$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.cer File: 092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.cer (raw, json) Hash identifier: cjrV7O0QPzRBgd5IYaJVKecK89RLVLq12XLZUlWNhAk= Subject key identifier: 09:2F:BC:DA:01:C1:59:D9:AF:BE:61:95:B6:84:2A:FB:98:B6:5E:5A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4B65EE999CD967E2991E55FED3B2FCBC053CAAC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:53:34 +0000 Certificate not after: Sun 02 May 2027 00:58:34 +0000 Subordinate resources: IP: 103.227.252.0/22 IP: 2001:df4:3d00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:65:ee:99:9c:d9:67:e2:99:1e:55:fe:d3:b2:fc:bc:05:3c:aa:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:53:34 2026 GMT Not After : May 2 00:58:34 2027 GMT Subject: CN=092FBCDA01C159D9AFBE6195B6842AFB98B65E5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f0:e1:8c:56:c7:f4:c8:0b:5c:c4:36:62:37: d6:d8:9a:22:27:23:7f:cd:ab:ff:0c:49:ef:79:17: 17:76:2a:ae:fb:b8:99:1b:3c:94:7d:66:a9:eb:db: 2f:c3:ee:55:df:8f:65:c7:1e:8f:05:9e:ab:62:d7: a4:35:b6:eb:9d:d5:a1:2e:8c:30:5a:9e:12:4a:53: 5d:3a:ff:1c:9b:2d:d1:d2:2a:8f:d1:50:86:a7:d2: 11:fa:fa:f6:de:a8:7a:17:62:cb:bf:71:58:b8:ba: 80:5a:d1:a7:c2:21:a9:d6:94:46:58:89:f5:2c:ed: ee:49:a6:91:b7:ad:4a:2b:4d:90:89:5e:56:93:80: f9:32:6f:8a:13:f7:f4:67:10:79:99:f8:de:af:ca: c5:81:5d:cd:c3:13:52:5a:e0:fd:c6:ab:9e:aa:a2: 93:41:70:db:89:c3:37:2f:5b:e1:20:de:09:83:2f: e7:ba:81:28:f8:db:2b:d9:9b:4f:a7:84:ee:06:15: b8:08:d9:d1:a9:8f:aa:75:1b:f8:4b:0c:80:1e:33: 7c:d5:a6:35:49:1e:c5:aa:33:4e:e4:2e:1e:a8:29: 5c:53:01:ea:9e:0f:54:be:38:80:f6:30:75:12:88: aa:95:a7:05:7b:c2:92:04:39:be:0b:e7:22:68:8b: c1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:2F:BC:DA:01:C1:59:D9:AF:BE:61:95:B6:84:2A:FB:98:B6:5E:5A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.227.252.0/22 IPv6: 2001:df4:3d00::/48 Signature Algorithm: sha256WithRSAEncryption 26:90:fb:52:69:3e:7b:0c:48:5a:1c:32:b7:4d:29:30:b5:68: 06:ce:78:17:e0:97:9b:a3:2e:d0:fd:4d:e9:38:bd:5d:1c:02: 36:f1:44:5a:04:3e:cd:86:97:92:b8:7a:bc:64:f8:3f:82:55: 03:0c:4b:87:1d:d9:f0:b5:45:ed:03:25:ea:1f:20:5a:bc:2e: a5:f7:6d:b9:bd:4c:40:e9:c4:06:08:2e:22:66:79:99:5c:38: 7e:f4:6a:78:01:0e:4c:90:98:ce:b4:2b:ff:51:64:02:33:d4: 02:d5:f2:db:3b:c9:02:cd:fb:4a:9a:bd:ab:33:fb:14:f4:24: 53:c2:b9:4e:11:1d:a2:61:ef:5e:9b:f5:b2:68:3d:aa:4c:59: d5:58:00:5f:1e:5e:a0:27:8b:d9:86:be:5a:5a:c6:a9:0a:56: 02:0c:5a:c3:c9:a1:5d:fd:9b:5f:98:23:30:c0:3e:00:b4:90: 38:88:80:a1:e3:2b:5b:62:36:eb:b6:28:8d:79:4e:cb:3f:74: 72:c2:f8:6a:39:8a:a9:ce:27:8d:bc:eb:c6:41:05:1b:01:1a: 39:69:ad:66:87:88:9a:c3:7d:71:ec:1c:ef:9d:a4:37:f8:95: 85:e2:2f:57:19:45:61:7b:7c:d5:ba:a5:f1:f4:57:ab:ec:3d: 6f:cc:43:a1 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUS2XumZzZZ+KZHlX+07L8vAU8qsUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTMzNFoX DTI3MDUwMjAwNTgzNFowMzExMC8GA1UEAxMoMDkyRkJDREEwMUMxNTlEOUFGQkU2 MTk1QjY4NDJBRkI5OEI2NUU1QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALTw4YxWx/TIC1zENmI31tiaIicjf82r/wxJ73kXF3Yqrvu4mRs8lH1mqevb L8PuVd+PZccejwWeq2LXpDW2653VoS6MMFqeEkpTXTr/HJst0dIqj9FQhqfSEfr6 9t6oehdiy79xWLi6gFrRp8IhqdaURliJ9Szt7kmmkbetSitNkIleVpOA+TJvihP3 9GcQeZn43q/KxYFdzcMTUlrg/carnqqik0Fw24nDNy9b4SDeCYMv57qBKPjbK9mb T6eE7gYVuAjZ0amPqnUb+EsMgB4zfNWmNUkexaozTuQuHqgpXFMB6p4PVL44gPYw dRKIqpWnBXvCkgQ5vgvnImiLwVkCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAkvvNoBwVnZr75hlbaEKvuYtl5aMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZlZmZmYzJkLWNjYTctNDhlNi05Y2Q2LTU2NWMxMWM0NTQ0MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82ZWZmZmMy ZC1jY2E3LTQ4ZTYtOWNkNi01NjVjMTFjNDU0NDAvMC8wOTJGQkNEQTAxQzE1OUQ5 QUZCRTYxOTVCNjg0MkFGQjk4QjY1RTVBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZ+P8MA8EAgACMAkDBwAgAQ30PQAwDQYJKoZIhvcNAQELBQADggEBACaQ+1Jp PnsMSFocMrdNKTC1aAbOeBfgl5ujLtD9Tek4vV0cAjbxRFoEPs2Gl5K4erxk+D+C VQMMS4cd2fC1Re0DJeofIFq8LqX3bbm9TEDpxAYILiJmeZlcOH70angBDkyQmM60 K/9RZAIz1ALV8ts7yQLN+0qavasz+xT0JFPCuU4RHaJh716b9bJoPapMWdVYAF8e XqAni9mGvlpaxqkKVgIMWsPJoV39m1+YIzDAPgC0kDiIgKHjK1tiNuu2KI15Tss/ dHLC+Go5iqnOJ42868ZBBRsBGjlprWaHiJrDfXHsHO+dpDf4lYXiL1cZRWF7fNW6 pfH0V6vsPW/MQ6E= -----END CERTIFICATE-----Generated at Tue May 12 22:52:37 2026 by rpki-client