$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9EE01329B08FB23B3B840AA80AD166E427A12EC8.cer File: 9EE01329B08FB23B3B840AA80AD166E427A12EC8.cer (raw, json) Hash identifier: 4f7qk+98o5vIE5LqzIZGF9NB1F4akjubba2wTisuPXM= Subject key identifier: 9E:E0:13:29:B0:8F:B2:3B:3B:84:0A:A8:0A:D1:66:E4:27:A1:2E:C8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 190B631C87265F2103A9BE15CC0DECD5E432FBFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:22:09 +0000 Certificate not after: Sun 02 May 2027 00:27:09 +0000 Subordinate resources: IP: 103.161.110.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:0b:63:1c:87:26:5f:21:03:a9:be:15:cc:0d:ec:d5:e4:32:fb:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:22:09 2026 GMT Not After : May 2 00:27:09 2027 GMT Subject: CN=9EE01329B08FB23B3B840AA80AD166E427A12EC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:15:9a:a8:2f:2b:5e:8a:1f:0e:17:f3:24:cc: e0:c1:24:fc:c9:5e:ab:4f:70:77:4f:f5:95:e7:01: 3f:37:f8:36:14:34:6e:40:3f:86:45:d4:bd:4c:f3: e8:87:9a:26:50:5c:f0:00:26:03:4a:4a:ed:e1:9b: 90:e9:de:1c:ef:fc:4b:26:c7:fe:c5:2d:29:93:b6: b3:b2:94:1b:68:b1:81:03:2a:4e:e1:98:3f:52:77: 21:f2:f6:88:cc:5a:7c:1b:0a:fe:50:db:38:d7:73: 3a:5b:5f:36:a9:a6:77:65:5b:c2:0f:35:6f:75:0e: a9:a7:ea:dc:f5:f6:50:69:af:7e:95:d2:a9:95:31: f3:0a:d0:5f:92:b4:cc:12:56:81:ba:5b:f9:cb:65: 65:72:22:53:1f:da:3c:fd:2f:75:bc:6c:92:ed:4b: 0b:b1:22:1f:1f:c1:2e:fd:b6:e6:1f:8c:4c:e4:59: 0a:ab:29:d1:00:0e:25:ba:2f:6b:f9:0e:a9:4d:94: 1f:fd:b1:b7:a3:7c:d8:ee:6b:38:62:b9:03:17:8c: a0:ca:12:02:36:8b:fd:ce:39:45:e8:c1:86:54:01: 29:71:b7:b0:a9:cb:4e:cb:5d:73:47:8a:e0:75:66: bb:b8:c6:31:63:da:04:a5:2f:73:9f:90:a2:20:27: e6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9E:E0:13:29:B0:8F:B2:3B:3B:84:0A:A8:0A:D1:66:E4:27:A1:2E:C8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/9EE01329B08FB23B3B840AA80AD166E427A12EC8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.110.0/23 Signature Algorithm: sha256WithRSAEncryption 99:92:c4:55:b1:d2:ca:a4:db:76:51:3b:6a:db:7b:3a:4a:28: 49:c3:34:06:1a:86:f2:9a:15:da:bb:ce:20:12:39:49:8e:e5: d0:1e:ac:25:64:ad:4b:20:1a:5a:0d:ea:88:35:db:00:78:31: 90:88:ce:f6:62:2f:64:d2:02:a5:55:4a:61:3a:7c:03:88:cc: ff:80:90:b2:6a:63:ec:2d:b4:f8:41:89:f5:53:4d:6a:51:ed: 86:9e:4b:f9:20:66:e0:ed:68:7d:e4:d8:1b:93:bb:c4:1b:50: f2:dd:b2:75:4f:d7:81:1a:df:76:e9:e4:65:b8:23:5a:82:60: 99:2b:40:74:56:f9:8d:a1:44:c2:36:90:dc:68:83:79:02:c9: 19:eb:43:76:32:5f:58:3b:bf:0b:cb:67:f3:cf:18:5d:43:b9: b6:09:34:4b:3d:c4:83:49:23:ae:7e:36:68:db:e4:cd:a3:af: e6:4d:4e:9e:a7:eb:d6:0f:f3:3e:52:7e:26:72:49:b5:de:4e: 4b:04:fb:72:78:4a:e5:b6:b9:c7:8b:17:be:6a:72:a6:d6:49: df:20:9d:d4:79:fb:56:8b:b3:e5:50:9b:a5:f1:2e:a8:74:e6: 6f:c5:ce:d1:a1:69:a3:9d:cf:a4:0b:67:28:66:03:04:f0:c2: 4a:f9:6a:86 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUGQtjHIcmXyEDqb4VzA3s1eQy+/4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjIwOVoX DTI3MDUwMjAwMjcwOVowMzExMC8GA1UEAxMoOUVFMDEzMjlCMDhGQjIzQjNCODQw QUE4MEFEMTY2RTQyN0ExMkVDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALMVmqgvK16KHw4X8yTM4MEk/Mleq09wd0/1lecBPzf4NhQ0bkA/hkXUvUzz 6IeaJlBc8AAmA0pK7eGbkOneHO/8SybH/sUtKZO2s7KUG2ixgQMqTuGYP1J3IfL2 iMxafBsK/lDbONdzOltfNqmmd2Vbwg81b3UOqafq3PX2UGmvfpXSqZUx8wrQX5K0 zBJWgbpb+ctlZXIiUx/aPP0vdbxsku1LC7EiHx/BLv225h+MTORZCqsp0QAOJbov a/kOqU2UH/2xt6N82O5rOGK5AxeMoMoSAjaL/c45RejBhlQBKXG3sKnLTstdc0eK 4HVmu7jGMWPaBKUvc5+QoiAn5msCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ7gEymwj7I7O4QKqArRZuQnoS7IMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzNmNDA4ZTQ0LTNlOWMtNDVlNS1iY2E0LTVkZmJkNGIyNzEzMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zZjQwOGU0 NC0zZTljLTQ1ZTUtYmNhNC01ZGZiZDRiMjcxMzAvMC85RUUwMTMyOUIwOEZCMjNC M0I4NDBBQTgwQUQxNjZFNDI3QTEyRUM4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6FuMA0GCSqGSIb3DQEBCwUAA4IBAQCZksRVsdLKpNt2UTtq23s6SihJwzQG GobymhXau84gEjlJjuXQHqwlZK1LIBpaDeqINdsAeDGQiM72Yi9k0gKlVUphOnwD iMz/gJCyamPsLbT4QYn1U01qUe2Gnkv5IGbg7Wh95Ngbk7vEG1Dy3bJ1T9eBGt92 6eRluCNagmCZK0B0VvmNoUTCNpDcaIN5AskZ60N2Ml9YO78Ly2fzzxhdQ7m2CTRL PcSDSSOufjZo2+TNo6/mTU6ep+vWD/M+Un4mckm13k5LBPtyeErltrnHixe+anKm 1knfIJ3UeftWi7PlUJul8S6odOZvxc7RoWmjnc+kC2coZgME8MJK+WqG -----END CERTIFICATE-----Generated at Tue May 12 22:03:20 2026 by rpki-client