$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer File: 90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer (raw, json) Hash identifier: 59bwYeomN/PE3Ay8coVPNK19EEBYdpVXCOWmfYQLAoI= Subject key identifier: 90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7C9E7B18B15C445D6D4047FBFFFFF6C97E9E90E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:10:41 +0000 Certificate not after: Sun 02 May 2027 02:15:41 +0000 Subordinate resources: IP: 45.126.132.0/22 IP: 103.24.12.0/23 IP: 103.253.68.0/23 IP: 116.204.128.0/22 IP: 116.204.248.0/22 IP: 2001:df2:c000::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:9e:7b:18:b1:5c:44:5d:6d:40:47:fb:ff:ff:f6:c9:7e:9e:90:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:10:41 2026 GMT Not After : May 2 02:15:41 2027 GMT Subject: CN=90DFB5F1A9E58FE1ACB77CDF0B4E752370346916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d0:64:54:b3:19:1f:92:ab:34:83:4f:0b:17: f2:7d:64:97:9f:5f:71:eb:ff:e9:bd:f3:54:af:2e: 03:5e:f1:85:7e:2a:37:e3:79:b5:a9:d6:c1:e0:41: 88:be:2d:14:d9:78:24:f0:4d:5c:fc:88:28:2d:80: 0b:fd:4f:8e:98:11:c6:92:30:92:68:8d:69:fb:c9: ec:75:70:9a:73:e6:fb:90:7e:5e:e0:2b:4f:fa:ad: 16:2b:64:19:04:1c:f8:0d:96:3c:6a:65:81:fb:bf: fc:b7:ba:8f:33:0f:03:46:c8:b0:23:ea:e0:3a:13: 3d:0a:69:ea:56:6e:56:28:8d:61:44:60:17:65:53: f7:ee:7a:8f:5f:54:bd:eb:94:8d:af:b7:48:12:cd: 7e:6f:b3:eb:65:8f:7c:49:67:35:78:d7:f3:cb:88: ce:68:99:af:a9:2c:4c:e4:ab:ed:2f:73:2a:b5:33: 9b:62:f1:30:66:b5:da:19:95:45:72:06:28:e9:d7: 3b:3c:be:03:94:9a:c0:85:d8:98:df:f2:03:ea:9e: e6:c6:78:e5:8a:0a:05:e3:38:a6:b3:53:bc:58:ae: 75:7d:81:1f:a0:7a:6c:42:22:1e:15:77:e3:a8:aa: 1c:e0:98:3a:c3:bc:55:5e:25:d5:6c:8d:3b:c1:7d: b0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.126.132.0/22 103.24.12.0/23 103.253.68.0/23 116.204.128.0/22 116.204.248.0/22 IPv6: 2001:df2:c000::/48 Signature Algorithm: sha256WithRSAEncryption 1a:e7:d9:1b:5f:b6:59:b0:85:8d:98:81:72:06:de:41:3b:6d: 28:69:bb:62:06:6b:07:24:4b:63:46:bf:83:0d:db:58:51:a2: 72:27:c8:fd:c3:62:0d:fa:ac:61:42:0d:99:c4:60:3d:c2:ef: e9:7d:8d:b8:57:a9:3a:ab:77:11:0f:76:64:b2:54:86:18:6d: 07:be:da:a5:57:3b:11:85:79:06:fb:47:6a:99:00:40:23:21: 4f:ee:64:5f:36:d5:34:dd:0e:f7:a0:6f:2e:01:91:e4:58:56: 7e:f6:db:64:92:c0:12:54:0a:ae:59:c1:b0:81:97:25:c6:16: 7a:28:5f:40:b7:6c:6d:60:17:52:6c:e1:b4:51:f8:07:81:f0: 2e:2e:0d:20:18:3a:9d:9c:0e:fb:39:b5:c7:e7:3e:b1:d5:2d: 40:e5:84:3c:97:4a:59:d7:ed:91:6c:10:46:52:b8:c5:22:e4: 59:71:d9:a4:29:6d:cd:4b:8c:83:86:11:62:ae:5a:d3:c2:15: be:c7:80:e5:fa:f1:46:2b:2b:1e:28:ba:df:f9:51:43:cd:cc: 59:87:2d:4b:24:de:ca:78:e8:c6:ee:6f:25:33:60:4d:d2:24: fe:71:a2:48:d3:94:6f:cd:30:68:90:91:df:33:8d:9f:bd:08: b5:57:ff:eb -----BEGIN CERTIFICATE----- MIIF7zCCBNegAwIBAgIUfJ57GLFcRF1tQEf7///2yX6ekOQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTA0MVoX DTI3MDUwMjAyMTU0MVowMzExMC8GA1UEAxMoOTBERkI1RjFBOUU1OEZFMUFDQjc3 Q0RGMEI0RTc1MjM3MDM0NjkxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJfQZFSzGR+SqzSDTwsX8n1kl59fcev/6b3zVK8uA17xhX4qN+N5tanWweBB iL4tFNl4JPBNXPyIKC2AC/1PjpgRxpIwkmiNafvJ7HVwmnPm+5B+XuArT/qtFitk GQQc+A2WPGplgfu//Le6jzMPA0bIsCPq4DoTPQpp6lZuViiNYURgF2VT9+56j19U veuUja+3SBLNfm+z62WPfElnNXjX88uIzmiZr6ksTOSr7S9zKrUzm2LxMGa12hmV RXIGKOnXOzy+A5SawIXYmN/yA+qe5sZ45YoKBeM4prNTvFiudX2BH6B6bEIiHhV3 46iqHOCYOsO8VV4l1WyNO8F9sDsCAwEAAaOCAuIwggLeMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJDftfGp5Y/hrLd83wtOdSNwNGkWMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2UxMzlhYzFmLTM4ZTItNDVhYS05N2RjLTk5Mjc5NjQxMWNjMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lMTM5YWMx Zi0zOGUyLTQ1YWEtOTdkYy05OTI3OTY0MTFjYzEvMC85MERGQjVGMUE5RTU4RkUx QUNCNzdDREYwQjRFNzUyMzcwMzQ2OTE2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIAATAe AwQCLX6EAwQBZxgMAwQBZ/1EAwQCdMyAAwQCdMz4MA8EAgACMAkDBwAgAQ3ywAAw DQYJKoZIhvcNAQELBQADggEBABrn2RtftlmwhY2YgXIG3kE7bShpu2IGawckS2NG v4MN21hRonInyP3DYg36rGFCDZnEYD3C7+l9jbhXqTqrdxEPdmSyVIYYbQe+2qVX OxGFeQb7R2qZAEAjIU/uZF821TTdDvegby4BkeRYVn7222SSwBJUCq5ZwbCBlyXG FnooX0C3bG1gF1Js4bRR+AeB8C4uDSAYOp2cDvs5tcfnPrHVLUDlhDyXSlnX7ZFs EEZSuMUi5Flx2aQpbc1LjIOGEWKuWtPCFb7HgOX68UYrKx4out/5UUPNzFmHLUsk 3sp46MbubyUzYE3SJP5xokjTlG/NMGiQkd8zjZ+9CLVX/+s= -----END CERTIFICATE-----Generated at Tue May 12 22:38:59 2026 by rpki-client