3:21:66:2e:1e:7f:33:3a:bd:0b:2e:19: df:6c:6a:7d:bd:eb:a7:c2:8a:08:7d:c8:a2:e4:c3: 90:46:8d:5e:85:db:bd:82:6d:d7:cd:0e:a8:cd:40: 25:06:85:0a:3b:6c:35:86:dd:95:74:04:e5:b2:fe: 83:43:6a:1a:f6:e2:a4:aa:5f:48:46:73:b8:05:3b: 35:f9:8e:c4:ec:92:91:0f:2d:f5:c9:46:ea:81:57: 7f:6b:e4:2c:d5:c3:52:75:e0:f1:f7:e0:5d:ad:f9: de:d1:22:51:e4:95:ed:0b:a7:64:9b:d8:7f:dd:8b: 19:c4:ef:81:7d:dd:58:5c:60:47:02:a4:87:bd:35: bd:4e:ff:f3:83:6a:f6:55:9c:66:7e:6b:15:08:79: d2:b5:6c:ad:dd:4d:d4:71:f5:8e:2d:5f:dd:c3:24: bd:6b:10:43:53:83:1e:e9:5d:e0:88:ea:35:fa:4d: ea:63:c3:46:76:48:ee:64:f9:99:c8:d8:ee:f0:a2: 70:91:1e:cc:73:3d:18:fb:db:8d:be:35:8c:ff:da: 1b:93:da:93:cc:a7:b1:c2:c0:30:05:83:50:cc:29: 54:20:0b:65:ee:63:03:a9:38:93:06:ac:96:1b:89: b1:a9:57:6a:88:c6:5d:07:a2:58:41:3d:be:13:b0: af:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 93:5D:D1:43:14:C9:2C:CD:3B:1B:65:E6:87:51:DA:3E:87:B1:05:7C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.211.143.0/24 IPv6: 2001:df1:2200::/48 Signature Algorithm: sha256WithRSAEncryption 61:d3:91:88:0f:43:53:83:24:2c:76:45:86:e5:fe:ae:4f:5b: ae:e0:f9:72:d0:d6:59:ae:73:9b:f7:2a:54:d1:bf:0f:cd:cc: cc:33:fd:9f:9b:8d:c5:53:94:15:d3:a0:de:54:d4:4d:b5:6a: d4:e6:91:d4:2e:c7:fa:11:a8:01:4e:ec:96:b4:d5:5a:8c:ca: 54:d9:5e:1a:ae:32:ea:8f:f6:bd:60:45:e2:12:0f:c2:2d:c9: 5d:0c:29:ee:c7:ff:b0:5d:8e:ce:d9:c0:c7:5b:04:1f:63:5e: 5b:50:53:44:d7:4f:61:92:a1:3a:3a:29:44:30:8b:fb:78:5c: d8:e8:72:60:a4:85:9b:ea:80:9c:a5:25:58:3c:e9:4f:93:41: 88:97:cc:b0:54:94:2f:61:c7:74:89:54:db:5a:a3:c4:32:ca: 61:bf:63:bb:e1:dc:09:c7:49:d9:e9:72:5d:34:43:bb:98:de: 80:dc:a3:ae:f2:e9:0f:ee:a9:f9:4e:8a:45:85:06:ed:20:65: a4:18:d4:71:94:c3:c3:86:88:1d:e3:ba:82:aa:ce:15:27:30: e9:ae:e9:0e:88:12:6d:e0:9a:26:9f:37:be:b6:d0:75:b8:b4: 62:3b:d5:cb:78:8a:82:3b:ae:39:50:ec:5f:9d:89:4f:bf:2b: 90:c7:0a:4e -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUedscAGSvx/5Q0TzRFX7aqNaULKYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzkzM1oX DTI3MDUwMjAwNDQzM1owMzExMC8GA1UEAxMoOTM1REQxNDMxNEM5MkNDRDNCMUI2 NUU2ODc1MURBM0U4N0IxMDU3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ3nwyFmLh5/Mzq9Cy4Z32xqfb3rp8KKCH3IouTDkEaNXoXbvYJt180OqM1A JQaFCjtsNYbdlXQE5bL+g0NqGvbipKpfSEZzuAU7NfmOxOySkQ8t9clG6oFXf2vk LNXDUnXg8ffgXa353tEiUeSV7QunZJvYf92LGcTvgX3dWFxgRwKkh701vU7/84Nq 9lWcZn5rFQh50rVsrd1N1HH1ji1f3cMkvWsQQ1ODHuld4IjqNfpN6mPDRnZI7mT5 mcjY7vCicJEezHM9GPvbjb41jP/aG5Pak8ynscLAMAWDUMwpVCALZe5jA6k4kwas lhuJsalXaojGXQeiWEE9vhOwrxUCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJNd0UMUySzNOxtl5odR2j6HsQV8MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVhM2I2ODgxLWJhMTEtNDMzMC1hMTY0LWI1NWY0MjA4NWI4OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81YTNiNjg4 MS1iYTExLTQzMzAtYTE2NC1iNTVmNDIwODViODkvMC85MzVERDE0MzE0QzkyQ0NE M0IxQjY1RTY4NzUxREEzRTg3QjEwNTdDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ9OPMA8EAgACMAkDBwAgAQ3xIgAwDQYJKoZIhvcNAQELBQADggEBAGHTkYgP Q1ODJCx2RYbl/q5PW67g+XLQ1lmuc5v3KlTRvw/NzMwz/Z+bjcVTlBXToN5U1E21 atTmkdQux/oRqAFO7Ja01VqMylTZXhquMuqP9r1gReISD8ItyV0MKe7H/7Bdjs7Z wMdbBB9jXltQU0TXT2GSoTo6KUQwi/t4XNjocmCkhZvqgJylJVg86U+TQYiXzLBU lC9hx3SJVNtao8QyymG/Y7vh3AnHSdnpcl00Q7uY3oDco67y6Q/uqflOikWFBu0g ZaQY1HGUw8OGiB3juoKqzhUnMOmu6Q6IEm3gmiafN7620HW4tGI71ct4ioI7rjlQ 7F+diU+/K5DHCk4= -----END CERTIFICATE-----Generated at Wed May 13 01:07:07 2026 by rpki-client