$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer File: AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer (raw, json) Hash identifier: Khyx1t38TH/n9i9s/Cjhu3lv2ijrw3cUFi57VUmltlI= Subject key identifier: AF:10:C2:E9:04:0A:DB:1F:41:C5:AB:C9:FF:FD:E5:7E:12:09:D7:7A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 10AE742BC0A59F1A3E387B11C50FAC4BBDF9D3FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:25:43 +0000 Certificate not after: Sun 02 May 2027 00:30:43 +0000 Subordinate resources: IP: 103.139.98.0/23 IP: 2404:e140::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ae:74:2b:c0:a5:9f:1a:3e:38:7b:11:c5:0f:ac:4b:bd:f9:d3:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:25:43 2026 GMT Not After : May 2 00:30:43 2027 GMT Subject: CN=AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a4:8a:c0:24:77:ed:dd:56:cb:33:6f:be:9a: 39:f4:ea:b5:ed:9d:eb:c5:4e:f0:3b:6a:29:27:57: 79:87:52:d0:7a:b6:9c:9b:37:1d:e1:4a:a8:a3:64: 7c:59:d7:63:cc:4d:40:98:12:7e:e0:ae:a6:3e:47: a2:94:d6:73:f5:a7:ff:7e:ef:e0:1c:99:77:5d:b4: 11:69:01:aa:d3:a5:b6:14:b6:0e:92:f0:39:fa:af: 55:a1:3a:65:4e:2e:63:44:c2:57:27:c3:11:be:9f: 4c:92:38:2e:f0:2a:7b:d0:92:7a:9f:4d:30:bc:7d: d3:4c:d6:3c:a7:70:52:d7:0d:1e:6b:43:40:f3:34: 21:61:2f:37:42:46:63:ed:88:86:9c:f3:69:69:a3: 58:27:6e:ef:25:f8:54:91:92:44:8c:25:b0:21:1e: 61:95:c8:31:18:9d:ed:ce:73:12:74:f0:b9:0a:87: e9:aa:bc:f4:67:08:7c:f1:31:07:0e:4c:d6:bd:69: 97:f3:41:f6:14:c0:49:47:7a:88:67:15:38:46:1c: db:d1:69:b0:d7:13:16:82:b0:6a:f8:98:58:f2:6b: 23:3e:0c:97:79:ea:a8:da:dc:89:e1:4b:59:8b:d1: ff:b2:50:e1:eb:f1:10:01:3d:50:4d:23:54:ea:e4: b9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:10:C2:E9:04:0A:DB:1F:41:C5:AB:C9:FF:FD:E5:7E:12:09:D7:7A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.98.0/23 IPv6: 2404:e140::/32 Signature Algorithm: sha256WithRSAEncryption 76:5c:e6:6c:51:77:9e:28:4c:35:6b:45:24:32:b3:79:18:30: 74:cb:35:e6:12:6b:f2:08:82:fe:28:a8:7b:a2:71:0c:e2:4b: af:b4:5b:9e:8b:f5:c2:21:5f:91:da:f3:77:a9:95:21:09:3c: f8:84:e3:40:b3:4f:99:32:c0:d5:d3:46:b9:00:18:0e:13:5a: 98:01:39:e7:62:07:e4:e5:3f:aa:1d:cb:a1:b0:0a:92:6b:d0: 37:98:e4:79:85:e8:e2:36:83:2b:2f:c7:38:ba:65:01:c5:a6: b5:e4:6c:b5:c0:a8:19:0d:0e:1b:e4:4d:e8:2c:88:03:0f:35: f7:13:44:db:62:c1:cc:79:d3:50:d8:11:ae:bf:b2:c1:7f:05: 9e:1b:40:64:0a:1f:15:35:9b:6b:20:d3:9c:d2:96:a9:b3:02: 49:27:43:ba:bd:10:53:41:37:e6:ab:53:5d:1b:25:d0:fb:41: cb:c1:f6:21:33:cf:e9:b3:50:aa:fa:c3:ad:b7:7a:31:43:60: c9:41:48:a6:61:2f:68:87:de:cb:fc:06:fd:69:a3:55:0e:90: 33:b8:b8:26:93:6f:0d:fb:69:32:bf:d4:a4:3a:dc:57:64:47: 8e:9f:f0:1a:30:11:51:f2:1a:47:65:e2:c5:9e:e7:2d:22:c6: 99:d7:cc:65 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUEK50K8Clnxo+OHsRxQ+sS7350/swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjU0M1oX DTI3MDUwMjAwMzA0M1owMzExMC8GA1UEAxMoQUYxMEMyRTkwNDBBREIxRjQxQzVB QkM5RkZGREU1N0UxMjA5RDc3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKCkisAkd+3dVsszb76aOfTqte2d68VO8DtqKSdXeYdS0Hq2nJs3HeFKqKNk fFnXY8xNQJgSfuCupj5HopTWc/Wn/37v4ByZd120EWkBqtOlthS2DpLwOfqvVaE6 ZU4uY0TCVyfDEb6fTJI4LvAqe9CSep9NMLx900zWPKdwUtcNHmtDQPM0IWEvN0JG Y+2IhpzzaWmjWCdu7yX4VJGSRIwlsCEeYZXIMRid7c5zEnTwuQqH6aq89GcIfPEx Bw5M1r1pl/NB9hTASUd6iGcVOEYc29FpsNcTFoKwaviYWPJrIz4Ml3nqqNrcieFL WYvR/7JQ4evxEAE9UE0jVOrkuRkCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK8QwukECtsfQcWryf/95X4SCdd6MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQ1MDYzM2ZjLWZlMjMtNGQ4Mi1iYTY0LWJiN2VlNmRkNmUwNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80NTA2MzNm Yy1mZTIzLTRkODItYmE2NC1iYjdlZTZkZDZlMDYvMC9BRjEwQzJFOTA0MEFEQjFG NDFDNUFCQzlGRkZERTU3RTEyMDlENzdBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ4tiMA0EAgACMAcDBQAkBOFAMA0GCSqGSIb3DQEBCwUAA4IBAQB2XOZsUXee KEw1a0UkMrN5GDB0yzXmEmvyCIL+KKh7onEM4kuvtFuei/XCIV+R2vN3qZUhCTz4 hONAs0+ZMsDV00a5ABgOE1qYATnnYgfk5T+qHcuhsAqSa9A3mOR5hejiNoMrL8c4 umUBxaa15Gy1wKgZDQ4b5E3oLIgDDzX3E0TbYsHMedNQ2BGuv7LBfwWeG0BkCh8V NZtrINOc0papswJJJ0O6vRBTQTfmq1NdGyXQ+0HLwfYhM8/ps1Cq+sOtt3oxQ2DJ QUimYS9oh97L/Ab9aaNVDpAzuLgmk28N+2kyv9SkOtxXZEeOn/AaMBFR8hpHZeLF nuctIsaZ18xl -----END CERTIFICATE-----Generated at Tue May 12 22:10:42 2026 by rpki-client