$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer File: 98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.cer (raw, json) Hash identifier: Mlzs1wGBStZrHyv66Zck/ir4x5UA55S2zFAlfzU1BME= Subject key identifier: 98:E1:8C:57:CF:78:4B:5E:CB:64:76:FF:DA:34:03:A1:FE:BD:5B:82 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1E8D81E3F4C0E8BC4910D2ECBEEAB23D446AC3D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:26:34 +0000 Certificate not after: Sun 02 May 2027 01:31:34 +0000 Subordinate resources: IP: 103.149.164.0/24 IP: 2001:df3:3280::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:8d:81:e3:f4:c0:e8:bc:49:10:d2:ec:be:ea:b2:3d:44:6a:c3:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:26:34 2026 GMT Not After : May 2 01:31:34 2027 GMT Subject: CN=98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:33:9f:e9:f4:28:50:33:10:f1:30:cc:77:fb: 22:3d:72:af:04:9a:d5:50:3d:12:a5:aa:90:a4:be: 7f:81:8c:25:08:d3:85:2a:d3:96:b5:d1:5f:af:97: 04:fd:d0:07:81:1e:5e:5f:41:5e:0a:0c:86:e4:9d: 9a:d4:ff:e7:39:f0:72:f9:d4:d8:99:0f:10:64:01: b3:18:06:17:bb:d9:bc:23:cb:31:91:c8:ac:ed:2c: ea:15:d7:5d:9d:ec:6f:4f:80:23:57:db:41:9f:65: e6:48:0b:f9:39:8d:e2:5e:94:f2:d6:c4:74:4e:be: 22:7c:3d:11:53:f2:29:fa:2f:31:0b:27:54:73:1c: ac:c0:a1:b9:b5:80:c8:b6:ac:6a:20:10:3b:cb:9d: e1:06:68:52:f9:cc:67:f6:50:da:69:af:6f:1a:38: 13:8d:2e:7c:ab:bc:0e:dd:e3:4f:67:b7:8c:ee:ef: ac:94:29:09:e0:7e:21:28:c1:71:1e:7d:7b:b8:4e: e2:19:19:58:62:33:b1:4f:e2:5f:53:85:a6:7e:a1: f9:04:36:40:47:01:41:79:fc:54:f9:91:8d:06:d2: 65:20:31:40:ce:fa:91:db:04:95:4f:6e:d1:fa:0f: 8e:90:74:19:d3:f9:18:f9:96:51:54:ce:b6:03:83: 4e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:E1:8C:57:CF:78:4B:5E:CB:64:76:FF:DA:34:03:A1:FE:BD:5B:82 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/98E18C57CF784B5ECB6476FFDA3403A1FEBD5B82.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.164.0/24 IPv6: 2001:df3:3280::/48 Signature Algorithm: sha256WithRSAEncryption a2:c1:72:6b:11:c9:17:cb:4d:8c:98:68:03:e1:be:12:0b:31: 27:df:82:c1:de:bf:c2:52:62:70:85:6a:2e:df:e3:cf:e2:44: b5:94:a9:9f:16:c1:61:18:69:cc:10:3c:47:ce:e1:a5:47:60: 45:59:44:c3:76:21:39:2f:7b:22:0a:09:d3:b4:d8:75:46:31: 53:19:96:65:ba:db:68:58:3b:36:56:57:1d:2a:97:d6:f3:01: df:b4:9a:ab:c5:6e:11:2a:b4:ec:ff:fa:53:78:c8:a6:1e:eb: a4:b7:5a:34:5e:ca:5c:71:6c:2c:db:b4:78:e9:70:85:9c:76: c8:d0:e9:8f:7b:2f:f6:a6:80:14:69:9a:54:d4:b3:d7:78:59: 51:a9:84:82:a1:71:7e:99:d4:80:d9:53:b9:21:8c:f7:c5:8a: d0:f0:d9:5e:96:94:76:4d:5d:79:bf:9b:62:35:23:93:e3:39: 0b:e8:ce:2c:2b:82:a8:14:a4:ac:33:3e:99:df:ee:64:93:6d: 05:bc:d2:da:60:41:ba:ff:2d:e3:4e:04:fc:73:23:dd:d8:fe: b9:db:87:2e:ee:fb:c6:10:6e:74:de:3f:2f:74:4c:f7:ef:55: 60:34:1d:e8:db:e1:f1:30:b1:c7:75:c8:80:e9:2a:26:7c:4c: fc:6e:a7:6a -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUHo2B4/TA6LxJENLsvuqyPURqw9kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjYzNFoX DTI3MDUwMjAxMzEzNFowMzExMC8GA1UEAxMoOThFMThDNTdDRjc4NEI1RUNCNjQ3 NkZGREEzNDAzQTFGRUJENUI4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOgzn+n0KFAzEPEwzHf7Ij1yrwSa1VA9EqWqkKS+f4GMJQjThSrTlrXRX6+X BP3QB4EeXl9BXgoMhuSdmtT/5znwcvnU2JkPEGQBsxgGF7vZvCPLMZHIrO0s6hXX XZ3sb0+AI1fbQZ9l5kgL+TmN4l6U8tbEdE6+Inw9EVPyKfovMQsnVHMcrMChubWA yLasaiAQO8ud4QZoUvnMZ/ZQ2mmvbxo4E40ufKu8Dt3jT2e3jO7vrJQpCeB+ISjB cR59e7hO4hkZWGIzsU/iX1OFpn6h+QQ2QEcBQXn8VPmRjQbSZSAxQM76kdsElU9u 0foPjpB0GdP5GPmWUVTOtgODTssCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJjhjFfPeEtey2R2/9o0A6H+vVuCMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzlmOWM0NDZmLWQ5NzEtNGI1ZS1iMjY5LTFlODNkM2ExNGZlZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85ZjljNDQ2 Zi1kOTcxLTRiNWUtYjI2OS0xZTgzZDNhMTRmZWYvMC85OEUxOEM1N0NGNzg0QjVF Q0I2NDc2RkZEQTM0MDNBMUZFQkQ1QjgyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ5WkMA8EAgACMAkDBwAgAQ3zMoAwDQYJKoZIhvcNAQELBQADggEBAKLBcmsR yRfLTYyYaAPhvhILMSffgsHev8JSYnCFai7f48/iRLWUqZ8WwWEYacwQPEfO4aVH YEVZRMN2ITkveyIKCdO02HVGMVMZlmW622hYOzZWVx0ql9bzAd+0mqvFbhEqtOz/ +lN4yKYe66S3WjReylxxbCzbtHjpcIWcdsjQ6Y97L/amgBRpmlTUs9d4WVGphIKh cX6Z1IDZU7khjPfFitDw2V6WlHZNXXm/m2I1I5PjOQvoziwrgqgUpKwzPpnf7mST bQW80tpgQbr/LeNOBPxzI93Y/rnbhy7u+8YQbnTePy90TPfvVWA0Hejb4fEwscd1 yIDpKiZ8TPxup2o= -----END CERTIFICATE-----Generated at Tue May 12 22:47:26 2026 by rpki-client