$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.cer File: 9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.cer (raw, json) Hash identifier: +RXjopFO6MWscWax6GX4an22ZgBMpT9sk4O9ZkDwCU0= Subject key identifier: 9D:68:AC:E3:A8:F4:CD:6B:9B:D7:AB:C6:95:E6:A2:16:24:B1:C5:6C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 45F1125442F36C16A46A953C3C5EAFC3647F4491 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:31:46 +0000 Certificate not after: Sun 02 May 2027 02:36:46 +0000 Subordinate resources: IP: 103.160.136.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f1:12:54:42:f3:6c:16:a4:6a:95:3c:3c:5e:af:c3:64:7f:44:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:31:46 2026 GMT Not After : May 2 02:36:46 2027 GMT Subject: CN=9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ee:22:be:a5:4c:31:9d:bb:86:62:48:f7:2b: 57:fb:5d:d0:a0:50:30:00:2c:3e:63:cf:45:e9:12: 85:44:fe:ed:c9:2b:45:dc:90:7a:d2:fe:64:72:9d: e0:99:09:3c:2e:33:c4:9f:a7:53:b3:3e:74:f7:7b: bf:50:3a:4e:63:59:a7:65:15:83:ae:f5:82:ba:dc: f0:e5:70:9b:c5:89:d1:f9:e7:9f:29:08:d6:a4:c6: 28:54:98:f7:51:10:bd:3c:bd:02:d6:0f:72:a6:d2: ce:ae:fe:16:06:25:b1:ec:a6:8b:31:f5:cb:9c:1f: 67:08:8a:a1:ec:96:42:1a:00:60:d5:83:ef:56:4e: 46:c2:38:e8:4f:ae:21:21:ca:46:38:f6:99:5c:4a: 2d:fa:69:52:a4:72:71:3e:47:ef:4e:b2:43:6e:2d: 9a:c0:d7:19:44:44:87:d5:8c:78:c3:8c:ad:44:e2: 2b:e1:c6:e4:94:d2:6e:cc:c7:e7:23:0b:dd:40:02: 46:58:10:ac:8a:03:de:30:78:0d:bb:5b:1a:5f:3b: e8:7f:dd:3d:16:49:05:86:ec:ec:41:30:11:55:d2: f0:cc:75:bc:25:24:fe:39:9b:5b:2d:48:b4:ab:1a: 0c:73:97:c0:2d:e3:5d:3b:b3:02:d2:85:95:b3:5b: fa:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9D:68:AC:E3:A8:F4:CD:6B:9B:D7:AB:C6:95:E6:A2:16:24:B1:C5:6C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/9D68ACE3A8F4CD6B9BD7ABC695E6A21624B1C56C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.136.0/24 Signature Algorithm: sha256WithRSAEncryption 99:b1:d1:c7:2c:e2:9e:57:2f:e9:68:24:12:10:ed:fe:03:fd: d8:52:a6:b4:56:29:e2:2e:cf:90:6e:2a:2a:cd:37:60:33:22: 2f:38:20:73:93:d6:d3:24:e7:3c:7d:82:2e:6f:fd:c5:9e:18: be:6c:3a:1f:c1:e3:45:83:83:15:4d:fe:58:1e:e1:3f:ba:46: a0:73:f0:0c:9c:c1:c0:46:0c:a5:0d:d2:aa:a4:43:a5:3a:a7: 3c:b7:e0:63:0f:97:b9:40:15:ec:aa:60:48:2b:50:78:d5:58: f4:bb:67:02:d3:5d:06:09:bd:4b:17:37:30:9e:10:70:55:04: 82:4b:e3:36:b6:40:b7:79:d6:9d:eb:14:03:40:1d:58:60:c7: 12:4b:08:f0:97:a2:1a:9f:bd:00:7c:c5:85:3d:47:9b:e1:07: fe:b2:22:aa:93:b7:bb:02:63:37:73:5b:1e:ac:cf:7d:e7:a2: c5:c6:11:94:8a:8f:37:76:a8:4c:20:08:49:10:ce:69:fa:54: 65:e0:bc:3d:42:ab:3f:f3:9b:0e:d6:8d:6e:ed:2a:1f:b7:1e: a1:f8:a0:d2:c3:55:64:91:31:79:b0:6f:de:0c:7c:3e:e2:53: d8:aa:96:8d:ff:2b:2e:43:40:52:63:d2:d7:69:7e:98:b5:48: a1:ac:c4:d2 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIURfESVELzbBakapU8PF6vw2R/RJEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzE0NloX DTI3MDUwMjAyMzY0NlowMzExMC8GA1UEAxMoOUQ2OEFDRTNBOEY0Q0Q2QjlCRDdB QkM2OTVFNkEyMTYyNEIxQzU2QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMDuIr6lTDGdu4ZiSPcrV/td0KBQMAAsPmPPRekShUT+7ckrRdyQetL+ZHKd 4JkJPC4zxJ+nU7M+dPd7v1A6TmNZp2UVg671grrc8OVwm8WJ0fnnnykI1qTGKFSY 91EQvTy9AtYPcqbSzq7+FgYlseymizH1y5wfZwiKoeyWQhoAYNWD71ZORsI46E+u ISHKRjj2mVxKLfppUqRycT5H706yQ24tmsDXGUREh9WMeMOMrUTiK+HG5JTSbszH 5yML3UACRlgQrIoD3jB4DbtbGl876H/dPRZJBYbs7EEwEVXS8Mx1vCUk/jmbWy1I tKsaDHOXwC3jXTuzAtKFlbNb+m0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ1orOOo9M1rm9erxpXmohYkscVsMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2YxZWVkMDljLTYwNjgtNDA3YS1iMGE2LTU5YjdkMGI4Nzg1NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mMWVlZDA5 Yy02MDY4LTQwN2EtYjBhNi01OWI3ZDBiODc4NTUvMC85RDY4QUNFM0E4RjRDRDZC OUJEN0FCQzY5NUU2QTIxNjI0QjFDNTZDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6CIMA0GCSqGSIb3DQEBCwUAA4IBAQCZsdHHLOKeVy/paCQSEO3+A/3YUqa0 ViniLs+QbioqzTdgMyIvOCBzk9bTJOc8fYIub/3Fnhi+bDofweNFg4MVTf5YHuE/ ukagc/AMnMHARgylDdKqpEOlOqc8t+BjD5e5QBXsqmBIK1B41Vj0u2cC010GCb1L FzcwnhBwVQSCS+M2tkC3edad6xQDQB1YYMcSSwjwl6Ian70AfMWFPUeb4Qf+siKq k7e7AmM3c1serM9956LFxhGUio83dqhMIAhJEM5p+lRl4Lw9Qqs/85sO1o1u7Sof tx6h+KDSw1VkkTF5sG/eDHw+4lPYqpaN/ysuQ0BSY9LXaX6YtUihrMTS -----END CERTIFICATE-----Generated at Tue May 12 22:47:38 2026 by rpki-client