$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer File: 9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer (raw, json) Hash identifier: EAP9ZihwqPRQlQEFBWsEpEwemNjWeIf8991kiu/yraM= Subject key identifier: 9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 53D5BE6DEB0C94F0B62C3F3CF54595CEC9E9673A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:29:29 +0000 Certificate not after: Sun 02 May 2027 00:34:29 +0000 Subordinate resources: IP: 103.227.186.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d5:be:6d:eb:0c:94:f0:b6:2c:3f:3c:f5:45:95:ce:c9:e9:67:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:29:29 2026 GMT Not After : May 2 00:34:29 2027 GMT Subject: CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:17:27:32:58:f3:81:5f:66:77:2b:cf:e4:22: b2:82:bf:85:59:de:ae:e4:8e:1d:4d:3c:34:ce:f9: d7:71:be:2e:11:2c:03:ba:ff:5d:01:17:d1:c9:77: 3e:4d:5e:8c:4c:b2:40:e2:6f:98:49:c2:97:aa:5a: bf:ca:9f:37:d4:c8:3a:d3:e8:44:1b:42:e1:c3:2c: ce:72:ee:6c:13:5e:34:12:f4:14:76:be:32:3e:5c: e9:7a:00:30:35:0e:4c:9e:3f:3b:03:7d:b7:b5:5c: 8c:ff:3a:df:63:8a:4d:28:5a:34:be:45:c5:3a:1b: 31:90:ff:af:b1:92:55:99:5c:c2:31:93:aa:61:69: 85:1f:68:0d:17:f9:00:b7:27:be:2c:b1:12:69:97: 1e:52:f5:ed:16:48:90:40:95:25:41:8f:05:49:67: f6:f6:41:b6:de:a3:31:60:5e:9d:97:00:e0:fa:85: 2f:ba:4f:44:ee:a4:6b:0a:d8:a9:f6:7c:2d:ef:d1: aa:7e:db:dd:c8:e6:c6:54:28:1f:ba:b5:2e:b6:bc: 80:fb:ad:4c:80:e3:58:ff:d2:10:f9:bd:8c:55:76: ac:be:7d:5c:0f:c4:09:34:73:c6:d5:cc:99:28:5c: 71:44:3b:11:5a:b6:a9:ea:66:dd:20:c7:a1:34:a9: 4c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.227.186.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:20:6a:8e:8e:a8:27:e6:36:12:07:7f:20:79:a1:09:e2:63: aa:90:46:e3:37:0d:55:13:4f:8b:9a:56:cc:fc:ea:52:2d:0c: 64:15:c4:31:9c:e6:20:a5:ed:c2:29:46:ba:36:78:b1:35:9e: 31:09:40:1f:a3:11:70:48:3d:31:9e:57:7b:26:bd:ed:7c:59: 9e:c9:ff:22:b1:ca:7d:9f:8b:e0:fa:7c:0a:28:cf:07:f0:8c: 5b:64:e1:69:a4:47:a8:40:d5:9f:a0:d2:ca:a1:f3:11:26:34: 11:57:e0:7f:27:4a:dc:76:9c:b3:c0:54:13:0f:d0:8c:28:d7: c2:be:7c:fe:cf:b2:3b:74:cf:47:fc:ba:f6:67:45:bc:04:f5: 78:5d:b9:b4:4a:02:d5:92:06:af:8f:6a:3e:34:9e:f7:a8:b3: f6:29:a3:5a:ab:fe:4e:90:23:5b:86:1e:7c:31:79:2a:30:9e: e6:51:e5:45:8c:b2:b6:1e:37:f7:07:db:ee:79:54:62:00:33: ae:7e:fc:90:32:ac:69:e2:dd:40:47:79:ec:24:21:22:bc:ce: 1b:88:b5:2a:8f:31:0f:49:0a:74:3e:62:eb:85:56:a0:2e:90: 7a:89:88:8b:2e:56:35:8b:2b:a5:ed:3c:ad:90:66:89:04:04: 1b:97:2d:f8 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUU9W+besMlPC2LD889UWVzsnpZzowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjkyOVoX DTI3MDUwMjAwMzQyOVowMzExMC8GA1UEAxMoOUJENzU5OTkyM0I4RkI4QzgzQUIz QjMwMjg3RkJDQzZBOTg3NDgwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOAXJzJY84FfZncrz+QisoK/hVneruSOHU08NM7513G+LhEsA7r/XQEX0cl3 Pk1ejEyyQOJvmEnCl6pav8qfN9TIOtPoRBtC4cMsznLubBNeNBL0FHa+Mj5c6XoA MDUOTJ4/OwN9t7VcjP8632OKTShaNL5FxTobMZD/r7GSVZlcwjGTqmFphR9oDRf5 ALcnviyxEmmXHlL17RZIkECVJUGPBUln9vZBtt6jMWBenZcA4PqFL7pPRO6kawrY qfZ8Le/Rqn7b3cjmxlQoH7q1Lra8gPutTIDjWP/SEPm9jFV2rL59XA/ECTRzxtXM mShccUQ7EVq2qepm3SDHoTSpTA8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJvXWZkjuPuMg6s7MCh/vMaph0gAMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzRiMzg4ZjZlLTk5NzQtNDQ1Ny1hZjRiLTVjOWM4MmY1MGU5Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80YjM4OGY2 ZS05OTc0LTQ0NTctYWY0Yi01YzljODJmNTBlOTcvMC85QkQ3NTk5OTIzQjhGQjhD ODNBQjNCMzAyODdGQkNDNkE5ODc0ODAwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ+O6MA0GCSqGSIb3DQEBCwUAA4IBAQB8IGqOjqgn5jYSB38geaEJ4mOqkEbj Nw1VE0+LmlbM/OpSLQxkFcQxnOYgpe3CKUa6NnixNZ4xCUAfoxFwSD0xnld7Jr3t fFmeyf8iscp9n4vg+nwKKM8H8IxbZOFppEeoQNWfoNLKofMRJjQRV+B/J0rcdpyz wFQTD9CMKNfCvnz+z7I7dM9H/Lr2Z0W8BPV4Xbm0SgLVkgavj2o+NJ73qLP2KaNa q/5OkCNbhh58MXkqMJ7mUeVFjLK2Hjf3B9vueVRiADOufvyQMqxp4t1AR3nsJCEi vM4biLUqjzEPSQp0PmLrhVagLpB6iYiLLlY1iyul7TytkGaJBAQbly34 -----END CERTIFICATE-----Generated at Wed May 13 02:51:04 2026 by rpki-client