$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.cer File: 9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.cer (raw, json) Hash identifier: +CaL5qez9LVzwfIQBKSdxH8bcUARtg+tzQQbWW0rR8s= Subject key identifier: 9C:0A:D7:06:2A:3E:06:0D:75:A5:5B:4E:50:47:F6:AF:D8:8C:13:44 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2CD0D238F5F4A153D5D083FCC5933B6EDEA5EEAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:09:14 +0000 Certificate not after: Sun 02 May 2027 02:14:14 +0000 Subordinate resources: IP: 103.191.200.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d0:d2:38:f5:f4:a1:53:d5:d0:83:fc:c5:93:3b:6e:de:a5:ee:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:09:14 2026 GMT Not After : May 2 02:14:14 2027 GMT Subject: CN=9C0AD7062A3E060D75A55B4E5047F6AFD88C1344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:61:9a:71:23:fa:ef:5a:07:bf:9a:f7:16:e0: b2:ea:ae:61:12:56:b6:39:53:39:2f:59:2f:c3:4f: b3:ea:ad:b2:d6:16:7a:85:82:61:14:a1:39:cc:64: 5b:e2:50:e6:8d:8d:ff:0a:57:5a:77:f1:17:39:ff: 33:26:6b:ee:9e:90:8d:9a:27:1b:38:44:c6:33:2d: b8:eb:ec:76:9f:de:27:52:9f:c5:ac:c6:d5:61:56: 29:92:34:d2:04:af:55:b4:4e:7d:ff:ac:c8:02:d2: 8f:64:3b:eb:4f:26:8a:b2:64:bd:57:e0:0a:ea:ce: 5e:bb:0e:b5:45:dc:d0:d4:d2:dd:f0:79:6c:d7:9f: 9f:8c:1b:e0:27:88:82:0a:f2:c5:d3:11:a4:51:53: 91:96:5d:fe:aa:ae:7f:e4:a9:a4:22:40:a5:e4:74: 66:09:f2:4e:30:2c:e2:68:b5:33:15:ef:4a:c4:04: ac:19:a4:a6:4f:9b:50:5e:13:15:0d:72:4d:a8:69: ee:59:d6:ac:78:88:7c:49:ad:6d:ca:40:2a:41:2c: 76:38:a3:f4:af:79:21:b7:85:00:bf:d8:cc:cf:b5: 0a:e5:df:be:51:c9:62:fc:29:0b:3d:db:c7:2e:f4: 2b:cd:5b:35:ec:be:61:90:7a:60:50:3d:bc:12:3b: 66:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:0A:D7:06:2A:3E:06:0D:75:A5:5B:4E:50:47:F6:AF:D8:8C:13:44 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.200.0/23 Signature Algorithm: sha256WithRSAEncryption 11:94:83:b2:87:1f:28:f1:e4:5c:5e:c8:37:d6:e9:2c:71:2d: 9e:64:41:f8:cf:77:fc:92:85:1c:52:da:97:41:7e:e7:b5:e6: ad:c7:3c:9d:0b:80:27:76:45:f0:eb:39:32:c9:a4:bf:3e:c7: 94:44:0f:53:45:d1:21:f7:5d:86:cd:d0:24:75:bc:87:6c:97: 42:8f:3e:bd:95:5b:88:b9:1a:0f:0f:88:65:74:e2:5b:35:cd: 89:b9:d0:a1:49:e9:d6:49:5b:fb:ef:71:87:0b:34:7e:c9:5d: 6d:5f:81:8f:f4:83:24:64:62:d9:92:03:a2:cd:bc:0f:02:5f: 99:e2:74:8f:39:99:d0:4f:fa:fa:3a:e1:72:00:ed:23:ba:73: a4:14:93:65:4f:dd:db:24:db:df:67:8a:01:44:df:15:0a:ec: 63:48:5c:ed:3c:61:76:36:8b:e4:8c:a4:08:d0:7b:90:f7:44: fc:a6:00:db:02:c1:64:f7:b4:18:cd:c9:98:3f:22:86:92:85: 8a:6d:7f:16:7a:91:7e:10:76:1b:d9:e1:57:8f:95:c4:1d:2a: 76:79:bf:50:89:25:4a:7b:47:4f:7b:b5:c6:21:88:5e:f1:bc: d1:de:49:88:84:a4:d6:ac:a4:13:e2:93:cf:77:14:bd:56:0f: e8:21:2c:85 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIULNDSOPX0oVPV0IP8xZM7bt6l7q8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDkxNFoX DTI3MDUwMjAyMTQxNFowMzExMC8GA1UEAxMoOUMwQUQ3MDYyQTNFMDYwRDc1QTU1 QjRFNTA0N0Y2QUZEODhDMTM0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMthmnEj+u9aB7+a9xbgsuquYRJWtjlTOS9ZL8NPs+qtstYWeoWCYRShOcxk W+JQ5o2N/wpXWnfxFzn/MyZr7p6QjZonGzhExjMtuOvsdp/eJ1KfxazG1WFWKZI0 0gSvVbROff+syALSj2Q7608mirJkvVfgCurOXrsOtUXc0NTS3fB5bNefn4wb4CeI ggryxdMRpFFTkZZd/qquf+SppCJApeR0ZgnyTjAs4mi1MxXvSsQErBmkpk+bUF4T FQ1yTahp7lnWrHiIfEmtbcpAKkEsdjij9K95IbeFAL/YzM+1CuXfvlHJYvwpCz3b xy70K81bNey+YZB6YFA9vBI7ZmECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJwK1wYqPgYNdaVbTlBH9q/YjBNEMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2UwM2U3MWZlLWFkMzMtNGQxMi04NzIwLTQzMTQzZmYwMWRiZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lMDNlNzFm ZS1hZDMzLTRkMTItODcyMC00MzE0M2ZmMDFkYmYvMC85QzBBRDcwNjJBM0UwNjBE NzVBNTVCNEU1MDQ3RjZBRkQ4OEMxMzQ0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7/IMA0GCSqGSIb3DQEBCwUAA4IBAQARlIOyhx8o8eRcXsg31ukscS2eZEH4 z3f8koUcUtqXQX7nteatxzydC4AndkXw6zkyyaS/PseURA9TRdEh912GzdAkdbyH bJdCjz69lVuIuRoPD4hldOJbNc2JudChSenWSVv773GHCzR+yV1tX4GP9IMkZGLZ kgOizbwPAl+Z4nSPOZnQT/r6OuFyAO0junOkFJNlT93bJNvfZ4oBRN8VCuxjSFzt PGF2NovkjKQI0HuQ90T8pgDbAsFk97QYzcmYPyKGkoWKbX8WepF+EHYb2eFXj5XE HSp2eb9QiSVKe0dPe7XGIYhe8bzR3kmIhKTWrKQT4pPPdxS9Vg/oISyF -----END CERTIFICATE-----Generated at Tue May 12 22:16:48 2026 by rpki-client