$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer File: 9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.cer (raw, json) Hash identifier: p/biOfhLHoqNy61PD+jxupzsAiszPlDVyKH8OaBKteI= Subject key identifier: 9B:AA:D5:D1:F3:6F:59:43:A3:5A:6E:E8:00:1A:5E:5F:C2:4D:9B:1E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7236F0C7F30DCC0F4B754B33BBB9D021FB895BCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:42:25 +0000 Certificate not after: Sun 02 May 2027 00:47:25 +0000 Subordinate resources: IP: 36.50.96.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:36:f0:c7:f3:0d:cc:0f:4b:75:4b:33:bb:b9:d0:21:fb:89:5b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:42:25 2026 GMT Not After : May 2 00:47:25 2027 GMT Subject: CN=9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5d:2a:ff:15:61:ce:94:a2:f4:30:e5:5f:71: 91:1e:b3:4c:7e:60:ef:31:0a:17:31:9c:24:54:1c: 75:55:49:26:63:74:d1:46:f3:92:fc:c3:9a:d5:a5: 23:0b:66:02:a3:db:d7:58:36:f6:01:f7:2f:0a:09: 4b:3e:bf:94:5d:7c:36:81:4b:55:37:b3:73:cb:3b: 5b:8b:94:f6:32:65:40:83:22:67:79:0f:2b:b4:f9: c6:1f:22:31:79:9a:76:10:f0:3b:86:d9:c3:b6:0d: eb:ce:a4:2c:e2:8b:59:ec:a6:89:1c:c0:57:36:bc: 32:cf:96:b3:e1:3a:e3:5f:04:a7:bf:70:39:f5:bc: 87:09:a9:7c:94:62:b6:b7:87:a9:9f:de:2b:f2:24: b1:6f:7a:f2:4b:c9:da:5d:f0:7a:22:0f:85:ea:a2: 75:7d:28:84:aa:a8:b4:a9:ce:38:76:00:af:17:cb: 84:22:c4:bf:0d:97:32:a9:18:ab:3c:90:0c:08:62: 78:11:d3:4a:f3:85:7a:7d:fd:52:53:3d:1c:ce:15: 01:5e:fd:7d:18:aa:96:e6:91:59:b8:09:dd:67:db: 79:52:53:b7:d2:90:7d:95:1d:e6:68:a7:8c:42:5e: 11:30:54:db:85:0f:6c:a4:a1:43:33:54:a3:56:7c: 65:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:AA:D5:D1:F3:6F:59:43:A3:5A:6E:E8:00:1A:5E:5F:C2:4D:9B:1E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/9BAAD5D1F36F5943A35A6EE8001A5E5FC24D9B1E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.96.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:2b:d1:50:49:61:ea:4e:f9:4c:f1:0a:5f:ef:be:bd:5f:b7: c6:f7:e8:70:c8:ed:d1:c4:92:53:84:23:c0:35:b1:c7:c7:f6: 84:29:2e:16:04:ce:38:b5:2e:ec:8f:aa:9b:1d:ac:7e:d1:9a: b4:c0:02:ff:be:77:80:bf:21:24:ec:65:35:47:9a:21:fd:50: cf:4e:54:3c:2e:43:df:ac:f7:9c:bc:29:0e:4e:17:07:97:53: bf:5d:cf:54:0f:33:d2:76:be:52:da:af:45:cd:f7:0c:1a:39: e9:7c:22:02:c4:bc:f1:a4:3e:59:68:1c:bc:70:24:51:7c:df: 69:b0:f2:4e:2c:75:65:23:c3:b4:1b:3d:7f:ad:39:38:2e:39: eb:a2:88:4a:74:fe:f8:22:db:ff:1e:99:b9:d1:1c:6a:b4:ab: 40:13:1b:09:f6:06:8d:4e:f7:e9:36:df:70:c3:f1:fa:73:5c: 6c:a1:80:95:3e:f2:ad:42:c3:64:16:a0:6f:78:d3:dc:e0:95: 64:35:4a:cc:40:72:b0:2c:03:ad:53:f8:82:f4:8b:1f:67:39: f7:89:04:13:f6:d9:1d:29:12:b0:8f:8e:44:81:d0:36:e7:fa: 2d:11:e6:ce:28:90:13:18:80:95:bc:3c:c7:f4:4c:70:e1:f4: 05:33:e3:18 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUcjbwx/MNzA9LdUszu7nQIfuJW80wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDIyNVoX DTI3MDUwMjAwNDcyNVowMzExMC8GA1UEAxMoOUJBQUQ1RDFGMzZGNTk0M0EzNUE2 RUU4MDAxQTVFNUZDMjREOUIxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKddKv8VYc6UovQw5V9xkR6zTH5g7zEKFzGcJFQcdVVJJmN00UbzkvzDmtWl IwtmAqPb11g29gH3LwoJSz6/lF18NoFLVTezc8s7W4uU9jJlQIMiZ3kPK7T5xh8i MXmadhDwO4bZw7YN686kLOKLWeymiRzAVza8Ms+Ws+E6418Ep79wOfW8hwmpfJRi treHqZ/eK/IksW968kvJ2l3weiIPheqidX0ohKqotKnOOHYArxfLhCLEvw2XMqkY qzyQDAhieBHTSvOFen39UlM9HM4VAV79fRiqluaRWbgJ3WfbeVJTt9KQfZUd5min jEJeETBU24UPbKShQzNUo1Z8ZaMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJuq1dHzb1lDo1pu6AAaXl/CTZseMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVkOTBkODZiLTBiMGQtNDU2Zi04NDFhLWJmZGI5ZDgwN2ZiNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81ZDkwZDg2 Yi0wYjBkLTQ1NmYtODQxYS1iZmRiOWQ4MDdmYjcvMC85QkFBRDVEMUYzNkY1OTQz QTM1QTZFRTgwMDFBNUU1RkMyNEQ5QjFFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAJDJgMA0GCSqGSIb3DQEBCwUAA4IBAQAKK9FQSWHqTvlM8Qpf7769X7fG9+hw yO3RxJJThCPANbHHx/aEKS4WBM44tS7sj6qbHax+0Zq0wAL/vneAvyEk7GU1R5oh /VDPTlQ8LkPfrPecvCkOThcHl1O/Xc9UDzPSdr5S2q9FzfcMGjnpfCICxLzxpD5Z aBy8cCRRfN9psPJOLHVlI8O0Gz1/rTk4LjnroohKdP74Itv/Hpm50RxqtKtAExsJ 9gaNTvfpNt9ww/H6c1xsoYCVPvKtQsNkFqBveNPc4JVkNUrMQHKwLAOtU/iC9Isf Zzn3iQQT9tkdKRKwj45EgdA25/otEebOKJATGICVvDzH9Exw4fQFM+MY -----END CERTIFICATE-----Generated at Tue May 12 22:47:20 2026 by rpki-client