$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.cer File: 9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.cer (raw, json) Hash identifier: CJ8j2mqOs3C2CfzSGuDXuOCgoXfs2fun78B8K2BfeZo= Subject key identifier: 9E:FF:7D:BB:CC:32:80:07:85:86:E6:71:60:5F:4B:D3:C6:AF:62:A0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 288CA8EF05363BC6C6BA2135635AAF49F8BDF4D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:52:16 +0000 Certificate not after: Sat 01 May 2027 23:57:16 +0000 Subordinate resources: IP: 103.133.56.0/24 IP: 103.142.21.0/24 IP: 2001:df7:9b00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:8c:a8:ef:05:36:3b:c6:c6:ba:21:35:63:5a:af:49:f8:bd:f4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:52:16 2026 GMT Not After : May 1 23:57:16 2027 GMT Subject: CN=9EFF7DBBCC3280078586E671605F4BD3C6AF62A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:00:f9:74:6e:d3:be:10:86:eb:1c:3c:70:a3: 98:5b:f1:96:ad:17:0c:27:22:36:ea:b2:84:d1:0b: 66:c9:41:5d:cd:38:cf:57:37:58:b4:e7:63:bf:ce: cc:ed:3d:4a:9a:75:f8:13:7d:34:9e:24:64:20:55: 4f:51:89:3f:46:66:be:16:8a:8e:86:4b:fa:97:d2: 0c:64:f8:eb:c0:0d:69:50:a5:ad:b4:b1:5b:02:4a: 01:3a:8b:55:3e:d4:62:bc:76:31:b1:e1:31:64:ac: 08:f2:ee:f5:7f:11:29:00:ca:11:dd:f5:19:98:8e: 3a:af:0b:33:e5:9e:48:be:95:82:4d:51:5b:d4:6d: b5:9a:6b:b9:51:3c:59:47:0b:8a:f7:3d:4c:df:ee: 9a:dc:85:f7:52:0e:45:6a:5f:5c:c4:3d:c3:9d:8e: 53:ae:67:cb:ec:f2:bb:69:f8:24:0c:19:75:e0:18: bb:89:00:a5:d6:a5:aa:80:5b:66:94:57:e6:b3:8c: 6c:7e:60:f1:81:20:f3:45:ef:23:69:ef:f2:c0:ed: 35:8c:71:45:0f:07:43:0d:0c:10:59:1e:d3:5c:6c: bd:5b:b9:a8:b0:eb:e1:41:6c:ab:ec:4e:ce:a6:9f: 7b:88:0e:0c:b2:72:b6:04:83:f8:15:31:b0:64:93: f8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9E:FF:7D:BB:CC:32:80:07:85:86:E6:71:60:5F:4B:D3:C6:AF:62:A0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.133.56.0/24 103.142.21.0/24 IPv6: 2001:df7:9b00::/48 Signature Algorithm: sha256WithRSAEncryption 66:47:9e:16:e7:e7:ef:22:e3:cd:29:80:fb:8c:e8:d7:69:98: 50:fe:6d:42:2c:12:38:e0:8f:4a:29:78:fb:ef:f4:0a:e8:66: dd:d9:30:c3:e1:61:d6:3b:07:5e:14:e4:68:b7:cb:88:57:36: 54:67:26:ca:c0:87:3c:96:cf:ca:c8:98:f1:b8:60:b2:0d:75: 76:aa:93:c0:dd:f6:8c:55:bb:a9:ec:6c:d4:e2:d1:fc:e5:b1: 77:b2:8c:7e:3d:8a:dc:e0:0e:28:da:91:ab:71:ad:68:4b:b6: d0:d3:db:7e:38:b9:76:3a:d6:67:53:f6:83:7a:69:f3:d6:5d: 32:f9:98:42:07:4f:f7:c2:f1:25:1d:bc:6e:d3:a5:d4:f0:b8: 60:4d:34:85:df:85:68:fe:a6:c9:86:dc:6a:06:34:b1:52:8b: 21:b8:45:54:02:a5:1a:f4:82:0e:c7:e1:c4:1f:ce:7c:7b:b3: 77:50:68:ab:e0:4b:e1:25:21:36:2b:87:9a:f8:7e:80:c6:73: 95:33:3f:11:3c:9d:1c:12:22:23:f6:71:92:c9:92:86:14:c4: 88:c3:99:27:db:dc:5e:41:c8:39:8a:81:59:0f:5b:1a:52:53: a7:fb:ae:9e:6f:c6:63:1a:b9:4d:ed:21:54:b1:b7:e9:f7:87: 06:53:8e:7a -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUKIyo7wU2O8bGuiE1Y1qvSfi99NAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTIxNloX DTI3MDUwMTIzNTcxNlowMzExMC8GA1UEAxMoOUVGRjdEQkJDQzMyODAwNzg1ODZF NjcxNjA1RjRCRDNDNkFGNjJBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYA+XRu074QhuscPHCjmFvxlq0XDCciNuqyhNELZslBXc04z1c3WLTnY7/O zO09Spp1+BN9NJ4kZCBVT1GJP0ZmvhaKjoZL+pfSDGT468ANaVClrbSxWwJKATqL VT7UYrx2MbHhMWSsCPLu9X8RKQDKEd31GZiOOq8LM+WeSL6Vgk1RW9RttZpruVE8 WUcLivc9TN/umtyF91IORWpfXMQ9w52OU65ny+zyu2n4JAwZdeAYu4kApdalqoBb ZpRX5rOMbH5g8YEg80XvI2nv8sDtNYxxRQ8HQw0MEFke01xsvVu5qLDr4UFsq+xO zqafe4gODLJytgSD+BUxsGST+BMCAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ7/fbvMMoAHhYbmcWBfS9PGr2KgMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE0NGYyNDYwLWZlNTAtNDgwMC1hZTAyLTU3Y2IzZTgxNWQ1ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xNDRmMjQ2 MC1mZTUwLTQ4MDAtYWUwMi01N2NiM2U4MTVkNWUvMC85RUZGN0RCQkNDMzI4MDA3 ODU4NkU2NzE2MDVGNEJEM0M2QUY2MkEwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQAZ4U4AwQAZ44VMA8EAgACMAkDBwAgAQ33mwAwDQYJKoZIhvcNAQELBQADggEB AGZHnhbn5+8i480pgPuM6NdpmFD+bUIsEjjgj0opePvv9AroZt3ZMMPhYdY7B14U 5Gi3y4hXNlRnJsrAhzyWz8rImPG4YLINdXaqk8Dd9oxVu6nsbNTi0fzlsXeyjH49 itzgDijakatxrWhLttDT2344uXY61mdT9oN6afPWXTL5mEIHT/fC8SUdvG7TpdTw uGBNNIXfhWj+psmG3GoGNLFSiyG4RVQCpRr0gg7H4cQfznx7s3dQaKvgS+ElITYr h5r4foDGc5UzPxE8nRwSIiP2cZLJkoYUxIjDmSfb3F5ByDmKgVkPWxpSU6f7rp5v xmMauU3tIVSxt+n3hwZTjno= -----END CERTIFICATE-----Generated at Tue May 12 22:16:55 2026 by rpki-client