$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/90A149FB759A6A176FE4D47F5082FA60C9767022.cer File: 90A149FB759A6A176FE4D47F5082FA60C9767022.cer (raw, json) Hash identifier: jXakbsHnPAnynIOVulOuD+LCOSAisQ0ykaoLkRoHzKk= Subject key identifier: 90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 43D12405D07B6D7E39FCF81B252837E22986F15D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft caRepository: rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:02:09 +0000 Certificate not after: Sun 02 May 2027 00:07:09 +0000 Subordinate resources: IP: 120.29.224.0/21 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d1:24:05:d0:7b:6d:7e:39:fc:f8:1b:25:28:37:e2:29:86:f1:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:02:09 2026 GMT Not After : May 2 00:07:09 2027 GMT Subject: CN=90A149FB759A6A176FE4D47F5082FA60C9767022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a3:d7:1d:29:4b:7a:b9:d4:d2:97:90:34:72: f9:41:2d:60:8d:5f:dd:62:95:ef:f9:3b:54:d4:9d: 5d:ab:4e:bd:2b:f9:33:0a:c8:0f:3e:9a:6a:ae:0a: c4:a2:94:8d:8b:ff:bd:93:b0:9a:c5:27:df:77:97: 87:7a:ee:db:3d:85:31:87:8b:f3:e5:3c:6e:ba:f7: 0d:de:61:b7:d5:27:94:77:12:53:2e:e9:32:36:16: 5b:a7:8a:d7:fe:f0:6f:52:26:eb:f3:33:0d:aa:0e: 11:f2:ff:bb:60:22:d1:8a:b5:6f:41:ed:c6:3e:20: 2b:5e:84:9c:d5:78:f5:4c:91:84:fb:2e:d9:7e:18: 6f:33:91:74:01:19:e3:63:a1:e1:f7:b1:cc:39:6e: 7b:d1:18:ed:c8:0d:16:08:42:46:cc:a6:43:4f:fd: 0f:fc:8d:90:a6:d0:1d:10:80:76:f5:00:c1:b2:bc: 84:8d:fb:66:b3:ea:12:88:ff:39:8a:19:8e:12:cd: f0:f2:04:69:98:a8:44:25:ef:aa:84:b4:15:19:39: 84:4d:dd:02:6a:b5:91:b1:80:19:98:f1:c0:d9:54: dd:bd:a1:e3:68:63:20:8c:e5:97:8d:47:7a:11:b1: 60:32:95:7c:d1:26:4e:52:7e:f1:de:61:e7:cc:08: bb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 90:A1:49:FB:75:9A:6A:17:6F:E4:D4:7F:50:82:FA:60:C9:76:70:22 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/90A149FB759A6A176FE4D47F5082FA60C9767022.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.29.224.0/21 Signature Algorithm: sha256WithRSAEncryption 11:44:ab:b4:a5:bd:bb:c7:95:f6:37:b3:d6:d6:47:c9:59:e2: 9c:e4:84:b7:ee:65:11:ed:f7:74:79:6b:7b:58:68:d5:ef:2d: e5:8a:56:26:a0:6c:5a:62:bc:cf:cf:fd:d7:15:76:83:96:b9: a0:70:dc:a9:4f:44:89:6d:01:d4:55:be:94:c3:15:25:d0:03: 11:ac:44:2e:dd:a0:17:e2:77:51:45:dc:dd:50:a7:0c:49:a7: 80:ea:96:30:bf:d4:9c:f0:e6:82:bc:18:9f:77:70:aa:93:e9: 0d:b2:94:41:8a:4b:08:1f:8d:6f:ea:8d:58:1f:e5:bb:03:2c: 8f:c0:33:0c:9f:19:92:45:70:ab:3f:88:fd:19:b5:81:38:ca: 10:3d:14:68:13:ba:4f:d2:71:d8:85:e4:f7:c4:2a:0b:dd:a9: 20:86:76:cf:6b:4f:8c:55:03:e6:e1:fe:e2:63:9a:6c:9e:e3: d2:23:b7:7b:bb:97:d3:bd:be:0f:8f:34:1e:e3:1d:ad:17:eb: d3:5a:db:d9:5e:a6:9f:a9:dc:15:16:5b:28:ae:f9:82:0f:d6: ad:1c:10:d4:30:ee:08:70:bb:cf:01:f8:1d:12:32:0b:62:02: 2f:8f:0f:6b:b3:31:6b:2a:7c:9b:48:ff:78:ee:dd:01:d4:5b: 66:97:75:f1 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUQ9EkBdB7bX45/PgbJSg34imG8V0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDIwOVoX DTI3MDUwMjAwMDcwOVowMzExMC8GA1UEAxMoOTBBMTQ5RkI3NTlBNkExNzZGRTRE NDdGNTA4MkZBNjBDOTc2NzAyMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKOj1x0pS3q51NKXkDRy+UEtYI1f3WKV7/k7VNSdXatOvSv5MwrIDz6aaq4K xKKUjYv/vZOwmsUn33eXh3ru2z2FMYeL8+U8brr3Dd5ht9UnlHcSUy7pMjYWW6eK 1/7wb1Im6/MzDaoOEfL/u2Ai0Yq1b0Htxj4gK16EnNV49UyRhPsu2X4YbzORdAEZ 42Oh4fexzDlue9EY7cgNFghCRsymQ0/9D/yNkKbQHRCAdvUAwbK8hI37ZrPqEoj/ OYoZjhLN8PIEaZioRCXvqoS0FRk5hE3dAmq1kbGAGZjxwNlU3b2h42hjIIzll41H ehGxYDKVfNEmTlJ+8d5h58wIu2sCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJChSft1mmoXb+TUf1CC+mDJdnAiMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzIyMWM5Y2FkLWMzYjktNDVhMC1iZWI2LWJjZTQ4ZTJiMjI3Mi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yMjFjOWNh ZC1jM2I5LTQ1YTAtYmViNi1iY2U0OGUyYjIyNzIvMC85MEExNDlGQjc1OUE2QTE3 NkZFNEQ0N0Y1MDgyRkE2MEM5NzY3MDIyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQDeB3gMA0GCSqGSIb3DQEBCwUAA4IBAQARRKu0pb27x5X2N7PW1kfJWeKc5IS3 7mUR7fd0eWt7WGjV7y3lilYmoGxaYrzPz/3XFXaDlrmgcNypT0SJbQHUVb6UwxUl 0AMRrEQu3aAX4ndRRdzdUKcMSaeA6pYwv9Sc8OaCvBifd3Cqk+kNspRBiksIH41v 6o1YH+W7AyyPwDMMnxmSRXCrP4j9GbWBOMoQPRRoE7pP0nHYheT3xCoL3akghnbP a0+MVQPm4f7iY5psnuPSI7d7u5fTvb4PjzQe4x2tF+vTWtvZXqafqdwVFlsorvmC D9atHBDUMO4IcLvPAfgdEjILYgIvjw9rszFrKnybSP947t0B1Ftml3Xx -----END CERTIFICATE-----Generated at Tue May 12 22:02:48 2026 by rpki-client