$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer File: 9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.cer (raw, json) Hash identifier: Kz0aexrzgTbezlEpGvR3smYjtVSza+crWJw2PW8jnUE= Subject key identifier: 9B:99:5E:CA:9C:F7:7E:66:AB:04:37:0A:6C:35:62:AD:CD:74:13:EF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4718B6F4744CE1BC7F57352AB1E6BB50BDE44458 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:29:04 +0000 Certificate not after: Sun 02 May 2027 00:34:04 +0000 Subordinate resources: IP: 103.130.82.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:18:b6:f4:74:4c:e1:bc:7f:57:35:2a:b1:e6:bb:50:bd:e4:44:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:29:04 2026 GMT Not After : May 2 00:34:04 2027 GMT Subject: CN=9B995ECA9CF77E66AB04370A6C3562ADCD7413EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d0:48:d7:58:06:39:a1:73:48:f2:5e:c5:e5: 88:ae:52:f1:4c:70:05:d2:43:0d:f3:ff:66:57:aa: 44:87:54:eb:cb:7f:b8:23:10:8e:b6:1c:79:39:a7: 4e:a8:ad:4a:2e:04:37:03:d5:18:34:39:f6:cd:03: f2:54:a5:45:92:35:d0:a8:e5:02:56:ea:a1:2e:5d: 41:4e:94:f7:97:24:75:44:bc:e8:38:d6:96:4f:6b: c7:c2:a0:35:6c:29:78:3e:34:b0:46:69:e3:a0:ed: 69:6b:d9:f9:fd:22:34:dc:67:41:14:71:39:63:7d: 9e:92:e1:85:31:53:91:7f:60:2c:8f:bd:0f:08:7e: 24:ca:ec:3b:a5:62:5e:cd:30:f7:b6:64:2e:33:6f: 64:3b:4a:9a:4b:01:ab:6f:ec:28:9c:b1:2c:29:03: 00:9c:43:70:4b:f6:5f:3d:cd:16:eb:4e:f7:b8:52: 37:34:23:24:0f:52:74:00:99:d9:8b:bc:ad:2e:e2: 02:1e:c5:ba:c8:48:82:e6:d7:8b:a3:6e:1d:5c:75: c4:de:62:d6:5d:cb:74:6a:0f:cc:9a:50:c2:fe:61: 77:22:ed:9b:54:77:a2:bb:25:ac:8e:27:eb:d4:63: 00:fd:62:cf:b1:ad:61:00:30:12:27:42:c7:55:0a: 7b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:99:5E:CA:9C:F7:7E:66:AB:04:37:0A:6C:35:62:AD:CD:74:13:EF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/9B995ECA9CF77E66AB04370A6C3562ADCD7413EF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.130.82.0/23 Signature Algorithm: sha256WithRSAEncryption 57:23:b5:80:d0:fe:1a:db:61:96:32:18:4f:dc:9d:39:d6:2e: 62:77:95:f1:3a:22:41:c0:f8:03:68:e3:c1:6c:34:e4:7c:42: de:c6:62:fd:1a:cc:0f:b7:04:65:34:62:2b:4d:26:de:1b:71: a2:e0:90:7a:74:39:2e:b8:35:5e:45:32:eb:a0:3c:e1:01:65: 03:be:64:8f:23:00:0f:d6:00:bc:4e:07:ba:8c:7b:c9:41:b3: 74:88:b7:a1:e3:f6:74:5a:00:16:7a:9f:a7:e5:d7:ad:4f:1a: 3f:bb:b9:12:8c:92:50:ce:f1:71:70:0e:22:55:7a:0f:60:af: 45:98:63:b3:fb:cb:9a:25:42:40:8e:37:4f:50:0b:ea:fb:e5: a9:36:3e:f8:b9:2f:1c:7c:fc:7b:ea:99:c1:1f:46:49:bb:a9: e6:50:4b:b9:30:c3:4c:79:e3:84:bc:07:c4:90:4b:14:06:d4: fe:aa:ca:8e:45:20:d8:7a:cd:a2:77:56:e8:a8:b5:00:38:e5: 62:aa:d0:5b:9f:ab:2f:3e:04:8a:f1:8c:77:f7:0b:32:85:1f: dc:0d:74:80:93:6b:e2:eb:54:c4:5d:ec:89:ec:d0:4f:a0:99: 6c:91:67:49:43:0e:29:39:a4:eb:8d:b5:2d:11:6d:53:1b:5c: fa:d2:ce:31 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIURxi29HRM4bx/VzUqsea7UL3kRFgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjkwNFoX DTI3MDUwMjAwMzQwNFowMzExMC8GA1UEAxMoOUI5OTVFQ0E5Q0Y3N0U2NkFCMDQz NzBBNkMzNTYyQURDRDc0MTNFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALrQSNdYBjmhc0jyXsXliK5S8UxwBdJDDfP/ZleqRIdU68t/uCMQjrYceTmn TqitSi4ENwPVGDQ59s0D8lSlRZI10KjlAlbqoS5dQU6U95ckdUS86DjWlk9rx8Kg NWwpeD40sEZp46DtaWvZ+f0iNNxnQRRxOWN9npLhhTFTkX9gLI+9Dwh+JMrsO6Vi Xs0w97ZkLjNvZDtKmksBq2/sKJyxLCkDAJxDcEv2Xz3NFutO97hSNzQjJA9SdACZ 2Yu8rS7iAh7FushIgubXi6NuHVx1xN5i1l3LdGoPzJpQwv5hdyLtm1R3orslrI4n 69RjAP1iz7GtYQAwEidCx1UKe2UCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJuZXsqc935mqwQ3Cmw1Yq3NdBPvMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzRhODcwNjRiLTVmMjctNDI3MC05MGU0LTk5ZjQzYWU4NGRiNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80YTg3MDY0 Yi01ZjI3LTQyNzAtOTBlNC05OWY0M2FlODRkYjcvMC85Qjk5NUVDQTlDRjc3RTY2 QUIwNDM3MEE2QzM1NjJBRENENzQxM0VGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ4JSMA0GCSqGSIb3DQEBCwUAA4IBAQBXI7WA0P4a22GWMhhP3J051i5id5Xx OiJBwPgDaOPBbDTkfELexmL9GswPtwRlNGIrTSbeG3Gi4JB6dDkuuDVeRTLroDzh AWUDvmSPIwAP1gC8Tge6jHvJQbN0iLeh4/Z0WgAWep+n5detTxo/u7kSjJJQzvFx cA4iVXoPYK9FmGOz+8uaJUJAjjdPUAvq++WpNj74uS8cfPx76pnBH0ZJu6nmUEu5 MMNMeeOEvAfEkEsUBtT+qsqORSDYes2id1boqLUAOOViqtBbn6svPgSK8Yx39wsy hR/cDXSAk2vi61TEXeyJ7NBPoJlskWdJQw4pOaTrjbUtEW1TG1z60s4x -----END CERTIFICATE-----Generated at Tue May 12 22:47:19 2026 by rpki-client