$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.cer File: 9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.cer (raw, json) Hash identifier: 0QgB+uaO/PYcQFAZ0dFReffjNzo9y6wS/xsSk7T4Dac= Subject key identifier: 9F:0E:DA:9B:A3:F7:B2:4D:18:F6:E1:7A:5B:61:08:F3:E9:EC:41:E4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 192B2401C9719EB26EF4A6CF061BC32F6C975E71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:47:04 +0000 Certificate not after: Sun 02 May 2027 01:52:04 +0000 Subordinate resources: IP: 103.211.196.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:2b:24:01:c9:71:9e:b2:6e:f4:a6:cf:06:1b:c3:2f:6c:97:5e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:47:04 2026 GMT Not After : May 2 01:52:04 2027 GMT Subject: CN=9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:74:98:50:2f:2b:db:fb:98:b0:e4:18:f3:a6: 14:02:72:69:42:a1:2c:ee:c4:7e:8a:4e:e1:44:4f: 38:f5:b1:45:68:30:5f:df:f0:89:cf:d5:63:7b:f1: a3:4b:64:d4:9b:66:85:6e:9f:58:e8:8c:81:46:9d: 76:13:ea:78:c2:72:cf:66:ae:c8:b7:7d:ea:74:73: e4:26:ea:3d:2c:c5:43:14:1b:5f:5b:19:0c:3a:25: 87:2b:2b:73:62:02:3f:8d:58:b5:b6:94:0c:fd:d0: cf:50:30:a7:b2:9d:81:90:ea:a1:99:df:0a:b5:f0: ff:3b:ae:41:53:35:32:a1:ec:48:fe:79:08:91:24: cf:b4:63:36:08:6b:80:09:88:c1:b8:f7:aa:78:e2: 22:d5:56:5d:f9:4e:1f:10:80:9c:97:55:43:46:37: e7:f9:3f:8c:b5:ea:44:c1:34:cc:4d:45:f5:af:05: 5c:69:60:0d:b9:46:ba:ec:bd:13:f0:9f:de:17:cc: c6:91:97:71:dc:5b:a4:d2:83:c9:b2:d6:de:db:10: 7a:52:7b:6d:9b:85:10:ad:a5:64:e8:cf:c7:4d:d7: fb:e4:fd:f6:be:d5:f9:05:e2:50:30:e7:18:04:f4: f2:67:0b:6c:98:f0:f5:7c:2b:ad:4e:de:29:f6:01: 4f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:0E:DA:9B:A3:F7:B2:4D:18:F6:E1:7A:5B:61:08:F3:E9:EC:41:E4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/9F0EDA9BA3F7B24D18F6E17A5B6108F3E9EC41E4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.211.196.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:a7:6e:c9:66:aa:79:5c:6b:ce:e1:5b:a6:24:27:94:8b:eb: 66:cb:9b:a7:31:3a:52:58:6c:88:bc:33:11:6f:32:10:d6:5f: 2c:09:65:62:ce:c0:e0:a6:81:90:51:e3:fc:e3:cf:67:2d:85: b3:79:e5:70:17:59:49:60:6e:1d:49:f8:92:9f:17:a8:30:e6: df:c3:c2:60:e1:39:14:54:49:f8:34:d3:8d:7c:c9:45:d0:bf: 6f:81:7a:04:ea:59:60:ea:e8:27:1b:49:8f:4b:5f:3d:e3:5e: d6:0c:1e:6f:cc:1b:35:97:24:a4:ea:c9:44:b4:21:6e:35:00: e1:c7:fa:c7:db:63:7f:c9:7a:00:e1:f2:51:79:3e:a5:36:96: 66:75:23:1a:5a:2f:21:4a:68:59:a8:07:ba:f4:e5:e4:3d:a1: 8b:c8:6d:75:e2:14:ea:24:bc:c5:09:84:7a:7c:2b:08:fd:cc: d9:97:e7:2a:5f:b7:18:c3:7e:d8:7b:7e:fc:ad:6d:c4:f6:1c: 32:70:a4:24:b4:8e:8b:67:51:6d:d4:98:61:d5:d1:7a:28:69: 08:76:46:ba:54:6f:c3:3e:37:d6:8d:16:e8:46:d3:be:4a:65: 02:c8:cd:fd:8e:32:ea:5e:52:6e:90:19:85:a5:35:2e:3e:92: c2:19:e8:8e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUGSskAclxnrJu9KbPBhvDL2yXXnEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDcwNFoX DTI3MDUwMjAxNTIwNFowMzExMC8GA1UEAxMoOUYwRURBOUJBM0Y3QjI0RDE4RjZF MTdBNUI2MTA4RjNFOUVDNDFFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN10mFAvK9v7mLDkGPOmFAJyaUKhLO7EfopO4URPOPWxRWgwX9/wic/VY3vx o0tk1JtmhW6fWOiMgUaddhPqeMJyz2auyLd96nRz5CbqPSzFQxQbX1sZDDolhysr c2ICP41YtbaUDP3Qz1Awp7KdgZDqoZnfCrXw/zuuQVM1MqHsSP55CJEkz7RjNghr gAmIwbj3qnjiItVWXflOHxCAnJdVQ0Y35/k/jLXqRME0zE1F9a8FXGlgDblGuuy9 E/Cf3hfMxpGXcdxbpNKDybLW3tsQelJ7bZuFEK2lZOjPx03X++T99r7V+QXiUDDn GAT08mcLbJjw9XwrrU7eKfYBT1cCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ8O2puj97JNGPbhelthCPPp7EHkMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2MwMzgwMmUyLTAzYWYtNGRkMC04ZGNlLTU0YzI4YTcyNTYzZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jMDM4MDJl Mi0wM2FmLTRkZDAtOGRjZS01NGMyOGE3MjU2M2QvMC85RjBFREE5QkEzRjdCMjRE MThGNkUxN0E1QjYxMDhGM0U5RUM0MUU0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ9PEMA0GCSqGSIb3DQEBCwUAA4IBAQAep27JZqp5XGvO4VumJCeUi+tmy5un MTpSWGyIvDMRbzIQ1l8sCWVizsDgpoGQUeP8489nLYWzeeVwF1lJYG4dSfiSnxeo MObfw8Jg4TkUVEn4NNONfMlF0L9vgXoE6llg6ugnG0mPS189417WDB5vzBs1lySk 6slEtCFuNQDhx/rH22N/yXoA4fJReT6lNpZmdSMaWi8hSmhZqAe69OXkPaGLyG11 4hTqJLzFCYR6fCsI/czZl+cqX7cYw37Ye378rW3E9hwycKQktI6LZ1Ft1Jhh1dF6 KGkIdka6VG/DPjfWjRboRtO+SmUCyM39jjLqXlJukBmFpTUuPpLCGeiO -----END CERTIFICATE-----Generated at Tue May 12 22:47:50 2026 by rpki-client