$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer File: 9C4704204DF89CA1B41C1A06443995B3CCE386CB.cer (raw, json) Hash identifier: zwJqhxZ/YPNvfm6XXNzGV6J71RbGIZ1dWWF/UHQy4Qg= Subject key identifier: 9C:47:04:20:4D:F8:9C:A1:B4:1C:1A:06:44:39:95:B3:CC:E3:86:CB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0EE7D653F435B6FFE01F742B462F958067BCD07C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:13:24 +0000 Certificate not after: Sun 02 May 2027 00:18:24 +0000 Subordinate resources: IP: 114.120.0.0/13 IP: 182.0.0.0/12 IP: 202.3.208.0/20 IP: 221.132.192.0/18 IP: 2404:c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e7:d6:53:f4:35:b6:ff:e0:1f:74:2b:46:2f:95:80:67:bc:d0:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:13:24 2026 GMT Not After : May 2 00:18:24 2027 GMT Subject: CN=9C4704204DF89CA1B41C1A06443995B3CCE386CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d8:5e:61:fd:cc:00:95:88:dd:90:53:d8:e2: d7:67:b3:ce:cf:eb:c0:08:7a:02:40:70:df:2a:43: 34:98:6a:3f:0b:34:4e:e5:a7:ef:72:95:53:e6:57: dd:19:ef:a0:41:39:93:6f:bb:e6:4e:95:82:15:ea: eb:62:58:8b:d6:58:c5:4c:c3:dd:3e:cb:0c:49:da: 38:33:3d:a1:7e:1a:fb:c4:4b:d7:48:3b:29:f7:63: 13:24:4e:b9:8f:19:57:0e:34:df:46:84:4f:22:d2: 92:51:7e:e9:8c:d2:a9:c4:88:1e:79:75:12:cc:bd: 42:f4:96:b6:9e:9e:c0:5b:51:cf:e2:0f:8a:c2:0e: d5:61:24:42:e1:d3:9a:83:b9:f0:00:97:68:21:fc: 39:a5:57:f5:de:3c:83:27:b6:c7:a8:86:0a:1c:59: a4:a0:ed:8d:93:bc:00:f3:c1:b9:f6:d5:42:22:08: 92:0c:d9:d5:fc:2d:26:d7:c0:16:cb:42:54:b5:f9: 61:c3:c3:16:b2:2b:17:e2:47:c0:8f:4f:33:41:fd: dc:4f:5e:44:09:42:a7:c4:8a:53:ed:18:c9:0b:a1: 9a:2e:01:c7:02:6f:7f:9c:44:78:29:3d:5f:08:90: 3a:b0:28:64:64:dd:ec:f6:29:2b:9f:6c:69:18:5a: b8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:47:04:20:4D:F8:9C:A1:B4:1C:1A:06:44:39:95:B3:CC:E3:86:CB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/9C4704204DF89CA1B41C1A06443995B3CCE386CB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.120.0.0/13 182.0.0.0/12 202.3.208.0/20 221.132.192.0/18 IPv6: 2404:c0::/32 Signature Algorithm: sha256WithRSAEncryption 55:5c:a6:56:03:8e:30:ee:01:fe:38:77:3b:86:02:76:f9:5f: 1e:f6:8d:05:65:99:57:36:5a:33:37:70:60:a2:17:ef:c0:27: 2e:87:2a:3a:96:ca:79:4b:6a:21:68:51:cb:5b:63:cd:87:96: e0:80:48:0a:5b:1c:e9:d7:22:b0:a5:f7:77:65:de:73:c9:cc: 04:c8:d7:03:02:ea:a6:a7:71:18:31:3a:7f:d9:7f:3e:cd:6a: 03:06:6e:61:43:37:b4:8d:ad:8b:ee:ab:60:8b:0d:2a:53:cd: f3:51:3d:ca:4b:bf:52:19:71:87:ba:ac:9b:c6:e0:77:07:ac: e5:e2:5c:93:d4:11:a4:25:39:f7:64:a2:68:81:25:d3:24:85: 22:bd:f4:e5:bf:66:83:6c:2f:a2:ab:3f:db:71:94:b0:d1:2a: e3:65:7a:e0:08:52:f2:0e:c6:02:2b:07:bf:ea:0f:aa:ee:cd: 26:e2:47:5b:c6:ad:c7:23:f8:95:be:b4:f9:1e:5a:3a:6a:f4: d7:c8:df:b7:d6:c6:fb:71:ce:b7:35:08:87:f6:72:d3:5d:dd: 13:d7:66:d3:62:7b:c9:36:ed:8b:ed:86:95:ae:d0:64:f8:48: da:2e:2b:83:d0:af:ba:e8:4e:d9:6e:38:af:7b:9b:32:90:5d: 6c:9b:f8:d0 -----BEGIN CERTIFICATE----- MIIF5TCCBM2gAwIBAgIUDufWU/Q1tv/gH3QrRi+VgGe80HwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTMyNFoX DTI3MDUwMjAwMTgyNFowMzExMC8GA1UEAxMoOUM0NzA0MjA0REY4OUNBMUI0MUMx QTA2NDQzOTk1QjNDQ0UzODZDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMXYXmH9zACViN2QU9ji12ezzs/rwAh6AkBw3ypDNJhqPws0TuWn73KVU+ZX 3RnvoEE5k2+75k6VghXq62JYi9ZYxUzD3T7LDEnaODM9oX4a+8RL10g7KfdjEyRO uY8ZVw4030aETyLSklF+6YzSqcSIHnl1Esy9QvSWtp6ewFtRz+IPisIO1WEkQuHT moO58ACXaCH8OaVX9d48gye2x6iGChxZpKDtjZO8APPBufbVQiIIkgzZ1fwtJtfA FstCVLX5YcPDFrIrF+JHwI9PM0H93E9eRAlCp8SKU+0YyQuhmi4BxwJvf5xEeCk9 XwiQOrAoZGTd7PYpK59saRhauCECAwEAAaOCAtgwggLUMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJxHBCBN+JyhtBwaBkQ5lbPM44bLMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzMzMjhmMjRlLWRjN2YtNDU2Mi1hNTFkLWUyZTM4YzM2NzdkMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zMzI4ZjI0 ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC85QzQ3MDQyMDRERjg5Q0Ex QjQxQzFBMDY0NDM5OTVCM0NDRTM4NkNCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAcBAIAATAW AwMDcngDAwS2AAMEBMoD0AMEBt2EwDANBAIAAjAHAwUAJAQAwDANBgkqhkiG9w0B AQsFAAOCAQEAVVymVgOOMO4B/jh3O4YCdvlfHvaNBWWZVzZaMzdwYKIX78AnLocq OpbKeUtqIWhRy1tjzYeW4IBIClsc6dcisKX3d2Xec8nMBMjXAwLqpqdxGDE6f9l/ Ps1qAwZuYUM3tI2ti+6rYIsNKlPN81E9yku/Uhlxh7qsm8bgdwes5eJck9QRpCU5 92SiaIEl0ySFIr305b9mg2wvoqs/23GUsNEq42V64AhS8g7GAisHv+oPqu7NJuJH W8atxyP4lb60+R5aOmr018jft9bG+3HOtzUIh/Zy013dE9dm02J7yTbti+2Gla7Q ZPhI2i4rg9CvuuhO2W44r3ubMpBdbJv40A== -----END CERTIFICATE-----Generated at Tue May 12 22:02:36 2026 by rpki-client