$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9541F7A7495AA8918A6FE15016CB396EF2733922.cer File: 9541F7A7495AA8918A6FE15016CB396EF2733922.cer (raw, json) Hash identifier: voarSMM7s68O8bD7oNtU2gADcdaDuP0+AcUJN1Jged0= Subject key identifier: 95:41:F7:A7:49:5A:A8:91:8A:6F:E1:50:16:CB:39:6E:F2:73:39:22 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7866768F0B81CC117F428FB4C18F1C7ED576FDAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:14:22 +0000 Certificate not after: Sun 02 May 2027 01:19:22 +0000 Subordinate resources: IP: 43.247.20.0/22 IP: 103.22.240.0/22 IP: 110.5.96.0/20 IP: 202.62.12.0/22 IP: 203.84.152.0/21 IP: 203.174.8.0/21 IP: 2402:1200::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:66:76:8f:0b:81:cc:11:7f:42:8f:b4:c1:8f:1c:7e:d5:76:fd:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:14:22 2026 GMT Not After : May 2 01:19:22 2027 GMT Subject: CN=9541F7A7495AA8918A6FE15016CB396EF2733922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9e:42:a1:07:36:f4:f4:f9:37:0e:b4:ea:df: 33:28:c4:35:e7:40:12:52:ad:6f:07:9d:d7:1c:ea: 06:a1:cd:71:f9:0b:b1:bf:5e:d5:23:59:20:c6:40: 2e:b6:18:55:79:be:ed:09:0f:f0:a8:84:19:e6:54: 19:06:16:51:0c:2c:65:ce:19:37:c4:ab:44:9e:84: 22:3a:de:5e:aa:a9:05:9a:c6:be:4d:4b:18:c4:c8: 42:21:9c:fa:19:f4:cc:98:8e:cb:5c:2f:bf:84:4c: b1:59:f7:2c:8b:23:8e:ba:9e:91:1f:de:2b:ed:c3: be:9f:42:cd:f1:0c:25:0f:14:82:45:02:67:7c:bd: 35:d8:ef:28:f1:5d:80:0e:f0:e8:ce:36:c2:01:9f: b6:b7:d7:f4:cd:75:18:80:01:ab:d0:c8:02:1d:af: f1:c6:7d:74:e7:04:42:b9:8d:85:47:a8:59:bc:f7: e7:21:40:12:49:e9:57:0d:5b:96:79:03:1f:e1:71: 27:ee:17:ea:7e:c2:db:ba:b6:bb:56:47:cd:0f:8d: 9b:5b:a0:dd:41:cd:28:a1:0c:fa:84:13:ca:3a:60: 8f:28:f2:8d:ac:f3:54:86:6a:f4:24:49:4e:88:07: c2:d7:d1:d2:ac:17:d2:05:0a:ff:9a:00:5b:62:86: b0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 95:41:F7:A7:49:5A:A8:91:8A:6F:E1:50:16:CB:39:6E:F2:73:39:22 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/9541F7A7495AA8918A6FE15016CB396EF2733922.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.20.0/22 103.22.240.0/22 110.5.96.0/20 202.62.12.0/22 203.84.152.0/21 203.174.8.0/21 IPv6: 2402:1200::/32 Signature Algorithm: sha256WithRSAEncryption 8d:2b:c7:8e:1a:39:2d:0e:a1:dc:12:67:99:ca:7d:29:3b:82: 86:01:53:e5:75:d3:54:97:54:7d:1b:92:3f:9c:ef:49:7d:cb: 19:5b:c6:28:32:84:cf:ca:15:fb:8c:6b:d8:47:24:c2:6c:76: 31:1e:8d:d5:89:ab:5a:24:e2:b0:fe:1f:be:b5:00:34:20:f4: c7:8b:76:17:77:7c:d1:61:d7:2f:f7:68:a7:67:04:05:57:43: 68:ff:41:23:14:08:86:6c:e2:5e:fd:a0:9e:7b:0f:53:43:8a: fe:97:f1:a5:93:72:41:1a:dc:de:64:ea:9b:c9:ec:e9:13:c4: 47:fa:5e:ba:58:2a:5d:2f:72:38:1a:c2:c2:06:db:23:ce:da: c0:df:cc:cd:63:b8:54:f4:86:b9:9c:e9:1b:a6:6f:a8:96:6c: c2:42:3b:8b:61:c4:ce:fc:c9:02:ed:51:26:e4:8c:f2:f3:f6: 1a:81:b8:e6:50:c6:9c:5b:4e:86:a2:62:e0:de:0d:97:b7:4b: 94:27:25:7c:e8:71:2c:67:db:ee:b4:18:c7:37:4e:b1:49:0c: 5f:fc:4b:38:a4:ed:df:53:83:41:09:10:46:84:e5:26:d3:4a: d3:8a:40:a4:ff:5d:92:2e:77:b7:11:0f:dd:4f:e3:28:6d:19: 36:37:86:4c -----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgIUeGZ2jwuBzBF/Qo+0wY8cftV2/a8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTQyMloX DTI3MDUwMjAxMTkyMlowMzExMC8GA1UEAxMoOTU0MUY3QTc0OTVBQTg5MThBNkZF MTUwMTZDQjM5NkVGMjczMzkyMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALaeQqEHNvT0+TcOtOrfMyjENedAElKtbwed1xzqBqHNcfkLsb9e1SNZIMZA LrYYVXm+7QkP8KiEGeZUGQYWUQwsZc4ZN8SrRJ6EIjreXqqpBZrGvk1LGMTIQiGc +hn0zJiOy1wvv4RMsVn3LIsjjrqekR/eK+3Dvp9CzfEMJQ8UgkUCZ3y9NdjvKPFd gA7w6M42wgGftrfX9M11GIABq9DIAh2v8cZ9dOcEQrmNhUeoWbz35yFAEknpVw1b lnkDH+FxJ+4X6n7C27q2u1ZHzQ+Nm1ug3UHNKKEM+oQTyjpgjyjyjazzVIZq9CRJ TogHwtfR0qwX0gUK/5oAW2KGsM0CAwEAAaOCAuYwggLiMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJVB96dJWqiRim/hUBbLOW7yczkiMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzhjNjY3NzY5LTgwZGMtNDA5My1iNWY3LWRmZTdjNTcyMDQ4Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84YzY2Nzc2 OS04MGRjLTQwOTMtYjVmNy1kZmU3YzU3MjA0ODYvMC85NTQxRjdBNzQ5NUFBODkx OEE2RkUxNTAxNkNCMzk2RUYyNzMzOTIyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAk AwQCK/cUAwQCZxbwAwQEbgVgAwQCyj4MAwQDy1SYAwQDy64IMA0EAgACMAcDBQAk AhIAMA0GCSqGSIb3DQEBCwUAA4IBAQCNK8eOGjktDqHcEmeZyn0pO4KGAVPlddNU l1R9G5I/nO9JfcsZW8YoMoTPyhX7jGvYRyTCbHYxHo3ViataJOKw/h++tQA0IPTH i3YXd3zRYdcv92inZwQFV0No/0EjFAiGbOJe/aCeew9TQ4r+l/Glk3JBGtzeZOqb yezpE8RH+l66WCpdL3I4GsLCBtsjztrA38zNY7hU9Ia5nOkbpm+olmzCQjuLYcTO /MkC7VEm5Izy8/YagbjmUMacW06GomLg3g2Xt0uUJyV86HEsZ9vutBjHN06xSQxf /Es4pO3fU4NBCRBGhOUm00rTikCk/12SLne3EQ/dT+MobRk2N4ZM -----END CERTIFICATE-----Generated at Wed May 13 00:34:28 2026 by rpki-client