$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.cer File: 9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.cer (raw, json) Hash identifier: F0HVn7EY/7k9Stwq+kMbppQMVXSz5t1tc7DQWllAo48= Subject key identifier: 9A:C3:14:7F:82:C1:56:EC:3E:32:C3:3B:60:F6:E6:A1:BD:D9:F9:95 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 77274293F5459FA22D4C6EB0341596FB782D021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 22:48:32 +0000 Certificate not after: Sat 01 May 2027 22:53:32 +0000 Subordinate resources: IP: 36.50.93.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:27:42:93:f5:45:9f:a2:2d:4c:6e:b0:34:15:96:fb:78:2d:02:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 22:48:32 2026 GMT Not After : May 1 22:53:32 2027 GMT Subject: CN=9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bd:f8:d3:4b:62:ee:02:f9:3c:d6:06:43:27: c1:b9:d1:33:c5:aa:5a:4b:a5:4c:56:14:6e:25:25: 19:f0:d5:18:ee:12:49:03:93:07:6d:19:4f:51:66: e2:f5:c5:da:cd:72:c6:e7:57:e3:7c:f1:05:4d:92: aa:d2:51:82:79:e8:40:1b:27:a0:db:7f:2c:ec:0c: fe:c6:51:9d:db:53:c8:02:5d:8a:2c:df:20:6e:83: a0:4c:3d:be:f4:de:4f:c4:6c:7f:0a:2a:34:f7:85: 5a:4e:5a:da:6b:e0:bf:5b:9d:f2:ba:13:d9:b4:59: f1:66:5f:13:23:41:39:03:14:1b:e5:e7:9e:ae:29: 39:94:3f:ef:e1:d0:0f:94:6f:5c:b0:4b:06:e0:66: dd:89:b7:3b:69:d7:17:48:e3:27:03:8f:78:1e:e5: d6:69:fb:1c:a7:1c:c2:01:80:91:68:e3:63:4e:23: 68:a9:1e:fd:33:30:ae:dd:68:a5:0b:12:fd:7e:f6: 91:b6:24:0e:23:69:02:7a:35:d3:43:73:2c:7a:76: b1:40:e5:2d:70:c7:c1:95:51:6e:6c:21:5a:4c:be: 5c:d3:16:7a:6c:79:cc:5f:d9:53:e2:03:a8:b8:ab: cc:58:4c:76:ab:39:06:b4:a4:65:c9:b4:2c:c9:a1: b4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9A:C3:14:7F:82:C1:56:EC:3E:32:C3:3B:60:F6:E6:A1:BD:D9:F9:95 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.93.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:49:0f:f7:10:6e:52:82:01:08:2a:25:60:42:ef:07:59:bb: 25:69:f7:fe:3d:8c:d5:4b:f7:27:d3:5d:09:4c:19:b5:6d:36: b1:96:29:c4:69:37:99:69:d3:e8:b8:4d:07:be:ae:ab:ed:b4: be:69:8f:21:3f:f1:03:c0:0e:d9:12:89:d6:fd:89:d8:27:ab: 84:3d:3b:7e:77:67:4e:df:6f:b0:e9:cf:e5:29:3c:bb:aa:90: 9c:84:97:e4:92:4b:7c:39:68:4e:ab:5b:2e:73:25:ca:b9:8d: 80:76:5a:25:43:78:25:69:97:e1:51:4a:d1:ea:fe:5c:8e:25: 0f:73:26:4f:e4:e9:c8:c1:ae:82:ac:fd:74:3c:73:2b:9a:64: 87:cf:1d:2f:da:5b:f8:b2:9d:c6:dd:e8:cd:0c:a2:7f:74:3a: 45:b3:ef:df:d8:55:4f:e9:ec:99:b4:2e:df:55:fe:49:f2:50: e1:51:91:ab:7d:7f:71:47:7c:a8:83:65:ef:5b:d8:37:37:c5: 8d:86:1c:c5:ad:02:e9:94:02:79:c3:f8:ff:bf:67:fe:04:55: fd:9d:04:30:1c:67:3f:75:d6:63:37:0e:1a:5a:c1:d0:5c:c9: 8a:cd:72:b4:6b:82:49:86:d0:ea:cb:1a:f2:93:ad:26:30:d8: 8b:b6:15:df -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUdydCk/VFn6ItTG6wNBWW+3gtAhswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIyNDgzMloX DTI3MDUwMTIyNTMzMlowMzExMC8GA1UEAxMoOUFDMzE0N0Y4MkMxNTZFQzNFMzJD MzNCNjBGNkU2QTFCREQ5Rjk5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALi9+NNLYu4C+TzWBkMnwbnRM8WqWkulTFYUbiUlGfDVGO4SSQOTB20ZT1Fm 4vXF2s1yxudX43zxBU2SqtJRgnnoQBsnoNt/LOwM/sZRndtTyAJdiizfIG6DoEw9 vvTeT8RsfwoqNPeFWk5a2mvgv1ud8roT2bRZ8WZfEyNBOQMUG+Xnnq4pOZQ/7+HQ D5RvXLBLBuBm3Ym3O2nXF0jjJwOPeB7l1mn7HKccwgGAkWjjY04jaKke/TMwrt1o pQsS/X72kbYkDiNpAno100NzLHp2sUDlLXDHwZVRbmwhWky+XNMWemx5zF/ZU+ID qLirzFhMdqs5BrSkZcm0LMmhtC8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJrDFH+CwVbsPjLDO2D25qG92fmVMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzAwODIwMjBjLTNjNDYtNGJmYi05NGMyLTMyOTJmNTZhNjUyYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wMDgyMDIw Yy0zYzQ2LTRiZmItOTRjMi0zMjkyZjU2YTY1MmEvMC85QUMzMTQ3RjgyQzE1NkVD M0UzMkMzM0I2MEY2RTZBMUJERDlGOTk1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAJDJdMA0GCSqGSIb3DQEBCwUAA4IBAQB8SQ/3EG5SggEIKiVgQu8HWbslaff+ PYzVS/cn010JTBm1bTaxlinEaTeZadPouE0Hvq6r7bS+aY8hP/EDwA7ZEonW/YnY J6uEPTt+d2dO32+w6c/lKTy7qpCchJfkkkt8OWhOq1sucyXKuY2AdlolQ3glaZfh UUrR6v5cjiUPcyZP5OnIwa6CrP10PHMrmmSHzx0v2lv4sp3G3ejNDKJ/dDpFs+/f 2FVP6eyZtC7fVf5J8lDhUZGrfX9xR3yog2XvW9g3N8WNhhzFrQLplAJ5w/j/v2f+ BFX9nQQwHGc/ddZjNw4aWsHQXMmKzXK0a4JJhtDqyxryk60mMNiLthXf -----END CERTIFICATE-----Generated at Tue May 12 22:15:50 2026 by rpki-client