$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.cer File: 094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.cer (raw, json) Hash identifier: IkVSMxkdmXkFONspy7ALryyeYasd1mLV1dlxPsKjcl0= Subject key identifier: 09:4E:51:1C:E5:BE:87:8C:FC:AE:B4:25:6D:66:BE:1A:6D:E6:5B:37 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5545BFDBAF1639ABBC5F254B84356F780F255F11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft caRepository: rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:25:48 +0000 Certificate not after: Sun 02 May 2027 00:30:48 +0000 Subordinate resources: IP: 103.169.198.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:45:bf:db:af:16:39:ab:bc:5f:25:4b:84:35:6f:78:0f:25:5f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:25:48 2026 GMT Not After : May 2 00:30:48 2027 GMT Subject: CN=094E511CE5BE878CFCAEB4256D66BE1A6DE65B37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:35:2f:6d:50:d9:3a:ea:f3:76:4d:fc:3f:44: ff:51:59:dd:72:6f:f3:98:73:15:57:c2:ec:a5:3f: c2:8a:30:58:98:d0:64:2f:97:65:bb:e4:04:c1:01: e3:3d:ea:2b:75:17:6f:24:cb:74:4b:b7:7d:27:1a: ff:70:3d:b3:5a:c3:40:e9:a7:0a:22:8a:99:59:24: c8:a4:b3:57:e6:2e:d9:b4:eb:e5:c1:cb:1d:3b:c5: 41:e9:49:12:27:1b:86:68:79:f0:91:b7:c4:95:65: 8f:38:7c:22:f1:86:b5:2f:c6:e3:a4:38:cc:b1:9f: 3f:6b:de:8a:b5:f5:73:3c:1d:83:d1:b3:d9:a7:d8: ce:70:5c:7e:35:56:8e:73:46:51:53:1c:c3:87:07: 9c:4b:51:68:7a:8d:a2:b3:2e:f0:e7:fa:e8:98:fb: 3d:3d:ab:fc:ff:d6:81:75:99:52:00:64:35:48:47: dc:a7:3d:b9:2f:68:5d:0e:7f:e7:2f:b4:34:ee:1d: b8:85:67:35:4e:5b:d9:6e:78:3d:5c:21:0f:b7:05: 93:b4:b0:ac:b6:d4:3f:88:f3:9c:2c:a7:54:4f:ee: df:75:8e:70:9b:c4:82:b7:20:e7:fc:ad:52:7a:b9: 81:d6:19:ea:7d:f0:78:d0:83:98:96:c2:a2:43:ea: 36:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:4E:51:1C:E5:BE:87:8C:FC:AE:B4:25:6D:66:BE:1A:6D:E6:5B:37 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.198.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:29:b4:1d:b5:7e:6d:30:19:1e:30:0c:c0:6c:62:f7:63:fb: 81:3c:27:e2:f3:21:16:9c:40:67:75:cd:fd:ec:b9:1b:f0:ed: 41:0a:15:a8:21:b2:13:b4:69:da:e3:9a:76:ca:b4:7b:3a:31: 8d:1e:6f:c1:67:1b:e1:61:b3:02:60:16:00:eb:b9:89:3c:74: 18:d6:32:46:73:6c:eb:c5:0a:50:47:6e:eb:fd:fa:9e:76:76: f7:3e:0c:02:b9:17:8d:85:5b:7e:15:e0:2a:2d:6a:5c:3a:6f: 64:1b:ad:9f:19:da:cf:10:f9:0a:a6:5d:36:d0:fe:47:d8:be: a6:37:36:cc:1d:6a:92:ac:de:a8:cb:bd:cd:64:65:2b:26:fc: 09:1c:08:3d:63:6c:b2:7e:c5:e7:5a:e2:4d:86:25:67:3a:10: 78:0c:b7:8f:34:f5:da:8f:06:3e:99:c0:ad:8d:ce:f5:fe:91: e8:04:ec:ea:88:4d:7f:90:35:f5:f7:b6:8a:d8:0c:57:6d:ed: 7e:64:8b:24:50:14:19:cc:6c:f1:01:30:8a:f3:ed:e9:72:55: a1:3e:b4:d4:87:af:78:e3:03:6f:44:ad:15:57:3e:1d:b5:0c: dc:04:00:7a:d7:81:c5:3d:b6:13:8e:dd:fe:5f:6e:35:d3:01: 88:3f:ed:df -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUVUW/268WOau8XyVLhDVveA8lXxEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjU0OFoX DTI3MDUwMjAwMzA0OFowMzExMC8GA1UEAxMoMDk0RTUxMUNFNUJFODc4Q0ZDQUVC NDI1NkQ2NkJFMUE2REU2NUIzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALc1L21Q2Trq83ZN/D9E/1FZ3XJv85hzFVfC7KU/woowWJjQZC+XZbvkBMEB 4z3qK3UXbyTLdEu3fSca/3A9s1rDQOmnCiKKmVkkyKSzV+Yu2bTr5cHLHTvFQelJ Eicbhmh58JG3xJVljzh8IvGGtS/G46Q4zLGfP2veirX1czwdg9Gz2afYznBcfjVW jnNGUVMcw4cHnEtRaHqNorMu8Of66Jj7PT2r/P/WgXWZUgBkNUhH3Kc9uS9oXQ5/ 5y+0NO4duIVnNU5b2W54PVwhD7cFk7SwrLbUP4jznCynVE/u33WOcJvEgrcg5/yt Unq5gdYZ6n3weNCDmJbCokPqNrECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAlOURzlvoeM/K60JW1mvhpt5ls3MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQ1MjYwNjQxLWJjZTItNDQ1Yy05ZGU1LTM3MGE3ODdmOTUzMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80NTI2MDY0 MS1iY2UyLTQ0NWMtOWRlNS0zNzBhNzg3Zjk1MzAvMC8wOTRFNTExQ0U1QkU4NzhD RkNBRUI0MjU2RDY2QkUxQTZERTY1QjM3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6nGMA0GCSqGSIb3DQEBCwUAA4IBAQB6KbQdtX5tMBkeMAzAbGL3Y/uBPCfi 8yEWnEBndc397Lkb8O1BChWoIbITtGna45p2yrR7OjGNHm/BZxvhYbMCYBYA67mJ PHQY1jJGc2zrxQpQR27r/fqednb3PgwCuReNhVt+FeAqLWpcOm9kG62fGdrPEPkK pl020P5H2L6mNzbMHWqSrN6oy73NZGUrJvwJHAg9Y2yyfsXnWuJNhiVnOhB4DLeP NPXajwY+mcCtjc71/pHoBOzqiE1/kDX197aK2AxXbe1+ZIskUBQZzGzxATCK8+3p clWhPrTUh6944wNvRK0VVz4dtQzcBAB614HFPbYTjt3+X2410wGIP+3f -----END CERTIFICATE-----Generated at Tue May 12 22:02:53 2026 by rpki-client