$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.cer File: 9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.cer (raw, json) Hash identifier: 7bQfhM1DPhr8KU54n0Cx8VEMjUWPbdPkr6P8gDQT074= Subject key identifier: 9F:2F:D5:F0:22:2A:23:10:19:36:82:C9:DC:2C:AB:6A:7F:4C:EE:F0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1BE6C925DB52AABE8C98C4648135E9C7D358BA26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:18:07 +0000 Certificate not after: Sun 02 May 2027 01:23:07 +0000 Subordinate resources: IP: 103.174.64.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e6:c9:25:db:52:aa:be:8c:98:c4:64:81:35:e9:c7:d3:58:ba:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:18:07 2026 GMT Not After : May 2 01:23:07 2027 GMT Subject: CN=9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9e:68:db:59:de:8e:d9:b9:b1:86:7a:91:a3: 69:78:c6:3a:8b:de:f4:00:a1:23:e9:7c:05:39:e0: e9:43:04:65:cc:02:5e:6b:06:89:c1:7e:40:c6:8f: d2:95:05:21:2e:26:29:6a:fe:40:1c:e6:ef:c8:41: 5b:9b:76:e3:ec:a2:f5:71:40:29:14:06:9d:71:52: b3:ba:18:42:4a:1e:2f:a4:5f:c0:e8:02:ad:8c:1c: 42:73:d8:b5:8d:05:f5:46:8a:4a:64:fe:8e:d7:dc: 72:6a:4a:67:74:f1:24:0f:43:03:6e:53:6e:db:99: 1d:63:37:69:f9:2c:c2:24:02:5a:51:a3:f6:40:c8: 2f:de:db:b2:8a:d4:f7:8a:ac:e4:9a:74:a7:a4:18: 83:21:7a:a1:f2:99:48:e9:50:1f:7c:dc:0b:97:6b: 13:a3:6d:a2:37:76:d8:ae:ed:39:14:be:60:e6:6b: 25:13:c7:39:89:c6:b7:e5:04:d3:5a:2a:7f:cd:81: 82:d8:4b:4e:7e:15:a4:f9:ad:e6:33:df:c2:fe:d4: 9d:0c:83:66:67:dc:8e:3a:b7:82:17:63:6f:35:2f: f0:f3:03:6a:ab:29:ef:05:ab:84:c7:37:71:aa:c7: 74:df:ba:2f:b5:42:49:d2:43:5a:75:eb:30:c6:c2: 79:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:2F:D5:F0:22:2A:23:10:19:36:82:C9:DC:2C:AB:6A:7F:4C:EE:F0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/9F2FD5F0222A2310193682C9DC2CAB6A7F4CEEF0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.64.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:f9:e4:f4:5c:56:91:85:bd:fa:f2:c4:ae:82:9d:3d:16:3e: 07:2f:13:e9:e7:fb:6d:e6:76:6f:af:9a:9a:e2:0f:0d:9b:15: 5d:3e:be:1b:52:41:3e:f5:90:5a:20:23:4d:d8:64:b9:81:f1: 09:ce:5d:c4:38:1b:69:04:8b:3b:63:b7:92:0c:c5:e9:a5:30: d6:3a:2e:14:35:00:6c:30:be:5d:cc:51:39:fc:4e:65:7b:ee: 26:e1:91:21:e1:37:74:94:18:1a:06:aa:34:7e:62:21:3e:59: e2:42:3a:11:52:a7:cc:f9:d9:34:ff:29:8e:97:9c:ca:8d:d4: 8e:3e:f8:cc:52:e8:41:81:0d:33:9c:77:3e:9b:f9:01:76:a2: ec:0c:ad:d4:00:bd:e7:eb:4c:cd:1a:32:26:ed:33:73:f4:62: 22:81:39:44:86:25:4e:ca:31:3e:05:53:55:a1:61:c5:26:82: a4:d9:c4:50:3f:ab:d6:3b:d7:81:16:29:77:fb:80:40:4e:9d: aa:a6:d8:66:ab:9a:21:14:df:c7:8a:65:63:12:20:86:9b:ad: 17:f1:bd:0c:51:42:69:fe:8f:04:ac:c5:0f:33:12:33:82:79: 65:15:48:51:e7:2b:fe:0f:11:d4:ea:4d:d8:8a:00:53:56:ba: 66:ef:af:a1 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUG+bJJdtSqr6MmMRkgTXpx9NYuiYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTgwN1oX DTI3MDUwMjAxMjMwN1owMzExMC8GA1UEAxMoOUYyRkQ1RjAyMjJBMjMxMDE5MzY4 MkM5REMyQ0FCNkE3RjRDRUVGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM6eaNtZ3o7ZubGGepGjaXjGOove9AChI+l8BTng6UMEZcwCXmsGicF+QMaP 0pUFIS4mKWr+QBzm78hBW5t24+yi9XFAKRQGnXFSs7oYQkoeL6RfwOgCrYwcQnPY tY0F9UaKSmT+jtfccmpKZ3TxJA9DA25TbtuZHWM3afkswiQCWlGj9kDIL97bsorU 94qs5Jp0p6QYgyF6ofKZSOlQH3zcC5drE6Ntojd22K7tORS+YOZrJRPHOYnGt+UE 01oqf82BgthLTn4VpPmt5jPfwv7UnQyDZmfcjjq3ghdjbzUv8PMDaqsp7wWrhMc3 carHdN+6L7VCSdJDWnXrMMbCedUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ8v1fAiKiMQGTaCydwsq2p/TO7wMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzkxZjRhYmJlLThiNWQtNDAyYi05MDUzLTUwYjc4NWM3NzM1Mi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85MWY0YWJi ZS04YjVkLTQwMmItOTA1My01MGI3ODVjNzczNTIvMC85RjJGRDVGMDIyMkEyMzEw MTkzNjgyQzlEQzJDQUI2QTdGNENFRUYwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ65AMA0GCSqGSIb3DQEBCwUAA4IBAQCd+eT0XFaRhb368sSugp09Fj4HLxPp 5/tt5nZvr5qa4g8NmxVdPr4bUkE+9ZBaICNN2GS5gfEJzl3EOBtpBIs7Y7eSDMXp pTDWOi4UNQBsML5dzFE5/E5le+4m4ZEh4Td0lBgaBqo0fmIhPlniQjoRUqfM+dk0 /ymOl5zKjdSOPvjMUuhBgQ0znHc+m/kBdqLsDK3UAL3n60zNGjIm7TNz9GIigTlE hiVOyjE+BVNVoWHFJoKk2cRQP6vWO9eBFil3+4BATp2qpthmq5ohFN/HimVjEiCG m60X8b0MUUJp/o8ErMUPMxIzgnllFUhR5yv+DxHU6k3YigBTVrpm76+h -----END CERTIFICATE-----Generated at Tue May 12 22:10:16 2026 by rpki-client