$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer File: 950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer (raw, json) Hash identifier: 0PIoFwVOLW6ECi1moOtuhAc71yVmL1Wk810sZjD0o3g= Subject key identifier: 95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 55E1208C690F518FD6ED8E5C499430ACD7D5CA3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft caRepository: rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:34:34 +0000 Certificate not after: Sun 02 May 2027 01:39:34 +0000 Subordinate resources: IP: 103.162.238.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:e1:20:8c:69:0f:51:8f:d6:ed:8e:5c:49:94:30:ac:d7:d5:ca:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:34:34 2026 GMT Not After : May 2 01:39:34 2027 GMT Subject: CN=950BCAEB519E51C997432A3CD3E5FB2BACA8F751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9f:9f:8b:91:9c:58:f0:49:ac:f6:71:9d:4a: 5c:fa:2c:63:c0:76:dd:98:50:45:78:94:31:3e:99: 09:16:e3:f2:76:90:86:65:61:45:7a:b1:4a:84:16: c2:26:53:31:9a:03:97:90:a2:78:a2:6d:13:4b:a0: 8f:da:2d:76:94:f6:fd:c1:f4:64:55:8f:85:86:98: ac:b2:1b:9e:ed:7c:a2:64:fa:a2:30:cc:1d:16:8d: db:84:0b:4d:46:cf:37:9f:5b:70:4e:09:7d:19:fd: ae:99:12:bc:be:2c:2c:5b:e9:32:14:53:aa:74:9d: 29:11:ba:11:19:43:39:45:30:ac:66:e2:98:60:df: cf:87:e8:21:71:cc:a1:68:3e:21:31:2b:72:0b:96: 13:c5:d1:bb:7d:75:d3:18:d5:81:f6:b1:e3:49:74: 63:96:75:3c:f8:c5:5b:62:cb:8a:81:8a:b0:82:8c: d4:9f:84:4c:d9:c3:52:93:de:27:94:09:c2:6d:be: 0c:4b:36:74:be:8d:5b:e0:27:42:d3:82:ab:93:c5: fb:52:df:80:03:71:e3:13:2a:18:3d:d8:a5:ff:b1: 97:14:69:dd:aa:aa:ee:1b:91:87:cc:19:a5:2e:61: 03:da:90:af:19:97:2f:0f:e4:aa:48:b9:c5:1d:8e: b7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.238.0/23 Signature Algorithm: sha256WithRSAEncryption 59:67:49:0d:8a:0c:09:ae:bb:1f:05:00:1f:1d:eb:ca:4c:f8: b3:95:76:3f:ba:e1:cf:0c:16:d5:c9:ab:93:58:95:33:02:c9: 67:75:e9:d3:80:34:2a:11:84:d1:a6:e8:5d:b6:d8:e6:b9:3e: 59:8e:fe:cf:7d:1d:52:fa:77:eb:b7:12:3e:e5:88:06:f1:29: 6e:81:9d:2b:e1:5c:8b:42:39:5a:f3:bf:08:3e:d7:b8:16:34: c8:89:b3:2f:77:5e:7c:4e:d5:7f:2a:b9:98:84:dd:29:59:e7: bc:04:4e:fa:e0:b8:7e:a1:90:29:5d:2c:6b:a2:04:4e:0c:67: 32:aa:87:35:e3:a3:2c:fa:7a:a4:03:53:86:37:ea:dc:7e:b8: cb:ff:7e:2b:c7:3a:31:b6:e2:01:e4:63:c1:84:59:39:b3:a8: 48:9f:56:aa:6f:79:f2:8f:a6:57:19:13:b8:74:fd:3b:43:99: 33:b7:f7:27:4c:2c:f9:7a:87:c0:49:02:68:d1:f8:5e:c5:a3: 5e:81:9c:f6:e5:69:f4:a7:8a:17:5b:5e:c5:9e:fc:91:c5:98: a6:58:8b:c8:e3:a9:1a:d6:5b:d3:51:80:9b:06:6c:5a:fb:59: fb:ea:51:0c:80:f8:c5:ab:77:6c:58:1f:2f:39:8d:b1:f8:55: 7f:3b:97:5e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUVeEgjGkPUY/W7Y5cSZQwrNfVyj4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzQzNFoX DTI3MDUwMjAxMzkzNFowMzExMC8GA1UEAxMoOTUwQkNBRUI1MTlFNTFDOTk3NDMy QTNDRDNFNUZCMkJBQ0E4Rjc1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANKfn4uRnFjwSaz2cZ1KXPosY8B23ZhQRXiUMT6ZCRbj8naQhmVhRXqxSoQW wiZTMZoDl5CieKJtE0ugj9otdpT2/cH0ZFWPhYaYrLIbnu18omT6ojDMHRaN24QL TUbPN59bcE4JfRn9rpkSvL4sLFvpMhRTqnSdKRG6ERlDOUUwrGbimGDfz4foIXHM oWg+ITErcguWE8XRu3110xjVgfax40l0Y5Z1PPjFW2LLioGKsIKM1J+ETNnDUpPe J5QJwm2+DEs2dL6NW+AnQtOCq5PF+1LfgANx4xMqGD3Ypf+xlxRp3aqq7huRh8wZ pS5hA9qQrxmXLw/kqki5xR2Ot0kCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJULyutRnlHJl0MqPNPl+yusqPdRMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FhZjY5ODRmLWNjZjktNGM0MC1iMTE0LTM4MDM1NmE4Y2Q4OC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hYWY2OTg0 Zi1jY2Y5LTRjNDAtYjExNC0zODAzNTZhOGNkODgvMC85NTBCQ0FFQjUxOUU1MUM5 OTc0MzJBM0NEM0U1RkIyQkFDQThGNzUxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6LuMA0GCSqGSIb3DQEBCwUAA4IBAQBZZ0kNigwJrrsfBQAfHevKTPizlXY/ uuHPDBbVyauTWJUzAslndenTgDQqEYTRpuhdttjmuT5Zjv7PfR1S+nfrtxI+5YgG 8SlugZ0r4VyLQjla878IPte4FjTIibMvd158TtV/KrmYhN0pWee8BE764Lh+oZAp XSxrogRODGcyqoc146Ms+nqkA1OGN+rcfrjL/34rxzoxtuIB5GPBhFk5s6hIn1aq b3nyj6ZXGRO4dP07Q5kzt/cnTCz5eofASQJo0fhexaNegZz25Wn0p4oXW17FnvyR xZimWIvI46ka1lvTUYCbBmxa+1n76lEMgPjFq3dsWB8vOY2x+FV/O5de -----END CERTIFICATE-----Generated at Tue May 12 22:10:13 2026 by rpki-client