$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9FA20A14AF60219662C9668DE75D25F0C8B84220.cer File: 9FA20A14AF60219662C9668DE75D25F0C8B84220.cer (raw, json) Hash identifier: 9a6AlHf6/zcHGF5wB3Xwzj2GXMAhFG6nOl6tMFJidiU= Subject key identifier: 9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 31F479315B2D5FE74FA8CA2276C042E47AA6C676 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:50:44 +0000 Certificate not after: Sun 02 May 2027 01:55:44 +0000 Subordinate resources: IP: 103.165.254.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 05:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:f4:79:31:5b:2d:5f:e7:4f:a8:ca:22:76:c0:42:e4:7a:a6:c6:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:50:44 2026 GMT Not After : May 2 01:55:44 2027 GMT Subject: CN=9FA20A14AF60219662C9668DE75D25F0C8B84220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0e:e4:5e:84:b1:04:71:83:4c:71:f4:fc:cb: 6c:a3:9b:e0:9f:4d:bc:75:f9:6d:df:66:2a:34:30: 8c:a6:14:77:86:8e:a8:c5:6a:6f:6e:58:46:4d:f8: ed:f2:7c:29:c9:ff:98:03:6c:d6:35:4d:ee:1c:ef: 57:64:6e:8c:05:02:19:19:e5:0d:05:db:e4:f2:a1: 95:27:4b:75:b7:d3:eb:f5:34:c1:61:63:ed:16:a1: db:42:e4:a8:9e:73:3a:3c:c0:10:c0:68:75:39:37: 1c:55:19:13:4b:4e:24:d2:7d:13:0c:1b:f3:f8:91: a3:67:8e:34:56:2c:a3:95:a3:0c:57:3f:bd:07:cc: b4:94:15:83:4d:3a:9e:9d:3f:c4:d7:8e:ad:01:46: 1d:bc:d8:52:d9:40:98:ab:de:44:ea:a3:8a:d5:fb: 4a:23:be:e3:45:fc:d3:d0:59:dd:00:2d:a6:4e:0a: 07:cb:d7:41:58:ad:41:3b:e1:02:4c:33:34:48:64: 72:65:82:99:35:09:f3:b0:67:d1:a8:aa:dc:a8:c6: 44:12:cd:d6:dc:d8:db:09:02:7d:f8:ff:9f:7c:0c: e5:61:8b:a7:66:2b:c1:e6:e6:fe:a8:f4:1c:79:4e: 5f:1d:e3:d5:ff:8f:1f:89:ca:f5:9d:5b:f6:58:b4: d2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:A2:0A:14:AF:60:21:96:62:C9:66:8D:E7:5D:25:F0:C8:B8:42:20 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/9FA20A14AF60219662C9668DE75D25F0C8B84220.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.165.254.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:ca:a4:cc:04:97:d5:c1:ac:04:f3:6e:7d:99:b5:c3:96:86: 09:86:f7:63:f2:5e:88:77:06:a8:87:da:51:c3:7c:7d:b6:fd: 90:fe:13:dd:a9:64:66:55:b0:15:f8:35:88:8c:20:dc:68:1c: 14:e2:a1:d8:96:8a:05:3d:e8:41:a1:94:4b:75:51:fd:7c:96: 50:cd:57:fd:17:b7:fb:06:9c:7a:58:59:f1:20:9c:16:3f:11: 97:a1:27:c6:4e:0e:12:24:b3:63:64:3c:00:0b:ef:73:82:7e: 72:57:f4:c0:fd:75:fe:28:2e:e6:45:0a:1b:61:fb:96:1d:e5: d6:17:56:7d:68:13:6e:ab:65:79:4a:c1:5c:94:61:0b:00:9c: 79:17:d6:e1:94:70:1d:4c:e6:a1:c5:e5:b8:7e:f1:82:75:ea: de:97:60:7e:86:ee:86:3d:93:b4:0b:54:50:f2:84:d6:1b:52: f0:a1:d9:a7:d9:28:e3:61:bd:bc:0f:2c:e8:50:5c:1d:24:bb: 98:d2:bc:3d:24:6a:f1:ba:d0:a8:96:b2:38:11:a9:1c:14:c2: 82:72:92:c9:74:90:77:0b:88:48:3c:51:b5:3b:b6:f6:6e:ba: 41:37:8e:3d:98:aa:13:d2:ef:9c:e1:7b:cf:ed:dc:2b:f2:c9: 80:bb:92:be -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUMfR5MVstX+dPqMoidsBC5HqmxnYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTA0NFoX DTI3MDUwMjAxNTU0NFowMzExMC8GA1UEAxMoOUZBMjBBMTRBRjYwMjE5NjYyQzk2 NjhERTc1RDI1RjBDOEI4NDIyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMEO5F6EsQRxg0xx9PzLbKOb4J9NvHX5bd9mKjQwjKYUd4aOqMVqb25YRk34 7fJ8Kcn/mANs1jVN7hzvV2RujAUCGRnlDQXb5PKhlSdLdbfT6/U0wWFj7Rah20Lk qJ5zOjzAEMBodTk3HFUZE0tOJNJ9Ewwb8/iRo2eONFYso5WjDFc/vQfMtJQVg006 np0/xNeOrQFGHbzYUtlAmKveROqjitX7SiO+40X809BZ3QAtpk4KB8vXQVitQTvh AkwzNEhkcmWCmTUJ87Bn0aiq3KjGRBLN1tzY2wkCffj/n3wM5WGLp2Yrwebm/qj0 HHlOXx3j1f+PH4nK9Z1b9li00g0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ+iChSvYCGWYslmjeddJfDIuEIgMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2M1ZTU0NjhjLTBhYzctNDRhOS04ODIxLTI4MjU3YzVhODYwNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jNWU1NDY4 Yy0wYWM3LTQ0YTktODgyMS0yODI1N2M1YTg2MDcvMC85RkEyMEExNEFGNjAyMTk2 NjJDOTY2OERFNzVEMjVGMEM4Qjg0MjIwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6X+MA0GCSqGSIb3DQEBCwUAA4IBAQAMyqTMBJfVwawE8259mbXDloYJhvdj 8l6Idwaoh9pRw3x9tv2Q/hPdqWRmVbAV+DWIjCDcaBwU4qHYlooFPehBoZRLdVH9 fJZQzVf9F7f7Bpx6WFnxIJwWPxGXoSfGTg4SJLNjZDwAC+9zgn5yV/TA/XX+KC7m RQobYfuWHeXWF1Z9aBNuq2V5SsFclGELAJx5F9bhlHAdTOahxeW4fvGCderel2B+ hu6GPZO0C1RQ8oTWG1Lwodmn2SjjYb28DyzoUFwdJLuY0rw9JGrxutColrI4Eakc FMKCcpLJdJB3C4hIPFG1O7b2brpBN449mKoT0u+c4XvP7dwr8smAu5K+ -----END CERTIFICATE-----Generated at Fri May 8 07:27:53 2026 by rpki-client