$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer File: 99C158D8DB9D1286456BDEFEFBB39E52627AE114.cer (raw, json) Hash identifier: iyOKd3KGliKk4MgoVEVGFrWcR2eXOrUvHOsCaWx6bgs= Subject key identifier: 99:C1:58:D8:DB:9D:12:86:45:6B:DE:FE:FB:B3:9E:52:62:7A:E1:14 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 29C52475BF8E4B2FB0307232256A13221723FB8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft caRepository: rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:46:15 +0000 Certificate not after: Sun 02 May 2027 01:51:15 +0000 Subordinate resources: IP: 103.190.28.0/23 IP: 2401:8a0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c5:24:75:bf:8e:4b:2f:b0:30:72:32:25:6a:13:22:17:23:fb:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:46:15 2026 GMT Not After : May 2 01:51:15 2027 GMT Subject: CN=99C158D8DB9D1286456BDEFEFBB39E52627AE114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:10:ec:79:b9:4a:a3:2f:96:54:3e:54:9e:b8: c6:8d:41:70:2d:8d:88:32:02:c2:ab:da:ec:f9:8a: a3:80:5c:db:73:90:65:cc:c8:0e:62:b0:71:62:ae: 5e:a8:5f:77:48:79:c2:55:0f:f1:84:3b:bf:d4:4b: 10:c5:ae:8e:d0:63:f1:04:e1:b0:d4:06:5f:10:93: 8f:49:a5:71:8b:a8:56:89:78:d8:29:9d:ee:e7:8c: f1:36:e8:f4:56:93:7c:e9:67:c5:26:3a:01:d5:97: d8:16:fb:33:bf:83:6c:0f:47:54:93:47:b5:bb:96: bf:2c:9f:0f:54:c7:34:d6:ac:61:33:35:17:f8:c7: 8f:c4:40:5a:97:2a:cf:e9:96:09:a9:77:03:4e:27: 3e:0b:09:8e:5f:16:a6:13:07:93:62:16:e9:31:05: ac:28:e0:34:49:d5:29:97:8e:2c:b3:0b:1c:7f:7c: 5c:cc:2f:15:cb:98:72:28:53:5a:40:b0:bd:15:33: 8f:00:ff:bb:36:76:c4:b8:b3:70:90:6b:03:d7:16: cf:5e:ae:31:2e:99:73:d6:2a:16:fb:8b:59:22:ac: 0f:b1:44:04:1e:ec:cf:f2:72:d1:4d:35:df:92:8d: 0c:90:70:a7:53:cb:3e:f0:77:66:e7:e9:5a:a6:c4: 97:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:C1:58:D8:DB:9D:12:86:45:6B:DE:FE:FB:B3:9E:52:62:7A:E1:14 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/99C158D8DB9D1286456BDEFEFBB39E52627AE114.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.28.0/23 IPv6: 2401:8a0::/32 Signature Algorithm: sha256WithRSAEncryption 95:80:a1:58:97:c9:56:91:db:2c:09:c5:9a:74:05:d5:90:5a: 9a:85:00:3c:98:9a:a1:bd:36:d9:87:4f:cf:4d:e6:42:a9:ba: 18:c2:f3:05:a2:bb:0a:03:6a:10:eb:17:d4:44:67:7e:b8:c1: f7:3c:d9:23:65:a7:71:e3:f0:4a:94:52:00:7e:37:b9:92:68: 0c:f0:4e:bc:a3:54:9b:82:ea:2c:3b:a2:6a:99:e5:ba:25:8d: 81:d8:a1:80:b3:7c:91:59:5a:43:c2:cc:72:e6:4d:d6:e3:dc: 7f:a5:f8:e3:97:d7:4c:b8:f6:61:e2:2f:c8:4f:1b:38:ac:03: f4:73:b1:0c:37:25:a6:f4:70:2c:36:69:18:e7:85:3b:01:38: e2:4f:83:db:4c:7b:e8:f2:c7:c4:f0:90:b1:d5:69:23:5d:ab: f2:e3:71:42:64:61:5a:4c:58:bd:7a:49:97:54:26:1b:f7:70: 2e:ba:19:c5:44:4d:63:07:8a:b3:e1:2e:a0:53:fa:d7:76:e9: 96:94:75:32:87:f4:14:5e:a9:83:1e:78:9a:67:cb:ca:2a:10: 54:62:42:7e:91:08:72:48:29:e4:ef:36:c0:91:12:68:92:bf: 09:bb:30:ab:6c:c3:99:8c:a8:35:75:e2:7b:c2:1e:f7:57:9d: 15:45:83:b6 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUKcUkdb+OSy+wMHIyJWoTIhcj+44wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDYxNVoX DTI3MDUwMjAxNTExNVowMzExMC8GA1UEAxMoOTlDMTU4RDhEQjlEMTI4NjQ1NkJE RUZFRkJCMzlFNTI2MjdBRTExNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJsQ7Hm5SqMvllQ+VJ64xo1BcC2NiDICwqva7PmKo4Bc23OQZczIDmKwcWKu Xqhfd0h5wlUP8YQ7v9RLEMWujtBj8QThsNQGXxCTj0mlcYuoVol42Cmd7ueM8Tbo 9FaTfOlnxSY6AdWX2Bb7M7+DbA9HVJNHtbuWvyyfD1THNNasYTM1F/jHj8RAWpcq z+mWCal3A04nPgsJjl8WphMHk2IW6TEFrCjgNEnVKZeOLLMLHH98XMwvFcuYcihT WkCwvRUzjwD/uzZ2xLizcJBrA9cWz16uMS6Zc9YqFvuLWSKsD7FEBB7sz/Jy0U01 35KNDJBwp1PLPvB3ZufpWqbEl8cCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJnBWNjbnRKGRWve/vuznlJieuEUMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2JlZTE0MzgyLWQ1ODctNGU4Ni04ZTdlLTZhMjY0YTU4ZWEwNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iZWUxNDM4 Mi1kNTg3LTRlODYtOGU3ZS02YTI2NGE1OGVhMDYvMC85OUMxNThEOERCOUQxMjg2 NDU2QkRFRkVGQkIzOUU1MjYyN0FFMTE0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ74cMA0EAgACMAcDBQAkAQigMA0GCSqGSIb3DQEBCwUAA4IBAQCVgKFYl8lW kdssCcWadAXVkFqahQA8mJqhvTbZh0/PTeZCqboYwvMForsKA2oQ6xfURGd+uMH3 PNkjZadx4/BKlFIAfje5kmgM8E68o1SbguosO6JqmeW6JY2B2KGAs3yRWVpDwsxy 5k3W49x/pfjjl9dMuPZh4i/ITxs4rAP0c7EMNyWm9HAsNmkY54U7ATjiT4PbTHvo 8sfE8JCx1WkjXavy43FCZGFaTFi9ekmXVCYb93AuuhnFRE1jB4qz4S6gU/rXdumW lHUyh/QUXqmDHniaZ8vKKhBUYkJ+kQhySCnk7zbAkRJokr8JuzCrbMOZjKg1deJ7 wh73V50VRYO2 -----END CERTIFICATE-----Generated at Wed May 13 00:43:28 2026 by rpki-client