$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.cer File: 910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.cer (raw, json) Hash identifier: CbWrOkwodfiRhsDTl8uIKAsItE+h1O4Nb2sTKWx9BzU= Subject key identifier: 91:0B:BD:8E:DE:1B:FA:0D:6C:FE:B0:37:EA:0D:54:85:D7:3D:C0:B6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 17CEA3BEF87EE60450132D08318993AFEB883805 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:19:06 +0000 Certificate not after: Sun 02 May 2027 01:24:06 +0000 Subordinate resources: IP: 103.156.216.0/23 IP: 2001:df4:fd80::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ce:a3:be:f8:7e:e6:04:50:13:2d:08:31:89:93:af:eb:88:38:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:19:06 2026 GMT Not After : May 2 01:24:06 2027 GMT Subject: CN=910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b0:85:f7:d2:6b:e5:b8:a3:50:c7:67:c9:01: e0:b8:de:88:42:51:e2:24:b7:df:26:19:4a:f9:e3: 4b:71:03:5d:75:47:48:87:f8:e2:54:ba:f0:26:9d: a6:59:a5:0f:c8:f6:f8:ca:05:95:6a:b8:51:2c:04: 04:ab:51:eb:5b:9c:6c:cf:b9:b9:7c:d6:6c:70:69: 52:ee:09:da:4b:2b:51:42:70:19:91:a4:93:97:d8: 24:ba:13:fc:40:b5:0c:5b:ce:7a:88:82:4d:e7:4e: 05:af:7b:ba:bc:6c:11:4d:07:64:ac:55:fc:0c:f1: b5:fc:9e:fb:ad:34:72:b2:a0:67:01:a4:35:e1:18: 7d:9f:17:52:1b:18:f8:b2:a9:4d:7b:6e:d0:ee:15: 2a:ba:72:0f:c9:2b:d4:d8:a8:61:ab:b6:cc:af:ad: 58:45:d9:d2:c3:ce:53:79:95:7f:c4:1b:a3:1d:84: cc:c7:ef:3f:a7:87:7a:92:5e:c6:40:6e:df:ee:db: 10:7f:87:6e:c9:fa:b1:91:6f:8f:10:82:df:f3:07: 54:38:b3:e5:00:ee:18:cb:1f:30:fc:67:0b:57:b4: 10:cb:f6:ef:f5:77:52:11:70:40:83:99:c2:58:3b: 6a:f1:35:45:97:35:51:a9:4b:3d:3a:59:66:b8:29: 4f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 91:0B:BD:8E:DE:1B:FA:0D:6C:FE:B0:37:EA:0D:54:85:D7:3D:C0:B6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.216.0/23 IPv6: 2001:df4:fd80::/48 Signature Algorithm: sha256WithRSAEncryption 21:22:2e:9a:36:37:ba:2e:e2:31:dd:04:1d:bb:73:3a:71:12: 0b:94:9d:86:11:cd:20:ed:d0:dc:cc:f3:7d:12:4c:86:c3:a6: 8d:76:7c:7e:d5:e3:ce:e6:73:99:e6:9f:d9:21:43:f3:92:d0: cc:c9:91:7f:28:ac:86:f4:6b:b5:ad:44:2b:67:06:36:39:fe: a5:70:92:01:76:f2:ae:63:eb:35:0f:6a:67:3a:fa:4a:a2:ec: 5d:6b:d4:d5:3a:a2:f5:13:b6:55:83:19:45:a4:f1:47:e8:d1: d3:a2:d2:3a:f0:57:00:f7:ec:db:5e:80:80:34:0b:36:f6:b9: 92:ff:67:29:0b:5f:1e:7f:98:67:0e:93:3f:e3:28:7d:a7:42: 01:31:ee:e2:d9:df:46:42:9c:b8:ce:03:66:dd:20:c1:91:4a: ef:26:d5:a1:dd:63:dd:90:87:bc:0c:76:78:39:53:e7:49:71: 5d:f3:02:0d:85:af:95:5f:20:d2:ff:14:dd:3a:82:a1:62:f5: 69:16:43:e3:5f:dc:3c:31:42:4e:00:85:b9:0b:42:c5:6f:47: 03:36:ce:a7:f5:a8:1c:e0:92:20:7f:c6:28:a1:7c:45:b7:a5: c0:ea:7c:40:d7:e2:ae:5c:6e:38:ef:5b:9c:4d:08:ab:d0:e2: 91:ca:c2:70 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUF86jvvh+5gRQEy0IMYmTr+uIOAUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTkwNloX DTI3MDUwMjAxMjQwNlowMzExMC8GA1UEAxMoOTEwQkJEOEVERTFCRkEwRDZDRkVC MDM3RUEwRDU0ODVENzNEQzBCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANSwhffSa+W4o1DHZ8kB4LjeiEJR4iS33yYZSvnjS3EDXXVHSIf44lS68Cad plmlD8j2+MoFlWq4USwEBKtR61ucbM+5uXzWbHBpUu4J2ksrUUJwGZGkk5fYJLoT /EC1DFvOeoiCTedOBa97urxsEU0HZKxV/Azxtfye+600crKgZwGkNeEYfZ8XUhsY +LKpTXtu0O4VKrpyD8kr1NioYau2zK+tWEXZ0sPOU3mVf8Qbox2EzMfvP6eHepJe xkBu3+7bEH+Hbsn6sZFvjxCC3/MHVDiz5QDuGMsfMPxnC1e0EMv27/V3UhFwQIOZ wlg7avE1RZc1UalLPTpZZrgpTzUCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJELvY7eG/oNbP6wN+oNVIXXPcC2MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzkzYTdmMzRjLTYzYjgtNDk3My04MjI2LWUxMDY5NWIyNWQ5NC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85M2E3ZjM0 Yy02M2I4LTQ5NzMtODIyNi1lMTA2OTViMjVkOTQvMC85MTBCQkQ4RURFMUJGQTBE NkNGRUIwMzdFQTBENTQ4NUQ3M0RDMEI2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ5zYMA8EAgACMAkDBwAgAQ30/YAwDQYJKoZIhvcNAQELBQADggEBACEiLpo2 N7ou4jHdBB27czpxEguUnYYRzSDt0NzM830STIbDpo12fH7V487mc5nmn9khQ/OS 0MzJkX8orIb0a7WtRCtnBjY5/qVwkgF28q5j6zUPamc6+kqi7F1r1NU6ovUTtlWD GUWk8Ufo0dOi0jrwVwD37NtegIA0Czb2uZL/ZykLXx5/mGcOkz/jKH2nQgEx7uLZ 30ZCnLjOA2bdIMGRSu8m1aHdY92Qh7wMdng5U+dJcV3zAg2Fr5VfINL/FN06gqFi 9WkWQ+Nf3DwxQk4AhbkLQsVvRwM2zqf1qBzgkiB/xiihfEW3pcDqfEDX4q5cbjjv W5xNCKvQ4pHKwnA= -----END CERTIFICATE-----Generated at Wed May 13 00:21:29 2026 by rpki-client