$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer File: 9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer (raw, json) Hash identifier: JRoJVP3IDyV0mGCTqipf6pwbW4Kg+cIKfugLKQAKToA= Subject key identifier: 9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 750F3A9A3B0F5B9F83FF77EFE85E947DBA0BA4A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:02:05 +0000 Certificate not after: Sun 02 May 2027 02:07:05 +0000 Subordinate resources: IP: 103.3.212.0/22 IP: 150.129.188.0/22 IP: 202.152.192.0/20 IP: 2407:f200::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0f:3a:9a:3b:0f:5b:9f:83:ff:77:ef:e8:5e:94:7d:ba:0b:a4:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:02:05 2026 GMT Not After : May 2 02:07:05 2027 GMT Subject: CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:14:13:9a:10:8f:c4:9b:5d:13:5d:3b:12:fe: a0:e5:9d:99:be:73:33:1b:c7:7c:22:0c:cf:93:a6: d0:13:7a:dd:e7:a0:b9:46:ef:ad:5d:20:a1:63:f7: 2b:6c:ce:cd:5f:13:c2:1a:18:67:53:04:b4:6d:87: ee:4c:f8:08:46:c0:be:24:92:48:73:97:02:1e:f8: cf:45:89:d5:98:d7:9e:65:d7:f6:a1:72:87:b8:8a: 2b:31:ee:56:72:b3:eb:f5:78:7c:7e:35:fb:80:57: ed:e8:5e:5d:27:2b:97:2b:e4:51:70:e3:11:ee:a0: 73:34:81:08:1b:75:e1:0c:40:73:06:c3:b1:e4:f7: 07:da:d3:5d:89:91:c2:da:00:e2:d6:76:4e:02:39: b3:40:f3:c1:3d:55:8d:57:5e:84:f0:d9:04:d0:58: 60:75:83:02:14:2c:5c:c3:24:f1:c1:1b:b1:fd:08: e1:5f:42:f8:0d:df:91:e3:55:bf:34:b5:db:6f:92: 5d:d4:12:98:56:42:2f:2e:d6:17:6f:cd:3d:34:d6: 64:1b:cc:dc:b1:7e:98:17:77:28:36:f7:2a:02:02: 0e:a7:33:49:11:bd:4e:95:0a:88:40:64:de:b6:fd: fd:b7:03:3c:24:7f:7c:7f:61:58:ad:4f:8a:ae:a9: 48:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.3.212.0/22 150.129.188.0/22 202.152.192.0/20 IPv6: 2407:f200::/32 Signature Algorithm: sha256WithRSAEncryption 7f:85:26:f7:35:df:99:2b:f1:2b:c1:97:1f:ba:74:c1:1f:de: 27:8f:53:84:9c:18:a3:71:eb:b4:21:46:fc:9d:08:cd:d3:f9: 2f:2c:1a:8a:f9:7b:54:c9:79:fc:dd:8f:90:59:db:4d:e5:30: f7:9b:28:a5:e0:58:12:3b:c7:c1:16:09:9f:b6:8c:79:18:80: 57:b9:1e:f4:5c:32:f0:2c:56:3d:3d:54:89:55:a0:10:7b:e1: d3:e8:9a:09:b9:64:22:71:f6:15:5f:11:27:9e:1f:14:03:15: d9:98:09:4c:4e:f6:bc:2e:6c:26:61:b2:b7:64:77:08:95:c9: 57:69:74:66:47:4d:0e:97:43:b0:f8:0c:b2:ad:70:42:1f:93: b4:60:e6:f7:6e:b9:26:a1:2e:1f:6f:f0:16:1c:09:ae:d2:5f: 5e:6a:46:57:4e:d2:1c:a0:b5:64:05:2a:a6:2e:f0:92:9d:7c: 33:86:e8:d8:cd:c1:63:d0:50:79:b7:a8:27:d5:8b:02:e6:69: 7c:5e:a4:32:01:50:4b:c8:be:1b:6a:eb:ad:b8:4d:d0:5c:c4: d5:1d:07:c5:bf:b7:99:ec:d7:5d:eb:fc:9c:e1:c7:7f:02:3d: c7:a2:68:8e:c3:82:64:d9:8d:be:94:3b:2d:30:65:aa:09:dd: 10:ea:d2:5d -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIUdQ86mjsPW5+D/3fv6F6UfboLpKIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDIwNVoX DTI3MDUwMjAyMDcwNVowMzExMC8GA1UEAxMoOUJFMUYxQkE4MDkxNjMxQTQwOUJF OTM5QkRCMDczMzI3NEY0QUFDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALgUE5oQj8SbXRNdOxL+oOWdmb5zMxvHfCIMz5Om0BN63eeguUbvrV0goWP3 K2zOzV8TwhoYZ1MEtG2H7kz4CEbAviSSSHOXAh74z0WJ1ZjXnmXX9qFyh7iKKzHu VnKz6/V4fH41+4BX7eheXScrlyvkUXDjEe6gczSBCBt14QxAcwbDseT3B9rTXYmR wtoA4tZ2TgI5s0DzwT1VjVdehPDZBNBYYHWDAhQsXMMk8cEbsf0I4V9C+A3fkeNV vzS122+SXdQSmFZCLy7WF2/NPTTWZBvM3LF+mBd3KDb3KgICDqczSRG9TpUKiEBk 3rb9/bcDPCR/fH9hWK1Piq6pSBUCAwEAAaOCAtQwggLQMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJvh8bqAkWMaQJvpOb2wczJ09KrEMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q4ZTNiMzljLWRhMTEtNDVlZS1hYWIzLTVjYjE0ZWM0NDcwYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kOGUzYjM5 Yy1kYTExLTQ1ZWUtYWFiMy01Y2IxNGVjNDQ3MGMvMC85QkUxRjFCQTgwOTE2MzFB NDA5QkU5MzlCREIwNzMzMjc0RjRBQUM0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATAS AwQCZwPUAwQCloG8AwQEypjAMA0EAgACMAcDBQAkB/IAMA0GCSqGSIb3DQEBCwUA A4IBAQB/hSb3Nd+ZK/ErwZcfunTBH94nj1OEnBijceu0IUb8nQjN0/kvLBqK+XtU yXn83Y+QWdtN5TD3myil4FgSO8fBFgmftox5GIBXuR70XDLwLFY9PVSJVaAQe+HT 6JoJuWQicfYVXxEnnh8UAxXZmAlMTva8LmwmYbK3ZHcIlclXaXRmR00Ol0Ow+Ayy rXBCH5O0YOb3brkmoS4fb/AWHAmu0l9eakZXTtIcoLVkBSqmLvCSnXwzhujYzcFj 0FB5t6gn1YsC5ml8XqQyAVBLyL4bauutuE3QXMTVHQfFv7eZ7Ndd6/yc4cd/Aj3H omiOw4Jk2Y2+lDstMGWqCd0Q6tJd -----END CERTIFICATE-----Generated at Tue May 12 22:45:38 2026 by rpki-client