$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.cer File: 9AEB58DCD82BE9C8496A5061296B769FD6CE5723.cer (raw, json) Hash identifier: BgUoY4KOnI5Cfk7JMok7B/EiiDVOafxl/l3GtibMP9Y= Subject key identifier: 9A:EB:58:DC:D8:2B:E9:C8:49:6A:50:61:29:6B:76:9F:D6:CE:57:23 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4B54C12056F6B2326ADDA7AD1A61F91DEF523FCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:38:56 +0000 Certificate not after: Sun 02 May 2027 02:43:56 +0000 Subordinate resources: IP: 103.73.192.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:54:c1:20:56:f6:b2:32:6a:dd:a7:ad:1a:61:f9:1d:ef:52:3f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:38:56 2026 GMT Not After : May 2 02:43:56 2027 GMT Subject: CN=9AEB58DCD82BE9C8496A5061296B769FD6CE5723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:db:11:d4:ee:c5:a1:72:53:ef:84:c3:ea:54: 82:6c:6b:15:e0:58:1b:ff:bf:53:f8:ef:e7:b3:b5: 31:9c:24:28:26:71:a6:be:f0:88:0a:28:8a:60:f4: 45:b4:a6:5f:8c:3e:95:63:61:d6:c8:fd:c5:81:86: 1c:18:b1:34:a1:bc:84:64:d3:49:e5:d1:0f:05:3f: 4b:a4:f5:3c:dc:09:c5:b4:0e:5c:d3:ad:80:10:c0: d2:6f:a1:04:e2:b2:4c:30:f4:06:db:8a:f6:40:4b: 46:69:18:15:54:fd:8b:c4:d1:e5:d4:60:11:59:0a: 33:59:33:41:e8:9e:cb:18:1e:ea:d9:96:21:53:27: 23:56:22:a1:16:bf:a4:bc:6e:e0:32:4e:76:a0:ae: 5d:a9:ed:4b:4c:1e:1f:68:b8:63:75:21:ce:19:73: 1a:13:c7:41:45:ef:ed:ee:12:53:48:8b:89:fa:a3: e9:84:46:29:18:95:c2:93:07:12:64:77:fd:3d:c8: 23:05:ad:bf:c5:a6:a6:af:1d:f4:5f:4c:16:4a:fe: a7:96:80:32:25:7b:1d:9a:e8:6e:4d:a6:f1:51:a7: 57:3d:56:02:b1:e9:a9:89:b5:6d:3f:95:3d:58:22: 65:da:35:2e:b6:89:6d:bf:dc:92:26:db:74:bd:72: e5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9A:EB:58:DC:D8:2B:E9:C8:49:6A:50:61:29:6B:76:9F:D6:CE:57:23 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/9AEB58DCD82BE9C8496A5061296B769FD6CE5723.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.73.192.0/23 Signature Algorithm: sha256WithRSAEncryption 98:99:63:fb:73:52:3a:ec:fb:66:b3:aa:8b:d0:d2:99:5c:90: 80:e7:b1:14:f0:a7:7d:aa:4d:f0:c8:b9:ac:cc:7e:f1:c8:4c: fd:9c:33:e7:b8:37:34:86:6c:7a:cd:39:be:a4:a8:14:1c:e8: 06:e7:11:a6:d4:73:af:c2:18:a2:3c:da:0b:63:34:cc:ae:7f: ff:63:54:be:e4:b7:7a:f6:c5:c9:6a:0c:13:ab:46:5b:b7:8c: 1e:5b:2d:49:ba:da:37:3b:73:55:c5:e1:c5:99:9d:b2:b2:28: 68:32:5d:48:b2:5a:67:ba:7e:a7:7b:7b:83:28:e7:32:a7:1a: 36:c1:76:0c:b3:bf:c7:a1:d0:cf:49:8d:92:37:7b:70:d3:6f: 21:1e:90:2a:77:78:3e:29:85:09:d2:dc:12:16:17:52:e6:f1: 04:34:fe:0b:9d:b1:fe:bd:31:10:06:e5:c6:c9:61:25:4e:94: e7:d8:d7:d8:07:22:a6:4d:24:47:02:af:8b:d8:e0:fd:b0:c2: 04:92:bc:7a:e1:f5:12:96:4c:2c:25:ac:b0:5b:97:f8:e5:64: 94:67:12:da:e8:eb:da:63:03:f6:c3:b4:8f:78:f8:15:3f:0b: 48:e9:dc:7f:29:a0:ed:82:8a:6e:6f:b4:7b:45:5c:0d:85:17: 84:9a:db:2d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUS1TBIFb2sjJq3aetGmH5He9SP8owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzg1NloX DTI3MDUwMjAyNDM1NlowMzExMC8GA1UEAxMoOUFFQjU4RENEODJCRTlDODQ5NkE1 MDYxMjk2Qjc2OUZENkNFNTcyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMLbEdTuxaFyU++Ew+pUgmxrFeBYG/+/U/jv57O1MZwkKCZxpr7wiAooimD0 RbSmX4w+lWNh1sj9xYGGHBixNKG8hGTTSeXRDwU/S6T1PNwJxbQOXNOtgBDA0m+h BOKyTDD0BtuK9kBLRmkYFVT9i8TR5dRgEVkKM1kzQeieyxge6tmWIVMnI1YioRa/ pLxu4DJOdqCuXantS0weH2i4Y3UhzhlzGhPHQUXv7e4SU0iLifqj6YRGKRiVwpMH EmR3/T3IIwWtv8Wmpq8d9F9MFkr+p5aAMiV7HZrobk2m8VGnVz1WArHpqYm1bT+V PVgiZdo1LraJbb/ckibbdL1y5VcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJrrWNzYK+nISWpQYSlrdp/WzlcjMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y3NDE4MDEzLTE2NzktNDk2Yi04MGY2LTJkMDVjYzViZTcyZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mNzQxODAx My0xNjc5LTQ5NmItODBmNi0yZDA1Y2M1YmU3MmYvMC85QUVCNThEQ0Q4MkJFOUM4 NDk2QTUwNjEyOTZCNzY5RkQ2Q0U1NzIzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ0nAMA0GCSqGSIb3DQEBCwUAA4IBAQCYmWP7c1I67Ptms6qL0NKZXJCA57EU 8Kd9qk3wyLmszH7xyEz9nDPnuDc0hmx6zTm+pKgUHOgG5xGm1HOvwhiiPNoLYzTM rn//Y1S+5Ld69sXJagwTq0Zbt4weWy1Juto3O3NVxeHFmZ2ysihoMl1Islpnun6n e3uDKOcypxo2wXYMs7/HodDPSY2SN3tw028hHpAqd3g+KYUJ0twSFhdS5vEENP4L nbH+vTEQBuXGyWElTpTn2NfYByKmTSRHAq+L2OD9sMIEkrx64fUSlkwsJaywW5f4 5WSUZxLa6OvaYwP2w7SPePgVPwtI6dx/KaDtgopub7R7RVwNhReEmtst -----END CERTIFICATE-----Generated at Tue May 12 22:04:05 2026 by rpki-client