$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer File: 90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer (raw, json) Hash identifier: lbweCSCzxHkVyR0VSPfDBFF1N0H3E1TtjRzTU824jz0= Subject key identifier: 90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6B51AD558E2855FD687B5977EBAA55B5BC4B3F88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft caRepository: rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:45:02 +0000 Certificate not after: Sun 02 May 2027 00:50:02 +0000 Subordinate resources: IP: 103.172.240.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:51:ad:55:8e:28:55:fd:68:7b:59:77:eb:aa:55:b5:bc:4b:3f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:45:02 2026 GMT Not After : May 2 00:50:02 2027 GMT Subject: CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:55:18:76:70:47:27:67:d3:62:5a:a2:26:94: 87:1c:37:a3:19:9f:49:93:13:c5:b0:3a:a0:a1:4e: 08:28:0e:d4:73:bd:f7:26:b6:81:9f:79:07:72:63: 05:e9:9f:5e:e4:b3:8c:cb:a1:99:aa:99:57:d5:4e: 7d:8e:ac:1f:bf:08:d5:21:a8:a3:0c:5a:ab:67:11: aa:c8:0d:94:9e:c9:00:91:c3:57:37:37:7d:5f:17: e0:b6:84:fa:6e:e0:dd:fa:b2:b8:06:35:fb:78:33: 97:a8:dd:fc:e0:72:98:70:aa:57:fc:96:e8:41:f6: 29:d8:0e:28:7a:f4:88:2a:6b:77:29:85:82:85:cd: 19:49:49:d9:a1:02:b4:fb:b5:d3:9c:08:18:96:7f: c3:3e:3e:47:eb:b5:91:c7:27:d5:ca:14:63:3f:e9: 6f:b1:be:53:ed:3b:be:8b:29:1c:ee:00:e7:af:41: ca:52:8c:01:9a:d5:e6:c3:ad:5f:bc:89:6d:e5:41: 78:a1:5a:40:b3:d3:6b:7d:5d:07:1b:c2:35:37:ab: f9:52:da:c4:70:63:21:e1:f8:08:4c:d2:7b:d9:f6: f6:82:51:a9:4e:5d:37:50:44:67:28:16:8e:9f:f6: 3f:97:e1:5c:75:b5:38:75:9d:3a:0c:7a:70:d1:47: d3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.240.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:cb:f4:c4:af:ec:7f:48:c1:36:70:fa:39:b8:a6:31:be:f0: 10:1e:36:70:63:63:53:18:13:b3:7d:85:29:f7:15:d5:8b:ec: 64:38:eb:a4:b6:3a:b2:71:17:04:aa:72:10:e4:f4:95:c3:6c: db:71:ae:b4:a9:e3:41:f5:a3:8b:30:9b:9a:06:27:d8:0d:18: f5:62:b0:f5:71:dd:4e:9a:98:c8:4c:17:a6:d9:d9:18:87:27: 5d:fe:cf:83:db:9f:fd:1a:c5:20:14:f5:8b:58:8e:12:13:0a: d8:e0:be:26:e8:29:e1:6d:f4:65:b0:9f:ed:94:28:c8:da:05: dd:df:f7:0c:6d:b8:e9:ba:dd:7a:ca:c9:28:96:23:b3:3f:39: 02:48:3b:59:c7:b4:7a:3c:d1:fb:ab:f0:ae:3b:d2:76:60:02: a5:3f:89:ac:fa:43:77:b9:42:d0:a3:55:93:d2:8d:cf:8a:a8: 81:e4:fa:c2:7b:ea:ce:1a:fc:66:28:77:68:8a:b9:e9:06:03: 7a:dc:3d:e7:3d:f8:7e:6c:07:cd:83:fb:13:d1:97:88:64:52: 9b:5b:c6:7e:fd:9c:93:9e:10:4b:2a:8b:ea:01:12:09:1e:c7: 68:d0:99:4f:67:44:81:23:08:3a:9e:74:78:50:93:f5:f1:9d: ca:cf:32:13 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUa1GtVY4oVf1oe1l366pVtbxLP4gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDUwMloX DTI3MDUwMjAwNTAwMlowMzExMC8GA1UEAxMoOTBDQzcyMDlDQUE4QTZDN0ZFRUMy MTlEQUU0OTdGN0FFRUY0MzM2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM9VGHZwRydn02JaoiaUhxw3oxmfSZMTxbA6oKFOCCgO1HO99ya2gZ95B3Jj BemfXuSzjMuhmaqZV9VOfY6sH78I1SGoowxaq2cRqsgNlJ7JAJHDVzc3fV8X4LaE +m7g3fqyuAY1+3gzl6jd/OBymHCqV/yW6EH2KdgOKHr0iCprdymFgoXNGUlJ2aEC tPu105wIGJZ/wz4+R+u1kccn1coUYz/pb7G+U+07vospHO4A569BylKMAZrV5sOt X7yJbeVBeKFaQLPTa31dBxvCNTer+VLaxHBjIeH4CEzSe9n29oJRqU5dN1BEZygW jp/2P5fhXHW1OHWdOgx6cNFH060CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJDMcgnKqKbH/uwhna5Jf3ru9DNlMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzYxMmMxMzhjLTJlMjQtNDlmNS04YWRhLTAwMjdjYmE3ZjE3OC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82MTJjMTM4 Yy0yZTI0LTQ5ZjUtOGFkYS0wMDI3Y2JhN2YxNzgvMC85MENDNzIwOUNBQThBNkM3 RkVFQzIxOURBRTQ5N0Y3QUVFRjQzMzY1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6zwMA0GCSqGSIb3DQEBCwUAA4IBAQB9y/TEr+x/SME2cPo5uKYxvvAQHjZw Y2NTGBOzfYUp9xXVi+xkOOuktjqycRcEqnIQ5PSVw2zbca60qeNB9aOLMJuaBifY DRj1YrD1cd1OmpjITBem2dkYhydd/s+D25/9GsUgFPWLWI4SEwrY4L4m6CnhbfRl sJ/tlCjI2gXd3/cMbbjput16yskoliOzPzkCSDtZx7R6PNH7q/CuO9J2YAKlP4ms +kN3uULQo1WT0o3PiqiB5PrCe+rOGvxmKHdoirnpBgN63D3nPfh+bAfNg/sT0ZeI ZFKbW8Z+/ZyTnhBLKovqARIJHsdo0JlPZ0SBIwg6nnR4UJP18Z3KzzIT -----END CERTIFICATE-----Generated at Tue May 12 22:10:14 2026 by rpki-client