$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer File: 9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer (raw, json) Hash identifier: yH9n+dd9RG28yoBDqzXN9f2k/Ly5v4DTJxO2z0otd2E= Subject key identifier: 9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 25CC16E8BD4A5BFD5603B1E687174C1202BEE8FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:47:40 +0000 Certificate not after: Sat 01 May 2027 23:52:40 +0000 Subordinate resources: IP: 202.57.16.0/20 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:cc:16:e8:bd:4a:5b:fd:56:03:b1:e6:87:17:4c:12:02:be:e8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:47:40 2026 GMT Not After : May 1 23:52:40 2027 GMT Subject: CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:37:aa:93:f6:0f:81:fa:bd:c4:b3:cd:e4:b8: 57:f0:3b:bc:ec:92:79:e6:ea:7d:52:7d:0e:b2:91: ff:f2:a2:27:eb:7f:ed:62:db:98:14:db:22:f4:d2: 5f:ec:b4:b0:61:6d:8a:4e:0e:61:b6:a9:ed:e8:c1: 9f:da:ee:e1:e6:b6:58:45:72:f6:3f:ec:66:d1:94: e9:c4:39:ca:7e:b8:26:bf:b1:f8:05:4f:44:1c:90: 4b:58:a1:2c:3c:ff:44:ce:c1:7e:e5:01:38:8d:4c: 3d:63:b9:f5:58:8c:d5:02:ab:95:71:06:c6:b8:4d: 1c:db:0c:28:89:ae:76:1c:3d:b5:6c:55:52:81:78: 78:1b:3a:b2:53:5c:3e:2c:21:a3:04:bf:5c:96:0d: 66:81:8e:cc:aa:5c:3b:b6:38:f1:c5:00:96:9b:b3: 6c:b0:2a:72:ab:5f:68:ca:1c:6f:fb:b8:9e:f6:36: 45:b5:36:a6:01:83:af:ed:5a:59:64:b3:20:7f:d6: 8f:ca:d2:ec:4c:24:ac:75:bd:d3:c9:90:a6:19:ac: 32:43:13:03:30:f2:5f:0a:b1:ae:37:b1:9b:2b:e1: 4a:47:82:1a:ad:9a:7d:49:d2:c2:79:80:f5:95:70: a1:9e:c3:8f:ba:ea:4c:ad:af:f1:f1:00:80:e6:f2: a5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.57.16.0/20 Signature Algorithm: sha256WithRSAEncryption 10:10:ec:9a:dd:b3:a4:a8:c7:06:ca:e0:ff:ce:e6:38:95:fa: ef:2e:ba:38:81:75:94:08:e1:e3:3b:fc:c7:05:33:46:fe:45: 16:f9:34:ec:d5:41:38:ce:06:83:a9:31:7e:ad:22:3d:59:0b: 83:49:2d:4e:28:36:d0:a5:9a:e8:79:2a:07:84:db:bb:56:a9: bc:ed:14:14:12:a2:f0:cf:ae:c2:2e:e4:7d:59:2d:e8:bb:43: 49:1c:e0:ed:e1:ca:de:4e:67:cc:f7:75:19:ce:65:bd:95:72: 58:81:94:0f:58:c7:3f:4c:61:58:f5:e8:61:20:8d:91:03:1f: ff:ce:ba:9c:8f:ff:81:45:37:f2:bd:72:fa:42:82:a6:65:b4: 42:06:6c:72:23:37:45:1f:e5:b3:31:3e:99:a9:79:06:25:4d: 56:53:fd:df:6c:cb:11:30:cf:a6:3d:18:11:0a:cd:d9:2f:30: 8c:84:9d:b8:4b:b7:0f:a4:22:af:8f:82:b3:af:20:20:9e:6e: 62:c6:1a:c3:9d:ee:77:1a:4e:82:2a:54:79:c0:34:e3:a8:7a: a2:0f:c0:eb:25:5f:26:8f:fd:15:1f:79:10:63:a9:32:3a:5b: 08:ce:04:5f:42:04:5e:06:f2:1e:31:87:05:1e:9c:f6:0b:1b: 64:3b:4c:d8 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUJcwW6L1KW/1WA7HmhxdMEgK+6PwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDc0MFoX DTI3MDUwMTIzNTI0MFowMzExMC8GA1UEAxMoOURCOEM0NzIzRTNCRkREMDEzOEE3 OTE2QThCQjEyQzQ1QzgyQ0Q5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALg3qpP2D4H6vcSzzeS4V/A7vOySeebqfVJ9DrKR//KiJ+t/7WLbmBTbIvTS X+y0sGFtik4OYbap7ejBn9ru4ea2WEVy9j/sZtGU6cQ5yn64Jr+x+AVPRByQS1ih LDz/RM7BfuUBOI1MPWO59ViM1QKrlXEGxrhNHNsMKImudhw9tWxVUoF4eBs6slNc PiwhowS/XJYNZoGOzKpcO7Y48cUAlpuzbLAqcqtfaMocb/u4nvY2RbU2pgGDr+1a WWSzIH/Wj8rS7EwkrHW908mQphmsMkMTAzDyXwqxrjexmyvhSkeCGq2afUnSwnmA 9ZVwoZ7Dj7rqTK2v8fEAgObypdECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ24xHI+O/3QE4p5Fqi7EsRcgs2cMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzBkM2YwOTViLTcxMzAtNDEyMi1hZjI1LTdkMmU3YTExYjFiMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wZDNmMDk1 Yi03MTMwLTQxMjItYWYyNS03ZDJlN2ExMWIxYjEvMC85REI4QzQ3MjNFM0JGREQw MTM4QTc5MTZBOEJCMTJDNDVDODJDRDlDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQEyjkQMA0GCSqGSIb3DQEBCwUAA4IBAQAQEOya3bOkqMcGyuD/zuY4lfrvLro4 gXWUCOHjO/zHBTNG/kUW+TTs1UE4zgaDqTF+rSI9WQuDSS1OKDbQpZroeSoHhNu7 Vqm87RQUEqLwz67CLuR9WS3ou0NJHODt4creTmfM93UZzmW9lXJYgZQPWMc/TGFY 9ehhII2RAx//zrqcj/+BRTfyvXL6QoKmZbRCBmxyIzdFH+WzMT6ZqXkGJU1WU/3f bMsRMM+mPRgRCs3ZLzCMhJ24S7cPpCKvj4KzryAgnm5ixhrDne53Gk6CKlR5wDTj qHqiD8DrJV8mj/0VH3kQY6kyOlsIzgRfQgReBvIeMYcFHpz2CxtkO0zY -----END CERTIFICATE-----Generated at Tue May 12 22:16:28 2026 by rpki-client