$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F9E76265CB34B4EEC43D8EE049601C2FA861D304.cer File: F9E76265CB34B4EEC43D8EE049601C2FA861D304.cer (raw, json) Hash identifier: PtXbckNXpvo1TB+ZHpq6Hi4qj6nz4BQmP7HJP1A4NYU= Subject key identifier: F9:E7:62:65:CB:34:B4:EE:C4:3D:8E:E0:49:60:1C:2F:A8:61:D3:04 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1D26646C1DCB2889828605866390F1B144093080 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.mft caRepository: rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 22:51:05 +0000 Certificate not after: Sat 01 May 2027 22:56:05 +0000 Subordinate resources: IP: 103.166.64.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:26:64:6c:1d:cb:28:89:82:86:05:86:63:90:f1:b1:44:09:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 22:51:05 2026 GMT Not After : May 1 22:56:05 2027 GMT Subject: CN=F9E76265CB34B4EEC43D8EE049601C2FA861D304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:0e:fa:38:4f:cf:e1:26:58:ca:6f:a2:1c: 5b:0a:ef:8e:1a:2b:55:d7:f1:7e:a7:72:12:2b:71: e6:53:db:63:d2:ad:b0:6e:8a:0d:02:36:25:1f:89: d0:d0:e1:d3:c2:4b:aa:6f:d2:96:70:73:39:9c:e7: 27:d2:49:84:d2:59:c2:e5:d7:36:69:b8:f9:5a:98: 27:8f:ee:fd:20:75:51:ee:e2:15:03:9e:9e:46:32: 0a:ba:3b:48:16:c7:7e:b7:ee:92:ca:fd:90:5e:e9: 9c:9b:dc:b8:cf:b1:c9:bb:f6:26:a0:d5:cd:54:bb: 48:cd:16:f7:93:f0:d9:c9:4d:4f:40:91:0a:5e:36: 45:6d:a8:98:61:40:c7:e7:33:42:d6:d7:3c:3f:93: b9:fe:1c:32:83:3f:0c:67:61:f0:32:86:8a:86:6b: 6b:d3:59:0a:41:3b:8a:cf:64:43:dc:e0:f5:29:48: 81:3b:5c:1d:ff:2e:bb:b0:3d:d1:92:3e:4b:de:88: a0:c4:c7:2e:2d:e2:91:25:c7:d2:8d:d1:af:58:c0: e0:8c:1f:04:8f:78:a6:04:69:2a:28:2d:71:09:01: 13:f8:61:52:69:4a:39:16:9e:a9:21:70:4b:7c:34: 2f:6e:da:6a:78:54:e7:7d:d3:d7:a5:cd:70:77:12: 9b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:E7:62:65:CB:34:B4:EE:C4:3D:8E:E0:49:60:1C:2F:A8:61:D3:04 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.64.0/23 Signature Algorithm: sha256WithRSAEncryption a1:06:91:71:30:c9:65:b3:55:c3:d5:19:7f:6b:e2:c5:16:7b: c3:0d:39:7b:54:a7:6b:18:14:8b:91:ae:fc:15:fe:90:bf:bb: 7a:ec:90:3d:98:75:8f:42:24:96:83:35:91:4e:2c:b7:13:fe: 3f:9c:63:e2:92:4c:07:a2:ae:fb:e4:3b:37:6b:7d:7a:8b:f8: 4d:c6:da:ef:0f:e4:3f:14:37:4b:2c:97:a1:2d:ec:0c:51:af: 99:3b:4c:09:f1:f7:95:47:78:e5:23:23:f1:b6:d8:50:bd:a7: 15:8e:66:88:b9:86:47:4e:f4:86:2f:50:aa:51:ca:6f:cb:24: 4c:a8:71:cc:91:c7:13:80:9b:fa:ff:ed:38:7d:7a:2d:58:5c: 23:e4:7e:7b:64:a0:b1:6c:86:36:2a:b2:c7:ea:4e:c4:1c:72: ea:0e:eb:ed:3b:41:63:fc:47:a5:8d:4f:dc:33:e6:b5:60:18: 54:46:f0:03:e5:50:ef:a4:92:1f:53:10:72:e5:f0:b0:fe:e7: 38:a4:98:aa:a3:28:18:41:93:52:91:cd:8f:94:33:3f:90:76: 62:23:89:f6:e1:a3:93:f9:63:bd:34:71:c6:5e:36:69:b6:af: 48:c2:2d:25:6e:9f:11:3d:8a:db:64:5d:21:71:54:96:31:ff: 61:71:43:d4 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUHSZkbB3LKImChgWGY5DxsUQJMIAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIyNTEwNVoX DTI3MDUwMTIyNTYwNVowMzExMC8GA1UEAxMoRjlFNzYyNjVDQjM0QjRFRUM0M0Q4 RUUwNDk2MDFDMkZBODYxRDMwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGRDvo4T8/hJljKb6IcWwrvjhorVdfxfqdyEitx5lPbY9KtsG6KDQI2JR+J 0NDh08JLqm/SlnBzOZznJ9JJhNJZwuXXNmm4+VqYJ4/u/SB1Ue7iFQOenkYyCro7 SBbHfrfuksr9kF7pnJvcuM+xybv2JqDVzVS7SM0W95Pw2clNT0CRCl42RW2omGFA x+czQtbXPD+Tuf4cMoM/DGdh8DKGioZra9NZCkE7is9kQ9zg9SlIgTtcHf8uu7A9 0ZI+S96IoMTHLi3ikSXH0o3Rr1jA4IwfBI94pgRpKigtcQkBE/hhUmlKORaeqSFw S3w0L27aanhU533T16XNcHcSmwkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPnnYmXLNLTuxD2O4ElgHC+oYdMEMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzAxMGZlZjQ4LTFlZTgtNDM0Mi1hNTQxLTI1MTBmYjE1Yjk2Yi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wMTBmZWY0 OC0xZWU4LTQzNDItYTU0MS0yNTEwZmIxNWI5NmIvMC9GOUU3NjI2NUNCMzRCNEVF QzQzRDhFRTA0OTYwMUMyRkE4NjFEMzA0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6ZAMA0GCSqGSIb3DQEBCwUAA4IBAQChBpFxMMlls1XD1Rl/a+LFFnvDDTl7 VKdrGBSLka78Ff6Qv7t67JA9mHWPQiSWgzWRTiy3E/4/nGPikkwHoq775Ds3a316 i/hNxtrvD+Q/FDdLLJehLewMUa+ZO0wJ8feVR3jlIyPxtthQvacVjmaIuYZHTvSG L1CqUcpvyyRMqHHMkccTgJv6/+04fXotWFwj5H57ZKCxbIY2KrLH6k7EHHLqDuvt O0Fj/EeljU/cM+a1YBhURvAD5VDvpJIfUxBy5fCw/uc4pJiqoygYQZNSkc2PlDM/ kHZiI4n24aOT+WO9NHHGXjZptq9Iwi0lbp8RPYrbZF0hcVSWMf9hcUPU -----END CERTIFICATE-----Generated at Tue May 12 22:17:11 2026 by rpki-client