$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9A2E7015610F912297C9C4B0FFDE85576338C9EA.cer File: 9A2E7015610F912297C9C4B0FFDE85576338C9EA.cer (raw, json) Hash identifier: nFQd1IWsQTGDlQ1U+HtjlgXNLobPZD5HV1C6xXxJyNU= Subject key identifier: 9A:2E:70:15:61:0F:91:22:97:C9:C4:B0:FF:DE:85:57:63:38:C9:EA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 29FA3FFE921019EFD62007FB0CF0BB98D109C9C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:51:50 +0000 Certificate not after: Sat 01 May 2027 23:56:50 +0000 Subordinate resources: IP: 103.172.144.0/24 IP: 103.178.125.0/24 IP: 2001:df2:81c0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:fa:3f:fe:92:10:19:ef:d6:20:07:fb:0c:f0:bb:98:d1:09:c9:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:51:50 2026 GMT Not After : May 1 23:56:50 2027 GMT Subject: CN=9A2E7015610F912297C9C4B0FFDE85576338C9EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c3:3e:44:c1:82:62:66:05:ab:0a:89:e6:9e: af:2d:0c:dc:82:6f:84:31:9b:39:43:6e:41:13:7f: c1:f2:8c:14:6d:4d:d4:c0:65:d2:9b:c6:53:88:46: cd:63:62:cd:ba:62:36:67:b6:2a:02:c6:2a:38:f3: 1d:a8:33:26:da:35:b4:93:2b:3c:9a:ad:09:e0:cb: 7a:63:d4:53:4e:af:7f:e1:b0:ca:d7:d0:36:8f:08: 3a:0d:70:38:2e:8c:bf:16:8b:45:75:2d:41:25:14: b9:93:8a:1f:56:09:7b:c6:20:c6:5c:0a:27:c5:34: 7a:68:f8:41:69:50:ca:bf:9a:51:1f:98:3f:67:f3: 73:d7:3b:64:7e:0b:cd:3e:e8:92:4c:2d:2b:e5:2a: ca:c3:88:77:83:5d:93:7c:01:59:82:41:a0:db:ad: 6e:e3:da:a1:a7:4f:92:67:a5:2b:5d:8a:ee:a9:48: 67:ae:78:4c:0a:10:d5:66:c9:98:8a:a1:2b:6d:fd: 08:b2:eb:9a:9c:7e:8a:fd:33:02:c2:e3:a0:7f:c2: 0c:55:1c:73:cd:68:57:e0:21:80:62:b7:44:3d:db: 5e:9c:cf:ba:a3:86:c5:79:9e:74:76:4c:75:1e:3c: a6:3c:14:7c:f1:4f:52:df:32:da:03:2f:98:76:a2: 91:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9A:2E:70:15:61:0F:91:22:97:C9:C4:B0:FF:DE:85:57:63:38:C9:EA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/9A2E7015610F912297C9C4B0FFDE85576338C9EA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.144.0/24 103.178.125.0/24 IPv6: 2001:df2:81c0::/48 Signature Algorithm: sha256WithRSAEncryption 0b:76:03:35:d3:e7:2d:9c:e9:7f:3f:cd:c1:b1:e1:ae:cd:b4: 29:a8:9f:93:a4:bf:f2:b8:5a:4c:f3:e3:05:13:60:fe:f9:04: 3a:34:7e:c0:34:a4:c3:71:02:76:99:3a:4b:18:b6:c7:90:06: a7:75:4e:01:07:5c:a0:f6:6a:f8:6b:94:10:5c:b1:f4:e6:f2: 19:9f:d1:16:2e:bb:a9:e1:06:26:77:76:0f:f4:1a:a5:fb:80: 48:4c:bd:cb:c2:06:41:39:63:e0:14:f0:af:fc:ba:63:65:f9: db:7c:03:eb:4c:a8:78:be:b3:f9:97:c0:d5:86:b9:55:9a:22: ec:33:b1:12:12:cc:57:fa:e1:c8:81:4c:bd:39:64:6e:d2:bd: 04:c5:b7:33:0c:21:e5:95:42:7c:d9:03:9e:a8:ad:95:29:ad: b8:36:f8:b3:0b:50:a2:79:76:b5:9d:0f:ca:ef:7e:32:98:c5: e4:db:cc:f4:18:4c:6d:5d:b2:28:25:dc:d8:a1:1f:b7:35:16: 7f:07:c1:4e:c9:8d:e8:54:b7:44:5e:1d:9d:ad:c1:00:16:80: da:fc:1c:20:39:dc:b3:74:4f:e7:78:31:d1:5f:41:73:df:7c: 9b:e3:5a:40:b0:49:6e:0d:cf:7b:48:67:f7:87:bf:78:e3:d5: 95:4f:15:e2 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUKfo//pIQGe/WIAf7DPC7mNEJyccwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTE1MFoX DTI3MDUwMTIzNTY1MFowMzExMC8GA1UEAxMoOUEyRTcwMTU2MTBGOTEyMjk3QzlD NEIwRkZERTg1NTc2MzM4QzlFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAObDPkTBgmJmBasKieaery0M3IJvhDGbOUNuQRN/wfKMFG1N1MBl0pvGU4hG zWNizbpiNme2KgLGKjjzHagzJto1tJMrPJqtCeDLemPUU06vf+GwytfQNo8IOg1w OC6MvxaLRXUtQSUUuZOKH1YJe8YgxlwKJ8U0emj4QWlQyr+aUR+YP2fzc9c7ZH4L zT7okkwtK+UqysOId4Ndk3wBWYJBoNutbuPaoadPkmelK12K7qlIZ654TAoQ1WbJ mIqhK239CLLrmpx+iv0zAsLjoH/CDFUcc81oV+AhgGK3RD3bXpzPuqOGxXmedHZM dR48pjwUfPFPUt8y2gMvmHaikfsCAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJoucBVhD5Eil8nEsP/ehVdjOMnqMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzEzZmE3ZDVjLTM2OGQtNGFmMy1iOGU3LTE3ODYyNDZkZDYyZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xM2ZhN2Q1 Yy0zNjhkLTRhZjMtYjhlNy0xNzg2MjQ2ZGQ2MmYvMC85QTJFNzAxNTYxMEY5MTIy OTdDOUM0QjBGRkRFODU1NzYzMzhDOUVBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQAZ6yQAwQAZ7J9MA8EAgACMAkDBwAgAQ3ygcAwDQYJKoZIhvcNAQELBQADggEB AAt2AzXT5y2c6X8/zcGx4a7NtCmon5Okv/K4Wkzz4wUTYP75BDo0fsA0pMNxAnaZ OksYtseQBqd1TgEHXKD2avhrlBBcsfTm8hmf0RYuu6nhBiZ3dg/0GqX7gEhMvcvC BkE5Y+AU8K/8umNl+dt8A+tMqHi+s/mXwNWGuVWaIuwzsRISzFf64ciBTL05ZG7S vQTFtzMMIeWVQnzZA56orZUprbg2+LMLUKJ5drWdD8rvfjKYxeTbzPQYTG1dsigl 3NihH7c1Fn8HwU7JjehUt0ReHZ2twQAWgNr8HCA53LN0T+d4MdFfQXPffJvjWkCw SW4Nz3tIZ/eHv3jj1ZVPFeI= -----END CERTIFICATE-----Generated at Wed May 13 02:11:52 2026 by rpki-client