$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.cer File: A97A9954B3224F187A618EF2D36B911DBCA4E0E7.cer (raw, json) Hash identifier: ksrW1bLZOU4M2l867qMKP0A9wZNNmthaV40P6dqSXso= Subject key identifier: A9:7A:99:54:B3:22:4F:18:7A:61:8E:F2:D3:6B:91:1D:BC:A4:E0:E7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6D2B110DDFB223426483D6556BC0FB62A04D430E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:41:25 +0000 Certificate not after: Sun 02 May 2027 01:46:25 +0000 Subordinate resources: IP: 103.76.204.0/24 IP: 2001:df5:9a00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:2b:11:0d:df:b2:23:42:64:83:d6:55:6b:c0:fb:62:a0:4d:43:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:41:25 2026 GMT Not After : May 2 01:46:25 2027 GMT Subject: CN=A97A9954B3224F187A618EF2D36B911DBCA4E0E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:92:d1:76:68:2f:6d:94:c2:da:66:5e:6f:b7: 65:e6:c7:cc:b9:23:c4:fe:de:3d:49:fd:8c:31:8f: 1f:32:e3:b8:cc:aa:f8:c5:78:62:c5:7c:2d:f2:1d: ea:c6:16:59:51:a9:87:8b:b8:e8:49:31:c8:42:2d: 73:40:8d:3a:78:77:c0:6f:92:d8:01:2e:b1:95:c1: f4:61:65:96:1f:8b:f0:43:54:18:d0:50:39:1f:70: 75:65:49:2b:07:7c:08:70:a8:c7:ea:ba:8b:df:af: 7e:96:56:89:a8:c8:c6:64:30:61:6b:0c:ca:ac:dc: 78:eb:0f:74:ef:29:81:68:ed:d3:0c:34:96:b9:2b: 23:ee:f2:c7:55:eb:9b:d4:d2:8c:60:3a:ff:90:02: 3d:3e:29:44:91:a2:2f:89:3d:70:95:76:9e:ce:a3: b3:53:aa:19:1d:65:88:00:30:fc:ed:a9:e2:e7:d2: f1:4b:af:5e:3d:58:95:6e:e9:27:35:df:fb:d5:69: e2:73:32:86:1c:5c:7d:95:8b:6b:12:06:b0:1c:0b: 97:71:04:d3:15:d5:3d:4e:99:69:8e:9d:63:28:91: 03:1c:de:a1:0e:81:b7:75:27:f5:de:63:31:89:97: 29:90:fb:05:0b:10:62:58:12:e9:51:4d:5a:27:53: 3c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:7A:99:54:B3:22:4F:18:7A:61:8E:F2:D3:6B:91:1D:BC:A4:E0:E7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.76.204.0/24 IPv6: 2001:df5:9a00::/48 Signature Algorithm: sha256WithRSAEncryption 8a:df:11:cd:9b:7d:f9:88:67:b1:a5:a4:01:61:9d:75:a4:4b: 9c:ea:39:b5:78:bd:74:74:25:8f:cc:5c:10:e1:0b:99:fd:00: 26:b4:f8:c7:84:82:d7:ee:6c:f2:89:fe:1c:e4:70:5e:d1:1c: d5:a8:07:a8:77:df:03:e9:d9:b4:28:af:19:1f:76:47:61:fd: 21:a7:32:2a:22:86:b5:2e:1f:64:15:76:f0:13:2d:81:60:97: 1c:95:b0:11:04:e7:d6:9a:db:f6:24:8b:35:cc:8c:af:44:0e: ad:ae:5c:d3:5b:57:8a:1e:6c:41:74:a4:93:88:0e:1f:6c:75: 4a:01:f9:fb:f6:32:0a:5f:3c:80:86:d5:9e:b9:c1:0d:ff:25: 6a:5a:0a:7c:16:45:f4:6c:0e:0f:68:e6:c4:80:1e:bf:f5:33: 36:22:af:8e:4e:76:91:5f:a1:39:3e:93:7b:83:f0:1e:bd:01: cf:75:5b:99:00:89:88:a3:22:4b:62:be:0b:a7:f2:17:2e:e8: c8:dd:18:50:e8:15:18:2e:13:39:f8:b1:61:84:aa:2a:2f:c2: f7:22:8b:36:0e:60:a1:65:f6:7a:5c:60:9f:5c:61:d4:09:aa: 5b:89:55:84:92:1a:2d:6a:48:a4:40:19:25:53:92:8c:1d:ac: 3f:97:2b:c6 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUbSsRDd+yI0Jkg9ZVa8D7YqBNQw4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDEyNVoX DTI3MDUwMjAxNDYyNVowMzExMC8GA1UEAxMoQTk3QTk5NTRCMzIyNEYxODdBNjE4 RUYyRDM2QjkxMURCQ0E0RTBFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANKS0XZoL22UwtpmXm+3ZebHzLkjxP7ePUn9jDGPHzLjuMyq+MV4YsV8LfId 6sYWWVGph4u46EkxyEItc0CNOnh3wG+S2AEusZXB9GFllh+L8ENUGNBQOR9wdWVJ Kwd8CHCox+q6i9+vfpZWiajIxmQwYWsMyqzceOsPdO8pgWjt0ww0lrkrI+7yx1Xr m9TSjGA6/5ACPT4pRJGiL4k9cJV2ns6js1OqGR1liAAw/O2p4ufS8UuvXj1YlW7p JzXf+9Vp4nMyhhxcfZWLaxIGsBwLl3EE0xXVPU6ZaY6dYyiRAxzeoQ6Bt3Un9d5j MYmXKZD7BQsQYlgS6VFNWidTPOUCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKl6mVSzIk8YemGO8tNrkR28pODnMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2I1YTczZDA0LTIxNGYtNDZiOC05NzQ2LTYyY2RlODU1ODhmYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iNWE3M2Qw NC0yMTRmLTQ2YjgtOTc0Ni02MmNkZTg1NTg4ZmEvMC9BOTdBOTk1NEIzMjI0RjE4 N0E2MThFRjJEMzZCOTExREJDQTRFMEU3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ0zMMA8EAgACMAkDBwAgAQ31mgAwDQYJKoZIhvcNAQELBQADggEBAIrfEc2b ffmIZ7GlpAFhnXWkS5zqObV4vXR0JY/MXBDhC5n9ACa0+MeEgtfubPKJ/hzkcF7R HNWoB6h33wPp2bQorxkfdkdh/SGnMioihrUuH2QVdvATLYFglxyVsBEE59aa2/Yk izXMjK9EDq2uXNNbV4oebEF0pJOIDh9sdUoB+fv2MgpfPICG1Z65wQ3/JWpaCnwW RfRsDg9o5sSAHr/1MzYir45OdpFfoTk+k3uD8B69Ac91W5kAiYijIktivgun8hcu 6MjdGFDoFRguEzn4sWGEqiovwvciizYOYKFl9npcYJ9cYdQJqluJVYSSGi1qSKRA GSVTkowdrD+XK8Y= -----END CERTIFICATE-----Generated at Tue May 12 22:49:51 2026 by rpki-client