$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer File: 3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer (raw, json) Hash identifier: WSTZAnpBigRGDoH2DoFGXkPNOrWsbUXAyAojPGn3MH8= Subject key identifier: 3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4A27F939A3556AB11838838B002288276BB36547 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft caRepository: rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:44:24 +0000 Certificate not after: Sun 02 May 2027 00:49:24 +0000 Subordinate resources: IP: 210.57.208.0/20 IP: 2001:df0:40f::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:27:f9:39:a3:55:6a:b1:18:38:83:8b:00:22:88:27:6b:b3:65:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:44:24 2026 GMT Not After : May 2 00:49:24 2027 GMT Subject: CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:62:13:79:2c:63:f6:f2:79:82:54:21:32:a2: ad:7c:bd:0d:54:6f:0b:b7:f9:67:e4:35:38:82:60: cb:58:ff:2d:fd:70:2d:51:5a:7e:cc:91:73:8f:f1: 08:5a:23:2f:d8:6d:70:a1:c1:93:0a:2b:52:79:36: 12:63:50:39:9a:a3:6d:9a:10:9d:04:37:d4:44:bf: 3c:30:92:6b:a5:f4:77:66:07:a9:27:8d:11:2c:cc: a9:13:cd:c7:5c:99:b4:9a:55:0e:da:74:ad:f0:b6: be:57:fe:ad:df:ca:ce:e4:b7:82:32:1c:75:1f:0b: b2:72:18:2d:80:fc:cf:48:ae:c1:08:ab:e1:ba:93: a4:31:92:2e:0e:21:47:ee:bc:a7:bc:8d:01:aa:43: bb:ba:fd:80:bd:c8:e5:00:2c:f5:ab:e7:68:fc:78: 65:2d:3e:ca:d4:09:20:f5:0f:91:9d:1b:a6:9c:23: 02:0c:60:fa:80:9e:d5:60:48:35:e0:55:69:55:d8: 25:15:a7:c4:8f:cf:14:f5:ce:bc:cd:ee:63:a8:de: 29:ef:42:c3:2e:12:b8:79:5b:84:14:47:a1:37:e5: 4e:98:5d:98:40:bc:2f:59:a3:b8:f8:d7:ad:04:72: 19:c1:5b:2e:3d:e5:12:30:8f:3d:47:e4:fa:26:d0: 59:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.57.208.0/20 IPv6: 2001:df0:40f::/48 Signature Algorithm: sha256WithRSAEncryption 45:63:be:3b:cd:aa:b7:ab:bd:36:54:0c:41:36:d4:0d:bb:cb: 6e:95:a4:40:3f:d6:84:e1:57:d2:6f:b7:0d:45:7c:83:fc:be: d0:ef:4c:38:dd:34:b3:15:23:37:66:a0:cd:ed:3b:fd:23:1a: ce:80:63:16:3f:73:d9:a1:87:7f:46:ae:98:c6:0d:8a:b7:d7: f8:4c:3e:4e:9f:5b:87:58:ab:cc:61:99:e0:c2:5c:20:80:6a: 90:17:ad:4c:b0:da:08:19:bc:0d:14:0f:03:72:4b:cc:30:b7: f9:27:ba:94:84:e8:4f:9d:c0:68:56:85:16:bc:f3:70:a8:63: 14:b9:bb:02:50:e1:04:43:ac:30:81:02:33:27:d3:f0:c7:54: b4:63:85:68:f6:da:22:5f:75:ce:9a:9b:c8:9d:2f:1c:17:95: bd:bf:9e:0b:59:2f:62:2b:67:18:7f:2a:e7:02:4f:db:5d:b2: 92:47:71:c8:4f:82:99:ec:97:5d:87:f5:71:17:79:4d:93:7d: 98:53:ba:3c:49:2e:f2:b2:66:66:2f:87:64:10:24:19:65:88: ac:d3:36:be:62:5c:4e:54:d6:9c:6f:d4:c7:2b:8d:04:a6:a8: 81:b3:44:e8:ec:6e:49:97:64:8f:3c:60:2d:db:06:cd:1c:e0: b5:67:2d:14 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUSif5OaNVarEYOIOLACKIJ2uzZUcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDQyNFoX DTI3MDUwMjAwNDkyNFowMzExMC8GA1UEAxMoM0QwOTBBMUJDRTk0NzE3OThFRTZE MDc5RUVDMDcyNkVDQTlBMDE4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANliE3ksY/byeYJUITKirXy9DVRvC7f5Z+Q1OIJgy1j/Lf1wLVFafsyRc4/x CFojL9htcKHBkworUnk2EmNQOZqjbZoQnQQ31ES/PDCSa6X0d2YHqSeNESzMqRPN x1yZtJpVDtp0rfC2vlf+rd/KzuS3gjIcdR8LsnIYLYD8z0iuwQir4bqTpDGSLg4h R+68p7yNAapDu7r9gL3I5QAs9avnaPx4ZS0+ytQJIPUPkZ0bppwjAgxg+oCe1WBI NeBVaVXYJRWnxI/PFPXOvM3uY6jeKe9Cwy4SuHlbhBRHoTflTphdmEC8L1mjuPjX rQRyGcFbLj3lEjCPPUfk+ibQWY8CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD0JChvOlHF5jubQee7Acm7KmgGHMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzYwOGIyOTU5LTFjMjUtNDZhMC04OWQxLWY3N2Q1YzQ3NDY5MS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82MDhiMjk1 OS0xYzI1LTQ2YTAtODlkMS1mNzdkNWM0NzQ2OTEvMC8zRDA5MEExQkNFOTQ3MTc5 OEVFNkQwNzlFRUMwNzI2RUNBOUEwMTg3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQE0jnQMA8EAgACMAkDBwAgAQ3wBA8wDQYJKoZIhvcNAQELBQADggEBAEVjvjvN qrervTZUDEE21A27y26VpEA/1oThV9Jvtw1FfIP8vtDvTDjdNLMVIzdmoM3tO/0j Gs6AYxY/c9mhh39GrpjGDYq31/hMPk6fW4dYq8xhmeDCXCCAapAXrUyw2ggZvA0U DwNyS8wwt/knupSE6E+dwGhWhRa883CoYxS5uwJQ4QRDrDCBAjMn0/DHVLRjhWj2 2iJfdc6am8idLxwXlb2/ngtZL2IrZxh/KucCT9tdspJHcchPgpnsl12H9XEXeU2T fZhTujxJLvKyZmYvh2QQJBlliKzTNr5iXE5U1pxv1McrjQSmqIGzROjsbkmXZI88 YC3bBs0c4LVnLRQ= -----END CERTIFICATE-----Generated at Tue May 12 22:15:59 2026 by rpki-client