$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/96FDA607CDE580764664CCDAA75B9ECDACB44700.cer File: 96FDA607CDE580764664CCDAA75B9ECDACB44700.cer (raw, json) Hash identifier: z6j4r/0g3T+PmDONqEbHtiz13xeLZBQYxNuPhLQNeWQ= Subject key identifier: 96:FD:A6:07:CD:E5:80:76:46:64:CC:DA:A7:5B:9E:CD:AC:B4:47:00 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 76038116613FE9E6B16DBC9066DA887F31608B1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:33:18 +0000 Certificate not after: Sun 02 May 2027 01:38:18 +0000 Subordinate resources: IP: 210.79.138.0/23 IP: 2001:df3:fd40::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:03:81:16:61:3f:e9:e6:b1:6d:bc:90:66:da:88:7f:31:60:8b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:33:18 2026 GMT Not After : May 2 01:38:18 2027 GMT Subject: CN=96FDA607CDE580764664CCDAA75B9ECDACB44700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:eb:3b:1d:f4:08:05:b3:82:3a:17:fb:95:92: 64:1c:03:2d:50:85:78:df:0e:14:a5:11:82:54:51: 4e:38:f2:2c:f9:e8:b8:06:0f:67:99:1d:24:29:ca: 3b:27:58:bb:93:8e:dc:03:a0:e8:99:ca:86:17:3c: a9:22:ea:51:e2:86:44:a2:fd:be:35:6e:3b:9e:ce: 48:e3:55:f8:92:b0:70:e3:63:72:cb:7a:55:02:12: 4e:5d:87:59:fe:07:12:e0:8b:5f:03:21:6e:65:44: 35:80:11:c1:40:8a:a1:cd:58:2a:3b:57:94:c9:38: 09:c7:8a:dc:a1:e5:c6:26:8d:58:20:d8:7f:82:f6: 12:96:e2:c5:f2:6c:41:46:55:0d:ea:66:60:ad:c4: 7a:9b:6e:c4:17:d0:8d:af:4d:ee:6b:10:22:91:98: a2:3b:57:fb:8c:b4:b4:c1:67:7a:a1:21:6a:20:76: 93:40:60:36:91:14:53:d6:65:e2:ab:6c:e5:25:a1: 52:be:c8:29:6e:25:4e:c8:7a:0d:82:fc:34:6c:5b: fb:cc:c4:df:31:42:24:93:e3:3d:11:c3:54:3d:e3: 6f:ae:cb:23:39:2e:98:e8:55:d8:01:d6:52:9d:93: 6b:0c:79:21:32:f7:ba:c8:e4:4b:ef:be:01:94:d2: 2b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 96:FD:A6:07:CD:E5:80:76:46:64:CC:DA:A7:5B:9E:CD:AC:B4:47:00 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/96FDA607CDE580764664CCDAA75B9ECDACB44700.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.79.138.0/23 IPv6: 2001:df3:fd40::/48 Signature Algorithm: sha256WithRSAEncryption 78:02:99:a0:33:5e:60:94:df:20:4c:d8:8c:55:2f:8f:8b:52: 6d:d5:5f:95:db:aa:8c:2c:2a:27:f9:da:61:59:e5:2a:5e:a7: eb:6a:0b:c4:ef:cc:2b:c3:6c:df:19:a3:af:31:fe:a3:bc:be: 9a:02:9f:21:99:c5:ef:b3:b9:29:cc:92:b0:a0:e7:b3:7b:c6: 1b:e2:3c:95:73:21:33:b5:b1:c7:c3:eb:14:f5:2d:2f:c7:37: ea:8f:1e:1a:ec:11:fa:44:38:45:b4:4d:01:e9:ef:fc:9e:5a: f1:ba:e4:19:e8:28:b9:af:0e:5c:fc:a1:8a:99:aa:72:f7:c3: 6a:20:99:24:f7:d2:78:1b:63:e9:50:45:fc:07:8f:f8:8a:41: a8:61:4b:ef:c1:90:5a:f9:ff:81:ff:ae:98:2c:a5:d8:50:cc: f7:3d:9e:64:23:80:3b:40:35:f9:c6:f2:39:8d:51:cc:ed:e2: b5:64:66:4e:bb:c3:4b:f2:25:ac:67:f9:79:4c:09:06:fc:08: db:d1:48:7c:c1:c7:f5:71:00:2a:38:11:8b:92:64:02:46:44: 06:3b:ff:63:cc:de:bb:3f:29:cd:7d:8e:72:00:8d:8d:2b:e0: 69:e1:2d:6c:35:8b:c1:2f:7e:a8:26:ff:1e:bf:28:a6:68:22: 0a:60:c9:0f -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUdgOBFmE/6eaxbbyQZtqIfzFgix0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzMxOFoX DTI3MDUwMjAxMzgxOFowMzExMC8GA1UEAxMoOTZGREE2MDdDREU1ODA3NjQ2NjRD Q0RBQTc1QjlFQ0RBQ0I0NDcwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKHrOx30CAWzgjoX+5WSZBwDLVCFeN8OFKURglRRTjjyLPnouAYPZ5kdJCnK OydYu5OO3AOg6JnKhhc8qSLqUeKGRKL9vjVuO57OSONV+JKwcONjcst6VQISTl2H Wf4HEuCLXwMhbmVENYARwUCKoc1YKjtXlMk4CceK3KHlxiaNWCDYf4L2EpbixfJs QUZVDepmYK3EeptuxBfQja9N7msQIpGYojtX+4y0tMFneqEhaiB2k0BgNpEUU9Zl 4qts5SWhUr7IKW4lTsh6DYL8NGxb+8zE3zFCJJPjPRHDVD3jb67LIzkumOhV2AHW Up2Tawx5ITL3usjkS+++AZTSK8cCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJb9pgfN5YB2RmTM2qdbns2stEcAMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E4ZjI4NWVmLTM0NTMtNDE3OS1hNTUzLWYxOTU5N2RlOWRlZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hOGYyODVl Zi0zNDUzLTQxNzktYTU1My1mMTk1OTdkZTlkZWQvMC85NkZEQTYwN0NERTU4MDc2 NDY2NENDREFBNzVCOUVDREFDQjQ0NzAwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQB0k+KMA8EAgACMAkDBwAgAQ3z/UAwDQYJKoZIhvcNAQELBQADggEBAHgCmaAz XmCU3yBM2IxVL4+LUm3VX5XbqowsKif52mFZ5Spep+tqC8TvzCvDbN8Zo68x/qO8 vpoCnyGZxe+zuSnMkrCg57N7xhviPJVzITO1scfD6xT1LS/HN+qPHhrsEfpEOEW0 TQHp7/yeWvG65BnoKLmvDlz8oYqZqnL3w2ogmST30ngbY+lQRfwHj/iKQahhS+/B kFr5/4H/rpgspdhQzPc9nmQjgDtANfnG8jmNUczt4rVkZk67w0vyJaxn+XlMCQb8 CNvRSHzBx/VxACo4EYuSZAJGRAY7/2PM3rs/Kc19jnIAjY0r4GnhLWw1i8Evfqgm /x6/KKZoIgpgyQ8= -----END CERTIFICATE-----Generated at Wed May 13 01:07:09 2026 by rpki-client