$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.cer File: 9D0779C339B77C1A9E7292F6D90FF812DB4D996E.cer (raw, json) Hash identifier: MYfxIhvPv2li2iGXd3fvIVf3PYH0NU09J+VVEJIZKnQ= Subject key identifier: 9D:07:79:C3:39:B7:7C:1A:9E:72:92:F6:D9:0F:F8:12:DB:4D:99:6E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 31D6AA1E941190C73FB7004C8F3ECFCA5E5C3D5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:25:21 +0000 Certificate not after: Sun 02 May 2027 01:30:21 +0000 Subordinate resources: IP: 203.190.40.0/21 IP: 2406:1b00::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:d6:aa:1e:94:11:90:c7:3f:b7:00:4c:8f:3e:cf:ca:5e:5c:3d:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:25:21 2026 GMT Not After : May 2 01:30:21 2027 GMT Subject: CN=9D0779C339B77C1A9E7292F6D90FF812DB4D996E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ad:ed:15:32:85:bf:67:93:ea:6a:a2:5b:be: 81:14:a3:63:c9:8e:a1:87:0f:39:ab:e2:d8:56:c5: 07:bc:c2:f1:b2:cd:51:3d:fc:1d:e5:3c:c8:d8:e1: 8d:7a:cf:8b:fc:6c:be:9d:19:3e:18:b7:13:9c:f0: f2:ac:55:ab:e9:75:b1:a1:d2:28:e9:68:73:22:92: 7b:8d:1a:5c:21:4b:42:76:9c:d4:ec:c6:61:0a:96: 7c:1e:60:9f:ee:7e:b7:99:68:9a:72:c3:9f:4d:e3: 90:52:bf:ed:61:1b:aa:69:18:52:41:a0:5f:35:1d: 7e:b5:e9:2e:27:c8:ec:20:0f:9c:9f:36:bf:eb:e5: 43:0b:a9:09:56:c1:15:b9:58:bc:b4:e7:cd:98:7e: 72:24:cf:6d:27:24:08:2f:d9:1f:4e:88:2b:a3:68: 46:82:2e:0f:45:23:9b:7e:25:0b:9c:fd:7d:fa:ad: 85:5a:cd:bb:a6:18:48:19:0c:8d:ae:5e:8d:02:d9: 25:7a:81:e6:8b:df:b4:2a:02:0f:70:87:52:e0:54: 09:1f:5e:77:96:aa:a5:0d:39:5e:e5:f4:f8:41:e2: c4:23:20:84:8f:a1:7b:8b:a5:06:d7:1c:03:0c:9e: 94:4c:8e:c8:66:74:28:fc:8a:fd:bb:4c:3f:bb:be: c0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9D:07:79:C3:39:B7:7C:1A:9E:72:92:F6:D9:0F:F8:12:DB:4D:99:6E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/9D0779C339B77C1A9E7292F6D90FF812DB4D996E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.190.40.0/21 IPv6: 2406:1b00::/32 Signature Algorithm: sha256WithRSAEncryption 85:10:8b:a7:d0:cb:84:2b:4b:94:44:54:df:c4:d8:22:2d:62: f1:10:64:db:d9:de:30:76:a8:b0:17:8b:0f:06:ec:32:4f:2d: e5:af:5f:52:36:f4:df:4c:67:35:0e:c0:6b:0f:14:3f:a8:10: 62:10:84:1f:e1:04:68:30:46:f2:27:03:29:c5:3a:13:fe:23: e0:3e:d9:58:df:8f:7a:53:0e:bf:86:4b:ca:fc:6b:bd:ff:70: 05:d7:7b:46:fb:92:76:2b:1d:4f:28:ba:a3:66:7b:6c:e3:eb: 06:b9:36:21:02:2b:cc:bf:43:a9:71:09:e8:65:b0:8a:ed:b5: 1a:dc:a9:9a:cb:c6:81:f9:53:b6:60:65:f8:aa:1c:df:d5:17: 12:e7:43:99:67:34:bd:52:eb:7d:df:ff:6a:61:10:fc:07:98: 57:ae:cc:6f:59:0e:35:86:a1:de:e9:f9:ed:b7:b9:ab:93:4e: 41:19:de:36:38:be:d7:1c:db:dc:93:0b:c5:15:b1:c0:b9:05: 78:c1:a4:7b:bc:ee:42:fa:08:08:e3:33:69:e4:38:bd:0e:93: 40:31:8e:a3:78:ad:b6:15:25:57:92:6a:55:73:a4:d2:2a:fc: c6:22:b9:5f:77:33:4f:9c:89:dc:13:c3:56:2d:bd:6e:91:cf: f7:18:ea:05 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUMdaqHpQRkMc/twBMjz7Pyl5cPVowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjUyMVoX DTI3MDUwMjAxMzAyMVowMzExMC8GA1UEAxMoOUQwNzc5QzMzOUI3N0MxQTlFNzI5 MkY2RDkwRkY4MTJEQjREOTk2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCt7RUyhb9nk+pqolu+gRSjY8mOoYcPOavi2FbFB7zC8bLNUT38HeU8yNjh jXrPi/xsvp0ZPhi3E5zw8qxVq+l1saHSKOlocyKSe40aXCFLQnac1OzGYQqWfB5g n+5+t5lomnLDn03jkFK/7WEbqmkYUkGgXzUdfrXpLifI7CAPnJ82v+vlQwupCVbB FblYvLTnzZh+ciTPbSckCC/ZH06IK6NoRoIuD0Ujm34lC5z9ffqthVrNu6YYSBkM ja5ejQLZJXqB5ovftCoCD3CHUuBUCR9ed5aqpQ05XuX0+EHixCMghI+he4ulBtcc AwyelEyOyGZ0KPyK/btMP7u+wLsCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ0HecM5t3wannKS9tkP+BLbTZluMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzlkYWNjMzY1LWUxOTQtNGFjMC05NTNhLTRkZjNhNTkwMGIxNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85ZGFjYzM2 NS1lMTk0LTRhYzAtOTUzYS00ZGYzYTU5MDBiMTQvMC85RDA3NzlDMzM5Qjc3QzFB OUU3MjkyRjZEOTBGRjgxMkRCNEQ5OTZFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQDy74oMA0EAgACMAcDBQAkBhsAMA0GCSqGSIb3DQEBCwUAA4IBAQCFEIun0MuE K0uURFTfxNgiLWLxEGTb2d4wdqiwF4sPBuwyTy3lr19SNvTfTGc1DsBrDxQ/qBBi EIQf4QRoMEbyJwMpxToT/iPgPtlY3496Uw6/hkvK/Gu9/3AF13tG+5J2Kx1PKLqj Znts4+sGuTYhAivMv0OpcQnoZbCK7bUa3Kmay8aB+VO2YGX4qhzf1RcS50OZZzS9 Uut93/9qYRD8B5hXrsxvWQ41hqHe6fntt7mrk05BGd42OL7XHNvckwvFFbHAuQV4 waR7vO5C+ggI4zNp5Di9DpNAMY6jeK22FSVXkmpVc6TSKvzGIrlfdzNPnIncE8NW Lb1ukc/3GOoF -----END CERTIFICATE-----Generated at Tue May 12 22:03:09 2026 by rpki-client