$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/98831B982341FB41F283DADC573DB0C97F4466FD.cer File: 98831B982341FB41F283DADC573DB0C97F4466FD.cer (raw, json) Hash identifier: mcnes47dC8EPsmLayb9BQEHGWWrQEIuuQ7ylXzxOqgs= Subject key identifier: 98:83:1B:98:23:41:FB:41:F2:83:DA:DC:57:3D:B0:C9:7F:44:66:FD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2FCEE6036E4C01BD97BF56E0F471E78B8BDDD285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/98831B982341FB41F283DADC573DB0C97F4466FD.mft caRepository: rsync://rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:53:39 +0000 Certificate not after: Sat 01 May 2027 23:58:39 +0000 Subordinate resources: IP: 103.144.250.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ce:e6:03:6e:4c:01:bd:97:bf:56:e0:f4:71:e7:8b:8b:dd:d2:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:53:39 2026 GMT Not After : May 1 23:58:39 2027 GMT Subject: CN=98831B982341FB41F283DADC573DB0C97F4466FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c6:0e:bb:fa:d1:42:96:72:a8:2e:6b:69:77: 98:0e:96:65:6a:de:34:94:3c:89:ae:b9:54:e4:33: 04:03:4c:b4:6f:fb:38:56:4f:80:73:a5:e8:ce:9a: c3:f5:aa:97:24:87:82:6e:b2:e4:05:c9:2d:97:65: e0:ea:1b:ae:99:1f:04:b9:82:4c:c1:b2:eb:b5:fb: b9:9d:92:b5:7c:85:e2:eb:e9:3c:d3:03:23:78:48: e5:b6:b0:bb:2f:4d:d1:53:b2:4c:6c:64:32:84:3c: a5:f9:25:ff:8d:b3:32:cc:85:ef:8e:cd:7a:92:da: 14:79:8d:9f:dd:ab:d6:0c:23:53:28:f7:63:04:5d: 66:72:b1:e7:24:97:4c:80:f0:7f:41:fb:65:43:d9: 23:c6:61:07:de:01:69:b1:00:34:d5:60:8d:3d:49: e8:b3:19:e6:70:e0:f2:41:c8:62:c3:1f:dc:c6:cf: 9d:ee:22:ab:dd:22:ca:84:a5:0d:88:ab:69:cb:08: be:80:cb:b4:9d:b8:b2:fc:05:6f:cb:c3:c4:64:42: 28:86:03:bf:11:97:dd:f1:44:b4:cc:ae:01:ff:41: d7:0d:cc:8d:71:8d:af:bd:d7:30:c9:9e:e0:65:48: 61:c2:6c:f6:b8:10:ca:25:43:b7:45:7e:be:12:04: 60:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:83:1B:98:23:41:FB:41:F2:83:DA:DC:57:3D:B0:C9:7F:44:66:FD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/98831B982341FB41F283DADC573DB0C97F4466FD.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.250.0/23 Signature Algorithm: sha256WithRSAEncryption 46:68:6b:11:05:51:59:ab:48:24:5e:f3:5b:a5:a3:25:ae:bf: a7:aa:8d:b3:e8:9f:ee:b0:07:a9:9f:d2:61:65:48:66:37:d0: 4d:8f:d8:29:bb:eb:e2:50:dc:21:f1:11:76:96:3e:95:09:9c: 81:99:2a:cf:52:5a:0d:20:d4:52:b5:98:5f:42:e7:97:a3:7a: ba:3b:93:bf:2f:a7:ab:74:7f:a2:05:94:fc:dd:1b:17:c0:0f: 56:27:2f:cf:d4:5f:d5:13:a0:28:67:1d:ed:24:59:92:e6:b2: 33:76:a2:04:64:bd:44:83:7c:ad:5f:8b:fc:9e:37:2b:b1:1e: 7f:90:8a:35:1c:86:37:cd:7b:f4:d6:4e:fe:9b:95:c3:f9:78: 2d:94:b0:81:09:86:76:76:2f:86:eb:f6:97:85:d8:19:e9:5e: d0:35:8a:70:17:61:98:6b:b1:97:be:bb:06:10:02:1e:19:d6: e7:9c:a5:24:b8:89:9c:2d:78:e7:2d:59:32:0d:7a:81:cc:42: 88:5f:83:d9:db:0e:c5:5d:aa:a7:e6:43:a6:74:8e:ef:20:0d: 38:36:70:ca:ef:ed:c8:b0:90:f5:c8:49:19:15:1c:9e:6a:45: ed:40:47:79:0e:b1:f6:fb:99:bd:9e:59:88:b1:e0:eb:5f:64: f6:20:6c:bf -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUL87mA25MAb2Xv1bg9HHni4vd0oUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTMzOVoX DTI3MDUwMTIzNTgzOVowMzExMC8GA1UEAxMoOTg4MzFCOTgyMzQxRkI0MUYyODNE QURDNTczREIwQzk3RjQ0NjZGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOPGDrv60UKWcqgua2l3mA6WZWreNJQ8ia65VOQzBANMtG/7OFZPgHOl6M6a w/WqlySHgm6y5AXJLZdl4OobrpkfBLmCTMGy67X7uZ2StXyF4uvpPNMDI3hI5baw uy9N0VOyTGxkMoQ8pfkl/42zMsyF747NepLaFHmNn92r1gwjUyj3YwRdZnKx5ySX TIDwf0H7ZUPZI8ZhB94BabEANNVgjT1J6LMZ5nDg8kHIYsMf3MbPne4iq90iyoSl DYiracsIvoDLtJ24svwFb8vDxGRCKIYDvxGX3fFEtMyuAf9B1w3MjXGNr73XMMme 4GVIYcJs9rgQyiVDt0V+vhIEYOMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJiDG5gjQftB8oPa3Fc9sMl/RGb9MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE1YmY3MThkLTkxMWUtNDNkNi04ZTNjLTBkMWIzNjQ2ZTI3Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xNWJmNzE4 ZC05MTFlLTQzZDYtOGUzYy0wZDFiMzY0NmUyNzYvMC85ODgzMUI5ODIzNDFGQjQx RjI4M0RBREM1NzNEQjBDOTdGNDQ2NkZELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ5D6MA0GCSqGSIb3DQEBCwUAA4IBAQBGaGsRBVFZq0gkXvNbpaMlrr+nqo2z 6J/usAepn9JhZUhmN9BNj9gpu+viUNwh8RF2lj6VCZyBmSrPUloNINRStZhfQueX o3q6O5O/L6erdH+iBZT83RsXwA9WJy/P1F/VE6AoZx3tJFmS5rIzdqIEZL1Eg3yt X4v8njcrsR5/kIo1HIY3zXv01k7+m5XD+XgtlLCBCYZ2di+G6/aXhdgZ6V7QNYpw F2GYa7GXvrsGEAIeGdbnnKUkuImcLXjnLVkyDXqBzEKIX4PZ2w7FXaqn5kOmdI7v IA04NnDK7+3IsJD1yEkZFRyeakXtQEd5DrH2+5m9nlmIseDrX2T2IGy/ -----END CERTIFICATE-----Generated at Tue May 12 22:10:07 2026 by rpki-client