$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/988BEA205B597B525439E1C7DF548E148BDF5DE3.cer File: 988BEA205B597B525439E1C7DF548E148BDF5DE3.cer (raw, json) Hash identifier: a0LNjXUerAH6YhYwdBqtF2lWfI9ThOoWgeyqzwGILTk= Subject key identifier: 98:8B:EA:20:5B:59:7B:52:54:39:E1:C7:DF:54:8E:14:8B:DF:5D:E3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 231B5C749B8D9B70567D16CB5F54B5C31C574B72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft caRepository: rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:01:02 +0000 Certificate not after: Sun 02 May 2027 00:06:02 +0000 Subordinate resources: IP: 103.147.116.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:1b:5c:74:9b:8d:9b:70:56:7d:16:cb:5f:54:b5:c3:1c:57:4b:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:01:02 2026 GMT Not After : May 2 00:06:02 2027 GMT Subject: CN=988BEA205B597B525439E1C7DF548E148BDF5DE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c8:72:e5:fc:e7:28:9b:de:7d:3e:9a:8d:c4: dc:17:be:0d:7e:de:f2:2e:09:c3:dc:40:64:a6:0a: 00:28:a4:4c:9e:74:fb:a7:53:fc:97:f5:d4:45:5f: 85:af:3a:6d:4f:49:ab:b1:45:89:ce:9e:30:77:70: bc:e4:11:46:86:b6:42:04:8c:5c:a1:28:43:e9:48: 14:48:98:d1:bd:10:35:c5:82:08:31:f4:b2:e2:ae: 4e:25:ef:7a:b8:d5:c5:c1:0a:9b:2c:6e:04:7b:4b: e9:9a:10:ab:59:51:8e:df:46:ef:8d:d1:e5:0b:9b: af:d2:45:25:30:d9:4b:b3:d6:8d:71:1d:60:a6:e0: 3b:bf:44:4f:cc:b9:91:e9:a7:ea:b7:d1:06:7e:05: de:9a:e1:8c:11:95:6c:83:62:4f:55:08:85:e1:99: a9:23:26:62:a5:74:c4:21:2b:d7:fd:c4:d0:26:af: 21:14:a8:dd:68:7a:d7:1c:da:ab:49:89:cd:c3:36: 27:c2:14:49:c3:28:3a:b6:fe:7b:fc:31:16:60:00: 5a:7a:c2:cb:97:8e:50:0f:56:30:61:92:fc:52:56: ff:f9:ac:ff:1f:af:db:0e:9e:8b:0f:21:d0:4a:6d: 48:88:5c:bb:00:18:1b:1e:9b:04:c1:95:d1:9a:e6: b6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:8B:EA:20:5B:59:7B:52:54:39:E1:C7:DF:54:8E:14:8B:DF:5D:E3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.116.0/23 Signature Algorithm: sha256WithRSAEncryption 39:ab:58:13:a4:3d:a5:44:9f:40:e8:37:6a:70:30:ff:83:60: 79:14:ff:1c:1c:74:5a:40:59:60:f4:69:b1:b1:7a:77:ba:b9: 2c:b1:ed:63:55:24:7f:0b:69:d0:f0:18:95:36:df:bd:f9:f6: a8:ff:d5:f3:04:09:7f:35:17:6d:b4:3b:65:03:bf:49:3a:5e: f0:5a:1a:f7:78:58:81:75:26:c6:79:68:c3:b9:43:0a:22:5c: 4c:a6:c5:2e:a9:e1:76:5c:89:ae:3a:52:08:09:19:17:34:9d: 7d:fb:f9:7f:14:bd:71:2b:55:c8:d2:85:d6:cc:0e:9f:d9:ab: 2a:c0:f5:bd:48:cc:8c:8a:96:77:d4:d8:21:73:5f:27:4f:69: 24:1a:16:7d:c7:44:f4:25:b6:18:15:de:3f:ac:3e:99:1e:8a: c6:81:d9:7c:59:19:90:57:85:1b:0d:7a:d2:eb:e1:e4:5f:4b: ad:cf:f1:6d:28:62:43:a4:5f:17:9a:49:e2:a0:8b:22:19:4c: 2a:10:de:ab:80:07:36:18:c7:ed:6c:ce:38:ba:61:6c:aa:91: 43:e8:3c:cb:bd:b4:3f:ac:87:b7:df:0c:a9:1c:f6:d6:17:9b: 70:74:14:7d:79:29:90:df:fd:b4:2d:c9:00:2b:d3:bf:bf:a3: b6:d2:06:ce -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUIxtcdJuNm3BWfRbLX1S1wxxXS3IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDEwMloX DTI3MDUwMjAwMDYwMlowMzExMC8GA1UEAxMoOTg4QkVBMjA1QjU5N0I1MjU0MzlF MUM3REY1NDhFMTQ4QkRGNURFMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOjIcuX85yib3n0+mo3E3Be+DX7e8i4Jw9xAZKYKACikTJ50+6dT/Jf11EVf ha86bU9Jq7FFic6eMHdwvOQRRoa2QgSMXKEoQ+lIFEiY0b0QNcWCCDH0suKuTiXv erjVxcEKmyxuBHtL6ZoQq1lRjt9G743R5Qubr9JFJTDZS7PWjXEdYKbgO79ET8y5 kemn6rfRBn4F3prhjBGVbINiT1UIheGZqSMmYqV0xCEr1/3E0CavIRSo3Wh61xza q0mJzcM2J8IUScMoOrb+e/wxFmAAWnrCy5eOUA9WMGGS/FJW//ms/x+v2w6eiw8h 0EptSIhcuwAYGx6bBMGV0ZrmtlECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJiL6iBbWXtSVDnhx99UjhSL313jMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzIwYTc4YzA2LTFkNmUtNDNiNi1iZjMwLTg2MGNlYmRkZmIzMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yMGE3OGMw Ni0xZDZlLTQzYjYtYmYzMC04NjBjZWJkZGZiMzIvMC85ODhCRUEyMDVCNTk3QjUy NTQzOUUxQzdERjU0OEUxNDhCREY1REUzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ5N0MA0GCSqGSIb3DQEBCwUAA4IBAQA5q1gTpD2lRJ9A6DdqcDD/g2B5FP8c HHRaQFlg9GmxsXp3urksse1jVSR/C2nQ8BiVNt+9+fao/9XzBAl/NRdttDtlA79J Ol7wWhr3eFiBdSbGeWjDuUMKIlxMpsUuqeF2XImuOlIICRkXNJ19+/l/FL1xK1XI 0oXWzA6f2asqwPW9SMyMipZ31Nghc18nT2kkGhZ9x0T0JbYYFd4/rD6ZHorGgdl8 WRmQV4UbDXrS6+HkX0utz/FtKGJDpF8XmknioIsiGUwqEN6rgAc2GMftbM44umFs qpFD6DzLvbQ/rIe33wypHPbWF5twdBR9eSmQ3/20LckAK9O/v6O20gbO -----END CERTIFICATE-----Generated at Tue May 12 22:02:37 2026 by rpki-client