$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer File: 9796934CE983E32FE16AC8EC0968FB6FF0339712.cer (raw, json) Hash identifier: YzEa8cgMXWbwrhVqoy/MRuy5LFL1OCsG9lL+LAEdw4k= Subject key identifier: 97:96:93:4C:E9:83:E3:2F:E1:6A:C8:EC:09:68:FB:6F:F0:33:97:12 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1620F45F56112E120585390B6546FC1CF274F3A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:27:51 +0000 Certificate not after: Sun 02 May 2027 01:32:51 +0000 Subordinate resources: IP: 103.90.24.0/22 IP: 103.232.240.0/24 IP: 103.232.242.0/23 IP: 103.250.199.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:20:f4:5f:56:11:2e:12:05:85:39:0b:65:46:fc:1c:f2:74:f3:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:27:51 2026 GMT Not After : May 2 01:32:51 2027 GMT Subject: CN=9796934CE983E32FE16AC8EC0968FB6FF0339712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:31:fc:3b:54:d9:e3:81:d7:bc:9a:38:28:53: 37:e6:bd:58:b5:5e:7f:a3:19:8e:f8:fe:2e:da:24: 2f:1a:9e:22:9f:61:db:3e:66:7e:05:58:f0:ed:82: 66:b8:db:62:04:7a:e4:23:8d:74:83:31:37:27:fd: 25:d6:18:c3:32:58:c3:a5:b9:73:ee:53:b8:f9:64: 96:d4:ff:81:4f:c2:db:62:3c:a9:fd:c4:bc:2d:50: e4:40:75:dc:b1:8e:5a:7e:a1:09:a6:54:ef:bc:06: 40:2a:bd:a5:1c:2d:31:d2:7b:78:0f:05:2c:07:e1: 90:1c:d1:8f:9e:76:a2:b9:2f:38:ca:25:e9:23:f9: 3b:16:bc:69:70:4a:e0:90:57:b6:1e:95:e9:95:d4: 96:f1:73:5c:3c:dc:c5:8e:50:21:ba:43:63:2d:56: 22:fe:6d:79:e3:28:79:b4:57:6f:19:60:b9:44:65: b5:bd:44:63:ae:dd:34:59:6a:d0:65:b3:1b:9c:9b: bf:09:38:f1:0b:47:cd:df:af:40:8e:51:cc:ee:8b: 3f:4e:88:5d:d2:c1:9c:12:31:cf:b3:23:7b:98:d5: 03:c2:10:cf:af:40:8a:ef:7f:75:ce:96:ef:8c:ad: c5:5a:54:0f:2a:6b:53:61:8c:04:65:1b:b5:8f:2c: 4b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 97:96:93:4C:E9:83:E3:2F:E1:6A:C8:EC:09:68:FB:6F:F0:33:97:12 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.90.24.0/22 103.232.240.0/24 103.232.242.0/23 103.250.199.0/24 Signature Algorithm: sha256WithRSAEncryption a5:46:ca:c4:0c:83:8d:e4:2c:53:d6:30:ba:39:be:f7:b2:98: 98:e8:83:41:c9:eb:16:1f:04:25:19:3c:b8:b0:47:9a:de:cc: 4d:ac:92:8d:89:f5:37:02:95:35:8c:37:b8:1f:1e:15:8d:bc: 84:70:18:36:07:63:81:72:b9:75:3b:fa:72:94:11:76:d7:72: 13:34:d5:d2:72:4e:ea:c9:0f:3a:09:72:01:cc:89:1c:27:ad: eb:28:91:54:16:0e:62:28:f7:be:04:fd:8d:32:81:bc:00:4b: 31:fb:08:e0:96:0f:5d:2e:b5:86:35:35:5b:7f:1d:8e:ab:f2: f4:0d:44:64:37:c2:1d:bb:06:61:74:83:ba:6c:5a:15:b1:9f: 8f:b2:1e:3d:25:97:10:28:c8:50:b0:44:a0:82:a7:6c:63:6b: 28:bb:aa:f2:2f:73:1b:0d:c9:87:5e:8c:e6:cf:42:5d:5b:28: 07:c7:9e:f2:3a:70:00:6f:99:34:5e:63:aa:70:34:fb:e5:85: 25:52:23:d5:fa:99:90:6e:4b:2d:c7:68:ee:da:af:e4:83:62: e2:72:49:fc:0b:81:3a:b9:7a:f9:96:6f:aa:8d:81:d9:04:fd: 74:0a:35:dd:39:d7:52:b9:0e:31:07:b1:8a:c2:d6:ff:78:56: fb:87:87:f3 -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgIUFiD0X1YRLhIFhTkLZUb8HPJ086MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjc1MVoX DTI3MDUwMjAxMzI1MVowMzExMC8GA1UEAxMoOTc5NjkzNENFOTgzRTMyRkUxNkFD OEVDMDk2OEZCNkZGMDMzOTcxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJgx/DtU2eOB17yaOChTN+a9WLVef6MZjvj+LtokLxqeIp9h2z5mfgVY8O2C ZrjbYgR65CONdIMxNyf9JdYYwzJYw6W5c+5TuPlkltT/gU/C22I8qf3EvC1Q5EB1 3LGOWn6hCaZU77wGQCq9pRwtMdJ7eA8FLAfhkBzRj552orkvOMol6SP5Oxa8aXBK 4JBXth6V6ZXUlvFzXDzcxY5QIbpDYy1WIv5teeMoebRXbxlguURltb1EY67dNFlq 0GWzG5ybvwk48QtHzd+vQI5RzO6LP06IXdLBnBIxz7Mje5jVA8IQz69Aiu9/dc6W 74ytxVpUDyprU2GMBGUbtY8sSx0CAwEAAaOCAsswggLHMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJeWk0zpg+Mv4WrI7Alo+2/wM5cSMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ExNjMzYjhlLTBkZjktNDRhYy05Y2FlLWQ2ZjY3NjVhNTJjOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hMTYzM2I4 ZS0wZGY5LTQ0YWMtOWNhZS1kNmY2NzY1YTUyYzkvMC85Nzk2OTM0Q0U5ODNFMzJG RTE2QUM4RUMwOTY4RkI2RkYwMzM5NzEyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAY AwQCZ1oYAwQAZ+jwAwQBZ+jyAwQAZ/rHMA0GCSqGSIb3DQEBCwUAA4IBAQClRsrE DION5CxT1jC6Ob73spiY6INByesWHwQlGTy4sEea3sxNrJKNifU3ApU1jDe4Hx4V jbyEcBg2B2OBcrl1O/pylBF213ITNNXSck7qyQ86CXIBzIkcJ63rKJFUFg5iKPe+ BP2NMoG8AEsx+wjglg9dLrWGNTVbfx2Oq/L0DURkN8IduwZhdIO6bFoVsZ+Psh49 JZcQKMhQsESggqdsY2sou6ryL3MbDcmHXozmz0JdWygHx57yOnAAb5k0XmOqcDT7 5YUlUiPV+pmQbkstx2ju2q/kg2Lickn8C4E6uXr5lm+qjYHZBP10CjXdOddSuQ4x B7GKwtb/eFb7h4fz -----END CERTIFICATE-----Generated at Tue May 12 22:03:56 2026 by rpki-client