$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer File: 99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer (raw, json) Hash identifier: CLwQkoV3fB0tJzkPBSbYJUEZR9G3xVSq/P7d0WxWgag= Subject key identifier: 99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 77CB1275BE628E8D5EDB6E2D9EB75F65AE45B646 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:54:34 +0000 Certificate not after: Sun 02 May 2027 00:59:34 +0000 Subordinate resources: IP: 103.213.116.0/22 IP: 202.179.184.0/21 IP: 2404:880::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:cb:12:75:be:62:8e:8d:5e:db:6e:2d:9e:b7:5f:65:ae:45:b6:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:54:34 2026 GMT Not After : May 2 00:59:34 2027 GMT Subject: CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5c:f2:a2:f8:a4:00:a5:8e:2f:06:38:56:e3: d3:25:a4:ee:5a:6b:23:d7:d4:8a:07:54:6b:8a:dc: fa:9f:19:81:a6:79:c2:fd:6c:31:3f:33:75:1a:35: 84:09:a8:e9:78:a5:a2:e2:ee:33:7e:5c:91:35:cc: 6d:0e:13:21:37:19:b1:9a:89:ed:a4:98:bf:6a:9c: 49:53:99:19:6e:4c:94:7d:0a:21:85:3f:83:b3:8e: f6:9a:75:ee:1a:b3:ec:5f:51:ad:fd:e4:0f:18:d1: 86:6e:cc:ee:f3:59:3c:5b:6d:e5:4e:aa:a1:0f:7f: b8:4c:b4:3a:39:f6:fa:66:19:e0:d9:c7:a0:b2:1c: 94:01:05:92:66:30:21:6d:44:5a:1b:72:f2:32:6b: a4:81:5e:80:ef:46:95:55:7e:a2:c3:52:cc:b1:10: f0:7c:b8:ae:25:b0:f3:4b:4b:e6:f3:03:90:b1:b0: 94:4d:c1:4f:aa:e9:2d:4d:0b:a8:bc:78:30:82:fe: 23:10:d9:ad:b8:95:b5:10:33:b8:96:ee:8c:59:3b: 65:e3:e4:05:2e:3b:81:d6:27:76:18:db:33:61:19: c9:c6:e7:ee:9d:6a:ca:53:31:63:cf:10:57:e3:35: c2:e6:b4:92:5a:41:6a:e8:70:5f:0e:37:e5:0d:6a: 78:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.213.116.0/22 202.179.184.0/21 IPv6: 2404:880::/32 Signature Algorithm: sha256WithRSAEncryption 6d:dd:ac:b7:cb:4b:07:2a:e1:cd:e3:39:ce:ce:df:29:44:54: 56:6d:5b:06:f8:0e:69:c3:01:20:f0:39:a8:fa:95:1f:48:53: 09:f1:3d:a0:db:82:27:0f:13:0b:da:a2:2e:39:c8:f2:35:4c: e3:69:ab:b3:5a:71:1f:85:87:4e:53:be:55:17:56:b8:48:d1: 1a:5d:7c:81:63:85:db:f6:df:b3:59:73:ad:b4:bc:73:b4:7a: b4:21:ea:e3:3a:a1:96:0b:90:8e:56:21:46:6d:2e:39:81:4c: 24:9f:72:e4:38:a6:92:8f:54:97:7e:63:a2:1d:37:da:84:5c: 11:0a:b3:ff:28:fe:23:45:28:c6:8c:c0:51:a7:4a:ed:3c:2c: 12:4f:01:2b:b2:cf:1b:05:ca:68:12:b7:85:65:ef:ca:61:d1: 17:af:3e:a2:0c:0e:06:ee:07:90:37:53:7b:7b:ae:ac:a1:1c: 07:11:0d:60:9d:d7:f0:6a:05:2c:b3:82:e7:78:b8:67:8a:09: c2:87:99:07:19:d8:d2:fd:fa:c2:dd:62:5e:a0:8e:59:56:58: 5d:27:d1:09:92:44:6e:e9:29:e1:95:51:1f:0d:9b:91:5a:81: 22:65:70:af:6a:b9:e3:52:ea:3b:8b:f9:32:80:a4:ba:82:9e: 77:1e:f4:51 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUd8sSdb5ijo1e224tnrdfZa5FtkYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTQzNFoX DTI3MDUwMjAwNTkzNFowMzExMC8GA1UEAxMoOTlGMEU2REUwMkM2MDJEMUU0ODU0 NTU0NzRGNEIyMTIwN0QyRDdGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALRc8qL4pAClji8GOFbj0yWk7lprI9fUigdUa4rc+p8ZgaZ5wv1sMT8zdRo1 hAmo6XilouLuM35ckTXMbQ4TITcZsZqJ7aSYv2qcSVOZGW5MlH0KIYU/g7OO9pp1 7hqz7F9Rrf3kDxjRhm7M7vNZPFtt5U6qoQ9/uEy0Ojn2+mYZ4NnHoLIclAEFkmYw IW1EWhty8jJrpIFegO9GlVV+osNSzLEQ8Hy4riWw80tL5vMDkLGwlE3BT6rpLU0L qLx4MIL+IxDZrbiVtRAzuJbujFk7ZePkBS47gdYndhjbM2EZycbn7p1qylMxY88Q V+M1wua0klpBauhwXw435Q1qeF0CAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJnw5t4CxgLR5IVFVHT0shIH0tf4MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzcwZjVjZmRiLTc5ODctNDM1MS1iYzJlLTY2YzI0ZjQ5ZjQ0MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83MGY1Y2Zk Yi03OTg3LTQzNTEtYmMyZS02NmMyNGY0OWY0NDAvMC85OUYwRTZERTAyQzYwMkQx RTQ4NTQ1NTQ3NEY0QjIxMjA3RDJEN0Y4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQCZ9V0AwQDyrO4MA0EAgACMAcDBQAkBAiAMA0GCSqGSIb3DQEBCwUAA4IBAQBt 3ay3y0sHKuHN4znOzt8pRFRWbVsG+A5pwwEg8Dmo+pUfSFMJ8T2g24InDxML2qIu OcjyNUzjaauzWnEfhYdOU75VF1a4SNEaXXyBY4Xb9t+zWXOttLxztHq0IerjOqGW C5COViFGbS45gUwkn3LkOKaSj1SXfmOiHTfahFwRCrP/KP4jRSjGjMBRp0rtPCwS TwErss8bBcpoEreFZe/KYdEXrz6iDA4G7geQN1N7e66soRwHEQ1gndfwagUss4Ln eLhnignCh5kHGdjS/frC3WJeoI5ZVlhdJ9EJkkRu6SnhlVEfDZuRWoEiZXCvarnj Uuo7i/kygKS6gp53HvRR -----END CERTIFICATE-----Generated at Tue May 12 22:15:54 2026 by rpki-client