$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer File: A9BFA348A050E46482F4E00C605FF9961247FC64.cer (raw, json) Hash identifier: YvPM8YqnQ7EB7CKQfodMc3FIn670YYGiNHpJf1l7My4= Subject key identifier: A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2DB6F959DF78B19BF42EAFC28310E3587A9973CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:26:11 +0000 Certificate not after: Sun 02 May 2027 02:31:11 +0000 Subordinate resources: IP: 111.92.160.0/20 IP: 202.169.224.0/20 IP: 2403:b200::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b6:f9:59:df:78:b1:9b:f4:2e:af:c2:83:10:e3:58:7a:99:73:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:26:11 2026 GMT Not After : May 2 02:31:11 2027 GMT Subject: CN=A9BFA348A050E46482F4E00C605FF9961247FC64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:15:a4:ea:e1:25:44:93:48:b6:01:8b:4d:ff: cb:aa:05:9b:37:0c:e9:07:ce:6a:88:79:9a:c2:50: 5f:1d:46:5f:6b:5c:4a:d9:92:d5:39:45:74:a7:5b: 94:00:8f:c1:af:50:4c:c1:2f:27:20:fb:03:fd:85: 92:57:67:f1:a6:20:95:c9:b1:c7:a3:51:c8:18:c7: 90:e5:0b:43:de:c3:17:33:01:e7:07:72:3d:8a:03: be:35:60:80:ab:c4:6c:29:98:9d:bb:e4:cd:b6:56: 26:76:8a:ff:b6:51:26:00:d6:90:19:4f:ba:4e:07: ff:bf:c8:81:4c:5e:fb:a7:83:24:5e:da:dd:e4:fc: 10:8d:7a:9b:fa:d1:da:f7:34:9a:94:55:ea:0a:46: c8:26:31:8b:c1:e3:4e:6a:12:ba:b9:84:f9:ab:96: 60:01:56:f9:ec:59:bd:bc:d8:a6:63:4a:7a:bb:02: 3f:cb:51:01:45:a4:2f:11:ec:eb:87:a4:cc:17:0a: 73:66:38:0a:93:8c:e9:0f:ad:c7:d0:7c:f7:3f:d9: ca:34:6c:61:88:fc:ff:fd:b6:77:7e:cf:67:03:d0: 9f:fa:96:83:7a:03:a6:82:0e:fa:88:93:a0:25:3b: 02:33:bc:3b:87:b8:98:26:d7:14:ae:5a:ca:56:8e: ca:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 111.92.160.0/20 202.169.224.0/20 IPv6: 2403:b200::/32 Signature Algorithm: sha256WithRSAEncryption 1d:d9:bb:d4:ca:5c:fa:da:30:32:01:84:6d:46:82:b1:19:34: 26:9c:55:fe:c4:01:7a:69:f2:5f:6d:2d:a0:c0:92:a4:b7:69: 6f:3f:b0:c4:4f:b2:9c:3b:3f:c8:8a:fa:e2:a3:f9:1e:4e:bf: 2f:1d:79:16:5c:7b:f5:77:dd:c7:82:02:cd:9b:e7:84:54:48: ba:02:78:65:a3:35:ed:b4:52:f5:e1:ed:86:86:64:95:af:04: cc:bf:ab:0d:d6:74:e2:b6:f7:41:e9:90:60:c2:07:79:d9:cd: 39:c4:9a:79:1d:72:27:0e:d9:8d:d7:c9:2e:20:b0:f9:49:d4: 5e:a4:c0:53:52:61:86:4e:78:90:3a:09:4f:50:7d:a7:6d:b1: d9:04:77:8b:f2:5e:d4:82:00:5b:73:f8:5c:5d:97:8f:3d:7c: 57:df:69:60:c1:3e:46:90:92:bf:fb:c0:a0:bd:e4:f2:3d:a7: cc:75:e5:62:ec:29:0c:46:1f:c5:10:24:fc:ae:f1:6d:8c:b6: 0a:e2:4e:37:7f:4a:c4:a8:5a:5e:b4:4d:69:81:78:cd:2a:73: f1:ee:38:73:5d:84:e9:77:a7:7d:a6:04:d4:b9:5a:66:42:aa: ea:2d:f3:04:6f:cd:8e:b9:e0:19:ba:29:99:8a:79:23:8e:d9: dc:85:3f:b5 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIULbb5Wd94sZv0Lq/CgxDjWHqZc8wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjYxMVoX DTI3MDUwMjAyMzExMVowMzExMC8GA1UEAxMoQTlCRkEzNDhBMDUwRTQ2NDgyRjRF MDBDNjA1RkY5OTYxMjQ3RkM2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKgVpOrhJUSTSLYBi03/y6oFmzcM6QfOaoh5msJQXx1GX2tcStmS1TlFdKdb lACPwa9QTMEvJyD7A/2Fkldn8aYglcmxx6NRyBjHkOULQ97DFzMB5wdyPYoDvjVg gKvEbCmYnbvkzbZWJnaK/7ZRJgDWkBlPuk4H/7/IgUxe+6eDJF7a3eT8EI16m/rR 2vc0mpRV6gpGyCYxi8HjTmoSurmE+auWYAFW+exZvbzYpmNKersCP8tRAUWkLxHs 64ekzBcKc2Y4CpOM6Q+tx9B89z/ZyjRsYYj8//22d37PZwPQn/qWg3oDpoIO+oiT oCU7AjO8O4e4mCbXFK5aylaOyr8CAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKm/o0igUORkgvTgDGBf+ZYSR/xkMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2VkOWJhOTUzLTg0ODktNDUwZS1iYmRmLTc2NDU3MWZiYWNlNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lZDliYTk1 My04NDg5LTQ1MGUtYmJkZi03NjQ1NzFmYmFjZTcvMC9BOUJGQTM0OEEwNTBFNDY0 ODJGNEUwMEM2MDVGRjk5NjEyNDdGQzY0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQEb1ygAwQEyqngMA0EAgACMAcDBQAkA7IAMA0GCSqGSIb3DQEBCwUAA4IBAQAd 2bvUylz62jAyAYRtRoKxGTQmnFX+xAF6afJfbS2gwJKkt2lvP7DET7KcOz/Iivri o/keTr8vHXkWXHv1d93HggLNm+eEVEi6AnhlozXttFL14e2GhmSVrwTMv6sN1nTi tvdB6ZBgwgd52c05xJp5HXInDtmN18kuILD5SdRepMBTUmGGTniQOglPUH2nbbHZ BHeL8l7UggBbc/hcXZePPXxX32lgwT5GkJK/+8CgveTyPafMdeVi7CkMRh/FECT8 rvFtjLYK4k43f0rEqFpetE1pgXjNKnPx7jhzXYTpd6d9pgTUuVpmQqrqLfMEb82O ueAZuimZinkjjtnchT+1 -----END CERTIFICATE-----Generated at Tue May 12 22:29:07 2026 by rpki-client