$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B97B101303D652EE5C0234A7A800429959745FF3.cer File: B97B101303D652EE5C0234A7A800429959745FF3.cer (raw, json) Hash identifier: LFiuj58QjWyu3Hbvg94hpvxNQB0ky+g1MYNCJkrbs2A= Subject key identifier: B9:7B:10:13:03:D6:52:EE:5C:02:34:A7:A8:00:42:99:59:74:5F:F3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2E34A58D2CFB7854AA3DE0168F3A29F8470CBF38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:49:31 +0000 Certificate not after: Sun 02 May 2027 01:54:31 +0000 Subordinate resources: IP: 103.104.99.0/24 IP: 2001:df3:3900::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:34:a5:8d:2c:fb:78:54:aa:3d:e0:16:8f:3a:29:f8:47:0c:bf:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:49:31 2026 GMT Not After : May 2 01:54:31 2027 GMT Subject: CN=B97B101303D652EE5C0234A7A800429959745FF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ab:ee:b7:ae:6a:62:31:86:66:7d:a1:c8:da: 77:0c:5c:7c:ee:b1:18:18:ef:c3:ba:45:42:e6:93: f5:3f:42:8b:fc:4b:1e:15:fb:35:d4:7a:36:29:d5: 5c:2c:7e:b2:f4:39:e6:f0:eb:bd:e7:3f:30:32:fd: 6d:4b:6b:0e:c0:66:f4:3e:88:6b:58:57:e2:77:e9: cd:ad:f4:e0:14:21:f7:9f:3f:bd:b5:eb:5d:2b:44: 0c:f3:42:68:ad:c5:a1:85:57:24:22:95:ab:65:c1: 38:8c:60:c1:59:9e:ec:75:bc:09:e1:2b:c2:ff:92: 4d:96:e5:ca:de:d3:f4:15:8d:1c:3f:25:0a:5c:0d: 7f:c0:cf:97:c4:79:b2:62:4e:fe:a4:5f:29:b8:e0: 2c:85:69:ef:bf:e3:06:b0:09:e3:53:9d:1d:4d:3e: 78:04:74:0f:a7:52:2b:37:f8:10:79:e2:3b:a4:9b: bd:ac:32:6e:d8:a2:67:19:24:d9:26:16:02:87:68: 19:5a:0d:ae:e4:6a:b4:f0:7b:08:7b:f5:77:a0:a6: 89:22:da:49:12:ae:66:f3:99:35:db:ba:d7:cb:c2: 03:19:42:c7:9a:36:f6:b5:6c:05:b3:62:2e:f8:b7: 7b:3b:de:b1:d0:87:af:ab:85:85:ea:0a:14:ca:80: 09:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B9:7B:10:13:03:D6:52:EE:5C:02:34:A7:A8:00:42:99:59:74:5F:F3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/B97B101303D652EE5C0234A7A800429959745FF3.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.104.99.0/24 IPv6: 2001:df3:3900::/48 Signature Algorithm: sha256WithRSAEncryption 6a:52:54:95:53:6c:3a:32:32:8a:0a:5e:df:29:2a:44:af:d1: 1c:b2:f2:b2:44:12:80:ef:b2:7f:49:d8:97:d1:4a:98:be:d2: ac:ba:28:8a:43:70:d1:db:50:47:fa:6b:99:93:e7:bd:c6:3b: 33:7a:97:5e:13:33:ca:22:56:05:51:de:b3:10:07:ce:2f:1a: fd:bf:d3:5f:e2:12:29:7b:fe:ba:8f:52:56:ea:d9:8e:a7:41: 60:16:7f:37:53:24:45:d1:6d:87:dd:95:63:b6:e3:7b:7f:1c: ab:f5:c8:1e:c3:72:5b:76:e8:db:f1:ce:37:6b:22:36:a0:4f: 62:2e:a9:e6:d1:1c:a9:af:f7:46:a1:c3:3a:c9:c1:43:85:3e: 9a:f2:cb:36:3b:8f:dc:a5:16:e2:9e:2f:bc:40:9c:18:3f:64: 8d:3b:79:b8:1c:6a:bb:cf:b1:ae:0f:0a:19:d9:8f:d1:08:84: ff:87:91:c9:c2:bf:27:9c:3d:48:fc:fd:f7:43:23:93:98:6c: b6:de:8c:62:17:c4:87:a5:8d:5b:55:27:f1:61:e4:ca:d9:5a: 60:f9:7a:3f:e0:4f:66:c6:2c:0a:42:e4:48:9d:dd:ec:04:59: da:57:50:02:5e:8b:94:d5:a4:56:69:a6:07:9f:e4:60:66:ee: 63:1c:ef:24 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIULjSljSz7eFSqPeAWjzop+EcMvzgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDkzMVoX DTI3MDUwMjAxNTQzMVowMzExMC8GA1UEAxMoQjk3QjEwMTMwM0Q2NTJFRTVDMDIz NEE3QTgwMDQyOTk1OTc0NUZGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmr7reuamIxhmZ9ocjadwxcfO6xGBjvw7pFQuaT9T9Ci/xLHhX7NdR6NinV XCx+svQ55vDrvec/MDL9bUtrDsBm9D6Ia1hX4nfpza304BQh958/vbXrXStEDPNC aK3FoYVXJCKVq2XBOIxgwVme7HW8CeErwv+STZblyt7T9BWNHD8lClwNf8DPl8R5 smJO/qRfKbjgLIVp77/jBrAJ41OdHU0+eAR0D6dSKzf4EHniO6SbvawybtiiZxkk 2SYWAodoGVoNruRqtPB7CHv1d6CmiSLaSRKuZvOZNdu618vCAxlCx5o29rVsBbNi Lvi3ezvesdCHr6uFheoKFMqACW0CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLl7EBMD1lLuXAI0p6gAQplZdF/zMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2MzZDdmOWViLTNjMmQtNDFhMS05MDgxLTA3ODBhNTg4NzNlYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jM2Q3Zjll Yi0zYzJkLTQxYTEtOTA4MS0wNzgwYTU4ODczZWEvMC9COTdCMTAxMzAzRDY1MkVF NUMwMjM0QTdBODAwNDI5OTU5NzQ1RkYzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ2hjMA8EAgACMAkDBwAgAQ3zOQAwDQYJKoZIhvcNAQELBQADggEBAGpSVJVT bDoyMooKXt8pKkSv0Ryy8rJEEoDvsn9J2JfRSpi+0qy6KIpDcNHbUEf6a5mT573G OzN6l14TM8oiVgVR3rMQB84vGv2/01/iEil7/rqPUlbq2Y6nQWAWfzdTJEXRbYfd lWO243t/HKv1yB7Dclt26NvxzjdrIjagT2IuqebRHKmv90ahwzrJwUOFPpryyzY7 j9ylFuKeL7xAnBg/ZI07ebgcarvPsa4PChnZj9EIhP+HkcnCvyecPUj8/fdDI5OY bLbejGIXxIeljVtVJ/Fh5MrZWmD5ej/gT2bGLApC5Eid3ewEWdpXUAJei5TVpFZp pgef5GBm7mMc7yQ= -----END CERTIFICATE-----Generated at Tue May 12 22:16:19 2026 by rpki-client