$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer File: 9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.cer (raw, json) Hash identifier: MRfJy/Hnri5vSA4lVRoK30Zgr43229k/sgO9vPno1wc= Subject key identifier: 9D:72:8C:A3:33:07:36:90:F2:A7:F6:B7:7D:2C:F3:FE:AE:49:AA:B0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5B91C4E53E5420588BC1442930D215E24711E57E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:05:20 +0000 Certificate not after: Sun 02 May 2027 02:10:20 +0000 Subordinate resources: IP: 103.147.118.0/23 IP: 2001:df2:9480::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:91:c4:e5:3e:54:20:58:8b:c1:44:29:30:d2:15:e2:47:11:e5:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:05:20 2026 GMT Not After : May 2 02:10:20 2027 GMT Subject: CN=9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:78:13:bd:31:59:ad:67:b5:86:74:37:f3:4e: 4d:f2:ef:1d:3d:c9:f4:97:4a:08:36:3d:c6:a9:a0: a4:13:dc:1f:da:b0:5d:7a:28:1e:62:af:b5:dd:48: 69:48:a9:7a:97:dd:ea:eb:06:e1:7e:85:f5:0f:9b: ea:7f:f9:3c:b8:2f:8d:80:74:0c:84:bc:1a:22:c1: a5:f2:06:88:dc:67:f3:4a:b0:a5:d9:77:2b:56:85: 3b:46:59:38:55:50:60:e5:31:8e:6e:39:08:2c:fa: 02:b8:56:7e:e9:73:e0:21:00:6e:75:6b:af:cc:ec: 56:c5:6a:bf:38:fb:bf:5f:0f:38:1d:d2:b4:5c:d3: 83:a4:99:5b:a0:99:3b:85:11:c2:8c:06:17:fc:10: 96:ef:d3:92:a5:c2:b6:fb:dc:fc:50:9e:74:91:5d: b2:bf:2e:54:df:0a:ae:ce:71:43:f4:2d:2b:d2:58: 4a:58:2e:6e:4f:02:c6:41:23:b4:e2:44:ee:33:5f: 37:60:51:e0:93:fd:a9:9a:b4:8b:47:43:28:7e:90: 35:45:f2:59:e3:9e:04:f0:01:ad:46:6f:34:4e:96: 71:c4:6b:b6:9e:4c:c6:e7:ef:da:3b:5a:cc:71:1f: 8f:1e:64:01:34:1c:8d:71:24:34:59:22:47:56:27: d8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9D:72:8C:A3:33:07:36:90:F2:A7:F6:B7:7D:2C:F3:FE:AE:49:AA:B0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9D728CA333073690F2A7F6B77D2CF3FEAE49AAB0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.118.0/23 IPv6: 2001:df2:9480::/48 Signature Algorithm: sha256WithRSAEncryption 8e:b3:24:da:35:cb:02:94:5f:78:8c:44:eb:74:ea:88:3b:5e: 09:71:40:b1:43:ab:98:f5:63:f2:a6:fa:ba:c3:a2:9d:17:c7: a4:33:3a:cd:d4:e3:ee:ee:01:5d:ff:2c:4f:1f:48:65:31:5d: fb:14:69:12:4d:c9:47:0f:b4:8b:68:ee:ce:dd:29:07:f8:40: b8:1b:17:e4:13:04:c8:f1:b9:60:cb:f6:67:b6:7c:76:a3:36: 1b:0a:5a:a0:89:c5:90:b8:fd:b5:3b:c9:34:58:fd:54:bc:5f: 5d:9d:43:5b:67:fc:34:da:94:5f:f6:53:80:d4:df:39:ff:26: 9b:09:c2:e4:a9:1f:f8:4b:58:63:47:9f:57:5d:61:5d:9a:5f: 90:8c:ed:55:ca:11:24:52:2e:32:1b:6d:1b:c7:e1:e0:21:6a: 27:fd:7f:e7:cf:8f:38:e8:fc:14:18:42:19:c2:39:8a:46:24: b4:35:2e:fd:d5:73:13:6f:97:ae:94:45:79:95:eb:20:68:5f: 9c:32:f9:57:6f:53:64:14:f4:93:e2:aa:39:66:1e:6f:03:bc: ab:86:5d:ca:13:60:f9:19:7e:e5:9a:88:81:e3:5d:36:95:7e: 18:db:c0:2a:ef:4f:be:27:61:9f:7b:1c:76:a3:07:3b:52:fe: ac:e1:71:39 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUW5HE5T5UIFiLwUQpMNIV4kcR5X4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDUyMFoX DTI3MDUwMjAyMTAyMFowMzExMC8GA1UEAxMoOUQ3MjhDQTMzMzA3MzY5MEYyQTdG NkI3N0QyQ0YzRkVBRTQ5QUFCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL14E70xWa1ntYZ0N/NOTfLvHT3J9JdKCDY9xqmgpBPcH9qwXXooHmKvtd1I aUipepfd6usG4X6F9Q+b6n/5PLgvjYB0DIS8GiLBpfIGiNxn80qwpdl3K1aFO0ZZ OFVQYOUxjm45CCz6ArhWfulz4CEAbnVrr8zsVsVqvzj7v18POB3StFzTg6SZW6CZ O4URwowGF/wQlu/TkqXCtvvc/FCedJFdsr8uVN8Krs5xQ/QtK9JYSlgubk8CxkEj tOJE7jNfN2BR4JP9qZq0i0dDKH6QNUXyWeOeBPABrUZvNE6WccRrtp5Mxufv2jta zHEfjx5kATQcjXEkNFkiR1Yn2EMCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ1yjKMzBzaQ8qf2t30s8/6uSaqwMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RlNWU5MTMxLTNhYmMtNGFiZC1iZDkyLWE3NTVmYWI5MTMwNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kZTVlOTEz MS0zYWJjLTRhYmQtYmQ5Mi1hNzU1ZmFiOTEzMDUvMC85RDcyOENBMzMzMDczNjkw RjJBN0Y2Qjc3RDJDRjNGRUFFNDlBQUIwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ5N2MA8EAgACMAkDBwAgAQ3ylIAwDQYJKoZIhvcNAQELBQADggEBAI6zJNo1 ywKUX3iMROt06og7XglxQLFDq5j1Y/Km+rrDop0Xx6QzOs3U4+7uAV3/LE8fSGUx XfsUaRJNyUcPtIto7s7dKQf4QLgbF+QTBMjxuWDL9me2fHajNhsKWqCJxZC4/bU7 yTRY/VS8X12dQ1tn/DTalF/2U4DU3zn/JpsJwuSpH/hLWGNHn1ddYV2aX5CM7VXK ESRSLjIbbRvH4eAhaif9f+fPjzjo/BQYQhnCOYpGJLQ1Lv3VcxNvl66URXmV6yBo X5wy+VdvU2QU9JPiqjlmHm8DvKuGXcoTYPkZfuWaiIHjXTaVfhjbwCrvT74nYZ97 HHajBztS/qzhcTk= -----END CERTIFICATE-----Generated at Tue May 12 22:45:59 2026 by rpki-client