$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.cer File: 97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.cer (raw, json) Hash identifier: +QZw8DlRgJV/q1y5cBV0tpIm9nqeJcbH59P6g+Qp37Q= Subject key identifier: 97:EB:2C:66:1A:5F:45:6D:CE:2A:E3:A7:3A:64:BC:1D:A0:B0:D8:1A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1BB23B8E13DC8F48E6CF585C448F72C6F762D96C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:02:09 +0000 Certificate not after: Sun 02 May 2027 01:07:09 +0000 Subordinate resources: IP: 103.177.6.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b2:3b:8e:13:dc:8f:48:e6:cf:58:5c:44:8f:72:c6:f7:62:d9:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:02:09 2026 GMT Not After : May 2 01:07:09 2027 GMT Subject: CN=97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:91:5d:a8:17:b2:bd:f1:1f:8f:d0:33:5b:21: ec:78:39:3b:0b:c9:3d:bb:09:f0:89:1f:d6:79:34: cb:32:82:33:c4:3c:c7:84:47:b5:29:84:be:6e:d0: 5f:9c:b5:48:df:f4:85:2a:95:c5:e6:ca:08:7d:53: c2:fc:67:20:c7:a0:91:3b:f7:fb:b7:3f:9c:a8:73: 0d:9d:c6:91:8e:bc:a3:49:e1:23:cb:d3:7e:12:46: 18:b9:53:a2:e1:e5:eb:24:12:d4:28:3c:55:24:78: bb:07:48:3e:56:06:67:e0:90:7c:78:97:fc:ad:b2: d8:c3:a1:73:fc:57:1c:84:54:37:74:62:7a:cf:7d: c2:4c:b4:ee:bc:a7:8a:bf:c3:a7:50:1a:08:00:54: 38:ae:cf:e8:1d:f6:52:1d:0b:c5:5b:20:66:d2:2c: a2:69:95:f8:a1:53:0c:6a:14:b2:4c:bd:23:bc:81: b2:6c:71:5a:df:16:1e:8a:db:50:86:87:a6:92:08: 7f:3b:fe:02:75:96:5f:97:6a:d2:30:50:4c:ad:56: 9b:43:57:d7:ba:c6:13:4e:a9:6e:9e:0a:88:da:e4: 79:0d:aa:ac:56:78:e6:6d:ac:d7:cd:13:1e:94:7a: 5d:b7:cf:e2:23:09:e2:68:de:0a:0e:0d:7b:93:e7: 85:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 97:EB:2C:66:1A:5F:45:6D:CE:2A:E3:A7:3A:64:BC:1D:A0:B0:D8:1A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.6.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:31:f3:22:75:a7:c6:c7:8e:10:ee:8d:79:e3:9a:c8:8d:50: 76:9f:e1:ba:12:25:fa:5d:1c:e4:ab:b6:84:c8:74:74:4b:09: 47:9d:f4:91:ce:df:bb:a8:42:78:c5:99:a2:0c:cf:14:7d:7c: 59:a7:e5:ae:55:6a:f2:bc:11:df:5f:7a:9c:8c:4b:99:80:d6: a8:48:6e:4a:ff:49:61:1e:be:6b:b8:b7:6d:ab:f8:7c:87:b9: f8:54:ef:e9:76:90:ea:9e:74:01:9d:9f:36:47:31:c6:90:4f: dc:7c:00:88:a9:b4:d6:fe:bd:65:03:8e:58:5c:ec:ad:c0:17: e9:74:82:04:42:d2:a6:1a:e9:ef:47:49:95:8b:b5:68:bd:d5: 81:31:43:17:b9:b9:1a:48:1c:e3:19:e8:bb:dc:fc:42:58:69: 09:73:22:18:34:74:e2:b2:c2:00:cf:ae:dd:eb:cb:7d:d6:de: 8d:2c:ce:30:0e:48:e3:de:3d:b3:df:b8:35:58:05:8f:de:64: 8f:17:f0:a1:47:2a:48:e4:c1:79:80:e5:fa:51:9d:c5:64:c3: 5e:0d:28:95:60:96:0b:f0:5b:32:22:f8:20:e3:f7:12:13:4c: aa:83:42:d0:c9:78:00:6e:a4:79:09:9b:bc:3c:fd:bd:5f:f5: 09:5e:5d:fd -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUG7I7jhPcj0jmz1hcRI9yxvdi2WwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDIwOVoX DTI3MDUwMjAxMDcwOVowMzExMC8GA1UEAxMoOTdFQjJDNjYxQTVGNDU2RENFMkFF M0E3M0E2NEJDMURBMEIwRDgxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPORXagXsr3xH4/QM1sh7Hg5OwvJPbsJ8Ikf1nk0yzKCM8Q8x4RHtSmEvm7Q X5y1SN/0hSqVxebKCH1TwvxnIMegkTv3+7c/nKhzDZ3GkY68o0nhI8vTfhJGGLlT ouHl6yQS1Cg8VSR4uwdIPlYGZ+CQfHiX/K2y2MOhc/xXHIRUN3Ries99wky07ryn ir/Dp1AaCABUOK7P6B32Uh0LxVsgZtIsommV+KFTDGoUsky9I7yBsmxxWt8WHorb UIaHppIIfzv+AnWWX5dq0jBQTK1Wm0NX17rGE06pbp4KiNrkeQ2qrFZ45m2s180T HpR6XbfP4iMJ4mjeCg4Ne5PnhccCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJfrLGYaX0VtzirjpzpkvB2gsNgaMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdiNzFmYzZkLWFhM2ItNGVkNy04ZmVjLTc0MjdhYTA2MWY4ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83YjcxZmM2 ZC1hYTNiLTRlZDctOGZlYy03NDI3YWEwNjFmOGUvMC85N0VCMkM2NjFBNUY0NTZE Q0UyQUUzQTczQTY0QkMxREEwQjBEODFBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7EGMA0GCSqGSIb3DQEBCwUAA4IBAQBvMfMidafGx44Q7o1545rIjVB2n+G6 EiX6XRzkq7aEyHR0SwlHnfSRzt+7qEJ4xZmiDM8UfXxZp+WuVWryvBHfX3qcjEuZ gNaoSG5K/0lhHr5ruLdtq/h8h7n4VO/pdpDqnnQBnZ82RzHGkE/cfACIqbTW/r1l A45YXOytwBfpdIIEQtKmGunvR0mVi7VovdWBMUMXubkaSBzjGei73PxCWGkJcyIY NHTissIAz67d68t91t6NLM4wDkjj3j2z37g1WAWP3mSPF/ChRypI5MF5gOX6UZ3F ZMNeDSiVYJYL8FsyIvgg4/cSE0yqg0LQyXgAbqR5CZu8PP29X/UJXl39 -----END CERTIFICATE-----Generated at Tue May 12 22:45:36 2026 by rpki-client