$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer File: 91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer (raw, json) Hash identifier: wpWeJZUCA/xYCYLonCLAZzb1vP1v8jd2Fr2PK3bIMJE= Subject key identifier: 91:DA:5E:3E:AE:C7:82:50:02:C2:B0:B2:11:69:10:98:E8:46:E9:FC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 62FCA74DE61497246112FE02C07AF8E78AC00C83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:14:18 +0000 Certificate not after: Sun 02 May 2027 01:19:18 +0000 Subordinate resources: IP: 103.87.16.0/22 IP: 2001:df0:7500::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:fc:a7:4d:e6:14:97:24:61:12:fe:02:c0:7a:f8:e7:8a:c0:0c:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:14:18 2026 GMT Not After : May 2 01:19:18 2027 GMT Subject: CN=91DA5E3EAEC7825002C2B0B211691098E846E9FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b9:19:20:c0:fe:ad:42:35:90:54:55:89:c9: 82:d4:f5:4b:73:33:e3:aa:1a:fc:e2:86:10:c7:c2: 6d:41:90:fa:73:d4:e3:bd:5f:7b:cd:c3:9b:18:8f: 4c:51:85:b4:7a:e6:3e:44:1e:1f:bd:7e:ad:d5:fb: 67:21:72:dd:06:6f:4f:09:01:dd:0f:f6:4f:f5:e7: b6:4e:7c:22:fb:f4:d6:2e:f9:42:97:9e:18:4e:fd: 51:a5:8e:75:52:43:bf:d0:d3:ab:a1:76:74:01:f2: 12:de:70:86:de:62:0b:60:1c:c7:c3:06:b3:5e:58: 34:61:0b:5c:24:d6:0b:c8:51:a8:34:c0:2b:76:0b: af:ad:4f:6b:a5:a5:37:74:e2:b2:63:7d:d4:0b:0d: 79:be:f3:42:86:0b:9b:e7:a6:cf:ab:24:d4:9b:bd: c3:f4:5d:88:23:14:9a:1c:cb:93:4e:69:3a:63:98: 1e:93:0c:7c:08:5f:6e:ba:52:0c:b4:a3:ad:a8:1e: 8b:1d:92:cd:71:f9:17:83:a5:08:df:7f:52:61:39: 79:a3:52:47:1e:6d:5b:7b:78:62:cf:b7:f8:5f:71: 10:2a:18:6f:c4:ef:3f:4f:93:19:0f:bb:40:5e:2f: dd:3d:79:71:2a:a8:7b:c2:7a:02:e3:a7:84:c3:48: a1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 91:DA:5E:3E:AE:C7:82:50:02:C2:B0:B2:11:69:10:98:E8:46:E9:FC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.87.16.0/22 IPv6: 2001:df0:7500::/48 Signature Algorithm: sha256WithRSAEncryption 36:d8:00:93:e2:55:bd:d8:7d:fc:ce:8e:be:21:42:88:9a:34: 4f:9a:5d:ce:85:56:e0:b6:3e:4f:40:6c:3d:ed:da:7d:90:c6: fd:d2:e7:07:4d:40:12:fa:26:5a:40:11:45:b1:e2:a7:b9:78: fd:e3:17:84:3e:de:f8:97:e3:4f:89:c6:6b:d2:27:fd:9b:53: d5:51:3e:a6:26:31:1d:e1:0e:ba:b1:e1:88:8a:37:dc:4b:e6: 43:1b:cf:eb:8a:5a:88:02:b1:0a:62:f3:85:1d:6e:1f:81:75: f9:f4:bb:25:bd:0a:93:2a:35:ea:3c:47:8e:14:1b:a4:9b:d5: e3:fd:3b:25:c2:5f:20:a6:71:83:4d:ba:81:c8:c5:b1:e6:55: 2b:d4:15:ee:0c:f6:2e:b7:6e:57:7b:cd:32:6e:19:33:e7:d8: 3b:16:9f:0d:6f:e9:68:5b:d9:6c:cf:4c:7f:ae:ed:bb:11:3d: 6c:9d:d0:eb:fa:0a:77:49:22:ba:a5:33:a5:0f:56:9f:98:b4: 5c:57:35:29:e7:f5:e3:a1:b8:dd:79:43:05:56:6e:c5:64:e0: ed:43:24:59:4f:9a:40:95:76:b9:f1:26:b7:e1:06:55:f9:d9: 17:e8:e8:4a:7c:a8:23:70:f8:78:6f:89:85:78:32:e3:f8:77: 90:f6:39:88 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUYvynTeYUlyRhEv4CwHr454rADIMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTQxOFoX DTI3MDUwMjAxMTkxOFowMzExMC8GA1UEAxMoOTFEQTVFM0VBRUM3ODI1MDAyQzJC MEIyMTE2OTEwOThFODQ2RTlGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJK5GSDA/q1CNZBUVYnJgtT1S3Mz46oa/OKGEMfCbUGQ+nPU471fe83DmxiP TFGFtHrmPkQeH71+rdX7ZyFy3QZvTwkB3Q/2T/Xntk58Ivv01i75QpeeGE79UaWO dVJDv9DTq6F2dAHyEt5wht5iC2Acx8MGs15YNGELXCTWC8hRqDTAK3YLr61Pa6Wl N3TismN91AsNeb7zQoYLm+emz6sk1Ju9w/RdiCMUmhzLk05pOmOYHpMMfAhfbrpS DLSjrageix2SzXH5F4OlCN9/UmE5eaNSRx5tW3t4Ys+3+F9xECoYb8TvP0+TGQ+7 QF4v3T15cSqoe8J6AuOnhMNIoSECAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJHaXj6ux4JQAsKwshFpEJjoRun8MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzhjMjc4NzQ3LTZhYzctNGY4Ny05YjJiLTIxMzU5Mjk0ZjAzNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84YzI3ODc0 Ny02YWM3LTRmODctOWIyYi0yMTM1OTI5NGYwMzQvMC85MURBNUUzRUFFQzc4MjUw MDJDMkIwQjIxMTY5MTA5OEU4NDZFOUZDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZ1cQMA8EAgACMAkDBwAgAQ3wdQAwDQYJKoZIhvcNAQELBQADggEBADbYAJPi Vb3YffzOjr4hQoiaNE+aXc6FVuC2Pk9AbD3t2n2Qxv3S5wdNQBL6JlpAEUWx4qe5 eP3jF4Q+3viX40+JxmvSJ/2bU9VRPqYmMR3hDrqx4YiKN9xL5kMbz+uKWogCsQpi 84Udbh+Bdfn0uyW9CpMqNeo8R44UG6Sb1eP9OyXCXyCmcYNNuoHIxbHmVSvUFe4M 9i63bld7zTJuGTPn2DsWnw1v6Whb2WzPTH+u7bsRPWyd0Ov6CndJIrqlM6UPVp+Y tFxXNSnn9eOhuN15QwVWbsVk4O1DJFlPmkCVdrnxJrfhBlX52Rfo6Ep8qCNw+Hhv iYV4MuP4d5D2OYg= -----END CERTIFICATE-----Generated at Tue May 12 22:03:08 2026 by rpki-client