$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer File: 9635F0724E9717C889D5604679E31DA89F807CC1.cer (raw, json) Hash identifier: uFq4eX1k/o6+Jp/4XHXPDh7F+4Tqxch62/fzh8amFSs= Subject key identifier: 96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5AF8FB8C2EE2927F77BD9D508DEFEF4EB8836C65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:01:49 +0000 Certificate not after: Sun 02 May 2027 02:06:49 +0000 Subordinate resources: IP: 103.97.198.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:f8:fb:8c:2e:e2:92:7f:77:bd:9d:50:8d:ef:ef:4e:b8:83:6c:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:01:49 2026 GMT Not After : May 2 02:06:49 2027 GMT Subject: CN=9635F0724E9717C889D5604679E31DA89F807CC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b1:64:70:8a:77:80:10:9a:a2:41:f0:27:6b: 33:b6:62:bc:21:56:ce:10:94:78:3b:8a:1e:a8:20: e1:fb:81:e5:4f:42:03:e7:f4:5c:2d:6e:dc:90:fc: ba:f1:94:7c:50:8a:2f:dd:8a:3b:b5:4c:de:cc:87: 4d:c9:97:ef:55:e3:3b:5c:11:7d:e9:59:f8:ca:60: a4:fe:1b:ff:15:bb:13:24:f1:b2:ef:6d:61:67:56: 0c:7c:3b:63:c5:40:0e:6d:31:5f:fb:3a:30:9c:a7: 22:4a:89:92:3f:94:77:d4:82:8c:d5:59:65:11:2e: c9:95:73:7c:55:85:01:22:9b:27:44:d3:4b:ea:a5: 45:44:71:5c:d8:c7:4b:95:50:ea:e0:9d:85:41:b5: 9a:7a:ff:a1:ca:c4:a7:de:20:2e:fc:81:50:eb:71: 58:4b:6e:ab:d1:24:99:c1:25:c5:9f:94:5e:df:85: c7:91:cc:b1:b2:de:80:20:95:e2:3e:57:07:bd:44: 6c:c3:55:37:20:f3:c9:15:8d:fb:fe:03:4b:da:a7: 30:0e:13:e4:18:40:84:3c:29:19:23:f9:b7:e8:97: 72:ef:cd:7b:63:fb:5e:75:d9:f8:cc:5f:c1:97:25: 71:62:b6:08:30:97:c1:64:65:d7:a3:11:67:1a:fa: 51:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.97.198.0/23 Signature Algorithm: sha256WithRSAEncryption 44:da:e6:cb:7f:22:ba:bf:bb:dc:27:31:9a:45:78:7c:68:04: ed:f9:8c:d6:03:99:af:d4:a9:08:24:4b:e7:ea:4f:5f:16:cb: fc:f8:9a:70:59:14:0e:40:10:5c:65:c8:e7:08:3d:b0:63:8b: 66:ba:51:8b:82:f8:7b:d9:cb:25:b0:e7:6d:4e:25:3a:0d:9e: fe:33:ac:45:b6:82:45:34:72:12:09:59:86:a3:75:a9:20:9a: 82:55:f9:e9:25:e3:4e:05:87:b2:62:fd:07:41:c1:1b:17:d9: f7:c0:62:4a:99:f0:ec:03:36:99:6d:7f:57:da:be:a2:a6:f1: 45:97:a1:40:3b:5a:72:1d:63:07:db:06:25:e8:81:07:d2:91: 3d:83:a0:b6:56:57:94:43:39:fa:39:4b:6d:aa:82:ce:8f:10: 82:00:69:97:8d:7d:d1:0e:5c:c3:50:ab:36:43:1a:70:3f:49: 05:ba:8d:32:d6:2f:3a:e4:1a:d5:16:5a:1e:55:f9:f6:25:82: 96:c5:69:54:e0:0e:5f:dc:79:e8:2c:c6:e3:f3:56:b2:e0:53: 93:eb:d5:f5:2f:64:3c:f5:90:04:79:72:49:a0:f9:d1:21:15: 24:62:0f:b1:76:ef:c9:34:3e:16:48:8c:d5:38:1d:b6:37:b9: 00:18:1a:e2 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUWvj7jC7ikn93vZ1Qje/vTriDbGUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDE0OVoX DTI3MDUwMjAyMDY0OVowMzExMC8GA1UEAxMoOTYzNUYwNzI0RTk3MTdDODg5RDU2 MDQ2NzlFMzFEQTg5RjgwN0NDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOmxZHCKd4AQmqJB8CdrM7ZivCFWzhCUeDuKHqgg4fuB5U9CA+f0XC1u3JD8 uvGUfFCKL92KO7VM3syHTcmX71XjO1wRfelZ+MpgpP4b/xW7EyTxsu9tYWdWDHw7 Y8VADm0xX/s6MJynIkqJkj+Ud9SCjNVZZREuyZVzfFWFASKbJ0TTS+qlRURxXNjH S5VQ6uCdhUG1mnr/ocrEp94gLvyBUOtxWEtuq9EkmcElxZ+UXt+Fx5HMsbLegCCV 4j5XB71EbMNVNyDzyRWN+/4DS9qnMA4T5BhAhDwpGSP5t+iXcu/Ne2P7XnXZ+Mxf wZclcWK2CDCXwWRl16MRZxr6UccCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJY18HJOlxfIidVgRnnjHaifgHzBMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q4NDYzYWQ1LTE3NDUtNDQzZS1iMTY1LWQxOTRlZWQ4OWU2Yi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kODQ2M2Fk NS0xNzQ1LTQ0M2UtYjE2NS1kMTk0ZWVkODllNmIvMC85NjM1RjA3MjRFOTcxN0M4 ODlENTYwNDY3OUUzMURBODlGODA3Q0MxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ2HGMA0GCSqGSIb3DQEBCwUAA4IBAQBE2ubLfyK6v7vcJzGaRXh8aATt+YzW A5mv1KkIJEvn6k9fFsv8+JpwWRQOQBBcZcjnCD2wY4tmulGLgvh72cslsOdtTiU6 DZ7+M6xFtoJFNHISCVmGo3WpIJqCVfnpJeNOBYeyYv0HQcEbF9n3wGJKmfDsAzaZ bX9X2r6ipvFFl6FAO1pyHWMH2wYl6IEH0pE9g6C2VleUQzn6OUttqoLOjxCCAGmX jX3RDlzDUKs2QxpwP0kFuo0y1i865BrVFloeVfn2JYKWxWlU4A5f3HnoLMbj81ay 4FOT69X1L2Q89ZAEeXJJoPnRIRUkYg+xdu/JND4WSIzVOB22N7kAGBri -----END CERTIFICATE-----Generated at Tue May 12 22:03:12 2026 by rpki-client