$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.cer File: 9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.cer (raw, json) Hash identifier: GZuzrZcNvdizdkNXD+cc/klzYKjLCpzLF2+QoyQJs7c= Subject key identifier: 9E:9F:59:35:C6:5B:93:B0:70:73:0D:31:DC:3B:0B:94:A4:C3:EF:00 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 34EF7CB2E4127E15052AFD54A6795DA017B54025 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft caRepository: rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:55:23 +0000 Certificate not after: Sun 02 May 2027 02:00:23 +0000 Subordinate resources: IP: 103.158.250.0/23 IP: 2406:c5c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ef:7c:b2:e4:12:7e:15:05:2a:fd:54:a6:79:5d:a0:17:b5:40:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:55:23 2026 GMT Not After : May 2 02:00:23 2027 GMT Subject: CN=9E9F5935C65B93B070730D31DC3B0B94A4C3EF00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d5:9e:38:c1:16:4b:82:0e:6d:9a:ab:c9:5f: 4c:70:9d:a9:63:75:91:cd:5a:54:88:23:8b:8b:01: 7d:45:07:f6:dd:4c:62:e4:ac:2c:02:78:61:e7:58: 94:ed:2e:c2:0d:c3:ea:88:0e:76:c4:e1:86:d2:2e: d4:51:1b:52:fb:1d:da:81:8e:23:ef:e4:b7:d8:1f: 20:45:f3:7a:c7:b2:07:72:b5:0f:bd:af:d9:2f:f7: 21:cf:e6:46:d7:c2:16:04:d6:6e:5d:9d:bb:dd:a1: d3:31:d5:d8:9a:6d:ed:e2:7f:e1:a1:d1:a5:1f:74: fb:9f:34:d3:ea:e1:57:22:ff:6d:50:ff:12:2e:93: f3:7c:8d:e9:48:d6:f0:06:9d:5b:b6:1e:bb:a1:1a: 6c:52:d7:d0:76:a6:18:12:95:4b:1a:9f:63:01:60: e6:79:d4:05:d9:90:2f:13:6e:03:d9:98:89:47:3c: 96:3c:51:fb:b9:51:10:c9:a2:7c:8c:06:ea:cd:61: af:72:87:61:c3:76:60:85:24:f1:49:fe:12:54:00: a9:0c:3b:56:e2:9d:4c:f8:e9:b9:66:47:fd:4f:f2: 28:21:0e:a3:9e:7f:86:96:57:25:fb:26:23:c0:58: 05:c0:00:e3:38:a9:61:db:49:dc:2a:fb:2d:52:9f: 01:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9E:9F:59:35:C6:5B:93:B0:70:73:0D:31:DC:3B:0B:94:A4:C3:EF:00 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/9E9F5935C65B93B070730D31DC3B0B94A4C3EF00.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.250.0/23 IPv6: 2406:c5c0::/32 Signature Algorithm: sha256WithRSAEncryption 0e:0a:cb:03:81:55:34:5e:87:ac:27:90:23:f7:96:ce:f9:36: 00:04:8b:09:51:f7:45:70:47:f2:bb:dc:10:ca:09:be:47:ee: 18:d3:64:a5:81:d3:6b:05:d2:c5:81:e5:49:32:f5:00:6b:60: 1e:70:d6:c6:12:9f:56:07:1a:af:11:c2:64:ee:a9:b6:1b:7a: c7:41:39:49:0f:a5:97:07:6a:f6:cb:ba:9a:72:d5:8e:b0:4c: 28:eb:4c:6c:7e:ed:35:8c:b9:a6:e5:a1:76:db:81:c3:2c:b2: c4:15:a6:12:cd:a8:11:ed:06:f8:b9:19:62:0e:65:47:b8:9a: cc:fc:47:37:71:05:8b:e7:bc:d6:99:f5:02:da:1f:e8:30:b3: e4:b6:2c:9c:e9:7d:a2:08:9a:f5:9a:69:0a:25:f5:81:3f:4d: 17:39:7e:da:45:8c:a0:70:36:95:f5:79:49:3a:81:91:ed:d4: 69:88:25:87:4a:d2:91:81:d2:c0:5e:41:ca:df:c2:c7:27:2a: 5c:30:74:96:a2:3f:e9:93:52:a7:65:2a:16:15:7e:1d:d9:50: 1e:40:45:6d:0c:6e:f3:98:65:96:47:db:01:8a:66:3b:79:9e: 17:13:7b:ed:4f:41:38:94:01:f7:17:6a:d4:85:d1:4a:63:0f: f2:fc:28:8a -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUNO98suQSfhUFKv1UpnldoBe1QCUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTUyM1oX DTI3MDUwMjAyMDAyM1owMzExMC8GA1UEAxMoOUU5RjU5MzVDNjVCOTNCMDcwNzMw RDMxREMzQjBCOTRBNEMzRUYwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALvVnjjBFkuCDm2aq8lfTHCdqWN1kc1aVIgji4sBfUUH9t1MYuSsLAJ4YedY lO0uwg3D6ogOdsThhtIu1FEbUvsd2oGOI+/kt9gfIEXzeseyB3K1D72v2S/3Ic/m RtfCFgTWbl2du92h0zHV2Jpt7eJ/4aHRpR90+5800+rhVyL/bVD/Ei6T83yN6UjW 8AadW7Yeu6EabFLX0HamGBKVSxqfYwFg5nnUBdmQLxNuA9mYiUc8ljxR+7lREMmi fIwG6s1hr3KHYcN2YIUk8Un+ElQAqQw7VuKdTPjpuWZH/U/yKCEOo55/hpZXJfsm I8BYBcAA4zipYdtJ3Cr7LVKfAc0CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ6fWTXGW5OwcHMNMdw7C5Skw+8AMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NkN2M3YWMyLTVhOWItNDkyYS1hNGM1LTFmMTM1OTBkYWUwNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jZDdjN2Fj Mi01YTliLTQ5MmEtYTRjNS0xZjEzNTkwZGFlMDYvMC85RTlGNTkzNUM2NUI5M0Iw NzA3MzBEMzFEQzNCMEI5NEE0QzNFRjAwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ576MA0EAgACMAcDBQAkBsXAMA0GCSqGSIb3DQEBCwUAA4IBAQAOCssDgVU0 XoesJ5Aj95bO+TYABIsJUfdFcEfyu9wQygm+R+4Y02SlgdNrBdLFgeVJMvUAa2Ae cNbGEp9WBxqvEcJk7qm2G3rHQTlJD6WXB2r2y7qactWOsEwo60xsfu01jLmm5aF2 24HDLLLEFaYSzagR7Qb4uRliDmVHuJrM/Ec3cQWL57zWmfUC2h/oMLPktiyc6X2i CJr1mmkKJfWBP00XOX7aRYygcDaV9XlJOoGR7dRpiCWHStKRgdLAXkHK38LHJypc MHSWoj/pk1KnZSoWFX4d2VAeQEVtDG7zmGWWR9sBimY7eZ4XE3vtT0E4lAH3F2rU hdFKYw/y/CiK -----END CERTIFICATE-----Generated at Tue May 12 22:16:35 2026 by rpki-client