$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer File: 986AA3A06E40D171D993DC74DEF4BE498C29EDC5.cer (raw, json) Hash identifier: Pd2gXpRF4UlKj9cyopF8sopHSiPXs1seosai1PhGies= Subject key identifier: 98:6A:A3:A0:6E:40:D1:71:D9:93:DC:74:DE:F4:BE:49:8C:29:ED:C5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 38A88B46924C038E095519C598E1A9DB86267A19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:14:29 +0000 Certificate not after: Sun 02 May 2027 02:19:29 +0000 Subordinate resources: IP: 103.130.80.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a8:8b:46:92:4c:03:8e:09:55:19:c5:98:e1:a9:db:86:26:7a:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:14:29 2026 GMT Not After : May 2 02:19:29 2027 GMT Subject: CN=986AA3A06E40D171D993DC74DEF4BE498C29EDC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b3:e9:64:87:da:bf:bc:e0:96:e7:eb:fb:10: 31:bb:4a:3b:17:ff:00:65:44:52:89:71:c5:e7:64: bd:1c:d2:e5:f2:9d:99:8f:9d:23:66:40:ac:7e:3f: 03:8d:b7:78:60:e9:83:ab:ab:f2:6a:ca:5b:1e:24: 17:8b:10:7f:d0:c0:fd:dc:16:89:4d:8f:2b:9a:e1: 82:33:6f:7f:fe:8b:66:39:d3:28:e3:a3:16:ab:f8: a6:09:86:a4:40:c3:a6:fe:7b:6f:fd:00:db:d1:c4: b2:92:18:d4:3b:0d:f7:88:d0:87:7c:f6:39:0d:77: 80:d6:fb:0c:78:72:d4:38:54:06:f3:78:07:09:ca: 68:83:42:92:76:e9:c3:ce:14:5c:34:67:29:aa:fe: c4:d8:ab:02:93:69:09:ab:b2:ff:d2:43:df:7d:92: 8a:75:b2:80:47:01:29:82:99:03:fe:e1:a0:51:39: 9a:79:4d:62:0c:d9:c3:9c:7a:2e:0a:b8:59:0f:fd: 39:09:0f:bc:65:de:bd:1e:3e:aa:e6:07:b8:cf:b6: ac:57:af:90:a3:c7:f3:2c:ea:28:8b:68:0d:e3:f2: 92:ec:4b:ba:4f:9c:8f:40:50:a3:68:ca:2f:63:ff: e1:b7:87:87:13:fc:fd:d6:c8:58:2e:1b:57:d5:ca: ee:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:6A:A3:A0:6E:40:D1:71:D9:93:DC:74:DE:F4:BE:49:8C:29:ED:C5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/986AA3A06E40D171D993DC74DEF4BE498C29EDC5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.130.80.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:e7:41:da:f2:cc:bb:6f:c2:ab:1b:5e:c4:06:55:19:46:ff: a3:fa:4a:6c:b3:79:82:c7:32:59:1b:8f:ce:74:54:2f:eb:79: a2:0e:e2:bf:87:70:0e:32:bf:86:ab:91:95:6e:2e:c9:7d:ce: 4f:a8:79:34:8d:40:7f:73:fe:ac:82:05:52:68:5a:23:d9:16: e8:7c:c6:2c:53:fd:89:29:20:46:13:36:97:73:fd:42:7f:8e: 84:12:5b:1f:55:ae:8e:3a:a9:fb:c8:40:6b:1b:73:e8:0c:6b: b0:1d:11:7b:9e:d9:09:d5:36:9d:ec:1c:b1:40:27:9b:02:1d: 79:5b:2a:22:3a:2c:51:34:b5:73:ec:e6:ce:d6:b8:2f:38:20: 45:d9:dd:45:66:be:46:8e:ff:60:6d:70:b9:6f:49:4c:a8:c8: fe:7e:20:db:d2:4f:5f:e2:d9:70:f4:af:58:e1:8e:03:eb:c4: f1:5f:79:31:fb:53:5e:0e:ce:9b:1d:10:cc:65:31:45:52:a1: 0d:e7:b9:98:d8:1b:f9:37:e5:cc:85:31:78:df:ad:53:39:9a: 95:ec:52:9d:03:c5:45:10:0a:6e:d1:b1:83:df:05:eb:1f:dc: 96:c0:6f:9d:21:99:aa:3e:f8:68:90:fc:ed:fc:41:fd:ea:b3: 5f:23:02:f8 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUOKiLRpJMA44JVRnFmOGp24YmehkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTQyOVoX DTI3MDUwMjAyMTkyOVowMzExMC8GA1UEAxMoOTg2QUEzQTA2RTQwRDE3MUQ5OTNE Qzc0REVGNEJFNDk4QzI5RURDNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJez6WSH2r+84Jbn6/sQMbtKOxf/AGVEUolxxedkvRzS5fKdmY+dI2ZArH4/ A423eGDpg6ur8mrKWx4kF4sQf9DA/dwWiU2PK5rhgjNvf/6LZjnTKOOjFqv4pgmG pEDDpv57b/0A29HEspIY1DsN94jQh3z2OQ13gNb7DHhy1DhUBvN4BwnKaINCknbp w84UXDRnKar+xNirApNpCauy/9JD332SinWygEcBKYKZA/7hoFE5mnlNYgzZw5x6 Lgq4WQ/9OQkPvGXevR4+quYHuM+2rFevkKPH8yzqKItoDePykuxLuk+cj0BQo2jK L2P/4beHhxP8/dbIWC4bV9XK7t0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJhqo6BuQNFx2ZPcdN70vkmMKe3FMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2U0YWU1N2IzLTQ2YTItNDIzZC1iMjQ0LTAzZmZlZTEwNWI3Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lNGFlNTdi My00NmEyLTQyM2QtYjI0NC0wM2ZmZWUxMDViNzcvMC85ODZBQTNBMDZFNDBEMTcx RDk5M0RDNzRERUY0QkU0OThDMjlFREM1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ4JQMA0GCSqGSIb3DQEBCwUAA4IBAQA850Ha8sy7b8KrG17EBlUZRv+j+kps s3mCxzJZG4/OdFQv63miDuK/h3AOMr+Gq5GVbi7Jfc5PqHk0jUB/c/6sggVSaFoj 2RbofMYsU/2JKSBGEzaXc/1Cf46EElsfVa6OOqn7yEBrG3PoDGuwHRF7ntkJ1Tad 7ByxQCebAh15WyoiOixRNLVz7ObO1rgvOCBF2d1FZr5Gjv9gbXC5b0lMqMj+fiDb 0k9f4tlw9K9Y4Y4D68TxX3kx+1NeDs6bHRDMZTFFUqEN57mY2Bv5N+XMhTF4361T OZqV7FKdA8VFEApu0bGD3wXrH9yWwG+dIZmqPvhokPzt/EH96rNfIwL4 -----END CERTIFICATE-----Generated at Tue May 12 22:03:49 2026 by rpki-client