$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer File: 9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.cer (raw, json) Hash identifier: cbkDbqlOzlzK56fh4nc7ZmwbfphYlx86XbwMuli24Gg= Subject key identifier: 9D:8E:FC:0D:64:AA:98:41:BE:1E:38:43:21:BB:2C:12:15:3F:F1:D9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 765248F79AD339A1EF40598826FD2900D990932D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft caRepository: rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:23:27 +0000 Certificate not after: Sun 02 May 2027 00:28:27 +0000 Subordinate resources: IP: 103.186.193.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:52:48:f7:9a:d3:39:a1:ef:40:59:88:26:fd:29:00:d9:90:93:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:23:27 2026 GMT Not After : May 2 00:28:27 2027 GMT Subject: CN=9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ff:50:ff:50:79:15:eb:04:9b:b5:f4:51:32: 53:25:04:98:a7:db:50:fb:c6:c0:3a:9e:dc:fe:71: c8:95:ac:bf:de:01:39:af:e5:7c:9d:d2:ec:69:d7: 3c:da:e1:70:a3:5f:27:0c:a4:6d:2f:53:c5:3a:89: ea:f4:41:b4:1e:ce:a8:ab:86:73:a4:0a:cf:90:fb: 9e:71:23:0b:cb:a2:e2:cd:98:07:01:ad:78:7d:66: 69:a6:4a:bc:84:5f:da:0b:cc:01:b8:4f:28:d4:5d: 63:35:7e:d1:37:4a:b6:43:17:a4:00:76:3b:af:72: b9:f5:c9:ad:1e:7f:fd:f5:12:89:d1:ae:f2:68:8e: 87:05:0c:ac:1b:06:d7:08:5c:ad:31:7a:52:cb:6c: 3b:dc:c4:b9:e6:0d:cb:68:12:42:ec:8b:39:8c:77: 35:18:66:06:d7:43:27:d1:cf:fe:a4:8e:1e:f7:2b: a9:4d:88:76:47:a1:3e:27:21:6e:b6:ff:3e:ef:5e: a8:42:81:f8:3d:fc:0c:32:f1:5e:4a:94:97:4d:53: 0b:ef:84:b7:bf:75:c1:2c:e5:76:c5:cf:75:e1:c7: e5:25:51:88:14:f1:bd:55:83:0f:4f:de:21:98:20: 3f:e9:5f:29:29:77:52:25:0a:3a:c4:22:2b:0a:bb: 50:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9D:8E:FC:0D:64:AA:98:41:BE:1E:38:43:21:BB:2C:12:15:3F:F1:D9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/9D8EFC0D64AA9841BE1E384321BB2C12153FF1D9.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.193.0/24 Signature Algorithm: sha256WithRSAEncryption 04:c7:fe:76:22:a7:fd:4e:98:56:85:c2:c4:01:94:15:e5:27: 6f:83:7a:e2:7f:03:85:35:3c:ed:5c:99:1f:88:62:63:86:92: 70:f6:2f:c0:21:c1:ef:cc:b8:c7:25:20:73:69:2f:2d:6c:e9: a6:4b:e5:00:52:9a:71:fb:64:ce:c7:7f:86:7d:f2:03:64:7d: 72:fc:c7:e6:13:29:19:f6:31:84:d6:95:36:d0:4e:d9:49:99: 70:ef:c2:f6:c3:16:64:8c:d9:dd:a2:02:c8:15:7f:e2:58:53: 04:14:cb:77:9c:cc:c3:53:b3:b0:b3:e2:96:e8:9c:ae:62:36: 35:77:2f:67:a1:99:b5:a0:98:9d:52:35:67:87:64:91:92:12: f5:bd:88:2a:ce:75:a5:db:92:c1:6a:e4:e3:32:ed:3e:22:bd: e1:e3:55:ae:0c:f9:93:ec:c1:ba:64:4a:b9:f8:e0:66:4e:9d: 9d:5b:cf:8e:53:3e:8c:11:20:a2:b4:a1:3e:20:48:97:b4:f0: 39:1a:c8:e1:bd:ee:f5:65:f6:ee:88:53:8a:f9:51:cb:82:18: 5b:30:a4:24:68:57:1a:bd:07:e0:2d:a3:99:4a:23:60:30:5f: fc:ae:5c:6f:ef:bd:9d:7c:e1:52:f9:36:d0:29:cc:c7:28:eb: f6:ee:d6:de -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUdlJI95rTOaHvQFmIJv0pANmQky0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjMyN1oX DTI3MDUwMjAwMjgyN1owMzExMC8GA1UEAxMoOUQ4RUZDMEQ2NEFBOTg0MUJFMUUz ODQzMjFCQjJDMTIxNTNGRjFEOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALX/UP9QeRXrBJu19FEyUyUEmKfbUPvGwDqe3P5xyJWsv94BOa/lfJ3S7GnX PNrhcKNfJwykbS9TxTqJ6vRBtB7OqKuGc6QKz5D7nnEjC8ui4s2YBwGteH1maaZK vIRf2gvMAbhPKNRdYzV+0TdKtkMXpAB2O69yufXJrR5//fUSidGu8miOhwUMrBsG 1whcrTF6UstsO9zEueYNy2gSQuyLOYx3NRhmBtdDJ9HP/qSOHvcrqU2IdkehPich brb/Pu9eqEKB+D38DDLxXkqUl01TC++Et791wSzldsXPdeHH5SVRiBTxvVWDD0/e IZggP+lfKSl3UiUKOsQiKwq7UFECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ2O/A1kqphBvh44QyG7LBIVP/HZMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQxZDUxZDQxLWI2Y2MtNDIwYS1iNWE4LTY3YzhiZDZiMDJhZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80MWQ1MWQ0 MS1iNmNjLTQyMGEtYjVhOC02N2M4YmQ2YjAyYWYvMC85RDhFRkMwRDY0QUE5ODQx QkUxRTM4NDMyMUJCMkMxMjE1M0ZGMUQ5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ7rBMA0GCSqGSIb3DQEBCwUAA4IBAQAEx/52Iqf9TphWhcLEAZQV5Sdvg3ri fwOFNTztXJkfiGJjhpJw9i/AIcHvzLjHJSBzaS8tbOmmS+UAUppx+2TOx3+GffID ZH1y/MfmEykZ9jGE1pU20E7ZSZlw78L2wxZkjNndogLIFX/iWFMEFMt3nMzDU7Ow s+KW6JyuYjY1dy9noZm1oJidUjVnh2SRkhL1vYgqznWl25LBauTjMu0+Ir3h41Wu DPmT7MG6ZEq5+OBmTp2dW8+OUz6MESCitKE+IEiXtPA5Gsjhve71ZfbuiFOK+VHL ghhbMKQkaFcavQfgLaOZSiNgMF/8rlxv772dfOFS+TbQKczHKOv27tbe -----END CERTIFICATE-----Generated at Wed May 13 02:59:38 2026 by rpki-client