$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer File: 90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer (raw, json) Hash identifier: WG747BHNH4OVysPwZK3MKntdyrLe0PnhnXOZ80c2RuA= Subject key identifier: 90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 424881E5B351999047A65D4F2AFE8D92C0BC28C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:38:01 +0000 Certificate not after: Sun 02 May 2027 02:43:01 +0000 Subordinate resources: IP: 103.134.104.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:48:81:e5:b3:51:99:90:47:a6:5d:4f:2a:fe:8d:92:c0:bc:28:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:38:01 2026 GMT Not After : May 2 02:43:01 2027 GMT Subject: CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:11:f1:fa:0a:c6:a5:e9:7c:21:c3:98:66:72: 5b:ab:d4:ed:97:f1:3b:58:ee:ec:02:87:ac:c8:1b: 19:08:11:35:a3:e4:33:62:f7:85:f6:a5:24:b0:57: e2:f6:79:47:56:14:d1:9a:44:71:5e:b4:a9:78:4a: b3:09:59:6d:9e:78:ac:8f:79:08:82:71:14:c6:f0: 97:b2:5e:86:48:56:51:cc:a5:52:e7:60:fa:82:b1: 24:81:57:a5:ba:7f:cd:1a:17:76:aa:12:08:be:e5: 3d:1d:91:d3:55:b2:7a:57:82:17:66:ae:88:47:d1: 62:bb:b2:53:77:d8:52:8f:5d:8f:72:11:74:35:4d: 48:b5:30:ae:7a:55:8d:ab:07:e3:cd:d1:29:83:61: 09:85:27:95:51:24:4e:15:27:8e:3c:26:39:bb:f6: 03:14:49:91:82:33:42:f9:af:d0:df:a5:c1:15:e4: db:db:2c:13:ca:67:2f:69:b7:7d:3d:50:18:1a:5d: fc:3d:c2:03:52:29:7c:50:d9:a7:cd:8c:69:1c:a6: 4b:b0:6d:66:8b:26:c8:03:94:73:32:db:23:52:5c: da:95:a2:e6:5a:05:84:ff:6e:5c:0a:70:57:bb:a7: 25:08:41:2d:51:bf:b5:5c:81:02:4a:28:35:88:22: cb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.104.0/22 Signature Algorithm: sha256WithRSAEncryption 60:23:a0:26:9a:dd:8d:08:ba:e8:b4:07:ac:63:ba:b4:b3:06: 28:18:5e:da:ce:11:14:fc:b0:e2:56:fb:75:21:59:a6:fe:ed: b3:66:8b:c3:25:05:84:90:f9:ee:16:11:fe:67:34:2c:ba:72: 53:a7:a5:2c:6d:75:c9:4b:89:d6:2a:b3:25:c4:f0:5d:42:d7: 9c:f4:64:1b:90:4f:42:b4:26:9e:87:89:2d:1d:d8:b1:de:67: ad:80:7b:46:75:38:7a:59:5f:c3:0d:d2:dc:fd:44:e6:7c:ec: da:1f:f1:2e:69:1e:e2:3f:2a:13:35:51:2b:32:4a:29:a1:8c: 2a:c0:59:a4:fa:48:6d:10:45:c4:07:c9:1d:bc:ab:9d:a3:0f: d8:92:9d:9a:30:0e:95:8b:99:07:db:23:94:31:4a:02:eb:41: 4d:4f:20:68:98:e2:8e:91:81:e6:15:3c:46:73:5c:ee:74:07: 7f:44:e4:e9:66:6a:c8:0a:48:17:ca:a4:3f:06:ce:1a:00:16: 60:76:08:e1:62:28:65:f5:30:78:84:0b:35:4c:c8:5f:fb:fc: a2:bc:e1:6e:2f:aa:0f:92:d9:af:1e:f3:dd:ec:f2:57:24:2b: 82:8c:64:e6:95:55:35:1a:a1:95:e1:70:10:14:1d:3c:75:e7: 9e:b2:b8:10 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUQkiB5bNRmZBHpl1PKv6NksC8KMUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzgwMVoX DTI3MDUwMjAyNDMwMVowMzExMC8GA1UEAxMoOTBDM0JDNjZBQTc0NUM5RUE4REE5 RDgxNUFEN0JGNEJGMkRFNUU1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANcR8foKxqXpfCHDmGZyW6vU7ZfxO1ju7AKHrMgbGQgRNaPkM2L3hfalJLBX 4vZ5R1YU0ZpEcV60qXhKswlZbZ54rI95CIJxFMbwl7JehkhWUcylUudg+oKxJIFX pbp/zRoXdqoSCL7lPR2R01WyeleCF2auiEfRYruyU3fYUo9dj3IRdDVNSLUwrnpV jasH483RKYNhCYUnlVEkThUnjjwmObv2AxRJkYIzQvmv0N+lwRXk29ssE8pnL2m3 fT1QGBpd/D3CA1IpfFDZp82MaRymS7BtZosmyAOUczLbI1Jc2pWi5loFhP9uXApw V7unJQhBLVG/tVyBAkooNYgiy6sCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJDDvGaqdFyeqNqdgVrXv0vy3l5dMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y2YjVhZTFlLWJlNjYtNGEzMC1hOTQ4LTdkNDc4YzIyZWEyYi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mNmI1YWUx ZS1iZTY2LTRhMzAtYTk0OC03ZDQ3OGMyMmVhMmIvMC85MEMzQkM2NkFBNzQ1QzlF QThEQTlEODE1QUQ3QkY0QkYyREU1RTVELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ4ZoMA0GCSqGSIb3DQEBCwUAA4IBAQBgI6Ammt2NCLrotAesY7q0swYoGF7a zhEU/LDiVvt1IVmm/u2zZovDJQWEkPnuFhH+ZzQsunJTp6UsbXXJS4nWKrMlxPBd Qtec9GQbkE9CtCaeh4ktHdix3metgHtGdTh6WV/DDdLc/UTmfOzaH/EuaR7iPyoT NVErMkopoYwqwFmk+khtEEXEB8kdvKudow/Ykp2aMA6Vi5kH2yOUMUoC60FNTyBo mOKOkYHmFTxGc1zudAd/ROTpZmrICkgXyqQ/Bs4aABZgdgjhYihl9TB4hAs1TMhf +/yivOFuL6oPktmvHvPd7PJXJCuCjGTmlVU1GqGV4XAQFB08deeesrgQ -----END CERTIFICATE-----Generated at Tue May 12 22:16:03 2026 by rpki-client