$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/951C84D9FEAF87E2196BBF71DC0326053CC04478.cer File: 951C84D9FEAF87E2196BBF71DC0326053CC04478.cer (raw, json) Hash identifier: eD0URmuDEuo/w1DzIPEF+LgQrA6dsDQSVcFEvo5CVsw= Subject key identifier: 95:1C:84:D9:FE:AF:87:E2:19:6B:BF:71:DC:03:26:05:3C:C0:44:78 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0BA62BB960B540A0DB9035614378F5E66EEEBB31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:18:57 +0000 Certificate not after: Sun 02 May 2027 00:23:57 +0000 Subordinate resources: IP: 103.166.234.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:a6:2b:b9:60:b5:40:a0:db:90:35:61:43:78:f5:e6:6e:ee:bb:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:18:57 2026 GMT Not After : May 2 00:23:57 2027 GMT Subject: CN=951C84D9FEAF87E2196BBF71DC0326053CC04478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a9:7b:da:ce:66:09:ee:bf:2b:24:35:0d:bd: 74:20:5d:d8:5d:28:e4:5f:54:b0:c2:4f:35:c4:c3: 3c:db:8b:f2:94:f9:0f:c2:a3:6d:f8:52:83:39:2a: 8d:c0:fa:e2:75:2e:38:2e:4a:5d:59:46:32:de:7e: 82:bf:b4:e3:78:5d:50:40:c9:13:12:8f:ba:b8:6d: 2e:6a:34:b9:0f:f0:79:a0:ea:cb:d5:4f:61:23:18: 1f:9f:c5:61:f3:7e:59:b2:52:1b:71:e3:ee:52:72: 8c:39:62:1c:79:ad:dc:19:bf:29:0a:cf:12:e5:d5: 6a:20:f2:a6:28:24:eb:64:77:f1:4a:f9:5e:ca:fe: b4:f6:e6:cd:cd:2d:86:73:2e:56:c7:db:c7:45:12: 37:ea:67:42:46:dd:40:a5:c4:ee:79:0f:4f:e5:3c: d8:68:90:7c:0a:6f:77:4f:2e:53:45:c9:01:21:04: 0c:bd:df:b7:f8:9f:01:28:35:a0:2c:44:88:09:b4: d9:9e:5e:61:cd:b4:9e:58:c9:b5:e8:83:9b:fa:ea: d5:0f:9b:b7:b9:29:17:60:4c:23:d8:67:a9:52:9e: 3a:d1:e7:3a:02:84:40:27:96:ed:19:79:11:89:cb: 70:bf:f8:c3:93:a8:51:70:4c:3e:c2:80:6f:0a:f4: d2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 95:1C:84:D9:FE:AF:87:E2:19:6B:BF:71:DC:03:26:05:3C:C0:44:78 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.234.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:c5:b2:c3:bb:48:bf:f4:fb:39:cb:85:ac:55:b2:12:2b:91: aa:49:50:a1:0a:e8:3e:8e:37:f5:86:0c:0c:2f:4d:57:cf:12: 62:80:dc:1c:5a:b7:13:2c:59:ee:d2:6c:34:ff:6a:45:5d:a2: 7f:81:64:e3:2c:d5:17:94:ab:eb:e3:16:b0:2d:bc:03:81:51: 41:9f:f3:b3:52:2c:cb:2a:24:96:52:fd:a1:df:54:e5:27:ab: 0e:98:7d:64:91:68:39:70:7d:f2:66:e8:26:65:32:f0:21:fa: 60:4f:23:a2:54:f3:90:71:6b:c3:b6:a4:3c:47:2b:fa:49:74: 3a:b0:e2:ae:ae:a4:11:e9:71:b6:fa:25:06:47:68:d5:62:04: b3:03:9d:1c:4f:c5:73:5e:9e:1d:c4:81:a7:2c:d6:a5:fe:10: 0a:10:1c:3d:89:41:7a:d4:13:52:9a:9d:43:31:e0:63:a9:01: 79:bc:5b:13:bd:3f:93:35:13:8c:3a:15:16:55:2b:31:1d:98: 2d:01:4b:20:1c:5b:00:56:d0:87:d5:6f:db:43:9e:a2:b2:47: 46:41:06:33:b4:71:f8:ff:5c:5f:c1:d4:2b:f6:5f:fb:32:8b: a5:83:e1:5f:f6:23:71:2e:9f:59:88:1e:24:d9:94:40:5f:25: 0a:2d:3f:1d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUC6YruWC1QKDbkDVhQ3j15m7uuzEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTg1N1oX DTI3MDUwMjAwMjM1N1owMzExMC8GA1UEAxMoOTUxQzg0RDlGRUFGODdFMjE5NkJC RjcxREMwMzI2MDUzQ0MwNDQ3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJape9rOZgnuvyskNQ29dCBd2F0o5F9UsMJPNcTDPNuL8pT5D8KjbfhSgzkq jcD64nUuOC5KXVlGMt5+gr+043hdUEDJExKPurhtLmo0uQ/weaDqy9VPYSMYH5/F YfN+WbJSG3Hj7lJyjDliHHmt3Bm/KQrPEuXVaiDypigk62R38Ur5Xsr+tPbmzc0t hnMuVsfbx0USN+pnQkbdQKXE7nkPT+U82GiQfApvd08uU0XJASEEDL3ft/ifASg1 oCxEiAm02Z5eYc20nljJteiDm/rq1Q+bt7kpF2BMI9hnqVKeOtHnOgKEQCeW7Rl5 EYnLcL/4w5OoUXBMPsKAbwr00k8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJUchNn+r4fiGWu/cdwDJgU8wER4MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzNhZWY3ODZiLTYyMjYtNDRhZi04NTJkLTFmYjA0NWM0ZGViMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zYWVmNzg2 Yi02MjI2LTQ0YWYtODUyZC0xZmIwNDVjNGRlYjMvMC85NTFDODREOUZFQUY4N0Uy MTk2QkJGNzFEQzAzMjYwNTNDQzA0NDc4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6bqMA0GCSqGSIb3DQEBCwUAA4IBAQCdxbLDu0i/9Ps5y4WsVbISK5GqSVCh Cug+jjf1hgwML01XzxJigNwcWrcTLFnu0mw0/2pFXaJ/gWTjLNUXlKvr4xawLbwD gVFBn/OzUizLKiSWUv2h31TlJ6sOmH1kkWg5cH3yZugmZTLwIfpgTyOiVPOQcWvD tqQ8Ryv6SXQ6sOKurqQR6XG2+iUGR2jVYgSzA50cT8VzXp4dxIGnLNal/hAKEBw9 iUF61BNSmp1DMeBjqQF5vFsTvT+TNROMOhUWVSsxHZgtAUsgHFsAVtCH1W/bQ56i skdGQQYztHH4/1xfwdQr9l/7Moulg+Ff9iNxLp9ZiB4k2ZRAXyUKLT8d -----END CERTIFICATE-----Generated at Tue May 12 22:10:32 2026 by rpki-client