$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A9E3887289ED85663942126250F7D66CD58FE1F5.cer File: A9E3887289ED85663942126250F7D66CD58FE1F5.cer (raw, json) Hash identifier: 43gWcRpl4lLfj3JWHapJtCDG0v3+sXBU8EVQbnpUHNM= Subject key identifier: A9:E3:88:72:89:ED:85:66:39:42:12:62:50:F7:D6:6C:D5:8F:E1:F5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 09C704836028227357A99F606A71A30307780B93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:35:22 +0000 Certificate not after: Sun 02 May 2027 00:40:22 +0000 Subordinate resources: IP: 103.166.122.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c7:04:83:60:28:22:73:57:a9:9f:60:6a:71:a3:03:07:78:0b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:35:22 2026 GMT Not After : May 2 00:40:22 2027 GMT Subject: CN=A9E3887289ED85663942126250F7D66CD58FE1F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:05:ce:8b:cb:bd:4d:df:a2:e2:ee:34:88:70: 8a:93:6d:82:05:14:79:28:2c:1f:e4:75:df:05:33: a9:ee:16:6a:36:40:e3:a2:d8:8d:9a:f0:73:12:88: 78:b5:1c:54:78:01:05:6d:c1:02:33:4d:a1:63:85: 09:34:91:fb:1f:31:89:d4:32:bd:e4:dc:0b:cc:60: 32:09:03:ae:f6:03:1b:94:fa:68:e0:ad:dd:f1:d5: fb:12:a7:23:26:5a:4d:64:d3:69:fc:f7:53:bd:6b: 3e:7c:60:06:27:91:33:9d:c7:5b:b0:90:2e:72:99: 0a:6d:76:74:5b:8d:5b:f8:fc:51:1a:49:2d:a9:fc: d3:66:24:32:bc:5a:80:54:72:98:3f:5a:76:56:4c: cb:3f:bd:fa:95:df:73:b6:cf:cf:ab:76:d1:89:79: de:08:35:48:e5:4d:be:f5:7c:67:a5:2d:a8:bf:99: fb:79:0c:49:90:20:00:b1:cc:01:90:62:c9:8d:2e: 56:4e:66:e1:89:d6:1c:38:f9:46:75:68:44:25:07: 92:2b:36:98:81:5a:87:7c:97:e4:0b:94:e3:d6:6a: 1d:77:8e:0c:b7:06:50:91:ac:e4:cb:82:c9:b8:32: da:1f:f5:41:3a:5d:28:e0:2b:3b:66:73:42:78:96: ae:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:E3:88:72:89:ED:85:66:39:42:12:62:50:F7:D6:6C:D5:8F:E1:F5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/A9E3887289ED85663942126250F7D66CD58FE1F5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.122.0/23 Signature Algorithm: sha256WithRSAEncryption 71:4a:78:08:f5:55:6e:17:d3:d9:a6:b3:7b:fa:58:a9:bc:2a: dd:5c:48:09:5c:d4:c5:21:f0:0e:ab:d1:f9:7a:7b:27:c4:b0: 54:9e:0b:85:5a:c5:1c:87:d1:9a:e5:b4:f4:29:e9:a7:9b:96: 13:08:91:ab:e4:83:ff:b7:c5:66:c7:e7:54:d7:ca:c1:aa:93: 9d:07:15:24:7a:95:b1:e7:8f:ed:de:0c:06:a8:88:4c:70:b3: 1d:9b:ca:75:20:05:b0:6e:95:dd:df:b9:0c:ea:a9:ee:c8:46: 28:88:d5:bf:09:7b:98:fe:d4:a8:d8:95:fb:29:89:3c:2f:d3: 26:36:d9:ca:f3:54:58:9d:a0:b0:b3:2f:d9:7a:db:0b:67:9b: 65:b8:a8:6c:16:5f:7e:2e:b0:c3:52:53:a2:a3:06:29:2b:5f: f7:c4:e3:c1:8a:37:3d:71:a6:5c:61:55:39:2c:70:82:1f:57: c8:87:95:ce:c9:ad:1d:2f:54:e1:ca:11:05:50:e1:d8:8a:1f: d2:b0:f0:c4:4c:c7:05:05:06:4b:ae:4d:72:cd:e0:3c:f3:cf: 6c:09:94:54:34:e3:58:39:0c:28:6b:61:1e:a6:39:60:f4:f7: 33:67:d0:4f:6f:6d:b3:59:6d:ea:e8:57:52:4d:97:69:91:47: af:df:b7:d6 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUCccEg2AoInNXqZ9ganGjAwd4C5MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzUyMloX DTI3MDUwMjAwNDAyMlowMzExMC8GA1UEAxMoQTlFMzg4NzI4OUVEODU2NjM5NDIx MjYyNTBGN0Q2NkNENThGRTFGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJcFzovLvU3fouLuNIhwipNtggUUeSgsH+R13wUzqe4WajZA46LYjZrwcxKI eLUcVHgBBW3BAjNNoWOFCTSR+x8xidQyveTcC8xgMgkDrvYDG5T6aOCt3fHV+xKn IyZaTWTTafz3U71rPnxgBieRM53HW7CQLnKZCm12dFuNW/j8URpJLan802YkMrxa gFRymD9adlZMyz+9+pXfc7bPz6t20Yl53gg1SOVNvvV8Z6UtqL+Z+3kMSZAgALHM AZBiyY0uVk5m4YnWHDj5RnVoRCUHkis2mIFah3yX5AuU49ZqHXeODLcGUJGs5MuC ybgy2h/1QTpdKOArO2ZzQniWrjkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKnjiHKJ7YVmOUISYlD31mzVj+H1MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzU0M2NjNmE4LWU3YWEtNGYzNy1iZDA4LWYyZWI1N2U4ODczNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81NDNjYzZh OC1lN2FhLTRmMzctYmQwOC1mMmViNTdlODg3MzYvMC9BOUUzODg3Mjg5RUQ4NTY2 Mzk0MjEyNjI1MEY3RDY2Q0Q1OEZFMUY1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6Z6MA0GCSqGSIb3DQEBCwUAA4IBAQBxSngI9VVuF9PZprN7+lipvCrdXEgJ XNTFIfAOq9H5ensnxLBUnguFWsUch9Ga5bT0Kemnm5YTCJGr5IP/t8Vmx+dU18rB qpOdBxUkepWx54/t3gwGqIhMcLMdm8p1IAWwbpXd37kM6qnuyEYoiNW/CXuY/tSo 2JX7KYk8L9MmNtnK81RYnaCwsy/ZetsLZ5tluKhsFl9+LrDDUlOiowYpK1/3xOPB ijc9caZcYVU5LHCCH1fIh5XOya0dL1ThyhEFUOHYih/SsPDETMcFBQZLrk1yzeA8 889sCZRUNONYOQwoa2Eepjlg9PczZ9BPb22zWW3q6FdSTZdpkUev37fW -----END CERTIFICATE-----Generated at Tue May 12 22:02:33 2026 by rpki-client