$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/96F7885B8F4A0167C86E3083F630FFA26BFA9271.cer File: 96F7885B8F4A0167C86E3083F630FFA26BFA9271.cer (raw, json) Hash identifier: ojPCydCDiDe5Fk86B8PuoSxf2HkBbg+xCh5hx6sBDgA= Subject key identifier: 96:F7:88:5B:8F:4A:01:67:C8:6E:30:83:F6:30:FF:A2:6B:FA:92:71 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4DDA7A08202C4905B4606C1891027E91F41B2A23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 22:34:42 +0000 Certificate not after: Sat 01 May 2027 22:39:42 +0000 Subordinate resources: IP: 103.169.210.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:da:7a:08:20:2c:49:05:b4:60:6c:18:91:02:7e:91:f4:1b:2a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 22:34:42 2026 GMT Not After : May 1 22:39:42 2027 GMT Subject: CN=96F7885B8F4A0167C86E3083F630FFA26BFA9271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:42:c4:a8:5e:2d:37:05:26:c6:2d:af:a8:19: 42:2e:30:77:14:b8:fa:c4:f4:d2:f1:7e:04:e8:dd: f3:85:81:1d:20:6f:59:e2:7e:cc:a7:60:9e:83:60: 2c:9b:9b:6d:5a:76:22:64:4c:ad:f0:37:38:8b:6a: f8:4c:36:bc:65:aa:e2:8d:cd:45:71:23:d4:dd:b8: 50:47:1f:2a:2d:58:cb:a5:ef:33:23:41:3b:bb:8d: de:90:2c:97:7e:22:9b:90:7e:ed:6d:e7:12:0c:a8: 91:45:d5:ae:ef:7c:74:20:6c:59:74:92:fa:9d:03: 93:e7:1e:67:d4:b0:55:d0:09:93:39:8c:8d:13:a7: 95:ec:91:60:6b:69:7c:3a:0e:a3:13:d5:03:5a:69: d0:b8:0c:bf:d8:77:61:6f:97:96:52:5b:2e:ce:e6: c9:a8:7a:d4:d2:b3:2d:de:cf:8f:6f:bd:99:50:26: d8:17:b8:b9:54:17:1d:62:c0:f5:4f:9c:af:b4:31: b9:af:95:e2:1b:d5:0c:c5:08:18:bf:45:b6:99:60: 3e:76:ef:75:9e:9f:e6:34:c3:ca:85:2a:86:4a:9f: 6b:a3:32:33:c1:ac:1c:54:9d:1e:18:79:25:6a:90: 9f:3a:3e:e9:c5:61:b9:fd:cc:11:b0:2e:c9:aa:03: 75:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 96:F7:88:5B:8F:4A:01:67:C8:6E:30:83:F6:30:FF:A2:6B:FA:92:71 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/96F7885B8F4A0167C86E3083F630FFA26BFA9271.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.210.0/23 Signature Algorithm: sha256WithRSAEncryption 28:ea:b6:db:d6:c2:dd:53:cf:0e:d4:be:9b:ae:62:86:8e:23: e2:ac:69:b8:d1:80:b8:50:9c:5b:bf:e6:58:36:58:08:eb:1e: 50:34:b1:2b:ee:71:3c:a7:0b:a1:9b:9e:af:27:2e:97:54:d8: 96:1b:ab:44:46:47:f5:94:c0:1e:01:0d:89:b1:19:86:8f:7d: 7f:9b:80:fa:bf:87:07:55:e5:d8:f4:8b:70:59:dd:c6:3e:be: cd:8b:f3:3f:a2:76:e7:51:f5:ef:f2:0e:71:34:55:82:e8:1a: 8a:e1:41:bc:1e:df:ea:39:0e:77:95:51:f6:e3:a2:6e:ca:09: 86:1a:23:df:61:32:c6:15:b9:90:f0:08:03:a2:9c:55:00:c4: 0a:cf:97:9e:9f:2b:a1:26:97:d0:c8:4e:88:fc:a7:53:f3:6c: 6b:9a:c8:5c:a1:8f:1e:7b:a9:0b:63:b4:c9:6e:db:8e:41:7a: 05:da:92:0a:0a:1e:2c:e1:55:61:c0:e3:30:18:85:fc:b5:ed: 40:f7:77:89:4b:85:c1:5d:b8:0f:22:31:c0:69:eb:f5:4a:b6: 81:ac:ec:c3:77:8c:b9:0f:98:5b:cb:7d:03:35:0e:67:43:05: 52:b1:0f:22:5e:ca:10:b1:9a:b3:87:76:f2:ec:ac:67:1d:5e: b8:b6:43:d8 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUTdp6CCAsSQW0YGwYkQJ+kfQbKiMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIyMzQ0MloX DTI3MDUwMTIyMzk0MlowMzExMC8GA1UEAxMoOTZGNzg4NUI4RjRBMDE2N0M4NkUz MDgzRjYzMEZGQTI2QkZBOTI3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1CxKheLTcFJsYtr6gZQi4wdxS4+sT00vF+BOjd84WBHSBvWeJ+zKdgnoNg LJubbVp2ImRMrfA3OItq+Ew2vGWq4o3NRXEj1N24UEcfKi1Yy6XvMyNBO7uN3pAs l34im5B+7W3nEgyokUXVru98dCBsWXSS+p0Dk+ceZ9SwVdAJkzmMjROnleyRYGtp fDoOoxPVA1pp0LgMv9h3YW+XllJbLs7myah61NKzLd7Pj2+9mVAm2Be4uVQXHWLA 9U+cr7Qxua+V4hvVDMUIGL9FtplgPnbvdZ6f5jTDyoUqhkqfa6MyM8GsHFSdHhh5 JWqQnzo+6cVhuf3MEbAuyaoDdZ8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJb3iFuPSgFnyG4wg/Yw/6Jr+pJxMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ZmYTBkZGVkLTFhY2YtNDQyZC05NjU5LTk1YWVjZDhmOGVhOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mZmEwZGRl ZC0xYWNmLTQ0MmQtOTY1OS05NWFlY2Q4ZjhlYTkvMC85NkY3ODg1QjhGNEEwMTY3 Qzg2RTMwODNGNjMwRkZBMjZCRkE5MjcxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6nSMA0GCSqGSIb3DQEBCwUAA4IBAQAo6rbb1sLdU88O1L6brmKGjiPirGm4 0YC4UJxbv+ZYNlgI6x5QNLEr7nE8pwuhm56vJy6XVNiWG6tERkf1lMAeAQ2JsRmG j31/m4D6v4cHVeXY9ItwWd3GPr7Ni/M/onbnUfXv8g5xNFWC6BqK4UG8Ht/qOQ53 lVH246JuygmGGiPfYTLGFbmQ8AgDopxVAMQKz5eenyuhJpfQyE6I/KdT82xrmshc oY8ee6kLY7TJbtuOQXoF2pIKCh4s4VVhwOMwGIX8te1A93eJS4XBXbgPIjHAaev1 SraBrOzDd4y5D5hby30DNQ5nQwVSsQ8iXsoQsZqzh3by7KxnHV64tkPY -----END CERTIFICATE-----Generated at Tue May 12 22:16:34 2026 by rpki-client