$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer File: 96BE6D37D6231B24AFADC97CDC67C0606EC7734C.cer (raw, json) Hash identifier: PB2Is5X0W+cdrJHYL6Sl/XsxKeDhXmbcN5oL4P3n0Go= Subject key identifier: 96:BE:6D:37:D6:23:1B:24:AF:AD:C9:7C:DC:67:C0:60:6E:C7:73:4C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 32BDF4D30E6F9AC6654192001D4376E160871B7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:19:55 +0000 Certificate not after: Sun 02 May 2027 01:24:55 +0000 Subordinate resources: IP: 103.107.140.0/24 IP: 2001:df3:d700::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:bd:f4:d3:0e:6f:9a:c6:65:41:92:00:1d:43:76:e1:60:87:1b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:19:55 2026 GMT Not After : May 2 01:24:55 2027 GMT Subject: CN=96BE6D37D6231B24AFADC97CDC67C0606EC7734C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4c:52:16:5c:73:8f:86:e3:e4:e5:fe:e3:53: 6c:82:63:4d:e5:d9:10:99:01:e7:9b:f6:75:3e:bb: bb:99:d6:61:fc:10:2f:e0:bd:be:aa:1b:53:49:fc: 9e:4b:9a:07:67:28:20:0a:3c:4d:78:74:ad:5b:d2: 72:8f:d0:d9:74:b7:41:92:c0:c6:e9:44:76:3b:e5: 73:94:21:0f:f9:02:86:c3:59:b6:9e:6b:5d:98:82: bd:4f:a6:b5:4c:81:51:5c:b6:df:d5:1a:c7:78:ed: 0e:92:e6:c3:1e:b6:a8:33:11:b9:a3:f8:52:b9:c1: 25:7f:fd:dc:a0:a0:ad:f0:29:4d:b6:80:ce:c6:97: c6:a2:32:0b:f6:a4:d7:df:40:e2:b7:5a:90:3b:53: 67:c5:36:a9:d8:b2:61:0c:e8:d7:9d:3e:8a:82:dd: 33:68:b1:bf:23:fd:74:6b:ae:e1:48:08:5c:64:4e: 42:d3:ed:07:06:96:a5:6f:83:f9:a0:4e:d3:97:87: 64:8d:7b:c3:6e:25:82:b7:22:fc:4d:6a:17:c0:5d: a7:8f:bf:ed:8a:df:21:4e:4c:e2:2a:5d:59:3a:94: 4e:c1:2f:31:10:68:82:22:12:21:64:ce:ba:f8:c2: 18:38:55:99:dc:4d:ff:6b:fd:ab:32:e9:7a:bd:a0: c4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 96:BE:6D:37:D6:23:1B:24:AF:AD:C9:7C:DC:67:C0:60:6E:C7:73:4C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/96BE6D37D6231B24AFADC97CDC67C0606EC7734C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.107.140.0/24 IPv6: 2001:df3:d700::/48 Signature Algorithm: sha256WithRSAEncryption 37:be:2c:68:52:0b:d7:b4:96:39:42:b7:92:8f:14:56:e8:9d: 11:0b:fd:e0:76:ce:19:3e:95:be:8c:f4:1e:59:a2:d7:c9:5d: df:7e:a1:da:25:ef:c7:53:b8:0c:2c:8e:ee:b9:56:e8:32:ee: 4e:bf:7b:5d:d1:4f:d0:f9:fc:3d:c3:f9:44:16:bb:fe:24:ca: e4:48:56:f0:0a:44:ac:d1:a8:b2:2f:72:f1:71:39:2b:32:f2: d4:77:99:bd:f9:1f:b8:c3:6d:7a:3a:9e:5b:aa:b7:60:fc:ae: 1e:27:38:a3:70:80:fb:45:c8:90:b7:70:ee:4f:ab:b8:a6:a1: 9d:86:5b:cf:ce:00:d8:c5:dc:2e:36:e9:41:61:db:3a:64:ff: 99:82:2c:87:46:df:91:10:17:4b:9d:a8:b6:3c:08:99:81:c5: 69:df:cb:39:9e:ac:68:27:49:4f:ba:68:68:9d:d3:1e:5a:51: 0e:cb:60:0a:d3:5d:50:6b:ed:82:96:3d:d8:d5:37:67:5e:14: 51:85:04:50:73:3e:d8:44:4a:48:a2:e1:82:de:ed:0e:07:49: 73:47:be:4a:aa:83:fc:f9:db:17:b1:64:35:32:f8:49:26:72: 4e:08:a9:45:86:68:1e:12:48:52:10:ba:a1:72:93:7a:3b:48: bd:92:73:e4 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUMr300w5vmsZlQZIAHUN24WCHG3swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTk1NVoX DTI3MDUwMjAxMjQ1NVowMzExMC8GA1UEAxMoOTZCRTZEMzdENjIzMUIyNEFGQURD OTdDREM2N0MwNjA2RUM3NzM0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdMUhZcc4+G4+Tl/uNTbIJjTeXZEJkB55v2dT67u5nWYfwQL+C9vqobU0n8 nkuaB2coIAo8TXh0rVvSco/Q2XS3QZLAxulEdjvlc5QhD/kChsNZtp5rXZiCvU+m tUyBUVy239Uax3jtDpLmwx62qDMRuaP4UrnBJX/93KCgrfApTbaAzsaXxqIyC/ak 199A4rdakDtTZ8U2qdiyYQzo150+ioLdM2ixvyP9dGuu4UgIXGROQtPtBwaWpW+D +aBO05eHZI17w24lgrci/E1qF8Bdp4+/7YrfIU5M4ipdWTqUTsEvMRBogiISIWTO uvjCGDhVmdxN/2v9qzLper2gxHcCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJa+bTfWIxskr63JfNxnwGBux3NMMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzk1Nzk5NmY1LWE5MzQtNGI0NC04NTQ3LTE5ZWMzN2NmN2MxNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85NTc5OTZm NS1hOTM0LTRiNDQtODU0Ny0xOWVjMzdjZjdjMTQvMC85NkJFNkQzN0Q2MjMxQjI0 QUZBREM5N0NEQzY3QzA2MDZFQzc3MzRDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ2uMMA8EAgACMAkDBwAgAQ3z1wAwDQYJKoZIhvcNAQELBQADggEBADe+LGhS C9e0ljlCt5KPFFbonREL/eB2zhk+lb6M9B5ZotfJXd9+odol78dTuAwsju65Vugy 7k6/e13RT9D5/D3D+UQWu/4kyuRIVvAKRKzRqLIvcvFxOSsy8tR3mb35H7jDbXo6 nluqt2D8rh4nOKNwgPtFyJC3cO5Pq7imoZ2GW8/OANjF3C426UFh2zpk/5mCLIdG 35EQF0udqLY8CJmBxWnfyzmerGgnSU+6aGid0x5aUQ7LYArTXVBr7YKWPdjVN2de FFGFBFBzPthESkii4YLe7Q4HSXNHvkqqg/z52xexZDUy+Ekmck4IqUWGaB4SSFIQ uqFyk3o7SL2Sc+Q= -----END CERTIFICATE-----Generated at Tue May 12 22:10:19 2026 by rpki-client