$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9FD513B00492057DD702CBFFF2619D407373BD86.cer File: 9FD513B00492057DD702CBFFF2619D407373BD86.cer (raw, json) Hash identifier: A57cPGX6UE7+S+Thz0xJXNGYwslpsGrBSnI24CQzQJs= Subject key identifier: 9F:D5:13:B0:04:92:05:7D:D7:02:CB:FF:F2:61:9D:40:73:73:BD:86 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3664B2252C31A6933E37C76E655BB10D2C410C30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/9FD513B00492057DD702CBFFF2619D407373BD86.mft caRepository: rsync://rpki-rsync.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:04:57 +0000 Certificate not after: Sun 02 May 2027 00:09:57 +0000 Subordinate resources: IP: 103.144.90.0/23 IP: 2405:6a40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:64:b2:25:2c:31:a6:93:3e:37:c7:6e:65:5b:b1:0d:2c:41:0c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:04:57 2026 GMT Not After : May 2 00:09:57 2027 GMT Subject: CN=9FD513B00492057DD702CBFFF2619D407373BD86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dd:e5:5b:f5:54:72:a7:44:fb:f7:13:c3:af: f3:6e:04:bb:07:92:9d:7c:8e:48:bc:3f:70:28:2e: 6a:f9:83:cc:5a:43:88:36:4e:d8:72:1e:bb:8d:62: ab:f9:8c:45:0b:ac:d8:33:8c:08:08:c2:0c:23:60: 19:e4:3e:f6:1f:ba:4a:e9:bc:07:9a:fe:08:55:62: f4:15:ce:d5:21:1a:33:11:f1:c3:65:c4:c5:19:9b: e3:b9:99:d1:05:ad:10:21:9d:17:78:8a:cf:3e:60: f2:1a:03:83:53:cb:61:c1:1d:bc:28:aa:f0:79:81: 15:9e:41:32:49:cb:85:a2:69:be:51:26:17:d6:00: 78:ed:2e:09:29:21:f3:f8:1c:29:69:0d:2b:75:ba: ce:f3:6f:81:90:f4:ac:ca:3b:29:52:a5:78:47:81: 78:87:f7:e8:eb:90:e4:fa:cf:25:54:88:79:c4:08: 83:bc:d4:9e:60:98:03:2d:5b:0a:51:44:94:95:eb: 8b:e9:8f:9c:4b:88:41:e7:9c:55:2f:2c:85:97:90: c4:1b:73:7f:0e:ce:10:84:08:08:e3:d3:a8:ee:d6: c9:43:aa:0a:a2:d4:37:dd:8b:3b:cc:b1:e5:95:50: c2:ff:bd:9d:af:a0:69:3e:c5:68:2c:d4:2d:8e:d6: 9a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:D5:13:B0:04:92:05:7D:D7:02:CB:FF:F2:61:9D:40:73:73:BD:86 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/9FD513B00492057DD702CBFFF2619D407373BD86.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.90.0/23 IPv6: 2405:6a40::/32 Signature Algorithm: sha256WithRSAEncryption 00:0d:08:af:d0:f0:2a:d5:f5:0a:f1:04:5c:3b:d2:58:f1:71: 09:1c:3f:0f:0a:52:59:56:94:f6:1f:25:2a:cd:a8:d4:ea:43: ad:7a:1d:51:0b:36:49:49:b7:59:aa:de:af:85:49:1d:c6:5c: 1b:07:9a:10:52:b6:a6:b0:60:ce:84:d4:12:21:50:8a:6d:80: 95:ed:79:20:ab:4a:6b:a8:ad:60:93:17:87:5b:2f:15:87:94: fc:ed:00:46:15:53:11:72:0a:61:56:ce:af:c3:6b:7a:34:63: 9c:67:7c:14:79:16:36:b5:06:01:a6:4f:80:84:2d:25:95:15: 65:65:f8:4b:a0:d6:b8:2e:5d:8d:93:b6:06:23:be:11:da:98: ee:2e:91:dc:a7:6e:e7:02:b1:b8:5b:bd:16:70:55:4e:8d:3d: 1e:54:0b:31:8c:89:5d:1a:b0:8c:2d:bd:bd:09:ce:ce:25:88: 0e:5c:e4:3f:97:6d:be:1b:47:d1:08:73:10:63:72:42:2f:4d: fa:25:04:00:c6:8d:18:b6:c0:1a:1f:da:fe:f9:58:4f:4c:fe: ef:5a:29:fe:4b:78:f1:78:e3:c3:d3:11:03:bb:05:52:7c:e4: d8:5b:fa:2f:49:91:f1:f3:d6:b9:6c:5f:34:ba:77:02:6a:04: a5:56:73:72 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUNmSyJSwxppM+N8duZVuxDSxBDDAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDQ1N1oX DTI3MDUwMjAwMDk1N1owMzExMC8GA1UEAxMoOUZENTEzQjAwNDkyMDU3REQ3MDJD QkZGRjI2MTlENDA3MzczQkQ4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKfd5Vv1VHKnRPv3E8Ov824EuweSnXyOSLw/cCguavmDzFpDiDZO2HIeu41i q/mMRQus2DOMCAjCDCNgGeQ+9h+6Sum8B5r+CFVi9BXO1SEaMxHxw2XExRmb47mZ 0QWtECGdF3iKzz5g8hoDg1PLYcEdvCiq8HmBFZ5BMknLhaJpvlEmF9YAeO0uCSkh 8/gcKWkNK3W6zvNvgZD0rMo7KVKleEeBeIf36OuQ5PrPJVSIecQIg7zUnmCYAy1b ClFElJXri+mPnEuIQeecVS8shZeQxBtzfw7OEIQICOPTqO7WyUOqCqLUN92LO8yx 5ZVQwv+9na+gaT7FaCzULY7Wmg8CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ/VE7AEkgV91wLL//JhnUBzc72GMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzI2ZWFkMmY1LThiNjUtNDgyOS04ODRiLWQ3YzA2ZGQwZjgzYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yNmVhZDJm NS04YjY1LTQ4MjktODg0Yi1kN2MwNmRkMGY4M2EvMC85RkQ1MTNCMDA0OTIwNTdE RDcwMkNCRkZGMjYxOUQ0MDczNzNCRDg2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5BaMA0EAgACMAcDBQAkBWpAMA0GCSqGSIb3DQEBCwUAA4IBAQAADQiv0PAq 1fUK8QRcO9JY8XEJHD8PClJZVpT2HyUqzajU6kOteh1RCzZJSbdZqt6vhUkdxlwb B5oQUramsGDOhNQSIVCKbYCV7Xkgq0prqK1gkxeHWy8Vh5T87QBGFVMRcgphVs6v w2t6NGOcZ3wUeRY2tQYBpk+AhC0llRVlZfhLoNa4Ll2Nk7YGI74R2pjuLpHcp27n ArG4W70WcFVOjT0eVAsxjIldGrCMLb29Cc7OJYgOXOQ/l22+G0fRCHMQY3JCL036 JQQAxo0YtsAaH9r++VhPTP7vWin+S3jxeOPD0xEDuwVSfOTYW/ovSZHx89a5bF80 uncCagSlVnNy -----END CERTIFICATE-----Generated at Tue May 12 22:16:21 2026 by rpki-client