$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer File: 91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer (raw, json) Hash identifier: cPizOXnv0OiNWaKTS3n7VXAmXqA1WqBjIP59uVjP59s= Subject key identifier: 91:A6:9B:B2:7F:BA:EC:A8:EA:46:BC:5D:8A:42:D2:09:97:8E:1F:92 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 09B5F79A5E8D8AEC7F593FD28132B4D2140013E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:59:37 +0000 Certificate not after: Sun 02 May 2027 01:04:37 +0000 Subordinate resources: IP: 103.147.219.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:b5:f7:9a:5e:8d:8a:ec:7f:59:3f:d2:81:32:b4:d2:14:00:13:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:59:37 2026 GMT Not After : May 2 01:04:37 2027 GMT Subject: CN=91A69BB27FBAECA8EA46BC5D8A42D209978E1F92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bf:9b:76:91:2a:a2:3b:26:82:ba:94:20:d2: 1b:6c:62:1c:2e:95:4f:c4:3e:e0:41:da:32:f8:67: 32:8d:2c:1d:c3:0a:7c:20:b0:dc:74:82:d6:84:c5: 20:54:2a:10:ae:e2:e7:41:52:74:19:57:b1:cc:7b: 21:74:c8:66:9a:ff:70:cb:6c:10:67:c0:e1:d7:4b: 62:00:cf:bb:eb:3a:c4:44:f1:a6:00:64:12:fa:87: 8c:be:6b:3f:fb:a4:ce:6e:59:f0:a3:1b:9a:23:33: fc:97:91:9f:21:48:21:40:05:fd:36:57:09:37:19: 2c:cb:e3:f4:8c:22:0a:22:52:1a:10:75:f0:06:ee: 19:c5:2a:2d:96:39:51:1b:55:94:c4:a0:e7:a1:e2: a1:fe:e0:2a:e8:af:3a:fb:23:82:d4:66:54:a6:92: 46:9f:84:f2:75:7e:04:5d:0e:1a:2d:4e:8f:80:d4: e0:de:64:c3:c2:b4:29:79:e0:87:a5:03:84:73:38: 4d:44:eb:71:5d:da:21:4a:96:64:5c:1e:ce:73:78: df:aa:55:19:54:11:59:c0:54:b3:6e:be:eb:74:18: ca:45:29:0e:91:0b:a0:48:41:32:67:3a:23:6f:bb: 8a:1f:2d:86:9e:ef:4a:b0:79:cc:0d:71:dd:98:40: a9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 91:A6:9B:B2:7F:BA:EC:A8:EA:46:BC:5D:8A:42:D2:09:97:8E:1F:92 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.219.0/24 Signature Algorithm: sha256WithRSAEncryption a6:ac:de:da:86:97:50:29:cf:29:db:c1:58:89:da:a6:01:df: 7f:1c:ce:73:98:81:b3:19:41:b9:65:55:34:6e:da:3b:8a:6e: c7:66:84:64:bf:ed:9f:13:66:b4:80:c4:d4:b4:b9:58:eb:e8: e1:af:96:ab:29:5c:a5:b6:39:3f:02:2c:c2:4e:86:a4:9e:8c: 3a:d6:28:63:b7:c3:75:e4:9b:83:75:87:1f:94:ff:8a:51:19: 84:62:bb:47:ae:e0:a7:bb:9c:4a:1b:21:ad:c0:73:26:cd:8a: 35:6e:10:92:9c:fa:97:89:05:5a:e6:19:f6:c6:4d:dd:9e:64: 0e:b0:59:44:f0:57:0c:b5:07:75:5a:65:dc:7f:5b:d6:23:b2: 29:92:84:a8:5c:5c:31:02:12:7c:58:97:57:5c:7f:d1:82:f6: 84:03:83:5c:15:13:ee:17:be:9b:f7:ef:c6:ca:71:96:9e:a4: cf:b6:91:61:35:f6:52:91:b9:74:8f:38:90:95:75:57:5f:b6: 1c:bb:71:5b:ea:2c:ab:de:ae:15:ce:69:cd:5e:1e:8f:e2:31: 27:3a:fe:ef:a3:d1:96:f8:40:6e:88:da:89:85:b5:48:5a:7d: 13:22:fe:ab:86:05:f2:3b:6c:22:43:44:df:df:4e:eb:a5:07: ce:59:74:5f -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUCbX3ml6Niux/WT/SgTK00hQAE+IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTkzN1oX DTI3MDUwMjAxMDQzN1owMzExMC8GA1UEAxMoOTFBNjlCQjI3RkJBRUNBOEVBNDZC QzVEOEE0MkQyMDk5NzhFMUY5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN6/m3aRKqI7JoK6lCDSG2xiHC6VT8Q+4EHaMvhnMo0sHcMKfCCw3HSC1oTF IFQqEK7i50FSdBlXscx7IXTIZpr/cMtsEGfA4ddLYgDPu+s6xETxpgBkEvqHjL5r P/ukzm5Z8KMbmiMz/JeRnyFIIUAF/TZXCTcZLMvj9IwiCiJSGhB18AbuGcUqLZY5 URtVlMSg56Hiof7gKuivOvsjgtRmVKaSRp+E8nV+BF0OGi1Oj4DU4N5kw8K0KXng h6UDhHM4TUTrcV3aIUqWZFweznN436pVGVQRWcBUs26+63QYykUpDpELoEhBMmc6 I2+7ih8thp7vSrB5zA1x3ZhAqTsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJGmm7J/uuyo6ka8XYpC0gmXjh+SMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc3NzZmMmU1LWRmYmQtNGY3Zi04YjNkLTdiOTcwZDU0MWI4Zi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83Nzc2ZjJl NS1kZmJkLTRmN2YtOGIzZC03Yjk3MGQ1NDFiOGYvMC85MUE2OUJCMjdGQkFFQ0E4 RUE0NkJDNUQ4QTQyRDIwOTk3OEUxRjkyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ5PbMA0GCSqGSIb3DQEBCwUAA4IBAQCmrN7ahpdQKc8p28FYidqmAd9/HM5z mIGzGUG5ZVU0bto7im7HZoRkv+2fE2a0gMTUtLlY6+jhr5arKVyltjk/AizCToak now61ihjt8N15JuDdYcflP+KURmEYrtHruCnu5xKGyGtwHMmzYo1bhCSnPqXiQVa 5hn2xk3dnmQOsFlE8FcMtQd1WmXcf1vWI7IpkoSoXFwxAhJ8WJdXXH/RgvaEA4Nc FRPuF76b9+/GynGWnqTPtpFhNfZSkbl0jziQlXVXX7Ycu3Fb6iyr3q4VzmnNXh6P 4jEnOv7vo9GW+EBuiNqJhbVIWn0TIv6rhgXyO2wiQ0Tf307rpQfOWXRf -----END CERTIFICATE-----Generated at Tue May 12 22:15:48 2026 by rpki-client