$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.cer File: 913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.cer (raw, json) Hash identifier: NJiCP7zGXXA7q8wKmxafGUv8r4g7KeBCMQIMV7LO348= Subject key identifier: 91:34:09:B0:BC:7B:7B:D8:27:0B:1D:F2:B5:C8:D5:BA:3C:A5:5D:41 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 29416814599AFC6FDC89D96510CE8A14436EDEC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.mft caRepository: rsync://rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:11:31 +0000 Certificate not after: Sun 02 May 2027 01:16:31 +0000 Subordinate resources: IP: 103.186.10.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:41:68:14:59:9a:fc:6f:dc:89:d9:65:10:ce:8a:14:43:6e:de:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:11:31 2026 GMT Not After : May 2 01:16:31 2027 GMT Subject: CN=913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ec:cf:c2:b7:42:a1:b8:d5:08:e6:43:fc:c0: 14:da:3f:ae:24:2a:6b:27:4a:17:f5:85:d3:fa:c3: 4d:e3:f8:05:41:c4:44:8d:e4:c2:78:fb:34:38:a5: 98:1f:09:ca:fd:d3:00:b5:f8:e4:2c:45:e3:df:89: d1:3f:3d:c5:f8:b0:4d:18:57:32:e6:05:2c:55:f6: 3f:92:af:54:b4:54:46:f2:5d:9c:40:ef:c7:e8:77: d3:19:22:3e:e9:ee:c7:57:c4:14:c2:1f:93:1e:db: 3e:9e:94:de:19:74:a0:2d:6f:ee:79:21:3f:22:75: 6f:f3:66:9a:84:69:84:2f:b6:be:77:8c:65:b2:44: 1a:50:57:45:fc:a6:3c:bb:ad:05:7f:4e:3b:9b:4a: d8:f8:8b:bf:be:c5:78:de:51:d8:97:87:dd:9e:76: ce:8b:91:de:f7:82:84:60:bd:bc:97:e0:ef:f6:9e: 10:dc:52:ce:cb:32:2a:3a:41:88:6a:52:ca:d4:b5: 2a:80:d7:26:55:ac:8a:cf:0f:65:80:29:ee:49:75: 02:bb:6d:47:e4:13:d9:26:b1:1e:c3:cf:fe:47:5e: 6a:c5:90:7a:56:92:1c:3f:7a:3f:64:8b:63:c1:2c: aa:69:f6:a6:45:ea:2a:dc:bb:19:9b:fe:db:c2:99: 48:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 91:34:09:B0:BC:7B:7B:D8:27:0B:1D:F2:B5:C8:D5:BA:3C:A5:5D:41 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/913409B0BC7B7BD8270B1DF2B5C8D5BA3CA55D41.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.10.0/23 Signature Algorithm: sha256WithRSAEncryption 91:2b:fb:14:a8:93:b0:01:6b:30:30:71:3c:bc:a4:03:a7:05: cc:eb:f6:42:a7:cc:20:ef:40:36:f8:f6:9c:6c:3a:6a:16:0f: 26:5d:67:b9:9c:dc:f8:33:65:bb:28:7c:fe:44:0f:9d:15:91: 93:71:1d:f3:4c:85:07:9a:6c:9d:6c:ca:9f:94:f6:6d:c2:d4: d1:cc:27:ae:10:4e:20:c5:6b:b9:d4:11:f4:72:11:d4:5b:7d: 76:c5:09:da:77:31:1a:6b:d9:64:7e:d3:71:7d:19:77:03:3f: 48:7c:be:2f:36:e0:c5:57:61:82:89:04:64:98:fd:cf:46:76: 3e:5c:57:bf:ca:15:db:de:13:c7:70:93:43:57:e4:84:35:cd: 66:48:75:f5:e6:c0:0d:41:60:5e:36:1e:08:fa:74:6c:c8:ac: 5f:cf:9e:12:a9:56:32:d4:11:96:d3:d2:d7:ce:6b:57:f9:6b: a2:28:77:c8:2e:84:5c:80:81:bb:00:fd:b4:56:52:6d:c9:2c: b4:02:0b:5d:f5:57:38:ec:b9:48:2d:73:99:f2:68:d1:d6:95: 36:45:23:9b:38:5b:cc:c7:05:95:e0:9f:bc:36:70:70:83:89: bc:86:ed:8e:8d:48:b8:52:d4:8c:95:6d:c9:fe:fa:97:d1:b7: a8:7c:2d:dd -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUKUFoFFma/G/cidllEM6KFENu3scwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTEzMVoX DTI3MDUwMjAxMTYzMVowMzExMC8GA1UEAxMoOTEzNDA5QjBCQzdCN0JEODI3MEIx REYyQjVDOEQ1QkEzQ0E1NUQ0MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJPsz8K3QqG41QjmQ/zAFNo/riQqaydKF/WF0/rDTeP4BUHERI3kwnj7NDil mB8Jyv3TALX45CxF49+J0T89xfiwTRhXMuYFLFX2P5KvVLRURvJdnEDvx+h30xki Punux1fEFMIfkx7bPp6U3hl0oC1v7nkhPyJ1b/NmmoRphC+2vneMZbJEGlBXRfym PLutBX9OO5tK2PiLv77FeN5R2JeH3Z52zouR3veChGC9vJfg7/aeENxSzssyKjpB iGpSytS1KoDXJlWsis8PZYAp7kl1ArttR+QT2SaxHsPP/kdeasWQelaSHD96P2SL Y8Esqmn2pkXqKty7GZv+28KZSL0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJE0CbC8e3vYJwsd8rXI1bo8pV1BMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg4NmRmNzkxLTAwNzktNDVmNi1hYTkzLTRjM2EyNDMwNWQ4NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84ODZkZjc5 MS0wMDc5LTQ1ZjYtYWE5My00YzNhMjQzMDVkODUvMC85MTM0MDlCMEJDN0I3QkQ4 MjcwQjFERjJCNUM4RDVCQTNDQTU1RDQxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7oKMA0GCSqGSIb3DQEBCwUAA4IBAQCRK/sUqJOwAWswMHE8vKQDpwXM6/ZC p8wg70A2+PacbDpqFg8mXWe5nNz4M2W7KHz+RA+dFZGTcR3zTIUHmmydbMqflPZt wtTRzCeuEE4gxWu51BH0chHUW312xQnadzEaa9lkftNxfRl3Az9IfL4vNuDFV2GC iQRkmP3PRnY+XFe/yhXb3hPHcJNDV+SENc1mSHX15sANQWBeNh4I+nRsyKxfz54S qVYy1BGW09LXzmtX+WuiKHfILoRcgIG7AP20VlJtySy0Agtd9Vc47LlILXOZ8mjR 1pU2RSObOFvMxwWV4J+8NnBwg4m8hu2OjUi4UtSMlW3J/vqX0beofC3d -----END CERTIFICATE-----Generated at Tue May 12 22:02:56 2026 by rpki-client