$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9E6973F078195021DC7E37753A16BDC3BD2CE345.cer File: 9E6973F078195021DC7E37753A16BDC3BD2CE345.cer (raw, json) Hash identifier: gboHktHZ7+vfSpThEOwXnuKG0XDbhoVx/3J9btMehlo= Subject key identifier: 9E:69:73:F0:78:19:50:21:DC:7E:37:75:3A:16:BD:C3:BD:2C:E3:45 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1A55F7934722DBF7182D7AA273630D653C210C6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft caRepository: rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:49:02 +0000 Certificate not after: Sun 02 May 2027 00:54:02 +0000 Subordinate resources: IP: 103.164.80.0/24 IP: 103.209.1.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:55:f7:93:47:22:db:f7:18:2d:7a:a2:73:63:0d:65:3c:21:0c:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:49:02 2026 GMT Not After : May 2 00:54:02 2027 GMT Subject: CN=9E6973F078195021DC7E37753A16BDC3BD2CE345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d3:66:5d:12:c2:e1:69:85:f3:29:ab:bc:68: 78:6f:24:f5:c4:a8:f7:4d:84:df:9e:57:f1:20:f7: ba:40:42:ad:fd:82:aa:ff:02:95:ba:0d:91:dc:14: 17:51:fa:9d:61:fa:52:8a:11:c7:53:5f:11:95:f4: eb:84:39:b3:ab:37:24:75:24:41:09:15:76:e1:13: 18:32:6c:cd:11:ea:7d:fb:94:c5:66:5d:15:9b:be: 6c:28:66:6c:9f:6e:35:ec:e9:7a:82:9f:42:f3:56: 2e:3a:15:3a:5d:be:3d:2f:65:56:91:10:2b:2a:d1: 9b:81:d1:42:aa:ec:e2:e4:bb:7e:24:4f:6c:f9:b2: 28:b6:6c:f0:d5:64:08:42:00:68:48:24:16:b7:31: 3c:54:fa:30:0c:f1:e8:ea:8a:3d:38:8a:de:32:ea: 12:9e:da:f4:20:e5:65:b2:6f:ac:45:67:86:a5:eb: 79:2f:57:0d:05:d2:26:fb:92:29:0d:ee:94:a1:82: 3f:87:df:bd:62:af:e7:1a:ca:95:eb:51:12:a8:45: 53:5d:0e:02:f6:19:76:6e:5e:5d:bf:81:67:61:d4: 63:2c:a0:b2:8e:a4:fa:06:f8:d1:42:5a:fc:8f:7f: d0:bf:1e:a7:27:a0:a7:b0:cc:9b:fa:b6:4c:0e:d3: 42:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9E:69:73:F0:78:19:50:21:DC:7E:37:75:3A:16:BD:C3:BD:2C:E3:45 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/9E6973F078195021DC7E37753A16BDC3BD2CE345.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.80.0/24 103.209.1.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:9e:6c:57:cb:f8:dc:a6:e3:c7:f9:d8:34:84:35:27:1e:87: f2:96:bf:b0:02:d6:db:32:a6:06:1f:a3:37:b8:a6:e7:e8:ee: 19:48:f8:50:84:d4:2e:8d:f1:07:4f:f7:62:08:63:91:93:18: 72:e7:9f:61:d3:d7:44:15:54:6b:d1:92:03:ce:b3:40:67:68: 89:31:b3:83:bb:f4:a9:da:b8:a1:53:bf:1f:45:6b:b8:fe:fe: 9f:79:5e:6b:3d:2d:15:c9:79:db:f2:5b:3e:cc:13:91:8c:5b: 9c:c8:47:30:c7:14:57:d8:ec:9a:60:f7:dd:20:38:4f:ae:00: e8:79:a8:01:96:87:8e:42:be:6c:83:4b:f0:a0:91:64:63:58: 9b:08:8b:4b:a9:2a:fa:b0:f2:12:7e:69:b4:43:a4:18:91:fd: c2:f7:5b:32:12:f2:a6:29:96:10:ef:77:4b:91:68:7d:3a:66: 88:c6:9c:a8:d5:82:4e:66:6f:15:f8:69:a1:b1:bc:6d:4c:2e: c0:7c:da:9d:b9:55:9c:61:3b:9b:00:2a:95:b4:74:73:68:f7: a6:51:dc:15:fc:38:02:60:49:25:ed:9b:89:7c:a6:f6:cb:5a: f3:4f:e4:6f:cb:6b:ac:aa:ab:f3:ba:4c:d0:e6:2d:f6:d7:f8: f0:d7:c7:ae -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUGlX3k0ci2/cYLXqic2MNZTwhDG8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDkwMloX DTI3MDUwMjAwNTQwMlowMzExMC8GA1UEAxMoOUU2OTczRjA3ODE5NTAyMURDN0Uz Nzc1M0ExNkJEQzNCRDJDRTM0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3TZl0SwuFphfMpq7xoeG8k9cSo902E355X8SD3ukBCrf2Cqv8ClboNkdwU F1H6nWH6UooRx1NfEZX064Q5s6s3JHUkQQkVduETGDJszRHqffuUxWZdFZu+bChm bJ9uNezpeoKfQvNWLjoVOl2+PS9lVpEQKyrRm4HRQqrs4uS7fiRPbPmyKLZs8NVk CEIAaEgkFrcxPFT6MAzx6OqKPTiK3jLqEp7a9CDlZbJvrEVnhqXreS9XDQXSJvuS KQ3ulKGCP4ffvWKv5xrKletREqhFU10OAvYZdm5eXb+BZ2HUYyygso6k+gb40UJa /I9/0L8epyegp7DMm/q2TA7TQnUCAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ5pc/B4GVAh3H43dToWvcO9LONFMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzY3ZGIyM2I3LTkxNTktNDZjNy04ODUzLTA2NjU0YWU0N2FlZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82N2RiMjNi Ny05MTU5LTQ2YzctODg1My0wNjY1NGFlNDdhZWQvMC85RTY5NzNGMDc4MTk1MDIx REM3RTM3NzUzQTE2QkRDM0JEMkNFMzQ1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQAZ6RQAwQAZ9EBMA0GCSqGSIb3DQEBCwUAA4IBAQCcnmxXy/jcpuPH+dg0hDUn Hofylr+wAtbbMqYGH6M3uKbn6O4ZSPhQhNQujfEHT/diCGORkxhy559h09dEFVRr 0ZIDzrNAZ2iJMbODu/Sp2rihU78fRWu4/v6feV5rPS0VyXnb8ls+zBORjFucyEcw xxRX2OyaYPfdIDhPrgDoeagBloeOQr5sg0vwoJFkY1ibCItLqSr6sPISfmm0Q6QY kf3C91syEvKmKZYQ73dLkWh9OmaIxpyo1YJOZm8V+GmhsbxtTC7AfNqduVWcYTub ACqVtHRzaPemUdwV/DgCYEkl7ZuJfKb2y1rzT+Rvy2usqqvzukzQ5i321/jw18eu -----END CERTIFICATE-----Generated at Tue May 12 22:02:45 2026 by rpki-client