$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.cer File: 91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.cer (raw, json) Hash identifier: nzRQdrRrn/OnXuu7NTPm++KD74HyWCZ9V5h3pgSpm8Y= Subject key identifier: 91:68:3C:0C:0C:29:89:A9:F5:9C:3D:00:EE:C5:0C:6C:FD:30:27:9B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 47610F0C06771BEBA0E10CB5502AAFBF123E9703 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:54:36 +0000 Certificate not after: Sun 02 May 2027 00:59:36 +0000 Subordinate resources: IP: 103.176.182.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:61:0f:0c:06:77:1b:eb:a0:e1:0c:b5:50:2a:af:bf:12:3e:97:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:54:36 2026 GMT Not After : May 2 00:59:36 2027 GMT Subject: CN=91683C0C0C2989A9F59C3D00EEC50C6CFD30279B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:65:0b:23:5b:a2:b1:49:62:8e:18:0e:14:6d: d1:de:46:75:37:b1:cc:9b:3e:55:b5:92:56:2e:3c: 87:10:9c:22:47:d4:80:dc:b0:71:57:85:87:df:1c: b4:42:72:ad:7d:ad:7b:3c:0e:79:ea:c5:73:2f:ce: 50:c4:c4:94:ce:2d:bf:fa:a1:74:8d:9a:9b:55:6a: b0:3c:f3:73:0e:3f:b5:1f:27:81:6d:11:4f:48:cf: 6b:f5:a9:aa:af:d3:b8:1c:14:75:62:21:22:84:e5: 36:db:a4:bb:f7:54:ba:a8:69:ac:95:aa:0e:00:71: 70:bd:81:1f:bd:5a:9f:a1:33:80:c5:a8:a0:c1:53: 8b:2e:37:f8:80:50:da:3f:f5:2e:17:d1:55:c9:98: 13:ac:fc:61:5e:8f:fc:f8:80:b8:9a:24:2a:cf:11: 80:88:f2:8a:4e:c6:08:0d:0b:91:61:8c:9f:14:b1: 7b:a4:11:40:2e:37:aa:7d:5c:11:a6:ed:df:a6:2c: b0:77:17:35:e8:87:77:03:56:e9:be:74:bf:0a:5c: 55:cf:79:93:4a:d5:8f:f2:47:ec:5b:5a:bf:03:31: 37:3c:81:a6:e2:e4:3a:3c:51:38:f0:4d:63:8e:28: 9c:30:72:3c:36:b9:f5:b4:4e:82:04:d3:c5:42:7f: 1f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 91:68:3C:0C:0C:29:89:A9:F5:9C:3D:00:EE:C5:0C:6C:FD:30:27:9B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.176.182.0/23 Signature Algorithm: sha256WithRSAEncryption 41:ea:e0:20:f8:b0:72:cd:4e:37:47:d9:d5:d2:8a:94:c2:e8: d7:96:d6:47:c0:a3:33:1e:48:a1:f7:0a:28:a5:ae:5e:1e:41: 93:94:c7:2b:e8:2e:11:99:0e:e4:b8:5a:0a:49:ed:d7:e5:4e: da:91:a8:f5:c3:29:64:69:ad:f8:e1:b0:f9:21:35:3b:19:d3: ef:bc:e6:ec:b2:f7:6c:b7:2a:a4:15:80:7d:f6:22:dd:d9:c8: d6:31:00:6c:14:9d:b0:30:3f:15:7f:f3:bc:a1:05:3b:14:67: ff:77:33:0f:9c:da:b3:45:94:2b:02:9f:92:8b:b0:bb:d0:bb: dc:e0:f7:29:97:a5:f0:d2:d5:03:85:c6:e1:44:df:8a:83:9e: a3:47:c8:69:4e:a3:1b:9a:c9:a5:be:0d:f9:81:f6:5b:6d:0f: b8:70:1b:5a:21:fc:6d:51:94:78:ba:89:45:45:c0:22:d6:57: d2:29:73:0a:c2:b0:52:94:14:27:7c:c9:d7:59:cb:db:80:5d: 16:ff:09:4b:5a:dd:fc:48:f4:2b:8f:08:95:fe:27:e0:86:66: 82:36:f5:5b:61:5b:e0:c3:3b:22:31:ce:1d:a3:ce:85:71:87: 8e:2d:73:1a:e9:98:a6:97:fa:a7:ff:bc:ae:a2:3a:1e:f1:e7: 1d:ce:a3:a1 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUR2EPDAZ3G+ug4Qy1UCqvvxI+lwMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTQzNloX DTI3MDUwMjAwNTkzNlowMzExMC8GA1UEAxMoOTE2ODNDMEMwQzI5ODlBOUY1OUMz RDAwRUVDNTBDNkNGRDMwMjc5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM9lCyNborFJYo4YDhRt0d5GdTexzJs+VbWSVi48hxCcIkfUgNywcVeFh98c tEJyrX2tezwOeerFcy/OUMTElM4tv/qhdI2am1VqsDzzcw4/tR8ngW0RT0jPa/Wp qq/TuBwUdWIhIoTlNtuku/dUuqhprJWqDgBxcL2BH71an6EzgMWooMFTiy43+IBQ 2j/1LhfRVcmYE6z8YV6P/PiAuJokKs8RgIjyik7GCA0LkWGMnxSxe6QRQC43qn1c Eabt36YssHcXNeiHdwNW6b50vwpcVc95k0rVj/JH7FtavwMxNzyBpuLkOjxROPBN Y44onDByPDa59bROggTTxUJ/H2MCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJFoPAwMKYmp9Zw9AO7FDGz9MCebMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzcwZTZmZDgxLWI4NzctNGY3Yy1hYmM2LTA4MmZjYmVhMTg5Zi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83MGU2ZmQ4 MS1iODc3LTRmN2MtYWJjNi0wODJmY2JlYTE4OWYvMC85MTY4M0MwQzBDMjk4OUE5 RjU5QzNEMDBFRUM1MEM2Q0ZEMzAyNzlCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7C2MA0GCSqGSIb3DQEBCwUAA4IBAQBB6uAg+LByzU43R9nV0oqUwujXltZH wKMzHkih9woopa5eHkGTlMcr6C4RmQ7kuFoKSe3X5U7akaj1wylkaa344bD5ITU7 GdPvvObssvdstyqkFYB99iLd2cjWMQBsFJ2wMD8Vf/O8oQU7FGf/dzMPnNqzRZQr Ap+Si7C70Lvc4Pcpl6Xw0tUDhcbhRN+Kg56jR8hpTqMbmsmlvg35gfZbbQ+4cBta IfxtUZR4uolFRcAi1lfSKXMKwrBSlBQnfMnXWcvbgF0W/wlLWt38SPQrjwiV/ifg hmaCNvVbYVvgwzsiMc4do86FcYeOLXMa6Ziml/qn/7yuojoe8ecdzqOh -----END CERTIFICATE-----Generated at Tue May 12 22:02:43 2026 by rpki-client