$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/976FB6C4EC175847196F26D9D507157A16E77592.cer File: 976FB6C4EC175847196F26D9D507157A16E77592.cer (raw, json) Hash identifier: uEAeBmNIYXsSpbh0TfA3DCF3ZC5pVQ5eMxwYuACegkM= Subject key identifier: 97:6F:B6:C4:EC:17:58:47:19:6F:26:D9:D5:07:15:7A:16:E7:75:92 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0EA8111BE1E5E3D1CA44EC1E6BB5A220F5970A95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:49:47 +0000 Certificate not after: Sun 02 May 2027 01:54:47 +0000 Subordinate resources: IP: 103.180.122.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a8:11:1b:e1:e5:e3:d1:ca:44:ec:1e:6b:b5:a2:20:f5:97:0a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:49:47 2026 GMT Not After : May 2 01:54:47 2027 GMT Subject: CN=976FB6C4EC175847196F26D9D507157A16E77592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5b:98:3c:80:33:da:52:f0:ad:d8:9f:c2:0a: 1b:66:aa:ad:69:8a:35:b4:1b:b0:fc:c8:b2:85:2c: ba:76:bb:55:1a:5f:c0:9c:e2:12:66:cd:0b:5f:a0: 24:8e:d8:00:a4:3f:00:73:c9:04:17:f9:26:22:48: 0c:35:2e:c3:aa:83:ff:6a:4e:d9:ec:89:f0:33:01: 08:68:69:43:47:98:98:11:e0:bc:d9:95:fa:13:0a: c9:11:17:e4:43:0a:71:ab:fc:b9:a1:3b:c9:27:c8: 17:1e:2d:44:68:7f:a8:d1:04:87:69:4d:a2:d4:93: 9d:13:88:8e:74:5c:b6:53:b7:b8:0e:80:93:a2:24: 15:a8:48:49:28:75:6f:f5:fe:1d:5a:d6:46:b5:62: a4:30:5c:29:96:41:df:c4:90:f9:f3:33:eb:dd:85: 8c:0b:c2:80:8d:83:38:57:c0:60:62:0f:3d:69:8b: 62:01:67:e5:0e:16:03:d6:10:f5:b1:01:f1:87:b7: a3:86:31:26:b3:10:27:95:f9:9d:a1:34:d3:9d:ad: 9d:85:7b:0d:1b:f7:cc:72:46:b8:d4:f3:43:27:4f: ea:10:c0:39:01:d6:09:de:55:4c:ba:31:11:e6:1c: a5:35:f4:3b:bc:9b:3d:7a:79:30:16:4f:78:81:18: a1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 97:6F:B6:C4:EC:17:58:47:19:6F:26:D9:D5:07:15:7A:16:E7:75:92 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.122.0/23 Signature Algorithm: sha256WithRSAEncryption 41:d0:3d:ef:20:8f:68:5c:cd:9a:ef:e5:ed:bf:db:6e:ca:bb: 8d:61:ad:48:26:ac:bc:31:99:48:b9:ca:46:2d:dd:11:7c:c4: c2:6d:2a:11:46:78:c9:b2:67:40:d5:4a:fd:84:7d:97:18:92: 8f:9f:9e:7b:03:dc:2b:5f:37:3d:47:f8:d9:bc:1b:7a:a0:5b: e2:0a:4c:67:72:47:5b:e2:17:e4:80:59:9d:ac:89:f6:d2:ae: 13:47:f1:3c:95:b2:98:85:8c:3f:66:ff:d7:bc:06:25:c4:65: 6e:78:04:40:8a:1d:60:17:aa:bb:c3:9d:d2:a8:84:7f:1f:09: 2b:af:eb:27:fc:7b:a6:02:b9:f4:e9:53:4b:ad:20:4f:4a:13: 93:d3:d2:7b:49:75:90:a6:89:a8:42:16:f0:81:18:35:16:2e: 13:77:8b:0b:1d:e6:f2:4a:ad:32:c6:0f:4f:a5:a6:e3:a4:cf: 27:cc:6a:50:75:02:d1:f6:5c:16:0a:cb:d2:84:2e:36:67:14: 74:8f:ed:5f:42:21:e0:e9:9e:e0:45:a4:db:ec:ab:a8:cd:9b: e3:5a:f5:ef:ef:c0:99:f4:df:6b:c8:0d:a5:5a:11:be:aa:94: 64:ad:54:37:b5:c7:d0:57:f8:c2:ca:b1:34:f0:3d:ed:a4:84: b1:67:b7:14 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUDqgRG+Hl49HKROwea7WiIPWXCpUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDk0N1oX DTI3MDUwMjAxNTQ0N1owMzExMC8GA1UEAxMoOTc2RkI2QzRFQzE3NTg0NzE5NkYy NkQ5RDUwNzE1N0ExNkU3NzU5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALhbmDyAM9pS8K3Yn8IKG2aqrWmKNbQbsPzIsoUsuna7VRpfwJziEmbNC1+g JI7YAKQ/AHPJBBf5JiJIDDUuw6qD/2pO2eyJ8DMBCGhpQ0eYmBHgvNmV+hMKyREX 5EMKcav8uaE7ySfIFx4tRGh/qNEEh2lNotSTnROIjnRctlO3uA6Ak6IkFahISSh1 b/X+HVrWRrVipDBcKZZB38SQ+fMz692FjAvCgI2DOFfAYGIPPWmLYgFn5Q4WA9YQ 9bEB8Ye3o4YxJrMQJ5X5naE0052tnYV7DRv3zHJGuNTzQydP6hDAOQHWCd5VTLox EeYcpTX0O7ybPXp5MBZPeIEYoTMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJdvtsTsF1hHGW8m2dUHFXoW53WSMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2M0MzNlMzQ0LWU4MTktNDQzOC1iOGNhLTFmNThjM2Q1MjdjYi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jNDMzZTM0 NC1lODE5LTQ0MzgtYjhjYS0xZjU4YzNkNTI3Y2IvMC85NzZGQjZDNEVDMTc1ODQ3 MTk2RjI2RDlENTA3MTU3QTE2RTc3NTkyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7R6MA0GCSqGSIb3DQEBCwUAA4IBAQBB0D3vII9oXM2a7+Xtv9tuyruNYa1I Jqy8MZlIucpGLd0RfMTCbSoRRnjJsmdA1Ur9hH2XGJKPn557A9wrXzc9R/jZvBt6 oFviCkxnckdb4hfkgFmdrIn20q4TR/E8lbKYhYw/Zv/XvAYlxGVueARAih1gF6q7 w53SqIR/Hwkrr+sn/HumArn06VNLrSBPShOT09J7SXWQpomoQhbwgRg1Fi4Td4sL HebySq0yxg9PpabjpM8nzGpQdQLR9lwWCsvShC42ZxR0j+1fQiHg6Z7gRaTb7Kuo zZvjWvXv78CZ9N9ryA2lWhG+qpRkrVQ3tcfQV/jCyrE08D3tpISxZ7cU -----END CERTIFICATE-----Generated at Tue May 12 22:02:55 2026 by rpki-client