$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer File: 92851265D2097C47E507D8C51B1077D0979AF464.cer (raw, json) Hash identifier: 4xHoooS9m54d0OcwHeNHxAItEXJtRpbpZWEYTx85Psk= Subject key identifier: 92:85:12:65:D2:09:7C:47:E5:07:D8:C5:1B:10:77:D0:97:9A:F4:64 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4219BAC58360454B03FD11048D70FF4B41A4AD80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:36:10 +0000 Certificate not after: Sun 02 May 2027 01:41:10 +0000 Subordinate resources: IP: 61.14.248.0/22 IP: 103.39.48.0/22 IP: 2403:fc80::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:19:ba:c5:83:60:45:4b:03:fd:11:04:8d:70:ff:4b:41:a4:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:36:10 2026 GMT Not After : May 2 01:41:10 2027 GMT Subject: CN=92851265D2097C47E507D8C51B1077D0979AF464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:21:8a:9b:61:eb:f2:f9:77:eb:53:97:3f:19: ea:3f:5d:c4:61:1e:b8:48:9d:6e:5e:4e:b7:19:9d: 6b:3b:c3:e6:2a:bc:a9:ab:6e:57:2d:90:39:ca:7a: a2:7f:28:9d:f1:e9:41:b5:86:43:fe:48:70:d0:63: f9:f6:0c:3e:47:c2:39:00:89:26:e9:85:b6:98:53: 80:4c:1a:20:17:26:71:6d:f0:0a:5c:04:36:9f:b8: 8a:1f:c1:7d:90:26:c7:3f:07:26:45:90:81:f3:28: da:ac:e9:f3:28:6a:d1:0c:cf:97:c0:82:4e:82:69: 71:ee:e4:0e:cb:25:44:05:81:cd:5f:d4:65:8c:e7: 11:4f:2b:29:73:1e:81:5c:68:fb:90:aa:fb:d5:d4: a3:ea:81:f6:fd:8f:10:38:d5:cc:9d:e0:0d:2f:eb: 01:66:bf:4c:ae:9e:d7:81:56:2a:3a:74:0d:92:57: e2:d9:2b:21:a8:96:45:1d:1a:06:c1:05:b5:c8:09: f0:01:8f:87:38:74:dd:72:af:0f:47:59:15:6b:13: 50:76:9e:0b:14:9f:45:dd:a7:d2:d6:32:eb:96:3e: 2b:1d:2a:9f:c1:54:cd:77:96:10:2e:8d:df:11:2a: 4f:68:a0:3a:86:81:02:b1:23:64:2b:3e:59:83:75: 0f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 92:85:12:65:D2:09:7C:47:E5:07:D8:C5:1B:10:77:D0:97:9A:F4:64 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.14.248.0/22 103.39.48.0/22 IPv6: 2403:fc80::/32 Signature Algorithm: sha256WithRSAEncryption a3:97:7c:57:a9:ab:09:3d:ca:32:2b:2f:9d:ac:c3:eb:48:ad: ff:d7:d3:e6:2f:98:14:db:b4:09:da:5c:ed:4e:25:16:15:a0: a5:e5:e2:b0:cc:33:b2:fc:7f:7b:1d:bd:ad:c9:ab:a9:b4:cb: 70:a9:25:e7:42:40:87:fc:4c:4a:77:3a:78:8e:20:1a:27:56: c0:07:61:2d:e4:ae:f8:cb:97:dc:67:08:2d:c0:e1:bd:b2:78: b7:bf:b5:89:2c:e7:a4:d5:28:d5:21:76:bf:82:16:46:c1:91: 31:ef:b6:bc:b3:1e:e3:cc:d5:ec:08:85:1a:44:cf:e4:71:ca: 2d:5e:86:89:8d:b2:51:89:45:d2:e4:58:59:4a:6c:bb:06:32: a7:21:27:e1:24:12:b8:3b:30:53:20:4a:63:b2:fb:63:89:a5: ee:c6:13:f7:85:c0:4f:95:c1:3a:30:88:1e:77:d6:49:17:53: 18:8f:28:f7:5f:08:7a:6f:b0:6a:1f:3c:a0:96:4c:a7:49:8c: ca:a5:0d:7b:73:22:bd:a7:48:c5:40:e0:7c:7b:6d:92:d3:df: a2:fe:b8:39:af:e0:91:e6:fe:f6:b0:10:44:23:5d:4d:38:82: f2:e4:a6:40:0a:99:21:e6:4a:16:63:f8:58:8e:46:68:5b:72: b6:4a:2b:47 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUQhm6xYNgRUsD/REEjXD/S0GkrYAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzYxMFoX DTI3MDUwMjAxNDExMFowMzExMC8GA1UEAxMoOTI4NTEyNjVEMjA5N0M0N0U1MDdE OEM1MUIxMDc3RDA5NzlBRjQ2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIohipth6/L5d+tTlz8Z6j9dxGEeuEidbl5OtxmdazvD5iq8qatuVy2QOcp6 on8onfHpQbWGQ/5IcNBj+fYMPkfCOQCJJumFtphTgEwaIBcmcW3wClwENp+4ih/B fZAmxz8HJkWQgfMo2qzp8yhq0QzPl8CCToJpce7kDsslRAWBzV/UZYznEU8rKXMe gVxo+5Cq+9XUo+qB9v2PEDjVzJ3gDS/rAWa/TK6e14FWKjp0DZJX4tkrIaiWRR0a BsEFtcgJ8AGPhzh03XKvD0dZFWsTUHaeCxSfRd2n0tYy65Y+Kx0qn8FUzXeWEC6N 3xEqT2igOoaBArEjZCs+WYN1D4ECAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJKFEmXSCXxH5QfYxRsQd9CXmvRkMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FkOTE4YjE1LWU2M2UtNGIzOC1hMDVjLTY1MGZiNDlmMDU5NC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hZDkxOGIx NS1lNjNlLTRiMzgtYTA1Yy02NTBmYjQ5ZjA1OTQvMC85Mjg1MTI2NUQyMDk3QzQ3 RTUwN0Q4QzUxQjEwNzdEMDk3OUFGNDY0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQCPQ74AwQCZycwMA0EAgACMAcDBQAkA/yAMA0GCSqGSIb3DQEBCwUAA4IBAQCj l3xXqasJPcoyKy+drMPrSK3/19PmL5gU27QJ2lztTiUWFaCl5eKwzDOy/H97Hb2t yauptMtwqSXnQkCH/ExKdzp4jiAaJ1bAB2Et5K74y5fcZwgtwOG9sni3v7WJLOek 1SjVIXa/ghZGwZEx77a8sx7jzNXsCIUaRM/kccotXoaJjbJRiUXS5FhZSmy7BjKn ISfhJBK4OzBTIEpjsvtjiaXuxhP3hcBPlcE6MIged9ZJF1MYjyj3Xwh6b7BqHzyg lkynSYzKpQ17cyK9p0jFQOB8e22S09+i/rg5r+CR5v72sBBEI11NOILy5KZACpkh 5koWY/hYjkZoW3K2SitH -----END CERTIFICATE-----Generated at Tue May 12 22:02:50 2026 by rpki-client