$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/96A5BEF01619313B13000152FF7D9849B080E6AD.cer File: 96A5BEF01619313B13000152FF7D9849B080E6AD.cer (raw, json) Hash identifier: wrB6oKZnoA97Wo///qKnImo1kZctk6DqE0nqmU8x6gs= Subject key identifier: 96:A5:BE:F0:16:19:31:3B:13:00:01:52:FF:7D:98:49:B0:80:E6:AD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 108311559780545DA2A1ABCCBF8D4F890BC3DD66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:00:24 +0000 Certificate not after: Sun 02 May 2027 02:05:24 +0000 Subordinate resources: IP: 103.169.188.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:83:11:55:97:80:54:5d:a2:a1:ab:cc:bf:8d:4f:89:0b:c3:dd:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:00:24 2026 GMT Not After : May 2 02:05:24 2027 GMT Subject: CN=96A5BEF01619313B13000152FF7D9849B080E6AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ee:33:b0:cd:7a:a9:e5:84:b3:03:f5:e1:7f: 4b:1a:89:69:1f:3e:8c:f4:85:5a:79:2a:32:2d:d4: 4f:60:b2:14:80:da:01:f3:57:ed:7a:41:c0:8e:f1: 8c:e2:c6:38:ca:81:04:5e:38:75:eb:2e:32:6c:ed: b0:37:1a:35:0c:9b:34:f6:bc:09:49:48:03:93:2b: d2:25:a4:da:b8:ed:d3:d5:62:0d:75:8e:f2:44:95: 25:7c:2f:74:c7:a1:63:5d:b3:82:37:03:05:83:a1: 42:c8:a9:87:90:19:e1:46:d5:e5:a2:1e:64:7f:c6: d8:d8:0e:a1:65:97:4b:31:74:ea:7b:a7:14:b6:86: f6:5d:30:e0:4e:74:e9:4c:5a:f0:c5:42:a7:db:ff: d9:51:28:5f:98:85:1b:84:9f:8b:bb:6c:d2:a3:37: c9:c4:58:11:6b:1a:d7:f0:6b:a2:0b:c7:7c:45:24: 1c:4e:63:7e:38:58:f8:04:7c:f6:65:08:cd:c2:40: a7:ab:26:9c:15:de:fe:95:00:24:89:f5:e4:52:95: 0f:19:3f:1b:b1:55:f3:5b:95:b6:77:1a:1e:d2:36: 48:f1:02:5d:60:44:b7:2b:90:56:a6:c3:dd:04:6e: ba:63:d1:36:e1:37:0e:79:95:d5:84:b5:be:8e:5b: ff:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 96:A5:BE:F0:16:19:31:3B:13:00:01:52:FF:7D:98:49:B0:80:E6:AD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/96A5BEF01619313B13000152FF7D9849B080E6AD.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.188.0/23 Signature Algorithm: sha256WithRSAEncryption 74:c2:52:97:ee:d5:4f:4f:c3:73:6d:e4:e7:26:03:1d:29:19: fc:04:8a:c3:99:0e:9c:b5:92:f8:3b:7d:a5:7d:2f:bd:15:04: 9e:55:78:30:79:ae:0b:6e:37:10:09:ac:9e:93:50:5e:ad:bc: 45:31:8d:f4:d9:3c:1d:dc:0b:d4:37:a4:75:b7:24:63:2d:d3: d9:cf:e8:4c:a7:83:b4:08:62:cd:fe:fd:54:a3:e9:b9:fc:1a: 5d:9d:30:82:02:de:15:e0:25:85:d0:9e:20:91:f3:38:c9:48: b9:7f:cd:24:85:99:24:4b:18:59:cd:78:4a:aa:9d:f7:38:ef: 4c:d6:34:1e:24:45:f4:f4:b3:04:08:39:13:60:98:24:0c:b1: ed:47:95:e5:c4:b6:d6:23:4c:97:fc:5b:3c:b4:cc:f0:c8:8e: af:7d:a3:e2:ba:56:a4:67:2d:71:24:09:b2:12:40:56:d4:3e: 23:10:9b:53:67:31:80:72:57:0a:89:1b:f5:74:74:6b:83:77: 4f:1b:39:9b:d1:3c:ce:cb:0d:a6:b5:66:55:be:c9:5b:32:cd: 23:56:39:d0:50:ad:44:02:e6:f4:0d:95:b7:2a:94:fe:cf:e1: e5:37:6e:c1:ed:93:ef:0a:5c:13:6a:ca:2f:84:d1:59:96:8a: ed:8d:bf:1c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUEIMRVZeAVF2ioavMv41PiQvD3WYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDAyNFoX DTI3MDUwMjAyMDUyNFowMzExMC8GA1UEAxMoOTZBNUJFRjAxNjE5MzEzQjEzMDAw MTUyRkY3RDk4NDlCMDgwRTZBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKfuM7DNeqnlhLMD9eF/SxqJaR8+jPSFWnkqMi3UT2CyFIDaAfNX7XpBwI7x jOLGOMqBBF44desuMmztsDcaNQybNPa8CUlIA5Mr0iWk2rjt09ViDXWO8kSVJXwv dMehY12zgjcDBYOhQsiph5AZ4UbV5aIeZH/G2NgOoWWXSzF06nunFLaG9l0w4E50 6Uxa8MVCp9v/2VEoX5iFG4Sfi7ts0qM3ycRYEWsa1/BrogvHfEUkHE5jfjhY+AR8 9mUIzcJAp6smnBXe/pUAJIn15FKVDxk/G7FV81uVtncaHtI2SPECXWBEtyuQVqbD 3QRuumPRNuE3DnmV1YS1vo5b/zsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJalvvAWGTE7EwABUv99mEmwgOatMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q2ZTJhMmUxLTFiMmQtNDhjYy05ZGIzLTY3YTgxYWY2NzA2Mi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kNmUyYTJl MS0xYjJkLTQ4Y2MtOWRiMy02N2E4MWFmNjcwNjIvMC85NkE1QkVGMDE2MTkzMTNC MTMwMDAxNTJGRjdEOTg0OUIwODBFNkFELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6m8MA0GCSqGSIb3DQEBCwUAA4IBAQB0wlKX7tVPT8NzbeTnJgMdKRn8BIrD mQ6ctZL4O32lfS+9FQSeVXgwea4LbjcQCayek1BerbxFMY302Twd3AvUN6R1tyRj LdPZz+hMp4O0CGLN/v1Uo+m5/BpdnTCCAt4V4CWF0J4gkfM4yUi5f80khZkkSxhZ zXhKqp33OO9M1jQeJEX09LMECDkTYJgkDLHtR5XlxLbWI0yX/Fs8tMzwyI6vfaPi ulakZy1xJAmyEkBW1D4jEJtTZzGAclcKiRv1dHRrg3dPGzmb0TzOyw2mtWZVvslb Ms0jVjnQUK1EAub0DZW3KpT+z+HlN27B7ZPvClwTasovhNFZlortjb8c -----END CERTIFICATE-----Generated at Tue May 12 22:03:57 2026 by rpki-client