$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/98EC8965126CEAAF07DB20456F30ADDA7E619614.cer File: 98EC8965126CEAAF07DB20456F30ADDA7E619614.cer (raw, json) Hash identifier: tIPevFZ42e7dhLo3DFkaw7xQGtlSWHCC5Z4V2pgZNUs= Subject key identifier: 98:EC:89:65:12:6C:EA:AF:07:DB:20:45:6F:30:AD:DA:7E:61:96:14 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 035D27E0FA2BA634337C2A6E0B31C4A417D46297 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:37:56 +0000 Certificate not after: Sun 02 May 2027 02:42:56 +0000 Subordinate resources: IP: 103.172.17.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:5d:27:e0:fa:2b:a6:34:33:7c:2a:6e:0b:31:c4:a4:17:d4:62:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:37:56 2026 GMT Not After : May 2 02:42:56 2027 GMT Subject: CN=98EC8965126CEAAF07DB20456F30ADDA7E619614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5d:8f:7a:56:59:25:80:95:4a:95:9d:92:be: b1:cf:99:a2:4b:e9:13:ba:0f:ed:fb:f4:2e:9d:49: fa:e6:19:6e:86:8c:4b:2a:65:db:6f:9b:30:13:74: 26:cf:5c:16:48:c4:13:38:61:b4:21:74:f9:ef:a7: 4a:b7:86:77:6e:7b:71:02:16:b9:bf:b5:3b:55:cf: fb:53:84:80:c5:2a:bf:b5:de:98:af:4f:a0:ac:0c: 6e:9b:36:fc:62:2a:d5:5f:d8:e0:93:ee:1d:57:e8: 63:33:55:17:d1:0e:e2:b1:51:aa:d9:ac:4e:73:5d: b1:c7:4c:58:7d:ad:1d:57:f6:23:73:69:3e:14:a4: f4:71:93:44:32:7f:c1:d0:85:20:5f:22:c7:2d:6c: 65:ae:d9:92:1a:62:eb:b2:a6:e0:7a:28:e0:7b:0b: 15:20:8a:67:4a:b4:f3:72:73:de:62:ee:e3:7f:57: 0f:24:d9:bb:09:79:7e:69:db:65:f8:77:cb:dc:cc: 08:c3:80:1b:de:c7:00:1d:34:1c:2c:78:9b:31:94: 38:d8:eb:b1:59:24:23:80:9a:ca:4b:e7:9f:32:c3: 3f:3b:a2:84:e8:12:1b:b0:ed:da:42:07:33:d8:63: f9:96:3b:7a:f6:69:75:7e:97:1f:59:6a:df:c3:02: d9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:EC:89:65:12:6C:EA:AF:07:DB:20:45:6F:30:AD:DA:7E:61:96:14 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/98EC8965126CEAAF07DB20456F30ADDA7E619614.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.17.0/24 Signature Algorithm: sha256WithRSAEncryption 08:1f:e2:38:6f:40:68:ac:8c:1b:86:de:4f:1c:b4:d9:92:3c: 3a:2e:0f:ad:4f:a9:35:9e:a4:c7:f3:eb:ec:ad:ab:f4:c0:7f: a7:02:c3:e6:e0:4b:c2:44:63:80:d3:25:d4:d8:b5:1c:c9:2f: 39:1e:43:11:f2:5f:5e:5c:28:2e:4f:18:eb:ad:73:61:2a:1e: 1c:31:cd:19:48:d3:95:6a:d1:90:d0:80:9b:3d:24:0e:a5:81: 33:0f:e7:d8:24:0b:ac:ee:3d:f6:c3:02:e3:5a:68:12:8a:8f: 86:65:c0:e1:b6:89:e9:ca:51:69:bf:1c:ba:b6:5a:f8:0b:3d: 17:82:03:65:2e:54:bc:62:50:a6:34:db:f0:37:35:03:c4:65: f0:78:9a:34:69:99:2e:97:1f:73:69:7e:93:1d:18:db:51:2e: af:08:77:dd:f7:93:fb:26:a4:7e:dd:17:de:8b:aa:5e:c1:3d: ed:80:75:3c:ab:86:88:5a:c9:b4:40:e9:2b:fd:57:82:d6:f2: 06:8c:23:28:58:aa:f5:72:f9:39:77:0e:bd:67:e9:ce:62:22: ec:ce:14:61:ec:dc:37:9b:cd:21:a6:01:53:93:a4:d8:05:b1: a8:d7:9b:2e:21:c1:f0:92:45:f9:9d:58:7b:f5:46:ad:d6:66: 1a:b0:ac:d4 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUA10n4PorpjQzfCpuCzHEpBfUYpcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzc1NloX DTI3MDUwMjAyNDI1NlowMzExMC8GA1UEAxMoOThFQzg5NjUxMjZDRUFBRjA3REIy MDQ1NkYzMEFEREE3RTYxOTYxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOFdj3pWWSWAlUqVnZK+sc+ZokvpE7oP7fv0Lp1J+uYZboaMSypl22+bMBN0 Js9cFkjEEzhhtCF0+e+nSreGd257cQIWub+1O1XP+1OEgMUqv7XemK9PoKwMbps2 /GIq1V/Y4JPuHVfoYzNVF9EO4rFRqtmsTnNdscdMWH2tHVf2I3NpPhSk9HGTRDJ/ wdCFIF8ixy1sZa7Zkhpi67Km4Hoo4HsLFSCKZ0q083Jz3mLu439XDyTZuwl5fmnb Zfh3y9zMCMOAG97HAB00HCx4mzGUONjrsVkkI4CaykvnnzLDPzuihOgSG7Dt2kIH M9hj+ZY7evZpdX6XH1lq38MC2bMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJjsiWUSbOqvB9sgRW8wrdp+YZYUMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y2Njg4NTRhLTNmMjQtNDBiMS04MGNkLWU2MzZhYTdlOGIxYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mNjY4ODU0 YS0zZjI0LTQwYjEtODBjZC1lNjM2YWE3ZThiMWMvMC85OEVDODk2NTEyNkNFQUFG MDdEQjIwNDU2RjMwQUREQTdFNjE5NjE0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6wRMA0GCSqGSIb3DQEBCwUAA4IBAQAIH+I4b0BorIwbht5PHLTZkjw6Lg+t T6k1nqTH8+vsrav0wH+nAsPm4EvCRGOA0yXU2LUcyS85HkMR8l9eXCguTxjrrXNh Kh4cMc0ZSNOVatGQ0ICbPSQOpYEzD+fYJAus7j32wwLjWmgSio+GZcDhtonpylFp vxy6tlr4Cz0XggNlLlS8YlCmNNvwNzUDxGXweJo0aZkulx9zaX6THRjbUS6vCHfd 95P7JqR+3Rfei6pewT3tgHU8q4aIWsm0QOkr/VeC1vIGjCMoWKr1cvk5dw69Z+nO YiLszhRh7Nw3m80hpgFTk6TYBbGo15suIcHwkkX5nVh79Uat1mYasKzU -----END CERTIFICATE-----Generated at Tue May 12 22:10:02 2026 by rpki-client