$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9AFC93CAEEA98CBFC0481089E308395A3234F158.cer File: 9AFC93CAEEA98CBFC0481089E308395A3234F158.cer (raw, json) Hash identifier: 5SM/BQtpPjCZ6orM/o6L/p4QPQFU+xmiQhDsNHKORzY= Subject key identifier: 9A:FC:93:CA:EE:A9:8C:BF:C0:48:10:89:E3:08:39:5A:32:34:F1:58 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4F694251E50D0311EE5FCC0780F37DAAA82A8604 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft caRepository: rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:56:13 +0000 Certificate not after: Sun 02 May 2027 01:01:13 +0000 Subordinate resources: IP: 103.21.228.0/24 IP: 103.123.158.0/24 IP: 2001:df0:3100::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:69:42:51:e5:0d:03:11:ee:5f:cc:07:80:f3:7d:aa:a8:2a:86:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:56:13 2026 GMT Not After : May 2 01:01:13 2027 GMT Subject: CN=9AFC93CAEEA98CBFC0481089E308395A3234F158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8e:7f:75:64:50:2f:83:d2:13:ba:0e:5c:67: ab:ca:5f:b1:c5:bc:6f:0f:0a:64:8b:40:46:ee:0b: e6:9c:7a:f3:eb:90:f2:f6:d5:9e:e9:2d:0c:40:86: d2:91:88:86:2e:5f:f5:99:f8:d4:6d:3d:aa:87:00: 47:78:38:d3:16:83:3a:50:6e:a0:e7:7a:07:99:b1: bb:57:90:e6:4a:71:00:d8:66:67:13:cd:5c:0e:68: 96:3b:18:3c:53:f8:09:15:4f:37:9b:2f:4c:04:71: fd:13:eb:f5:f1:e2:97:f3:74:37:2a:10:e2:36:12: 62:e9:58:4e:09:3d:e1:dd:b2:0d:8e:47:00:cb:3c: cf:ec:18:c1:4a:9e:09:e3:7a:54:e5:45:78:02:36: d5:32:2d:a0:f3:5e:9f:28:87:88:19:11:68:3a:7b: 8e:5f:80:41:1d:c2:a9:09:82:89:fd:60:34:31:23: 22:8a:4d:14:a8:6c:45:99:da:1d:1b:3d:aa:8c:5a: f0:60:aa:e1:29:25:47:18:ac:98:b9:83:cf:54:cd: 32:b0:49:44:bf:c5:1a:9b:b4:05:3f:3d:2f:98:a4: 31:38:bc:2a:8b:5b:36:58:a5:55:c7:7c:98:69:fd: 25:e4:aa:16:84:66:82:c8:ee:0e:9b:7e:3d:52:10: 4d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9A:FC:93:CA:EE:A9:8C:BF:C0:48:10:89:E3:08:39:5A:32:34:F1:58 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/9AFC93CAEEA98CBFC0481089E308395A3234F158.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.21.228.0/24 103.123.158.0/24 IPv6: 2001:df0:3100::/48 Signature Algorithm: sha256WithRSAEncryption 86:a8:b3:6a:94:0b:03:b8:c3:61:13:4d:16:8e:0c:d9:82:89: a5:9c:b6:72:8c:a7:d6:ae:ae:bf:11:2c:cd:90:d7:1b:3f:11: 1c:f6:35:52:3e:67:55:a3:0c:64:c1:70:27:ba:16:96:62:5c: 41:c0:a6:78:e0:04:49:c1:23:81:9c:aa:80:bb:6e:3a:af:ef: 89:90:a7:47:54:1c:1a:73:79:d1:5b:08:83:a3:ea:10:f3:69: 7c:2f:63:c8:d0:3a:56:43:cf:69:57:e8:a5:4b:dc:61:4d:05: 99:bd:9f:88:3b:3c:7a:74:0f:17:05:fa:27:4e:e8:e7:36:c2: 95:da:10:af:28:17:11:ee:08:53:57:ef:4b:eb:a5:7f:5f:23: 66:70:f0:12:fd:57:ae:b8:84:04:fa:21:0b:69:47:2c:65:a1: c3:06:b7:26:28:a1:88:17:4f:b3:a0:28:19:8c:4a:cf:20:e3: 8c:85:fb:eb:98:e8:06:d9:3b:8d:31:1c:ee:ec:f8:63:25:66: b5:eb:2b:63:bc:db:74:44:61:54:51:fc:33:ef:99:5f:c6:08: f3:82:5b:24:50:76:ff:2d:46:21:ab:5e:fa:82:82:8d:86:63: d9:97:ed:51:88:ad:5f:bb:97:48:8b:44:bf:cb:12:e8:ae:e2: de:12:01:f4 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUT2lCUeUNAxHuX8wHgPN9qqgqhgQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTYxM1oX DTI3MDUwMjAxMDExM1owMzExMC8GA1UEAxMoOUFGQzkzQ0FFRUE5OENCRkMwNDgx MDg5RTMwODM5NUEzMjM0RjE1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ2Of3VkUC+D0hO6Dlxnq8pfscW8bw8KZItARu4L5px68+uQ8vbVnuktDECG 0pGIhi5f9Zn41G09qocAR3g40xaDOlBuoOd6B5mxu1eQ5kpxANhmZxPNXA5oljsY PFP4CRVPN5svTARx/RPr9fHil/N0NyoQ4jYSYulYTgk94d2yDY5HAMs8z+wYwUqe CeN6VOVFeAI21TItoPNenyiHiBkRaDp7jl+AQR3CqQmCif1gNDEjIopNFKhsRZna HRs9qoxa8GCq4SklRxismLmDz1TNMrBJRL/FGpu0BT89L5ikMTi8KotbNlilVcd8 mGn9JeSqFoRmgsjuDpt+PVIQTbkCAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJr8k8ruqYy/wEgQieMIOVoyNPFYMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzczYWYyNzFmLWM4M2QtNDQxZS1iZWE5LTE4YTI0NGQwZTAwZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83M2FmMjcx Zi1jODNkLTQ0MWUtYmVhOS0xOGEyNDRkMGUwMGUvMC85QUZDOTNDQUVFQTk4Q0JG QzA0ODEwODlFMzA4Mzk1QTMyMzRGMTU4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQAZxXkAwQAZ3ueMA8EAgACMAkDBwAgAQ3wMQAwDQYJKoZIhvcNAQELBQADggEB AIaos2qUCwO4w2ETTRaODNmCiaWctnKMp9aurr8RLM2Q1xs/ERz2NVI+Z1WjDGTB cCe6FpZiXEHApnjgBEnBI4GcqoC7bjqv74mQp0dUHBpzedFbCIOj6hDzaXwvY8jQ OlZDz2lX6KVL3GFNBZm9n4g7PHp0DxcF+idO6Oc2wpXaEK8oFxHuCFNX70vrpX9f I2Zw8BL9V664hAT6IQtpRyxlocMGtyYooYgXT7OgKBmMSs8g44yF++uY6AbZO40x HO7s+GMlZrXrK2O823REYVRR/DPvmV/GCPOCWyRQdv8tRiGrXvqCgo2GY9mX7VGI rV+7l0iLRL/LEuiu4t4SAfQ= -----END CERTIFICATE-----Generated at Tue May 12 22:03:11 2026 by rpki-client