$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer File: D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.cer (raw, json) Hash identifier: ld5D9d8VV3lfC/ZXJS2JoOqeIfleSMNiL/VmSPOENDc= Subject key identifier: D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3032118291552EE503B5688358C3F41344D9BC8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:17:45 +0000 Certificate not after: Sun 02 May 2027 00:22:45 +0000 Subordinate resources: IP: 103.139.175.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:32:11:82:91:55:2e:e5:03:b5:68:83:58:c3:f4:13:44:d9:bc:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:17:45 2026 GMT Not After : May 2 00:22:45 2027 GMT Subject: CN=D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5c:aa:88:44:1e:3c:99:7e:cf:16:40:47:86: f9:dc:44:b9:ed:7b:dd:bb:3d:93:88:a1:b7:f4:d5: bc:2c:88:8f:af:34:07:72:f1:e3:d9:06:a5:8d:3a: 03:4a:ad:3c:0b:19:d7:99:1f:aa:51:18:4d:cd:fd: 3a:f9:50:fb:c1:8a:48:1b:3d:aa:c2:06:e7:73:2f: 81:66:a5:78:13:43:88:00:0b:bf:8b:09:d2:4c:40: 6b:90:23:31:bd:96:05:2e:81:18:7d:bd:ff:8c:a7: ff:97:26:f5:66:a2:f9:6b:6b:4b:7f:c2:ef:0b:17: fb:61:f1:34:6d:62:95:28:17:c7:94:8f:10:40:db: c1:b0:d1:46:52:fc:86:76:86:ec:b6:28:f5:4f:e5: a2:55:f2:45:53:84:33:3f:88:63:87:4c:f1:2a:e5: b8:d0:6f:5c:73:9c:fd:7e:4c:3b:e7:2d:e9:dd:c7: d2:25:19:ae:dc:f7:c1:ce:3b:88:29:ce:89:a4:f5: a4:3d:a4:f8:ac:3a:82:22:03:5e:9d:f8:6e:75:32: df:9a:c1:e2:a1:ec:ab:93:dd:13:d8:fa:84:da:86: 06:da:d1:81:3f:ee:94:13:9c:64:2e:39:73:4a:ff: 52:65:31:26:0c:e5:76:0c:5a:fc:65:b8:33:1d:68: 70:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:F9:BE:E6:CF:09:00:BE:61:0D:2D:AC:AD:F3:EE:47:13:5C:0F:06 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/D1F9BEE6CF0900BE610D2DACADF3EE47135C0F06.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.175.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:ab:b2:20:89:76:a6:36:d0:e4:ea:b7:53:c8:48:98:7f:32: 05:1e:96:c8:b7:27:fb:c8:64:e3:23:ca:cd:36:de:d0:3a:22: 83:d4:e5:26:b2:82:b8:c9:8c:1d:25:d6:cb:4a:0e:3b:0b:4c: 48:3d:91:14:33:9c:75:df:b4:1b:bf:2b:f6:40:a7:cc:19:c0: 47:e7:b8:b4:48:56:50:b1:2a:01:5e:3d:ec:19:c5:58:64:42: c4:12:50:d7:65:1e:5a:45:88:e9:d5:26:84:a9:0d:4a:b8:78: b1:f7:24:9c:c5:88:05:27:80:0c:dc:ce:83:db:e3:ea:e6:1d: 07:5b:31:e7:1d:74:f1:bd:15:d6:95:b3:5f:7d:54:d1:46:d0: e3:83:77:71:a4:7e:28:31:b4:8e:2b:85:18:47:ec:1b:01:52: 80:b4:70:d2:61:f4:d3:8e:9d:4c:7b:42:6d:bd:5f:ae:30:cc: 6e:44:61:0a:8f:6d:ab:c0:24:3c:3d:f5:b2:f8:e3:a0:76:11: 75:7e:a7:73:99:c1:ba:64:5a:cc:59:56:bd:95:3c:e3:9b:45: c4:f9:f6:ec:54:ab:e4:b0:cc:28:c6:46:3f:12:e5:47:f9:95: 3c:fa:10:37:90:bc:f0:48:7a:22:eb:75:80:ad:a5:f4:a0:8d: b7:cf:f3:ca -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUMDIRgpFVLuUDtWiDWMP0E0TZvI0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTc0NVoX DTI3MDUwMjAwMjI0NVowMzExMC8GA1UEAxMoRDFGOUJFRTZDRjA5MDBCRTYxMEQy REFDQURGM0VFNDcxMzVDMEYwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJhcqohEHjyZfs8WQEeG+dxEue173bs9k4iht/TVvCyIj680B3Lx49kGpY06 A0qtPAsZ15kfqlEYTc39OvlQ+8GKSBs9qsIG53MvgWaleBNDiAALv4sJ0kxAa5Aj Mb2WBS6BGH29/4yn/5cm9Wai+WtrS3/C7wsX+2HxNG1ilSgXx5SPEEDbwbDRRlL8 hnaG7LYo9U/lolXyRVOEMz+IY4dM8SrluNBvXHOc/X5MO+ct6d3H0iUZrtz3wc47 iCnOiaT1pD2k+Kw6giIDXp34bnUy35rB4qHsq5PdE9j6hNqGBtrRgT/ulBOcZC45 c0r/UmUxJgzldgxa/GW4Mx1ocN0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNH5vubPCQC+YQ0trK3z7kcTXA8GMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM5MDAyMDhiLTMyYWMtNGEyNi05ZDkyLTYwOWFkNzYxODNjMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zOTAwMjA4 Yi0zMmFjLTRhMjYtOWQ5Mi02MDlhZDc2MTgzYzEvMC9EMUY5QkVFNkNGMDkwMEJF NjEwRDJEQUNBREYzRUU0NzEzNUMwRjA2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ4uvMA0GCSqGSIb3DQEBCwUAA4IBAQA9q7IgiXamNtDk6rdTyEiYfzIFHpbI tyf7yGTjI8rNNt7QOiKD1OUmsoK4yYwdJdbLSg47C0xIPZEUM5x137Qbvyv2QKfM GcBH57i0SFZQsSoBXj3sGcVYZELEElDXZR5aRYjp1SaEqQ1KuHix9yScxYgFJ4AM 3M6D2+Pq5h0HWzHnHXTxvRXWlbNffVTRRtDjg3dxpH4oMbSOK4UYR+wbAVKAtHDS YfTTjp1Me0JtvV+uMMxuRGEKj22rwCQ8PfWy+OOgdhF1fqdzmcG6ZFrMWVa9lTzj m0XE+fbsVKvksMwoxkY/EuVH+ZU8+hA3kLzwSHoi63WAraX0oI23z/PK -----END CERTIFICATE-----Generated at Tue May 12 22:10:23 2026 by rpki-client