$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.cer File: 09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.cer (raw, json) Hash identifier: e5zRIc4kLRUgllLyQA9ZPvk+suWcamLUL0XaXYU3KEA= Subject key identifier: 09:C4:BA:8A:F7:41:A5:1F:DD:8C:55:09:17:C9:6D:39:5C:BE:0F:FD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 43D6C7FA47CB278C2C9B5AACF87BD1D976FE1763 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft caRepository: rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:38:56 +0000 Certificate not after: Sun 02 May 2027 00:43:56 +0000 Subordinate resources: IP: 113.20.136.0/21 IP: 2001:df0:b8::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d6:c7:fa:47:cb:27:8c:2c:9b:5a:ac:f8:7b:d1:d9:76:fe:17:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:38:56 2026 GMT Not After : May 2 00:43:56 2027 GMT Subject: CN=09C4BA8AF741A51FDD8C550917C96D395CBE0FFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:67:f5:8a:31:7c:61:02:42:32:1f:a4:ee:40: 8d:c7:ea:4b:87:c2:b6:9e:17:38:0e:c1:0e:e0:f2: 9f:89:6b:a0:3e:75:9c:3b:a9:28:0a:3a:16:16:55: d3:f4:0c:80:3a:df:3f:88:8e:24:0e:2c:d0:a5:40: 23:f7:12:82:e7:c9:96:48:e9:d1:05:99:96:f4:0d: 05:af:0b:06:a5:46:ad:79:22:23:ac:9a:8e:b8:67: 8f:51:a8:49:64:0d:8a:33:13:5b:4f:2d:f5:11:9d: 2a:ea:b9:58:9d:2f:8c:7a:70:af:10:bc:12:27:b2: 78:95:ec:ac:ac:8d:d5:f9:2c:47:23:df:89:fb:1d: 94:b4:06:36:8f:0a:db:3f:6e:7d:0f:06:76:cf:6b: fd:b7:18:c6:04:4f:6f:99:f8:a7:f6:e7:42:fb:dd: 2f:0b:b1:c7:51:d1:a6:4c:52:c5:c3:83:27:94:7c: 99:1b:fd:25:f2:fa:eb:f1:3d:38:f1:5b:fb:56:0a: 3d:a0:a9:b6:3b:ab:3e:66:34:fe:c8:9e:12:bf:75: 8a:3e:d3:87:76:0c:00:39:29:d3:58:4b:d1:d4:3d: 14:c5:b2:d8:62:b8:68:e5:99:1d:39:31:25:db:e3: 76:95:3e:55:38:24:2d:50:d3:b2:28:33:da:b6:22: 86:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:C4:BA:8A:F7:41:A5:1F:DD:8C:55:09:17:C9:6D:39:5C:BE:0F:FD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/09C4BA8AF741A51FDD8C550917C96D395CBE0FFD.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 113.20.136.0/21 IPv6: 2001:df0:b8::/48 Signature Algorithm: sha256WithRSAEncryption a5:b1:93:49:25:61:14:9c:1b:c9:1d:90:3a:50:48:18:33:f4: af:85:71:7c:78:b2:7c:b2:ce:1d:b7:c4:10:fc:8e:f6:e8:c9: 9c:fc:e1:8d:8e:dd:2d:55:81:87:d2:23:16:34:ec:2b:33:f4: 84:a6:27:e1:d3:28:e3:57:c2:59:7b:ea:10:39:8f:d2:17:3e: fc:33:15:b3:e4:a5:63:aa:d6:48:6b:5d:33:b7:58:03:91:6d: f6:f8:5c:d3:5e:85:de:08:b5:d4:62:04:09:98:36:cb:2d:d3: 1a:8a:d1:a8:3b:34:a9:21:00:ff:09:f7:a1:24:72:44:d0:2d: 47:5c:ff:28:ed:20:2f:e0:24:0c:85:45:55:54:73:f9:03:93: 3a:68:d5:5a:e3:51:d9:46:cc:e7:bb:d1:a4:06:44:a7:70:75: 78:d9:cc:5a:c7:3e:90:93:a7:7e:d1:31:fe:40:4a:37:f0:12: d9:ff:1d:92:7c:b7:12:ff:07:1c:13:a4:4c:2a:77:c2:78:f0: 83:e7:60:24:79:59:4f:64:ba:9c:61:0a:a7:8b:be:60:28:0a: f8:45:31:80:b9:27:8b:54:27:2a:1b:d4:5b:b8:1a:37:76:55: 74:79:ce:f4:b4:8d:bb:17:f0:f0:49:e6:8c:42:f9:ca:e0:58: 5b:2a:ba:42 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUQ9bH+kfLJ4wsm1qs+HvR2Xb+F2MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzg1NloX DTI3MDUwMjAwNDM1NlowMzExMC8GA1UEAxMoMDlDNEJBOEFGNzQxQTUxRkREOEM1 NTA5MTdDOTZEMzk1Q0JFMEZGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJdn9YoxfGECQjIfpO5AjcfqS4fCtp4XOA7BDuDyn4lroD51nDupKAo6FhZV 0/QMgDrfP4iOJA4s0KVAI/cSgufJlkjp0QWZlvQNBa8LBqVGrXkiI6yajrhnj1Go SWQNijMTW08t9RGdKuq5WJ0vjHpwrxC8EieyeJXsrKyN1fksRyPfifsdlLQGNo8K 2z9ufQ8Gds9r/bcYxgRPb5n4p/bnQvvdLwuxx1HRpkxSxcODJ5R8mRv9JfL66/E9 OPFb+1YKPaCptjurPmY0/sieEr91ij7Th3YMADkp01hL0dQ9FMWy2GK4aOWZHTkx JdvjdpU+VTgkLVDTsigz2rYihp8CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAnEuor3QaUf3YxVCRfJbTlcvg/9MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzU5YWYwMGVjLWQwODMtNGE5Zi04MjFmLTdkYTE4ZjgxNTQxNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81OWFmMDBl Yy1kMDgzLTRhOWYtODIxZi03ZGExOGY4MTU0MTcvMC8wOUM0QkE4QUY3NDFBNTFG REQ4QzU1MDkxN0M5NkQzOTVDQkUwRkZELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQDcRSIMA8EAgACMAkDBwAgAQ3wALgwDQYJKoZIhvcNAQELBQADggEBAKWxk0kl YRScG8kdkDpQSBgz9K+FcXx4snyyzh23xBD8jvboyZz84Y2O3S1VgYfSIxY07Csz 9ISmJ+HTKONXwll76hA5j9IXPvwzFbPkpWOq1khrXTO3WAORbfb4XNNehd4ItdRi BAmYNsst0xqK0ag7NKkhAP8J96EkckTQLUdc/yjtIC/gJAyFRVVUc/kDkzpo1Vrj UdlGzOe70aQGRKdwdXjZzFrHPpCTp37RMf5ASjfwEtn/HZJ8txL/BxwTpEwqd8J4 8IPnYCR5WU9kupxhCqeLvmAoCvhFMYC5J4tUJyob1Fu4Gjd2VXR5zvS0jbsX8PBJ 5oxC+crgWFsqukI= -----END CERTIFICATE-----Generated at Tue May 12 22:46:11 2026 by rpki-client