$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer File: 9C58C1C6AFBB5B66C640694A98597306CC88DA0B.cer (raw, json) Hash identifier: WqccIR3pURHvXtvcixdlWTff8pugKh2+yBtX4n2X/Eo= Subject key identifier: 9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7A186560FB1CFB3476C85FC94EA3AACD64970DC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:52:43 +0000 Certificate not after: Sun 02 May 2027 00:57:43 +0000 Subordinate resources: IP: 43.252.136.0/22 IP: 103.28.12.0/22 IP: 2001:df0:2fc::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:18:65:60:fb:1c:fb:34:76:c8:5f:c9:4e:a3:aa:cd:64:97:0d:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:52:43 2026 GMT Not After : May 2 00:57:43 2027 GMT Subject: CN=9C58C1C6AFBB5B66C640694A98597306CC88DA0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b3:38:e3:71:f3:7e:a5:05:40:20:e6:89:87: 1c:c7:22:92:4b:69:20:44:57:72:ad:4d:39:06:79: ff:43:57:a0:9c:5e:6e:50:58:5b:b9:4b:ed:95:6e: a1:c9:d5:e1:71:bd:29:ed:a5:83:66:87:d6:57:99: 3e:42:ea:28:dc:e1:ea:47:c8:4e:c0:3d:2c:5c:82: 7d:f0:44:0c:32:12:75:e5:b2:95:14:c9:ac:af:e2: ef:11:00:9d:66:9b:e0:db:ad:5d:bd:07:ce:d1:6a: 74:a2:03:ed:12:ea:77:f3:c9:11:a2:90:a9:23:f4: dc:0a:dc:57:f8:e8:eb:e1:7f:fc:ae:39:2b:63:f6: e5:83:19:5b:0b:c5:b8:75:9f:34:38:e4:85:d6:40: 36:2a:be:60:83:e2:49:c3:8e:03:a0:f9:d5:0d:3b: 48:91:00:35:70:4d:da:f6:e0:09:46:d5:cc:aa:5d: 5a:98:40:6d:36:a2:1e:67:34:da:56:e4:b5:4d:23: 86:e8:e8:4b:0d:55:e6:06:5a:85:cb:06:0b:17:4e: eb:ad:ae:20:8e:38:53:0a:61:1c:1f:fd:6d:c0:19: 80:ee:79:9b:7c:7a:3a:c2:c2:04:fc:3c:5b:29:35: 12:f1:02:c5:1a:a9:55:47:46:df:bd:ce:b0:33:cb: a4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:58:C1:C6:AF:BB:5B:66:C6:40:69:4A:98:59:73:06:CC:88:DA:0B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/9C58C1C6AFBB5B66C640694A98597306CC88DA0B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.136.0/22 103.28.12.0/22 IPv6: 2001:df0:2fc::/48 Signature Algorithm: sha256WithRSAEncryption 23:bf:17:49:2d:00:e3:ed:71:3b:b0:e8:7a:d9:60:02:4f:e9: 14:79:90:d1:ea:a5:7e:e0:c1:6c:db:ef:eb:da:ae:f1:7d:cd: 04:6f:b3:9a:8a:d2:d5:06:d3:f3:75:87:26:a2:a5:4f:f8:b8: 1a:df:9c:8b:ff:99:63:2c:26:7a:88:67:54:49:68:6e:a8:a4: e1:78:cd:1d:b6:ad:f5:24:11:a5:56:c1:59:3d:b4:3a:16:e8: 65:6f:78:00:cc:96:1d:e8:9e:48:22:cd:11:25:44:3b:61:28: 26:67:77:a8:1a:5e:c8:28:e7:f8:e0:9b:89:2f:fd:2d:40:2c: 52:76:57:9f:09:9c:f7:7f:12:d4:e6:5a:7c:49:ad:fa:90:ad: 52:ae:fb:0f:ea:25:32:44:7b:4f:36:c5:2c:54:1a:aa:a9:1f: 05:1b:65:47:6d:f9:e9:92:91:43:85:2b:24:e7:89:90:54:38: 0f:96:bd:2c:66:33:7d:2d:2b:15:d5:fd:80:e7:a0:54:1f:57: 47:b5:c9:27:28:f4:c3:2c:26:10:85:5b:c2:e7:84:69:10:fa: 59:39:ae:f5:02:83:b9:d6:82:36:37:a8:b4:6b:f2:61:37:8e: 7e:2b:eb:e2:63:9a:1b:be:60:40:84:c4:80:e9:39:46:11:80: 17:cb:79:d0 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUehhlYPsc+zR2yF/JTqOqzWSXDcIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTI0M1oX DTI3MDUwMjAwNTc0M1owMzExMC8GA1UEAxMoOUM1OEMxQzZBRkJCNUI2NkM2NDA2 OTRBOTg1OTczMDZDQzg4REEwQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMazOONx836lBUAg5omHHMcikktpIERXcq1NOQZ5/0NXoJxeblBYW7lL7ZVu ocnV4XG9Ke2lg2aH1leZPkLqKNzh6kfITsA9LFyCffBEDDISdeWylRTJrK/i7xEA nWab4NutXb0HztFqdKID7RLqd/PJEaKQqSP03ArcV/jo6+F//K45K2P25YMZWwvF uHWfNDjkhdZANiq+YIPiScOOA6D51Q07SJEANXBN2vbgCUbVzKpdWphAbTaiHmc0 2lbktU0jhujoSw1V5gZahcsGCxdO662uII44UwphHB/9bcAZgO55m3x6OsLCBPw8 Wyk1EvECxRqpVUdG373OsDPLpNUCAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJxYwcavu1tmxkBpSphZcwbMiNoLMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZlMGY5MTYzLTNlNWEtNGVmYS04YmQ5LTRhYzRiYzYzMDQxNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82ZTBmOTE2 My0zZTVhLTRlZmEtOGJkOS00YWM0YmM2MzA0MTQvMC85QzU4QzFDNkFGQkI1QjY2 QzY0MDY5NEE5ODU5NzMwNkNDODhEQTBCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQCK/yIAwQCZxwMMA8EAgACMAkDBwAgAQ3wAvwwDQYJKoZIhvcNAQELBQADggEB ACO/F0ktAOPtcTuw6HrZYAJP6RR5kNHqpX7gwWzb7+varvF9zQRvs5qK0tUG0/N1 hyaipU/4uBrfnIv/mWMsJnqIZ1RJaG6opOF4zR22rfUkEaVWwVk9tDoW6GVveADM lh3onkgizRElRDthKCZnd6gaXsgo5/jgm4kv/S1ALFJ2V58JnPd/EtTmWnxJrfqQ rVKu+w/qJTJEe082xSxUGqqpHwUbZUdt+emSkUOFKyTniZBUOA+WvSxmM30tKxXV /YDnoFQfV0e1ySco9MMsJhCFW8LnhGkQ+lk5rvUCg7nWgjY3qLRr8mE3jn4r6+Jj mhu+YECExIDpOUYRgBfLedA= -----END CERTIFICATE-----Generated at Wed May 13 00:53:55 2026 by rpki-client