$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer File: 95C2241DAF3580597A730032BDD8356019AA8598.cer (raw, json) Hash identifier: O91P28c9/UaquEBUgJ6c1LvFrL0u0Ldk+9JDxyH9zEs= Subject key identifier: 95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7106B5BC4E9882D82B1523F482EFF19607D56AAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:01:07 +0000 Certificate not after: Sun 02 May 2027 01:06:07 +0000 Subordinate resources: IP: 103.96.52.0/23 IP: 2001:df2:f40::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:06:b5:bc:4e:98:82:d8:2b:15:23:f4:82:ef:f1:96:07:d5:6a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:01:07 2026 GMT Not After : May 2 01:06:07 2027 GMT Subject: CN=95C2241DAF3580597A730032BDD8356019AA8598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:71:24:b7:02:0c:8c:aa:98:f7:72:87:19: 0a:04:7d:a0:46:c8:36:4b:70:2f:df:f5:16:0c:56: 5d:02:dd:c1:57:36:f0:b1:4c:d3:e3:dc:1e:03:43: 14:ea:d9:6f:c7:b1:fd:f9:67:2e:84:85:18:32:0f: ff:49:54:b5:06:2e:39:49:a4:39:10:13:78:18:d3: 8e:cd:b3:da:e4:87:de:44:0a:42:49:e5:b0:1a:b1: 58:ca:91:4e:3f:34:6a:b1:78:11:c3:91:86:97:f5: 0e:02:46:9f:4e:e9:fd:65:c6:1f:54:c2:fe:23:2f: 41:f4:b8:46:e3:16:6a:41:3a:c2:ad:06:53:ff:9f: 58:65:60:84:8f:00:aa:f8:bc:0c:2d:29:27:5f:ae: d1:da:16:6b:bf:ab:0f:ff:3e:93:b6:bf:ee:36:b8: 60:15:46:ab:0a:94:c3:63:88:f6:61:8f:7a:68:8b: de:57:fc:57:59:31:47:4c:de:f7:c0:ef:1e:98:5e: 0b:2c:9f:e2:4a:53:45:d7:ac:ac:b2:5e:43:2b:0f: c9:48:05:d9:f1:8e:a0:f0:ab:0b:61:ed:fd:35:a3: 83:ff:81:38:61:32:e5:6d:01:93:99:3e:b8:fd:47: 74:5c:89:3b:52:f6:8d:f9:0b:b4:c5:4c:3a:38:16: 6a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.52.0/23 IPv6: 2001:df2:f40::/48 Signature Algorithm: sha256WithRSAEncryption 9b:db:da:f0:96:ab:7a:30:08:b2:51:43:a8:ed:8d:28:5d:6e: 37:f4:30:ab:90:f5:e5:f6:6d:46:1e:66:01:bb:a0:00:e8:c1: e6:fe:8f:c6:cb:71:06:41:6b:8c:39:8e:73:cf:80:d4:cd:33: eb:07:68:0c:39:b6:c2:34:93:ac:ee:1e:7d:9a:65:3c:79:cf: b2:91:f4:86:0a:e1:4c:5b:33:a4:38:d6:3d:e6:4f:85:38:ed: f9:43:0c:35:8d:60:08:00:e5:7e:09:ca:85:a5:9a:d8:72:dd: 04:ff:7c:da:6c:46:e3:4e:d3:1d:90:32:94:1b:d4:51:8c:88: c4:b2:f8:7f:7a:3b:f3:1d:8d:c5:ea:4d:49:71:80:c1:5f:d4: 06:ad:5e:fc:5c:cd:b5:c1:7f:a2:8f:65:ec:c8:ab:7a:ae:87: 0d:84:62:87:80:40:e3:77:9f:68:a2:75:20:de:42:96:30:5f: 55:19:73:e0:aa:10:fb:a8:fc:6f:c6:bb:a3:68:0b:12:dc:c7: 68:a9:6b:f6:8a:04:63:b0:1d:34:43:6c:e9:7f:9f:17:31:9c: 1a:59:3e:30:a5:1d:a0:3e:73:0d:f4:aa:ee:cc:9f:18:32:35: be:6b:c0:c9:79:5e:78:84:3e:5e:7c:50:4e:b0:e6:d1:ca:6a: 11:69:c3:cf -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUcQa1vE6YgtgrFSP0gu/xlgfVaq8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDEwN1oX DTI3MDUwMjAxMDYwN1owMzExMC8GA1UEAxMoOTVDMjI0MURBRjM1ODA1OTdBNzMw MDMyQkREODM1NjAxOUFBODU5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYscSS3AgyMqpj3cocZCgR9oEbINktwL9/1FgxWXQLdwVc28LFM0+PcHgND FOrZb8ex/flnLoSFGDIP/0lUtQYuOUmkORATeBjTjs2z2uSH3kQKQknlsBqxWMqR Tj80arF4EcORhpf1DgJGn07p/WXGH1TC/iMvQfS4RuMWakE6wq0GU/+fWGVghI8A qvi8DC0pJ1+u0doWa7+rD/8+k7a/7ja4YBVGqwqUw2OI9mGPemiL3lf8V1kxR0ze 98DvHpheCyyf4kpTRdesrLJeQysPyUgF2fGOoPCrC2Ht/TWjg/+BOGEy5W0Bk5k+ uP1HdFyJO1L2jfkLtMVMOjgWassCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJXCJB2vNYBZenMAMr3YNWAZqoWYMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdhMWM0YzFmLTcxNDEtNDdkNi1hN2Y4LWUzNWZmZTExNzQwNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83YTFjNGMx Zi03MTQxLTQ3ZDYtYTdmOC1lMzVmZmUxMTc0MDQvMC85NUMyMjQxREFGMzU4MDU5 N0E3MzAwMzJCREQ4MzU2MDE5QUE4NTk4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ2A0MA8EAgACMAkDBwAgAQ3yD0AwDQYJKoZIhvcNAQELBQADggEBAJvb2vCW q3owCLJRQ6jtjShdbjf0MKuQ9eX2bUYeZgG7oADoweb+j8bLcQZBa4w5jnPPgNTN M+sHaAw5tsI0k6zuHn2aZTx5z7KR9IYK4UxbM6Q41j3mT4U47flDDDWNYAgA5X4J yoWlmthy3QT/fNpsRuNO0x2QMpQb1FGMiMSy+H96O/MdjcXqTUlxgMFf1AatXvxc zbXBf6KPZezIq3quhw2EYoeAQON3n2iidSDeQpYwX1UZc+CqEPuo/G/Gu6NoCxLc x2ipa/aKBGOwHTRDbOl/nxcxnBpZPjClHaA+cw30qu7MnxgyNb5rwMl5XniEPl58 UE6w5tHKahFpw88= -----END CERTIFICATE-----Generated at Wed May 13 00:44:41 2026 by rpki-client