$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/98E2D88430E0F6BCECDC35B8596FF471265D238B.cer File: 98E2D88430E0F6BCECDC35B8596FF471265D238B.cer (raw, json) Hash identifier: whnjfZU6IC4725iUDgPSJkKjwZBC/OqRk/JLunjr+5E= Subject key identifier: 98:E2:D8:84:30:E0:F6:BC:EC:DC:35:B8:59:6F:F4:71:26:5D:23:8B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 05CABB0AED19AC7249E680347E4FB409E59D7139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:33:03 +0000 Certificate not after: Sun 02 May 2027 01:38:03 +0000 Subordinate resources: IP: 103.161.108.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ca:bb:0a:ed:19:ac:72:49:e6:80:34:7e:4f:b4:09:e5:9d:71:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:33:03 2026 GMT Not After : May 2 01:38:03 2027 GMT Subject: CN=98E2D88430E0F6BCECDC35B8596FF471265D238B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e5:04:e5:b1:ba:4c:ad:9d:62:8a:cf:5d:28: 4e:64:8a:db:0d:aa:a9:df:cb:1e:ae:28:3f:fb:64: f8:70:9f:b1:5d:03:67:29:d0:4b:36:63:85:70:b6: cd:00:98:56:9d:b7:a0:f5:85:17:db:78:7c:24:cd: d9:68:3e:79:4d:db:c2:a2:f2:1c:1b:2e:65:60:fc: 6c:48:04:96:0e:fa:cb:87:8e:30:85:b5:88:5a:41: c8:3e:24:a2:82:1d:d4:d5:66:43:08:c5:5f:31:8a: 3c:66:a9:44:c3:28:66:88:78:ca:c3:2b:f0:3b:f6: 37:8a:62:a7:66:ae:ee:b5:11:83:ab:24:10:6b:3a: 8e:69:e4:ce:42:54:f8:8d:0f:c7:d0:d4:d2:df:19: 86:d5:66:1e:c2:e6:bc:b2:ae:42:29:b7:16:ff:d1: fe:76:2e:a8:46:2d:43:a1:5c:3a:a5:23:54:cf:f1: f2:a0:a4:84:1c:4e:37:48:ef:60:4c:ac:f2:f2:e3: d5:5e:bf:10:ba:f5:38:17:46:d0:6a:75:45:9c:55: 08:7d:ae:f8:d3:b9:01:d9:47:08:5a:b0:8e:cd:e9: 09:90:59:ec:33:c8:fd:61:e9:61:b1:2e:4d:21:1b: e4:f3:64:d6:54:6b:fa:40:69:f3:7e:38:62:2c:2e: 04:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:E2:D8:84:30:E0:F6:BC:EC:DC:35:B8:59:6F:F4:71:26:5D:23:8B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/98E2D88430E0F6BCECDC35B8596FF471265D238B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.108.0/24 Signature Algorithm: sha256WithRSAEncryption 14:19:ca:96:0e:85:81:da:83:ea:2e:cc:2c:f8:3f:2e:07:bf: 27:9a:03:0a:56:19:ad:c1:07:4c:e9:9b:62:ae:b1:89:52:f5: 04:f7:dc:48:af:0e:b1:07:4b:dd:61:1b:de:e3:d0:a8:ce:f0: cf:29:5f:3d:32:29:d2:f3:c4:8c:7f:1c:99:60:f2:82:b2:67: 74:d3:c1:16:28:6e:21:bf:5a:0b:f8:13:46:c2:3a:8d:6b:2e: d2:52:05:bd:e8:26:92:58:3b:03:89:d4:2b:4d:3b:18:85:0e: 61:0e:d6:86:76:1b:2c:04:2d:7e:f9:d1:ef:5e:cc:55:86:c5: fc:7d:7f:2e:05:d1:b9:b5:72:76:d9:f7:b3:89:c5:5b:c1:a3: b6:56:bd:d5:a9:b7:b7:d8:f5:31:bc:aa:64:84:23:a1:a9:7f: c3:10:6e:fd:55:4d:a9:6c:06:f3:8e:fc:52:96:ea:22:60:d7: 32:c3:90:93:a5:86:fb:8f:ae:9e:af:32:42:06:b1:27:6b:ef: 9d:73:a4:30:be:43:98:ea:9c:bd:c0:0d:17:e5:0f:1c:26:b0: af:e2:a7:0c:75:d2:33:b4:91:a5:fe:da:3a:f7:2c:9d:ce:66: 39:34:4b:11:a0:7b:2c:3a:39:cd:5d:dd:0b:bc:a2:d4:73:b1: 93:e4:46:51 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUBcq7Cu0ZrHJJ5oA0fk+0CeWdcTkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzMwM1oX DTI3MDUwMjAxMzgwM1owMzExMC8GA1UEAxMoOThFMkQ4ODQzMEUwRjZCQ0VDREMz NUI4NTk2RkY0NzEyNjVEMjM4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTlBOWxukytnWKKz10oTmSK2w2qqd/LHq4oP/tk+HCfsV0DZynQSzZjhXC2 zQCYVp23oPWFF9t4fCTN2Wg+eU3bwqLyHBsuZWD8bEgElg76y4eOMIW1iFpByD4k ooId1NVmQwjFXzGKPGapRMMoZoh4ysMr8Dv2N4pip2au7rURg6skEGs6jmnkzkJU +I0Px9DU0t8ZhtVmHsLmvLKuQim3Fv/R/nYuqEYtQ6FcOqUjVM/x8qCkhBxON0jv YEys8vLj1V6/ELr1OBdG0Gp1RZxVCH2u+NO5AdlHCFqwjs3pCZBZ7DPI/WHpYbEu TSEb5PNk1lRr+kBp8344YiwuBCMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJji2IQw4Pa87Nw1uFlv9HEmXSOLMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E4OWEwNjYxLTMxZWUtNDlhMi1hZTlmLWY2ZDU3M2ExN2RmNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hODlhMDY2 MS0zMWVlLTQ5YTItYWU5Zi1mNmQ1NzNhMTdkZjcvMC85OEUyRDg4NDMwRTBGNkJD RUNEQzM1Qjg1OTZGRjQ3MTI2NUQyMzhCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6FsMA0GCSqGSIb3DQEBCwUAA4IBAQAUGcqWDoWB2oPqLsws+D8uB78nmgMK VhmtwQdM6ZtirrGJUvUE99xIrw6xB0vdYRve49CozvDPKV89MinS88SMfxyZYPKC smd008EWKG4hv1oL+BNGwjqNay7SUgW96CaSWDsDidQrTTsYhQ5hDtaGdhssBC1+ +dHvXsxVhsX8fX8uBdG5tXJ22fezicVbwaO2Vr3Vqbe32PUxvKpkhCOhqX/DEG79 VU2pbAbzjvxSluoiYNcyw5CTpYb7j66erzJCBrEna++dc6QwvkOY6py9wA0X5Q8c JrCv4qcMddIztJGl/to69yydzmY5NEsRoHssOjnNXd0LvKLUc7GT5EZR -----END CERTIFICATE-----Generated at Tue May 12 22:47:39 2026 by rpki-client