$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/993E93A0664A9D902D978F3596929ADCAC0D2885.cer File: 993E93A0664A9D902D978F3596929ADCAC0D2885.cer (raw, json) Hash identifier: 4KceksVwHROBp+WdgD8zzu+I8ZlrUq1BfWajETKsW+M= Subject key identifier: 99:3E:93:A0:66:4A:9D:90:2D:97:8F:35:96:92:9A:DC:AC:0D:28:85 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 05EA5F28FFAD9E39C837D457018152BFDC8E9AF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft caRepository: rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:50:13 +0000 Certificate not after: Sat 01 May 2027 23:55:13 +0000 Subordinate resources: IP: 103.53.184.0/23 IP: 103.85.116.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ea:5f:28:ff:ad:9e:39:c8:37:d4:57:01:81:52:bf:dc:8e:9a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:50:13 2026 GMT Not After : May 1 23:55:13 2027 GMT Subject: CN=993E93A0664A9D902D978F3596929ADCAC0D2885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e9:a5:54:20:c1:2d:55:0e:2d:7e:b2:c3:1d: 11:f9:f9:8c:9a:bd:f2:8f:cb:9a:3d:ad:6d:10:c2: 49:5c:08:3a:eb:46:36:34:66:49:47:f9:96:41:9e: c8:87:89:5b:78:5b:19:6e:40:c7:ca:d9:d0:bd:12: a4:9f:62:0b:cb:a8:9b:55:84:96:d6:8f:0c:bb:b9: a4:4d:0d:94:14:74:5f:f3:97:ef:30:17:c5:b6:d1: 9f:00:81:c4:3f:82:2b:8a:f8:a8:73:fc:78:6d:f7: 8e:1f:17:36:c6:ab:9d:0f:dd:b2:df:58:22:0d:30: 89:8a:5d:ec:94:1d:38:2c:b7:55:8b:ea:8a:d1:21: 43:d5:64:6b:cd:d6:1a:e0:bc:8a:ef:9b:7d:66:56: 1e:2d:33:28:aa:6e:01:19:54:b0:3a:e2:05:bd:7e: 18:6b:b2:5c:2a:e0:e7:b8:27:84:4d:73:b2:dd:f4: 7b:d5:a4:ad:4e:f6:1c:46:c5:06:1f:94:77:43:aa: ca:80:71:b5:05:7d:68:c0:91:67:f3:5c:a4:d0:73: 74:fb:8c:20:9e:d4:ef:d4:ac:30:1f:fb:40:dd:dc: cd:5f:37:08:1b:33:34:74:74:7a:a1:24:ad:04:69: 9f:44:d7:af:86:b4:82:18:c7:16:c7:60:e0:28:cf: ee:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:3E:93:A0:66:4A:9D:90:2D:97:8F:35:96:92:9A:DC:AC:0D:28:85 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.53.184.0/23 103.85.116.0/23 Signature Algorithm: sha256WithRSAEncryption 81:f0:06:43:a5:14:3c:8d:1a:3d:cd:4f:7d:6a:48:90:fd:08: 10:89:e4:f5:54:3e:8e:72:ea:ed:bc:35:1f:51:ba:a0:cf:ef: 56:f9:ea:0c:fc:06:74:6e:77:00:45:59:96:07:8b:c3:e6:ee: af:8d:b4:e8:62:4d:54:71:4b:68:3a:86:dc:f5:7e:4b:f8:1f: d8:df:37:e6:59:24:cb:8c:b4:03:79:67:2a:84:89:02:2f:cb: 92:b9:a9:61:eb:a7:3d:03:60:e2:b4:8b:4f:4f:2f:7a:58:fd: d9:88:b3:2f:47:71:65:28:3c:61:cc:d6:a3:bd:0e:7b:7a:dd: e7:97:1d:44:58:80:8a:ad:17:2c:2c:72:06:53:38:2b:3e:3b: 4e:74:7c:20:0d:20:ab:72:aa:9b:e0:81:5c:38:ed:0b:39:74: f8:0b:b1:80:17:20:4f:f9:50:02:85:90:e5:c0:75:d5:db:be: 22:66:4f:6c:17:79:6e:e0:10:76:69:c7:34:3c:03:bd:73:a7: 4c:2a:32:9d:98:a7:a7:fc:3e:1e:6c:3b:aa:02:9a:17:be:2e: d8:4a:17:1d:8c:67:14:2e:79:92:f7:55:13:4b:77:7d:3c:01: 53:79:03:d7:78:42:29:2c:c0:05:72:1f:d5:93:99:3f:f8:0f: 49:29:12:f1 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUBepfKP+tnjnIN9RXAYFSv9yOmvMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTAxM1oX DTI3MDUwMTIzNTUxM1owMzExMC8GA1UEAxMoOTkzRTkzQTA2NjRBOUQ5MDJEOTc4 RjM1OTY5MjlBRENBQzBEMjg4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKrppVQgwS1VDi1+ssMdEfn5jJq98o/Lmj2tbRDCSVwIOutGNjRmSUf5lkGe yIeJW3hbGW5Ax8rZ0L0SpJ9iC8uom1WEltaPDLu5pE0NlBR0X/OX7zAXxbbRnwCB xD+CK4r4qHP8eG33jh8XNsarnQ/dst9YIg0wiYpd7JQdOCy3VYvqitEhQ9Vka83W GuC8iu+bfWZWHi0zKKpuARlUsDriBb1+GGuyXCrg57gnhE1zst30e9WkrU72HEbF Bh+Ud0OqyoBxtQV9aMCRZ/NcpNBzdPuMIJ7U79SsMB/7QN3czV83CBszNHR0eqEk rQRpn0TXr4a0ghjHFsdg4CjP7h8CAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJk+k6BmSp2QLZePNZaSmtysDSiFMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzEwZTg4Nzc0LTg0NGYtNDYxNi04YmQwLWRjMzEzOTI4NzMwYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xMGU4ODc3 NC04NDRmLTQ2MTYtOGJkMC1kYzMxMzkyODczMGMvMC85OTNFOTNBMDY2NEE5RDkw MkQ5NzhGMzU5NjkyOUFEQ0FDMEQyODg1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQBZzW4AwQBZ1V0MA0GCSqGSIb3DQEBCwUAA4IBAQCB8AZDpRQ8jRo9zU99akiQ /QgQieT1VD6OcurtvDUfUbqgz+9W+eoM/AZ0bncARVmWB4vD5u6vjbToYk1UcUto Oobc9X5L+B/Y3zfmWSTLjLQDeWcqhIkCL8uSualh66c9A2DitItPTy96WP3ZiLMv R3FlKDxhzNajvQ57et3nlx1EWICKrRcsLHIGUzgrPjtOdHwgDSCrcqqb4IFcOO0L OXT4C7GAFyBP+VAChZDlwHXV274iZk9sF3lu4BB2acc0PAO9c6dMKjKdmKen/D4e bDuqApoXvi7YShcdjGcULnmS91UTS3d9PAFTeQPXeEIpLMAFch/Vk5k/+A9JKRLx -----END CERTIFICATE-----Generated at Tue May 12 22:02:46 2026 by rpki-client