$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer File: 98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.cer (raw, json) Hash identifier: MBHmF+Ub4BX99YIW4BDWZ1qPRGhn7oVpTwnzMrWq8kw= Subject key identifier: 98:06:1B:92:F0:41:07:DC:7E:A9:C6:A3:8A:8D:E0:8E:3E:FD:95:69 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 379586801ABB875BCC38C9F385AED92BD9DA0944 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft caRepository: rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:56:01 +0000 Certificate not after: Sun 02 May 2027 02:01:01 +0000 Subordinate resources: IP: 103.143.244.0/23 IP: 2405:60c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:95:86:80:1a:bb:87:5b:cc:38:c9:f3:85:ae:d9:2b:d9:da:09:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:56:01 2026 GMT Not After : May 2 02:01:01 2027 GMT Subject: CN=98061B92F04107DC7EA9C6A38A8DE08E3EFD9569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7f:e6:c7:04:fa:ff:6e:8e:6f:b5:62:fb:d7: 9f:ca:6a:60:20:95:41:94:99:5e:fe:b6:45:19:8e: 53:7a:fa:65:7d:22:a9:c4:75:1b:c0:76:c7:f6:60: 7a:8c:61:0a:ba:52:3f:a8:e3:80:c9:42:1e:b3:b2: 9d:bf:fb:c9:73:b0:50:bf:fe:de:6f:92:3b:7f:9b: 63:ef:f5:19:8c:30:16:a5:fd:d1:25:cc:91:fe:9a: 46:5d:f6:d8:e6:f0:6c:f2:31:4e:0c:5c:5c:57:8c: 52:56:61:76:eb:84:7d:32:eb:9a:34:2b:51:71:f3: a4:f6:81:f4:ea:73:5f:b9:32:33:a9:c3:8e:4b:80: 2c:87:48:6c:fb:79:11:9c:47:70:9b:51:0c:aa:e6: 34:ec:98:e1:4a:3b:19:41:6c:b4:fb:db:48:d8:8d: b9:67:9f:eb:1f:09:b3:63:01:41:1a:d4:e4:06:1b: 50:6d:44:dc:28:1b:ec:26:35:88:31:75:4e:e3:c7: a6:b9:ec:1b:c3:cc:ee:68:d1:58:7b:7f:0a:90:84: a5:2b:e1:4c:ba:9b:8b:36:c8:fb:31:15:8d:7f:61: 43:c0:f9:d7:22:7a:04:f9:e7:22:c7:f5:7c:e9:24: ed:ec:2e:80:d8:c6:6a:e8:8e:f2:12:99:88:80:1b: 34:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:06:1B:92:F0:41:07:DC:7E:A9:C6:A3:8A:8D:E0:8E:3E:FD:95:69 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/98061B92F04107DC7EA9C6A38A8DE08E3EFD9569.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.244.0/23 IPv6: 2405:60c0::/32 Signature Algorithm: sha256WithRSAEncryption 0e:6c:8b:63:66:a0:bc:41:c5:f4:3d:1d:d6:58:80:07:2d:33: 5d:10:20:e1:2e:72:a1:13:c8:ed:d4:5c:b6:9f:53:9a:ff:ff: db:a2:6d:96:26:02:70:df:92:97:f0:3b:d8:95:90:88:e9:f3: 57:e3:89:d0:a3:96:df:42:3e:47:fe:c7:4d:fc:eb:eb:ff:7e: 85:da:e9:8a:d2:4e:0c:d2:53:ec:77:64:33:0a:14:2c:4b:09: 9b:89:57:f8:23:99:cf:77:9c:f4:16:bc:12:62:91:5c:52:3d: 74:08:97:e6:cc:78:6e:97:35:1b:b0:4f:d4:59:3d:f7:12:d3: 08:13:74:fc:39:df:68:97:38:ed:1d:1b:df:73:78:5c:83:aa: c0:fd:7d:64:d9:13:d9:b3:bf:ec:d4:0b:89:51:57:7d:f1:7c: 9e:40:1b:99:01:01:3f:c9:95:7c:8d:3f:a9:02:84:3e:2b:44: 9e:c3:13:d5:d4:66:6e:fe:89:77:f4:25:34:3b:8b:0e:9c:f2: aa:79:cb:3c:5a:cc:58:2e:ac:d7:4f:a3:6a:c9:da:54:18:ed: 8d:b8:ef:b4:fc:18:7c:6b:00:f5:7d:68:98:25:7b:38:27:cb: 94:41:8f:3a:35:bf:9a:6e:f8:87:6f:a6:fc:ff:e1:4f:99:ba: d5:f8:36:3c -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUN5WGgBq7h1vMOMnzha7ZK9naCUQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTYwMVoX DTI3MDUwMjAyMDEwMVowMzExMC8GA1UEAxMoOTgwNjFCOTJGMDQxMDdEQzdFQTlD NkEzOEE4REUwOEUzRUZEOTU2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJx/5scE+v9ujm+1YvvXn8pqYCCVQZSZXv62RRmOU3r6ZX0iqcR1G8B2x/Zg eoxhCrpSP6jjgMlCHrOynb/7yXOwUL/+3m+SO3+bY+/1GYwwFqX90SXMkf6aRl32 2ObwbPIxTgxcXFeMUlZhduuEfTLrmjQrUXHzpPaB9OpzX7kyM6nDjkuALIdIbPt5 EZxHcJtRDKrmNOyY4Uo7GUFstPvbSNiNuWef6x8Js2MBQRrU5AYbUG1E3Cgb7CY1 iDF1TuPHprnsG8PM7mjRWHt/CpCEpSvhTLqbizbI+zEVjX9hQ8D51yJ6BPnnIsf1 fOkk7ewugNjGauiO8hKZiIAbNG8CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJgGG5LwQQfcfqnGo4qN4I4+/ZVpMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NmNmQ1NTgyLTlhNjMtNDFlNS04OTY5LWRiOTE5Mjc3YTVlNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jZjZkNTU4 Mi05YTYzLTQxZTUtODk2OS1kYjkxOTI3N2E1ZTUvMC85ODA2MUI5MkYwNDEwN0RD N0VBOUM2QTM4QThERTA4RTNFRkQ5NTY5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ4/0MA0EAgACMAcDBQAkBWDAMA0GCSqGSIb3DQEBCwUAA4IBAQAObItjZqC8 QcX0PR3WWIAHLTNdECDhLnKhE8jt1Fy2n1Oa///bom2WJgJw35KX8DvYlZCI6fNX 44nQo5bfQj5H/sdN/Ovr/36F2umK0k4M0lPsd2QzChQsSwmbiVf4I5nPd5z0FrwS YpFcUj10CJfmzHhulzUbsE/UWT33EtMIE3T8Od9olzjtHRvfc3hcg6rA/X1k2RPZ s7/s1AuJUVd98XyeQBuZAQE/yZV8jT+pAoQ+K0SewxPV1GZu/ol39CU0O4sOnPKq ecs8WsxYLqzXT6NqydpUGO2NuO+0/Bh8awD1fWiYJXs4J8uUQY86Nb+abviHb6b8 /+FPmbrV+DY8 -----END CERTIFICATE-----Generated at Wed May 13 01:17:02 2026 by rpki-client