$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer File: 90B9450AA39B9CD9586085EFA9EF7887EE613759.cer (raw, json) Hash identifier: P4ap1I+fpXo9PvC5am9ieMR92vEHEqbgJhHDuHOPcx8= Subject key identifier: 90:B9:45:0A:A3:9B:9C:D9:58:60:85:EF:A9:EF:78:87:EE:61:37:59 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 084AD111BF38D68804ABBDF85BFC2635F3BE8F67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:04:41 +0000 Certificate not after: Sun 02 May 2027 01:09:41 +0000 Subordinate resources: IP: 103.153.82.0/23 IP: 2406:4140::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:4a:d1:11:bf:38:d6:88:04:ab:bd:f8:5b:fc:26:35:f3:be:8f:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:04:41 2026 GMT Not After : May 2 01:09:41 2027 GMT Subject: CN=90B9450AA39B9CD9586085EFA9EF7887EE613759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:60:5d:fa:bc:f6:3c:79:b8:29:17:02:a3:d8: c3:5b:cc:1f:ba:4c:e4:f4:24:73:69:82:7f:85:c6: 87:33:8d:0d:24:7c:c5:35:50:2e:3b:c4:81:53:7c: 1f:3c:b9:c2:0b:eb:8a:da:fc:80:30:8d:27:87:a3: 12:68:5c:fa:84:eb:42:c9:7b:5e:a9:32:2e:71:dc: ff:f8:70:20:58:73:32:ab:fc:f6:fd:35:1e:52:2c: e2:c8:0e:e9:c6:9a:ce:7f:cb:e4:2f:6d:ed:82:79: f9:95:0a:5c:83:06:df:35:e4:21:68:46:6f:ec:46: b3:be:5e:a0:88:47:f1:87:67:53:ab:30:75:87:b3: 0a:0b:7c:81:a2:cf:5c:02:fa:9e:20:78:a5:c0:7f: eb:a5:cc:f1:94:2d:44:77:01:29:c9:f0:4a:d2:2c: 62:38:61:77:ba:d7:89:84:0c:24:c3:52:d5:33:a3: bb:5b:98:ba:6a:16:46:3d:32:6e:f1:4a:d1:1c:74: de:76:10:51:dc:4c:4a:06:f4:83:91:9a:18:4a:34: 18:49:94:55:a7:ac:eb:40:aa:9f:94:1c:ea:66:73: 21:70:dd:c6:61:7f:e1:11:5b:c1:78:9d:ca:48:d3: 08:ad:8a:ed:90:8e:7b:69:ea:9d:dc:f6:fa:3a:76: f4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 90:B9:45:0A:A3:9B:9C:D9:58:60:85:EF:A9:EF:78:87:EE:61:37:59 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.82.0/23 IPv6: 2406:4140::/32 Signature Algorithm: sha256WithRSAEncryption a5:f6:6f:7b:cb:21:b6:d6:53:e1:a6:15:c8:a5:12:aa:84:f4: 40:58:0a:ad:06:8b:ac:45:a8:fd:78:a8:ab:d6:0c:53:58:86: 45:f5:68:d3:17:9e:12:ea:68:ce:49:17:8a:c4:e4:23:ec:c3: 6c:dd:25:38:76:80:9d:2f:6f:39:d9:87:a8:96:35:bd:18:4b: d0:fb:dc:e7:e3:f6:2c:24:ce:70:f1:5a:bb:1e:6d:81:32:36: 1c:a7:fe:ce:d8:d0:c9:9d:28:e8:89:2c:51:42:a7:4d:b8:b2: 27:d9:4e:6f:cd:65:22:ab:62:2d:5d:62:3a:58:f0:a4:2b:2a: ae:2c:14:04:a0:db:60:29:af:72:78:1f:33:ac:4a:71:37:35: 4f:6f:a4:dd:52:50:2a:83:62:84:7f:2d:d6:d2:76:95:98:80: 3f:0d:a4:b1:dd:5e:68:c0:e1:1c:80:93:75:e1:90:05:b5:af: 18:90:f5:e2:36:f9:b8:12:23:32:34:72:a5:33:f5:37:f4:4d: 29:d8:a7:56:4a:c8:01:f0:dc:1c:63:37:9d:f5:f3:e3:d0:de: 0f:26:51:ff:08:71:ec:c2:75:11:64:b2:c7:e9:d0:a6:ff:74: 05:3d:a2:cb:ba:40:eb:00:d2:99:65:e0:aa:cb:17:a4:76:28: e0:4a:13:b4 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUCErREb841ogEq734W/wmNfO+j2cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDQ0MVoX DTI3MDUwMjAxMDk0MVowMzExMC8GA1UEAxMoOTBCOTQ1MEFBMzlCOUNEOTU4NjA4 NUVGQTlFRjc4ODdFRTYxMzc1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKZgXfq89jx5uCkXAqPYw1vMH7pM5PQkc2mCf4XGhzONDSR8xTVQLjvEgVN8 Hzy5wgvritr8gDCNJ4ejEmhc+oTrQsl7XqkyLnHc//hwIFhzMqv89v01HlIs4sgO 6caazn/L5C9t7YJ5+ZUKXIMG3zXkIWhGb+xGs75eoIhH8YdnU6swdYezCgt8gaLP XAL6niB4pcB/66XM8ZQtRHcBKcnwStIsYjhhd7rXiYQMJMNS1TOju1uYumoWRj0y bvFK0Rx03nYQUdxMSgb0g5GaGEo0GEmUVaes60Cqn5Qc6mZzIXDdxmF/4RFbwXid ykjTCK2K7ZCOe2nqndz2+jp29GUCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJC5RQqjm5zZWGCF76nveIfuYTdZMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdlNzZkYjFlLWJmOWEtNDlhOC1iZjc2LTlmMzE0ZTdkMWQ4ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83ZTc2ZGIx ZS1iZjlhLTQ5YTgtYmY3Ni05ZjMxNGU3ZDFkOGUvMC85MEI5NDUwQUEzOUI5Q0Q5 NTg2MDg1RUZBOUVGNzg4N0VFNjEzNzU5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5lSMA0EAgACMAcDBQAkBkFAMA0GCSqGSIb3DQEBCwUAA4IBAQCl9m97yyG2 1lPhphXIpRKqhPRAWAqtBousRaj9eKir1gxTWIZF9WjTF54S6mjOSReKxOQj7MNs 3SU4doCdL2852YeoljW9GEvQ+9zn4/YsJM5w8Vq7Hm2BMjYcp/7O2NDJnSjoiSxR QqdNuLIn2U5vzWUiq2ItXWI6WPCkKyquLBQEoNtgKa9yeB8zrEpxNzVPb6TdUlAq g2KEfy3W0naVmIA/DaSx3V5owOEcgJN14ZAFta8YkPXiNvm4EiMyNHKlM/U39E0p 2KdWSsgB8NwcYzed9fPj0N4PJlH/CHHswnURZLLH6dCm/3QFPaLLukDrANKZZeCq yxekdijgShO0 -----END CERTIFICATE-----Generated at Tue May 12 22:16:27 2026 by rpki-client