$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer File: 9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer (raw, json) Hash identifier: XXvYHeNYfgp5ybbbTap3H0kdAMsaHn3Z3Dl2RU0RGBE= Subject key identifier: 9C:D0:69:36:1D:E1:E2:B7:F9:87:CB:37:7D:20:65:CD:07:3D:2B:D6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2978096D724B3A1BE5078BAB777CEA15479D6AE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:03:52 +0000 Certificate not after: Sun 02 May 2027 02:08:52 +0000 Subordinate resources: IP: 103.174.78.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:78:09:6d:72:4b:3a:1b:e5:07:8b:ab:77:7c:ea:15:47:9d:6a:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:03:52 2026 GMT Not After : May 2 02:08:52 2027 GMT Subject: CN=9CD069361DE1E2B7F987CB377D2065CD073D2BD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4e:78:ce:46:19:a5:d9:fa:f6:27:33:61:9c: f2:87:d0:f2:e3:8f:56:53:54:b2:d7:01:d5:98:df: a2:b9:2c:15:53:36:cc:30:1f:6f:88:d6:1b:5c:de: fd:91:71:b9:5d:11:6a:26:bc:b5:63:83:51:e3:a7: cc:7c:47:a3:eb:dc:ce:0f:32:ac:2a:6a:41:d8:45: 1b:6d:8c:c6:59:5a:b5:16:55:c2:f8:28:d1:e9:d1: 70:9f:27:6b:a5:8c:96:b1:ae:d0:3f:f8:1a:04:3e: 71:30:78:f7:6c:cc:e3:dd:f6:ae:1a:3e:a2:36:e4: ab:62:08:46:01:20:d0:0b:6e:45:e4:3f:fb:10:00: 07:ef:a4:bd:8f:05:80:c6:84:46:9b:34:7a:cf:59: c1:92:b1:71:d1:d8:c4:75:ad:a8:8b:5b:a9:ab:63: c5:a9:c6:2d:0f:84:ce:f6:08:b3:35:98:14:bf:5f: de:15:76:c3:9a:ce:89:8c:54:87:b9:c8:c8:76:90: f4:34:78:23:88:06:6a:a2:c6:4b:57:e3:7f:a1:3d: e3:4b:8c:29:7d:8c:87:28:d8:b8:30:35:bf:80:2f: fa:ee:e6:76:b3:0b:76:6d:1c:9a:2a:8c:9c:3c:b4: dd:c6:f3:61:19:f8:52:1a:03:ec:21:ad:39:22:dc: 03:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:D0:69:36:1D:E1:E2:B7:F9:87:CB:37:7D:20:65:CD:07:3D:2B:D6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.78.0/23 Signature Algorithm: sha256WithRSAEncryption 64:2b:96:f2:e0:1d:37:fc:f3:54:c7:1b:24:29:db:1f:ce:8d: 9e:d6:88:9e:a0:a4:29:87:33:f9:2c:de:96:d5:21:63:83:73: b4:f1:6e:ae:fa:3c:79:ad:81:ef:0f:2a:35:79:d8:93:25:59: 1e:04:81:9f:10:19:c1:ef:d4:28:e8:71:43:06:f8:d4:76:d6: 19:09:6f:84:a4:10:49:d4:6f:ac:4d:c7:26:1f:36:81:4b:b5: 5b:45:b9:07:73:55:f0:7e:58:47:43:2d:14:78:07:5e:14:5e: 97:68:dc:85:81:5e:79:47:01:16:da:c3:12:74:e7:90:43:28: 18:1e:00:34:38:f4:20:d2:d2:5e:79:1a:f1:21:d2:c6:69:b2: f4:3d:1c:32:71:07:01:44:cf:69:90:0f:6d:9e:e2:60:a1:b5: de:2a:31:02:a0:1a:aa:11:2a:d0:74:cb:17:a4:62:76:7c:ea: a7:b2:07:7a:d2:ba:21:0b:31:3d:de:83:46:29:76:6d:f8:65: 90:4d:fa:24:df:08:92:97:e7:ef:88:c0:a0:60:ca:47:bc:17: 29:cb:1b:7a:95:52:16:6a:b5:f4:ca:d2:22:1f:4c:8f:0a:00: ca:33:e0:73:9f:13:64:70:79:26:9f:bc:5a:d5:b6:a9:79:58: d7:35:27:d5 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUKXgJbXJLOhvlB4urd3zqFUedauYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDM1MloX DTI3MDUwMjAyMDg1MlowMzExMC8GA1UEAxMoOUNEMDY5MzYxREUxRTJCN0Y5ODdD QjM3N0QyMDY1Q0QwNzNEMkJENjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANxOeM5GGaXZ+vYnM2Gc8ofQ8uOPVlNUstcB1ZjforksFVM2zDAfb4jWG1ze /ZFxuV0Raia8tWODUeOnzHxHo+vczg8yrCpqQdhFG22MxllatRZVwvgo0enRcJ8n a6WMlrGu0D/4GgQ+cTB492zM4932rho+ojbkq2IIRgEg0AtuReQ/+xAAB++kvY8F gMaERps0es9ZwZKxcdHYxHWtqItbqatjxanGLQ+EzvYIszWYFL9f3hV2w5rOiYxU h7nIyHaQ9DR4I4gGaqLGS1fjf6E940uMKX2MhyjYuDA1v4Av+u7mdrMLdm0cmiqM nDy03cbzYRn4UhoD7CGtOSLcA+cCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJzQaTYd4eK3+YfLN30gZc0HPSvWMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RiYzZkYTE5LTg0YmUtNGE1MC1iNDY2LTFlODZkZGJjYzM1Zi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kYmM2ZGEx OS04NGJlLTRhNTAtYjQ2Ni0xZTg2ZGRiY2MzNWYvMC85Q0QwNjkzNjFERTFFMkI3 Rjk4N0NCMzc3RDIwNjVDRDA3M0QyQkQ2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ65OMA0GCSqGSIb3DQEBCwUAA4IBAQBkK5by4B03/PNUxxskKdsfzo2e1oie oKQphzP5LN6W1SFjg3O08W6u+jx5rYHvDyo1ediTJVkeBIGfEBnB79Qo6HFDBvjU dtYZCW+EpBBJ1G+sTccmHzaBS7VbRbkHc1XwflhHQy0UeAdeFF6XaNyFgV55RwEW 2sMSdOeQQygYHgA0OPQg0tJeeRrxIdLGabL0PRwycQcBRM9pkA9tnuJgobXeKjEC oBqqESrQdMsXpGJ2fOqnsgd60rohCzE93oNGKXZt+GWQTfok3wiSl+fviMCgYMpH vBcpyxt6lVIWarX0ytIiH0yPCgDKM+BznxNkcHkmn7xa1bapeVjXNSfV -----END CERTIFICATE-----Generated at Tue May 12 22:16:57 2026 by rpki-client