$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.cer File: F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.cer (raw, json) Hash identifier: R9vMOMJF57F+QbumsMrtLuFxA3xyTN0BLBG99UKJHYA= Subject key identifier: F9:24:9C:1E:EF:E9:97:F0:6F:AA:23:23:D2:AE:07:EF:03:61:0D:DB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0B5F79216611914E824E6BE7323F2F11B32B7FFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:42:35 +0000 Certificate not after: Sun 02 May 2027 01:47:35 +0000 Subordinate resources: IP: 103.162.55.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:5f:79:21:66:11:91:4e:82:4e:6b:e7:32:3f:2f:11:b3:2b:7f:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:42:35 2026 GMT Not After : May 2 01:47:35 2027 GMT Subject: CN=F9249C1EEFE997F06FAA2323D2AE07EF03610DDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:52:a7:12:82:aa:0c:b9:ab:c9:3f:db:fb:1e: 31:fa:8e:4c:4a:53:e9:55:a7:e9:20:82:7f:c1:4d: 79:c6:1a:66:60:30:c0:58:c2:eb:e1:51:7e:b8:8c: cc:8e:77:fe:36:b7:85:1d:da:88:46:d1:c8:d3:c6: 47:9e:68:5f:48:ad:60:40:db:9a:a5:49:fe:67:1f: 24:e9:96:f4:04:5f:23:62:e3:10:b9:50:33:1c:fd: 12:f9:fe:80:e6:aa:92:b3:3d:3c:ce:32:ff:6f:29: 0e:8a:c7:23:62:be:2c:86:bd:15:8d:9a:5f:30:7b: f0:94:00:69:a6:b1:1f:11:68:93:8d:1d:1b:74:19: 27:aa:c9:43:b7:a3:a3:61:81:59:a5:8f:e1:11:7a: b4:68:a2:96:9d:8e:2e:da:e0:57:26:b6:6a:7f:a9: aa:2f:58:82:fa:16:0c:fb:0d:1c:ce:40:11:46:69: 97:55:55:4e:72:28:b1:fd:95:51:97:86:4c:8b:04: 52:74:19:9f:a7:a9:dc:58:1f:12:64:43:24:fd:55: ff:cf:bd:37:f9:78:2b:49:6b:eb:a8:58:03:60:43: a0:ac:f1:b5:49:48:2f:08:38:6d:9d:32:fe:33:74: 93:6d:92:63:da:0f:52:44:60:7b:2b:91:28:e1:a8: 83:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:24:9C:1E:EF:E9:97:F0:6F:AA:23:23:D2:AE:07:EF:03:61:0D:DB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/F9249C1EEFE997F06FAA2323D2AE07EF03610DDB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.55.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:b0:83:e0:6b:03:18:3a:5f:bc:03:ce:b4:31:f7:0e:38:20: 35:ee:f1:47:8b:39:4e:8e:7c:31:94:e8:3b:13:d9:92:e1:b6: fe:b7:eb:11:08:98:80:9f:92:2e:95:49:9d:0e:db:b7:47:e9: b8:83:19:c6:8d:0a:8c:dc:4b:02:75:23:4c:34:13:03:1e:f2: d6:71:a8:08:d8:84:eb:67:04:f6:9c:44:98:8c:f4:49:a6:d2: 79:64:fa:dc:4f:e1:d5:c9:aa:9f:35:17:d8:05:7d:47:4c:f9: de:f4:91:2e:f6:2c:a0:6c:9a:b0:19:96:17:d9:9d:5f:8f:e1: 28:95:c9:56:ce:19:e4:bf:f5:49:d6:e9:95:70:d1:34:8a:d4: 03:96:31:64:f4:0c:e6:c3:84:15:b8:cc:b1:32:df:47:d1:9f: ef:e6:8a:72:1c:65:b1:c4:98:60:c3:3a:9e:fe:97:17:48:32: 56:9b:62:3e:1e:4b:e3:c7:8c:76:e6:e4:f0:6a:0a:81:39:75: 86:d3:47:18:7e:9b:ee:50:cd:6c:63:c2:0b:7c:2b:94:6f:1e: d6:35:29:a9:00:05:52:76:51:42:9f:a6:73:ee:84:35:11:45: a5:e9:35:b5:55:55:6c:0c:42:1a:ed:23:ea:9a:02:c4:c3:ff: ab:29:f9:8e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUC195IWYRkU6CTmvnMj8vEbMrf/8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDIzNVoX DTI3MDUwMjAxNDczNVowMzExMC8GA1UEAxMoRjkyNDlDMUVFRkU5OTdGMDZGQUEy MzIzRDJBRTA3RUYwMzYxMEREQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKZSpxKCqgy5q8k/2/seMfqOTEpT6VWn6SCCf8FNecYaZmAwwFjC6+FRfriM zI53/ja3hR3aiEbRyNPGR55oX0itYEDbmqVJ/mcfJOmW9ARfI2LjELlQMxz9Evn+ gOaqkrM9PM4y/28pDorHI2K+LIa9FY2aXzB78JQAaaaxHxFok40dG3QZJ6rJQ7ej o2GBWaWP4RF6tGiilp2OLtrgVya2an+pqi9YgvoWDPsNHM5AEUZpl1VVTnIosf2V UZeGTIsEUnQZn6ep3FgfEmRDJP1V/8+9N/l4K0lr66hYA2BDoKzxtUlILwg4bZ0y /jN0k22SY9oPUkRgeyuRKOGog8UCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPkknB7v6Zfwb6ojI9KuB+8DYQ3bMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2I3ODM3NjJlLTJiMjYtNDM3NC1hZTY0LTBiNmYwNTUyMjExZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iNzgzNzYy ZS0yYjI2LTQzNzQtYWU2NC0wYjZmMDU1MjIxMWUvMC9GOTI0OUMxRUVGRTk5N0Yw NkZBQTIzMjNEMkFFMDdFRjAzNjEwRERCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6I3MA0GCSqGSIb3DQEBCwUAA4IBAQBssIPgawMYOl+8A860MfcOOCA17vFH izlOjnwxlOg7E9mS4bb+t+sRCJiAn5IulUmdDtu3R+m4gxnGjQqM3EsCdSNMNBMD HvLWcagI2ITrZwT2nESYjPRJptJ5ZPrcT+HVyaqfNRfYBX1HTPne9JEu9iygbJqw GZYX2Z1fj+EolclWzhnkv/VJ1umVcNE0itQDljFk9Azmw4QVuMyxMt9H0Z/v5opy HGWxxJhgwzqe/pcXSDJWm2I+Hkvjx4x25uTwagqBOXWG00cYfpvuUM1sY8ILfCuU bx7WNSmpAAVSdlFCn6Zz7oQ1EUWl6TW1VVVsDEIa7SPqmgLEw/+rKfmO -----END CERTIFICATE-----Generated at Tue May 12 22:10:17 2026 by rpki-client