$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer File: 9A347241E9DA18B0BB748E5558F85DFA6AD14F13.cer (raw, json) Hash identifier: 3jeYWhxstQATDFk3klk1dkk6ALjOzVEzHAbj6KuGE3A= Subject key identifier: 9A:34:72:41:E9:DA:18:B0:BB:74:8E:55:58:F8:5D:FA:6A:D1:4F:13 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1E0CCCAB1EC4ED77A7A22CEF25E6B4CC1362FCFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:20:54 +0000 Certificate not after: Sun 02 May 2027 00:25:54 +0000 Subordinate resources: IP: 103.159.196.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:0c:cc:ab:1e:c4:ed:77:a7:a2:2c:ef:25:e6:b4:cc:13:62:fc:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:20:54 2026 GMT Not After : May 2 00:25:54 2027 GMT Subject: CN=9A347241E9DA18B0BB748E5558F85DFA6AD14F13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1a:2b:90:2d:5e:36:9a:56:8b:64:96:ed:bb: f2:fa:c7:cb:56:a2:fa:e8:bb:2b:68:ef:4f:02:2c: 42:c1:64:0e:83:77:f1:5e:70:10:59:c0:3e:8c:da: 7b:cb:f2:df:b3:05:bf:8e:36:18:ca:d9:b6:83:4d: 2f:7b:6c:8e:aa:96:58:12:9e:31:68:4c:40:ce:7d: db:26:ed:8a:63:47:05:ff:7f:98:b6:8e:84:37:ce: 23:80:f1:80:48:a2:c2:e5:a6:cd:e3:52:d4:e3:23: 4c:e2:f2:1a:16:70:c3:96:b5:88:0a:33:6f:1c:0e: c8:ce:4b:df:c6:59:a7:26:af:90:45:86:71:9a:7e: e7:35:2d:47:b2:69:05:4b:be:95:38:62:23:5f:80: 6a:82:e1:21:35:cd:b5:3d:04:bd:fd:c8:4d:9c:36: 2f:79:c2:f3:1a:21:0a:64:bc:6b:39:72:74:9f:dc: 33:0b:8c:05:82:50:aa:67:20:ea:64:d8:1c:c1:f8: cf:38:d8:0f:48:a5:d9:c2:81:a0:f9:9f:37:29:67: 53:b8:e7:82:4e:28:a2:d2:52:11:31:09:06:7a:f4: 08:b2:dc:0c:7e:df:d7:7b:20:5a:8f:fb:77:d7:b1: ca:74:68:f5:46:23:ea:09:75:c8:9f:ea:db:a7:7a: 1d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9A:34:72:41:E9:DA:18:B0:BB:74:8E:55:58:F8:5D:FA:6A:D1:4F:13 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/9A347241E9DA18B0BB748E5558F85DFA6AD14F13.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.196.0/23 Signature Algorithm: sha256WithRSAEncryption 09:c9:9a:d6:6d:18:3f:1c:cf:5a:26:5a:ad:72:2a:dc:c3:bf: eb:77:7a:fb:00:d3:9b:1f:7a:e5:eb:c4:09:0c:e1:24:f8:de: fe:e9:91:a6:36:2f:29:c9:b9:fa:b1:bb:3f:5f:a4:12:58:73: 7c:37:b5:11:94:7c:54:ee:19:93:8f:e1:08:ec:25:0c:2c:35: 25:aa:e2:1b:eb:31:aa:a1:23:15:c7:1a:bc:a1:fc:39:ee:f1: 4c:2e:b3:1f:52:47:d9:f8:63:01:56:12:f2:da:28:b2:5b:28: 53:0c:3b:fc:dc:98:69:08:94:af:b2:49:b7:0e:1f:bb:77:e0: 84:79:9a:cf:69:87:b2:df:ba:0d:93:0e:35:51:67:22:d1:61: f5:d4:c6:f0:27:81:4c:ab:d4:0c:39:8d:23:3c:66:59:48:87: 4b:f1:9c:72:32:d4:99:84:02:d2:3b:77:52:3a:4f:bb:e0:bd: 04:5d:d6:64:97:cc:40:40:84:40:56:1f:ab:2a:2d:c6:e6:bb: d5:95:f1:9f:55:4d:f8:92:9f:c2:5f:cd:ae:dc:93:a9:de:4e: 65:91:a3:54:cf:71:4d:6c:49:05:ec:b8:1c:29:23:d8:33:f4: 44:c9:d0:1b:67:bf:ac:c4:77:d8:7b:0b:bf:f4:0b:7f:74:9c: 5c:02:0a:30 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUHgzMqx7E7XenoizvJea0zBNi/PowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjA1NFoX DTI3MDUwMjAwMjU1NFowMzExMC8GA1UEAxMoOUEzNDcyNDFFOURBMThCMEJCNzQ4 RTU1NThGODVERkE2QUQxNEYxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALkaK5AtXjaaVotklu278vrHy1ai+ui7K2jvTwIsQsFkDoN38V5wEFnAPoza e8vy37MFv442GMrZtoNNL3tsjqqWWBKeMWhMQM592ybtimNHBf9/mLaOhDfOI4Dx gEiiwuWmzeNS1OMjTOLyGhZww5a1iAozbxwOyM5L38ZZpyavkEWGcZp+5zUtR7Jp BUu+lThiI1+AaoLhITXNtT0Evf3ITZw2L3nC8xohCmS8azlydJ/cMwuMBYJQqmcg 6mTYHMH4zzjYD0il2cKBoPmfNylnU7jngk4ootJSETEJBnr0CLLcDH7f13sgWo/7 d9exynRo9UYj6gl1yJ/q26d6HTsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJo0ckHp2hiwu3SOVVj4Xfpq0U8TMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzNjZGQ1Nzc0LTMwZGQtNGEwMC1iMWE5LTliMTI4MjY5MzBjMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zY2RkNTc3 NC0zMGRkLTRhMDAtYjFhOS05YjEyODI2OTMwYzIvMC85QTM0NzI0MUU5REExOEIw QkI3NDhFNTU1OEY4NURGQTZBRDE0RjEzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ5/EMA0GCSqGSIb3DQEBCwUAA4IBAQAJyZrWbRg/HM9aJlqtcircw7/rd3r7 ANObH3rl68QJDOEk+N7+6ZGmNi8pybn6sbs/X6QSWHN8N7URlHxU7hmTj+EI7CUM LDUlquIb6zGqoSMVxxq8ofw57vFMLrMfUkfZ+GMBVhLy2iiyWyhTDDv83JhpCJSv skm3Dh+7d+CEeZrPaYey37oNkw41UWci0WH11MbwJ4FMq9QMOY0jPGZZSIdL8Zxy MtSZhALSO3dSOk+74L0EXdZkl8xAQIRAVh+rKi3G5rvVlfGfVU34kp/CX82u3JOp 3k5lkaNUz3FNbEkF7LgcKSPYM/REydAbZ7+sxHfYewu/9At/dJxcAgow -----END CERTIFICATE-----Generated at Tue May 12 22:38:44 2026 by rpki-client