$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/996D7371455A834C9B196DACD041DB7C6E779021.cer File: 996D7371455A834C9B196DACD041DB7C6E779021.cer (raw, json) Hash identifier: HV+Xl/qensiQNGCPSFE+OtYNoD3hZe8nMyA8fTKW6HY= Subject key identifier: 99:6D:73:71:45:5A:83:4C:9B:19:6D:AC:D0:41:DB:7C:6E:77:90:21 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5F83854DA83164B6A51D9DAA1BA8B63CD75CB9CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:57:32 +0000 Certificate not after: Sun 02 May 2027 00:02:32 +0000 Subordinate resources: IP: 103.158.192.0/23 IP: 2001:df5:6680::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:83:85:4d:a8:31:64:b6:a5:1d:9d:aa:1b:a8:b6:3c:d7:5c:b9:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:57:32 2026 GMT Not After : May 2 00:02:32 2027 GMT Subject: CN=996D7371455A834C9B196DACD041DB7C6E779021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c7:b3:0d:53:17:bd:a2:b3:55:e9:8d:3e:30: 29:6f:2b:47:ce:cf:d5:79:40:ac:82:aa:2b:3a:8b: 57:52:9d:4a:2f:23:de:f7:14:af:da:dc:2f:09:c1: 34:d2:9a:70:d9:45:0c:02:3a:db:4d:52:d4:c5:fe: b0:67:9a:6e:c8:1b:e6:a4:67:70:be:fd:20:2a:21: dc:80:a8:43:a8:20:bd:7e:e7:b5:15:ec:03:e2:7b: 32:cd:de:d5:42:20:49:0a:c2:17:ed:1c:0c:9c:92: 90:d4:e8:23:3d:9a:8d:72:2b:bd:17:9f:d0:e1:8b: 1b:5a:56:65:ae:56:15:22:20:4c:7e:91:0f:6e:b6: db:91:f1:37:4f:52:9d:20:70:50:39:f0:fc:88:ef: 04:f7:0e:1e:5b:49:5d:ea:cd:cb:7c:8a:e4:d8:7e: ea:89:83:96:99:ff:27:f6:b0:0e:14:85:a5:b3:b7: 5a:08:32:67:69:dc:a7:e1:da:9a:2b:89:45:85:1e: 08:09:ed:1d:26:49:2a:84:40:2e:b4:b9:d0:02:51: 08:dc:3a:d6:e6:3d:f9:3e:ae:c2:46:50:d6:65:02: 5c:c9:fa:7c:83:8f:2c:18:5a:9e:7c:ae:19:24:ae: 80:04:18:04:cb:a1:3a:46:8e:3d:2f:b4:97:0c:ae: 86:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:6D:73:71:45:5A:83:4C:9B:19:6D:AC:D0:41:DB:7C:6E:77:90:21 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/996D7371455A834C9B196DACD041DB7C6E779021.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.192.0/23 IPv6: 2001:df5:6680::/48 Signature Algorithm: sha256WithRSAEncryption 73:61:dd:80:d1:5a:1e:a2:00:e5:9e:aa:62:10:51:39:e4:94: 6f:94:1d:8c:c6:db:11:99:80:48:2a:fb:30:88:36:91:6c:88: 56:43:f1:ed:85:5c:04:e8:78:8b:30:04:4e:a5:49:cc:98:da: 8a:68:9b:66:01:85:f4:35:5b:b3:20:44:37:63:52:5a:07:82: 18:e5:32:34:19:5f:62:15:d3:3b:3c:13:14:52:31:36:92:c1: 54:50:fe:bb:21:0d:81:d4:8e:15:f0:04:c2:a1:6c:4d:a3:d3: b9:d1:1b:5e:e5:0e:82:ad:53:82:84:42:79:3a:4a:81:51:6f: 5b:80:65:fb:74:06:19:c2:27:cf:e4:85:04:fe:8e:07:f9:a8: 3a:d4:23:b2:5b:dc:ab:e3:20:26:0b:79:d8:98:f1:8d:5e:a0: 55:de:0f:63:d0:a9:75:d1:bb:37:0f:c1:7e:ad:82:41:43:2f: 35:89:66:83:22:bb:11:2e:3c:78:97:1e:e0:c4:ff:18:b8:a4: cf:87:24:b7:53:0b:a9:81:8d:51:7f:d6:ab:a7:e9:e4:f3:1f: be:cd:8b:cc:ef:76:96:18:01:a6:74:05:c8:00:c6:19:ab:c0: be:96:24:4e:f9:c4:6f:30:90:43:79:b4:0d:d7:ee:25:f0:87: 83:b0:71:d1 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUX4OFTagxZLalHZ2qG6i2PNdcuc4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTczMloX DTI3MDUwMjAwMDIzMlowMzExMC8GA1UEAxMoOTk2RDczNzE0NTVBODM0QzlCMTk2 REFDRDA0MURCN0M2RTc3OTAyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANTHsw1TF72is1XpjT4wKW8rR87P1XlArIKqKzqLV1KdSi8j3vcUr9rcLwnB NNKacNlFDAI6201S1MX+sGeabsgb5qRncL79ICoh3ICoQ6ggvX7ntRXsA+J7Ms3e 1UIgSQrCF+0cDJySkNToIz2ajXIrvRef0OGLG1pWZa5WFSIgTH6RD26225HxN09S nSBwUDnw/IjvBPcOHltJXerNy3yK5Nh+6omDlpn/J/awDhSFpbO3WggyZ2ncp+Ha miuJRYUeCAntHSZJKoRALrS50AJRCNw61uY9+T6uwkZQ1mUCXMn6fIOPLBhannyu GSSugAQYBMuhOkaOPS+0lwyuhusCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJltc3FFWoNMmxltrNBB23xud5AhMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzFiNmM2MTRmLWQwZmYtNDFhOS05MmQwLTNhMjEzNTgxNTM3Yi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xYjZjNjE0 Zi1kMGZmLTQxYTktOTJkMC0zYTIxMzU4MTUzN2IvMC85OTZENzM3MTQ1NUE4MzRD OUIxOTZEQUNEMDQxREI3QzZFNzc5MDIxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ57AMA8EAgACMAkDBwAgAQ31ZoAwDQYJKoZIhvcNAQELBQADggEBAHNh3YDR Wh6iAOWeqmIQUTnklG+UHYzG2xGZgEgq+zCINpFsiFZD8e2FXAToeIswBE6lScyY 2opom2YBhfQ1W7MgRDdjUloHghjlMjQZX2IV0zs8ExRSMTaSwVRQ/rshDYHUjhXw BMKhbE2j07nRG17lDoKtU4KEQnk6SoFRb1uAZft0BhnCJ8/khQT+jgf5qDrUI7Jb 3KvjICYLediY8Y1eoFXeD2PQqXXRuzcPwX6tgkFDLzWJZoMiuxEuPHiXHuDE/xi4 pM+HJLdTC6mBjVF/1qun6eTzH77Ni8zvdpYYAaZ0BcgAxhmrwL6WJE75xG8wkEN5 tA3X7iXwh4OwcdE= -----END CERTIFICATE-----Generated at Tue May 12 22:03:22 2026 by rpki-client