$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer File: C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.cer (raw, json) Hash identifier: 7r0P3L5Wz7vXcS1C/s5bfBKBWlbZ0s0WT0FMOP2ESZ4= Subject key identifier: C9:BB:DF:0E:A1:4D:DD:F0:C5:51:DF:18:63:32:CB:85:9E:B9:D8:94 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7BCBD79FB14A9D0345AD08E94E620728C7D285FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:33:40 +0000 Certificate not after: Sun 02 May 2027 01:38:40 +0000 Subordinate resources: IP: 103.179.248.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:cb:d7:9f:b1:4a:9d:03:45:ad:08:e9:4e:62:07:28:c7:d2:85:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:33:40 2026 GMT Not After : May 2 01:38:40 2027 GMT Subject: CN=C9BBDF0EA14DDDF0C551DF186332CB859EB9D894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8c:e1:55:30:23:64:32:e8:54:0b:57:22:99: 1d:4f:0d:8f:41:f8:13:fb:18:0e:d7:d1:35:82:7d: 36:02:23:b2:f5:fc:c0:e5:b6:41:8a:be:65:bb:66: 5b:dd:a2:53:65:38:64:c0:cd:f6:b4:b6:25:d4:e9: af:f0:b1:37:d9:63:a3:08:5d:1c:b5:c3:a2:94:df: cf:e5:7e:51:67:99:6e:17:6e:84:e9:0f:b4:b9:43: a0:7a:6a:bb:73:45:21:7c:f4:b2:ed:a9:6d:8f:39: 98:60:c9:c3:a2:b2:e7:cc:62:ef:fa:f3:b8:75:02: 62:2a:68:bc:cf:8e:51:15:d6:78:ef:5f:d4:e1:ba: 89:ae:44:4b:c1:45:f5:63:95:0a:fc:82:d8:c0:76: 98:90:98:14:87:c1:c1:c4:f9:0b:0a:f7:22:53:23: ad:3e:70:97:80:c4:44:3a:f2:4a:ce:b2:3b:d5:c1: e5:c2:75:6f:08:05:1f:bf:ea:bf:aa:2f:6b:df:02: 46:7a:7d:83:0d:b6:75:ba:2d:ae:bf:2a:19:07:db: 65:e2:94:d9:5f:27:ec:6f:37:61:e2:8d:de:88:d8: d4:85:90:cc:1f:ac:32:17:32:f5:9b:70:e0:49:44: c8:d4:36:9b:d3:11:74:f9:12:e6:87:ef:aa:fc:ab: cb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C9:BB:DF:0E:A1:4D:DD:F0:C5:51:DF:18:63:32:CB:85:9E:B9:D8:94 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/C9BBDF0EA14DDDF0C551DF186332CB859EB9D894.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.248.0/23 Signature Algorithm: sha256WithRSAEncryption 83:31:24:9d:80:59:fd:87:07:22:ee:55:33:d7:bb:15:68:52: ee:0e:30:7b:65:4b:d7:95:98:96:14:e4:00:8a:97:3c:4c:83: e9:f5:10:b5:80:44:07:0c:2e:d8:da:7c:42:90:df:69:91:e6: e0:56:47:41:a2:d7:a0:ce:1e:a7:5d:ca:b1:32:8f:4f:a8:17: 29:56:8d:03:6e:6b:78:a0:47:57:3c:da:3b:95:53:ab:e8:7d: 0c:38:17:ea:2a:01:c2:42:ce:92:71:cd:3a:77:12:1e:54:a6: d2:94:67:7c:14:19:b9:4b:1a:9c:9d:c5:ed:51:e9:c2:89:55: 29:6c:e7:15:3d:60:1f:4e:e1:11:5b:96:54:da:a2:a5:9a:6b: ed:6a:59:ec:44:45:86:1b:10:5e:25:98:d5:12:ca:70:e9:72: b5:92:d9:91:d8:43:b8:3e:06:3a:db:1b:76:47:db:a8:91:53: 45:cf:0a:88:fc:a3:aa:7c:74:61:00:80:33:83:18:90:32:30: 32:12:f1:bf:9d:d8:49:b4:54:0e:cc:e1:88:14:6a:06:83:99: 72:f6:ef:bd:8a:03:1d:09:df:93:ab:af:b6:32:d4:f1:c0:55: 57:81:5f:e4:86:58:db:ba:21:27:42:59:8e:96:95:07:b7:b3: 34:75:5f:bf -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUe8vXn7FKnQNFrQjpTmIHKMfShfswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzM0MFoX DTI3MDUwMjAxMzg0MFowMzExMC8GA1UEAxMoQzlCQkRGMEVBMTRERERGMEM1NTFE RjE4NjMzMkNCODU5RUI5RDg5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN6M4VUwI2Qy6FQLVyKZHU8Nj0H4E/sYDtfRNYJ9NgIjsvX8wOW2QYq+Zbtm W92iU2U4ZMDN9rS2JdTpr/CxN9ljowhdHLXDopTfz+V+UWeZbhduhOkPtLlDoHpq u3NFIXz0su2pbY85mGDJw6Ky58xi7/rzuHUCYipovM+OURXWeO9f1OG6ia5ES8FF 9WOVCvyC2MB2mJCYFIfBwcT5Cwr3IlMjrT5wl4DERDrySs6yO9XB5cJ1bwgFH7/q v6ova98CRnp9gw22dbotrr8qGQfbZeKU2V8n7G83YeKN3ojY1IWQzB+sMhcy9Ztw 4ElEyNQ2m9MRdPkS5ofvqvyryyUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMm73w6hTd3wxVHfGGMyy4WeudiUMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E5NTkwMWNjLTFiOGUtNGYzZi1hM2QwLTMyNjlmMGUxNmM0MS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hOTU5MDFj Yy0xYjhlLTRmM2YtYTNkMC0zMjY5ZjBlMTZjNDEvMC9DOUJCREYwRUExNEREREYw QzU1MURGMTg2MzMyQ0I4NTlFQjlEODk0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7P4MA0GCSqGSIb3DQEBCwUAA4IBAQCDMSSdgFn9hwci7lUz17sVaFLuDjB7 ZUvXlZiWFOQAipc8TIPp9RC1gEQHDC7Y2nxCkN9pkebgVkdBotegzh6nXcqxMo9P qBcpVo0Dbmt4oEdXPNo7lVOr6H0MOBfqKgHCQs6Scc06dxIeVKbSlGd8FBm5Sxqc ncXtUenCiVUpbOcVPWAfTuERW5ZU2qKlmmvtalnsREWGGxBeJZjVEspw6XK1ktmR 2EO4PgY62xt2R9uokVNFzwqI/KOqfHRhAIAzgxiQMjAyEvG/ndhJtFQOzOGIFGoG g5ly9u+9igMdCd+Tq6+2MtTxwFVXgV/khljbuiEnQlmOlpUHt7M0dV+/ -----END CERTIFICATE-----Generated at Tue May 5 14:19:37 2026 by rpki-client