$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer File: 906CD1832E095FD864326D9340C3360CE2E04D88.cer (raw, json) Hash identifier: hLKozl5UdGlgb4Rg7QEPA2JejQxbpodDb7xTjNzLjcw= Subject key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 307ED05CF7FD26A774001DCDC890891E76D462CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:14:56 +0000 Certificate not after: Sun 02 May 2027 01:19:56 +0000 Subordinate resources: IP: 116.212.72.0/21 IP: 182.48.160.0/19 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:7e:d0:5c:f7:fd:26:a7:74:00:1d:cd:c8:90:89:1e:76:d4:62:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:14:56 2026 GMT Not After : May 2 01:19:56 2027 GMT Subject: CN=906CD1832E095FD864326D9340C3360CE2E04D88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:77:e9:20:fb:ec:fe:68:93:cd:94:e4:13:2e: 9e:56:7b:d0:7b:e4:9d:7b:5e:a9:fa:e8:da:ab:61: f6:4f:9a:78:6e:e0:11:52:0f:9c:43:6a:24:cc:52: cd:ab:74:ac:5e:b7:a6:8d:5d:e7:f5:3b:d4:ac:46: 48:f8:86:5a:0b:6c:d0:4c:f8:93:b4:38:0a:d2:d0: 33:82:0c:8e:f8:37:1b:1c:7b:06:9c:9a:47:f4:78: b8:e3:6c:e3:b5:44:64:77:1e:5c:b8:e0:1b:a4:29: 11:ce:b1:dc:1d:7c:ef:26:8f:6b:e6:c2:1d:92:f8: 11:26:44:a0:dc:c6:7f:f7:54:26:56:b3:b0:5d:e1: 57:36:4e:a8:35:32:1a:7d:60:2a:fa:39:13:a8:71: 1c:59:a5:8d:7d:9f:86:71:29:ad:2f:76:38:b7:5f: 1f:e5:83:1e:9d:61:cc:e6:44:06:bd:ed:bf:a3:b9: e6:97:bb:3a:9f:90:39:e8:93:90:d0:a0:94:2e:1f: 20:c7:5e:3c:91:70:7f:00:bc:5a:b3:50:e3:fc:cc: 3f:38:dd:8c:fc:3e:75:32:f0:5d:1b:38:a9:f8:38: b6:d0:f3:24:8c:1b:37:9c:af:f1:29:61:81:b7:2f: e4:a7:af:88:5a:8e:30:9b:2c:27:f7:bc:7f:0d:44: b7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.212.72.0/21 182.48.160.0/19 Signature Algorithm: sha256WithRSAEncryption a7:5a:c6:1f:fb:76:1b:ec:87:99:a5:7d:59:29:8a:22:9a:a1: 6a:1d:fc:cb:77:55:55:60:71:b6:15:c2:46:dc:2f:f6:84:74: 2a:93:9b:09:37:4f:0b:8d:be:c9:52:69:8f:e8:da:42:8d:f0: e3:3a:4a:c1:b1:eb:0f:22:fb:46:83:41:dc:ab:17:f2:46:b3: 91:77:13:d4:b6:e9:f0:01:6e:50:2c:df:bc:93:72:70:27:58: 0d:77:e4:a9:ce:8e:c4:a0:79:85:ee:0c:d6:5f:0e:90:fc:88: f1:5e:53:a1:0d:58:e1:ee:fe:f0:73:77:0a:15:b0:40:b0:bc: 1c:50:d6:19:81:25:00:e9:39:16:59:39:04:ca:fd:b5:40:f4: 6f:d2:90:b2:f3:ea:32:48:d3:f2:73:16:e5:5e:64:4f:ea:99: cd:7e:cc:25:d5:3d:a1:9c:a8:c0:bf:3c:35:5b:52:b3:b9:00: b3:7f:ab:4a:3a:a7:0b:05:0d:27:1d:4f:bf:7e:a6:17:ec:b2: 39:42:07:d3:00:8f:22:a6:0c:fd:22:78:9a:73:43:41:b3:8c: 28:42:40:a4:90:11:08:0f:e1:2a:be:25:3c:2d:bd:83:a8:40: 43:0b:71:33:12:20:67:cf:8d:c1:9f:a6:9d:71:68:bf:77:df: 07:9c:49:10 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUMH7QXPf9Jqd0AB3NyJCJHnbUYsowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTQ1NloX DTI3MDUwMjAxMTk1NlowMzExMC8GA1UEAxMoOTA2Q0QxODMyRTA5NUZEODY0MzI2 RDkzNDBDMzM2MENFMkUwNEQ4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAON36SD77P5ok82U5BMunlZ70HvknXteqfro2qth9k+aeG7gEVIPnENqJMxS zat0rF63po1d5/U71KxGSPiGWgts0Ez4k7Q4CtLQM4IMjvg3Gxx7BpyaR/R4uONs 47VEZHceXLjgG6QpEc6x3B187yaPa+bCHZL4ESZEoNzGf/dUJlazsF3hVzZOqDUy Gn1gKvo5E6hxHFmljX2fhnEprS92OLdfH+WDHp1hzOZEBr3tv6O55pe7Op+QOeiT kNCglC4fIMdePJFwfwC8WrNQ4/zMPzjdjPw+dTLwXRs4qfg4ttDzJIwbN5yv8Slh gbcv5KeviFqOMJssJ/e8fw1EtykCAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJBs0YMuCV/YZDJtk0DDNgzi4E2IMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzhkMWQ1OTZjLTA5ZTMtNDYyMS1hNjNiLTIwYTUxM2NkNDhiOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84ZDFkNTk2 Yy0wOWUzLTQ2MjEtYTYzYi0yMGE1MTNjZDQ4YjkvMC85MDZDRDE4MzJFMDk1RkQ4 NjQzMjZEOTM0MEMzMzYwQ0UyRTA0RDg4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQDdNRIAwQFtjCgMA0GCSqGSIb3DQEBCwUAA4IBAQCnWsYf+3Yb7IeZpX1ZKYoi mqFqHfzLd1VVYHG2FcJG3C/2hHQqk5sJN08Ljb7JUmmP6NpCjfDjOkrBsesPIvtG g0HcqxfyRrORdxPUtunwAW5QLN+8k3JwJ1gNd+Spzo7EoHmF7gzWXw6Q/IjxXlOh DVjh7v7wc3cKFbBAsLwcUNYZgSUA6TkWWTkEyv21QPRv0pCy8+oySNPycxblXmRP 6pnNfswl1T2hnKjAvzw1W1KzuQCzf6tKOqcLBQ0nHU+/fqYX7LI5QgfTAI8ipgz9 Iniac0NBs4woQkCkkBEID+EqviU8Lb2DqEBDC3EzEiBnz43Bn6adcWi/d98HnEkQ -----END CERTIFICATE-----Generated at Tue May 12 22:46:04 2026 by rpki-client