$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer File: 9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer (raw, json) Hash identifier: Cq3srAWmcUe5UVgm59OpdJ1buMdYOSXccCtz46XhpNM= Subject key identifier: 9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 156A01B1CEDB4B5384610AB3F70003BE3158E4D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:49:31 +0000 Certificate not after: Sun 02 May 2027 02:54:31 +0000 Subordinate resources: IP: 27.131.248.0/22 IP: 49.0.24.0/23 IP: 103.164.14.0/23 IP: 110.92.72.0/23 IP: 116.254.96.0/22 IP: 121.50.32.0/21 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 05:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:6a:01:b1:ce:db:4b:53:84:61:0a:b3:f7:00:03:be:31:58:e4:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:49:31 2026 GMT Not After : May 2 02:54:31 2027 GMT Subject: CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a1:73:ef:68:11:76:fd:68:34:19:38:d7:12: ef:c9:cd:35:b2:65:aa:71:68:30:9e:b8:23:39:91: b9:a2:78:f7:66:64:01:d5:26:a7:c2:86:ff:fa:78: e8:05:e4:d2:8d:f1:75:8d:29:0b:f1:55:21:97:8f: a1:e8:1c:35:8a:8c:3a:88:78:6f:87:61:54:38:d1: 12:19:ac:4c:85:ca:36:9f:c7:a8:0e:6b:3c:ea:0a: ef:a1:f7:c3:75:88:ae:d5:3a:db:d1:45:8f:d2:46: 87:82:de:ab:cb:9d:15:92:d2:6c:13:11:66:8e:8f: 99:44:d9:b4:7c:f9:f4:40:84:b6:1a:f6:d3:f0:6f: dc:01:00:16:74:1d:08:1d:0b:01:01:0c:61:85:a0: 3a:83:19:1e:cb:18:20:79:05:98:19:20:87:fe:94: 6a:45:6f:fd:65:ce:1c:1b:ea:81:a3:a3:af:f4:ea: de:f4:02:c7:5f:b2:df:e3:c4:8f:7f:21:c8:2c:68: 35:6b:c8:ba:a4:1c:d7:43:20:d8:7a:59:ca:72:ca: 53:4f:34:4a:9e:19:ea:f4:53:92:06:81:ad:a8:37: d9:0d:35:2f:81:40:0c:ae:d2:ab:30:2e:98:0e:1a: d0:6d:15:49:c4:3c:a3:e2:a9:1f:7b:47:c4:86:ad: f3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.131.248.0/22 49.0.24.0/23 103.164.14.0/23 110.92.72.0/23 116.254.96.0/22 121.50.32.0/21 Signature Algorithm: sha256WithRSAEncryption 19:7b:ff:1a:50:59:9c:28:0a:44:2b:c1:da:e9:a0:99:a3:ca: 0b:23:55:63:ce:8f:0e:12:a5:39:00:4e:f5:0d:bc:65:97:47: 1a:81:22:26:97:1c:71:24:12:15:7f:97:4d:5c:aa:9a:70:7b: 4b:c6:6f:b2:8d:76:fe:7b:31:e6:38:fc:4b:6c:d1:89:ed:d8: 42:34:64:58:41:e3:dd:61:2f:25:17:89:fe:e3:3e:e9:de:94: 33:83:81:0b:2d:56:76:78:30:d1:98:06:70:cf:44:00:b2:1f: c0:f5:e5:bc:23:16:a3:6c:9f:00:ca:bd:ed:80:67:4e:c0:bc: 3d:73:41:13:9b:f7:e5:04:37:55:84:5b:68:02:e6:30:2b:26: 59:03:22:75:e2:77:05:0f:e9:6a:44:5c:ce:c7:24:b7:19:60: 1d:46:86:07:37:5a:84:4a:d9:99:02:ac:d4:5b:2a:0f:7c:a0: 98:ef:db:ea:c6:01:07:eb:58:12:9f:cc:1f:22:c3:5e:d2:e3: 83:40:d6:6a:f8:cb:f4:55:4e:c1:9f:71:fd:10:b5:a4:57:80: 91:b7:75:28:2c:84:c2:ca:d0:2a:2a:17:02:08:d1:fb:bf:a9: af:43:72:4c:e9:f0:10:68:64:d3:16:22:bf:88:16:7c:f8:00: c3:3b:9b:83 -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgIUFWoBsc7bS1OEYQqz9wADvjFY5NcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyNDkzMVoX DTI3MDUwMjAyNTQzMVowMzExMC8GA1UEAxMoOUVERDU4RkI1NUI0NTAzN0Q3NUM4 MzM1OUI2OTdCNDQ1RDdBNUFGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2hc+9oEXb9aDQZONcS78nNNbJlqnFoMJ64IzmRuaJ492ZkAdUmp8KG//p4 6AXk0o3xdY0pC/FVIZePoegcNYqMOoh4b4dhVDjREhmsTIXKNp/HqA5rPOoK76H3 w3WIrtU629FFj9JGh4Leq8udFZLSbBMRZo6PmUTZtHz59ECEthr20/Bv3AEAFnQd CB0LAQEMYYWgOoMZHssYIHkFmBkgh/6UakVv/WXOHBvqgaOjr/Tq3vQCx1+y3+PE j38hyCxoNWvIuqQc10Mg2HpZynLKU080Sp4Z6vRTkgaBrag32Q01L4FADK7SqzAu mA4a0G0VScQ8o+KpH3tHxIat81kCAwEAAaOCAtcwggLTMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ7dWPtVtFA311yDNZtpe0RdelrwMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ZmN2FlODJmLTUzN2UtNDYyNi1iZTllLTMzMzk0YTJkYzk2OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mZjdhZTgy Zi01MzdlLTQ2MjYtYmU5ZS0zMzM5NGEyZGM5NjkvMC85RURENThGQjU1QjQ1MDM3 RDc1QzgzMzU5QjY5N0I0NDVEN0E1QUYwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAk AwQCG4P4AwQBMQAYAwQBZ6QOAwQBblxIAwQCdP5gAwQDeTIgMA0GCSqGSIb3DQEB CwUAA4IBAQAZe/8aUFmcKApEK8Ha6aCZo8oLI1Vjzo8OEqU5AE71Dbxll0cagSIm lxxxJBIVf5dNXKqacHtLxm+yjXb+ezHmOPxLbNGJ7dhCNGRYQePdYS8lF4n+4z7p 3pQzg4ELLVZ2eDDRmAZwz0QAsh/A9eW8IxajbJ8Ayr3tgGdOwLw9c0ETm/flBDdV hFtoAuYwKyZZAyJ14ncFD+lqRFzOxyS3GWAdRoYHN1qEStmZAqzUWyoPfKCY79vq xgEH61gSn8wfIsNe0uODQNZq+Mv0VU7Bn3H9ELWkV4CRt3UoLITCytAqKhcCCNH7 v6mvQ3JM6fAQaGTTFiK/iBZ8+ADDO5uD -----END CERTIFICATE-----Generated at Fri May 8 07:24:06 2026 by rpki-client