$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/9290697B92D08AFAAFB01253090BE0FE28871EA9.cer File: 9290697B92D08AFAAFB01253090BE0FE28871EA9.cer (raw, json) Hash identifier: +TJzKFaO8ILlqFYGWC94SWztWdBgkbkcPAUNcUVuZ4U= Subject key identifier: 92:90:69:7B:92:D0:8A:FA:AF:B0:12:53:09:0B:E0:FE:28:87:1E:A9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7BD49AA15497183AC6D2B02A619737978DB38699 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft caRepository: rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:22:36 +0000 Certificate not after: Sun 02 May 2027 00:27:36 +0000 Subordinate resources: IP: 103.164.150.0/23 IP: 2001:df7:7d80::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:d4:9a:a1:54:97:18:3a:c6:d2:b0:2a:61:97:37:97:8d:b3:86:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:22:36 2026 GMT Not After : May 2 00:27:36 2027 GMT Subject: CN=9290697B92D08AFAAFB01253090BE0FE28871EA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8d:f2:41:7a:78:f4:b7:92:63:ee:4d:1b:2a: 5c:76:38:d4:05:45:a1:d2:cd:5c:1e:60:a1:fe:c4: d5:d3:1e:82:42:36:40:02:af:d1:ec:51:15:3d:d7: 76:ff:b5:02:bd:3c:52:8d:27:f8:ef:33:b3:63:04: d2:df:0a:97:97:aa:f4:cc:02:f8:b8:da:19:66:5b: a6:3e:70:20:df:7c:26:50:cd:87:3d:f8:f6:d9:59: 48:93:52:fe:0f:0c:25:17:0c:2d:70:83:9c:ce:86: 0b:89:36:b6:9b:de:5f:aa:79:41:84:47:c9:2b:82: e9:3a:61:93:14:15:8b:23:cd:0f:00:0f:44:40:a8: c1:62:72:9f:b7:4f:4c:b2:67:ff:8e:2f:87:14:53: 40:e3:d5:b9:46:64:02:b1:89:a2:f3:f0:60:d9:8e: 5e:ce:e0:6b:a3:6d:c9:c7:a3:02:96:aa:ee:16:21: 5c:16:b2:20:d2:28:73:9e:03:70:2a:e5:0c:be:98: a1:85:0c:1f:8b:9a:43:72:db:fa:db:01:3b:7f:e1: f8:d6:d3:f9:3e:fb:1f:b8:37:d0:93:a0:89:28:4e: f1:9a:e7:8f:a0:95:af:2f:de:df:e8:23:43:fa:51: c9:a0:ae:7d:28:dd:3e:ec:b4:31:d0:9d:f1:06:f4: 85:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 92:90:69:7B:92:D0:8A:FA:AF:B0:12:53:09:0B:E0:FE:28:87:1E:A9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/9290697B92D08AFAAFB01253090BE0FE28871EA9.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.150.0/23 IPv6: 2001:df7:7d80::/48 Signature Algorithm: sha256WithRSAEncryption 1b:18:d4:49:43:93:6a:52:6f:a3:69:aa:8e:08:74:e6:f3:c5: 7e:7a:b6:6c:a1:a1:d6:90:36:90:d8:5d:07:9d:af:b2:d1:d8: 2b:2e:f5:62:68:70:f7:c8:fe:38:7e:cd:4d:3e:b0:6e:ac:c6: 9d:26:b3:76:5e:a4:cf:6c:4d:99:1c:f6:3b:3d:98:2d:48:79: de:b4:bb:e7:db:88:ff:2e:58:68:62:0a:95:c4:8b:d4:23:16: eb:0f:15:33:ac:f0:19:bb:1b:6a:99:85:dc:8b:70:ab:cd:ad: 47:3c:e8:2b:0f:a9:99:d7:82:96:3e:10:18:a0:eb:02:36:78: ca:70:7e:4a:b0:b0:47:04:89:b2:a1:db:2e:a3:69:ad:b3:75: d2:aa:cc:ac:19:f5:27:c5:9b:bd:ed:7d:ba:68:56:8b:d2:dd: 2e:d3:5f:62:46:5c:3d:c2:7e:02:93:18:7d:58:38:15:9b:d1: d3:3d:8a:aa:a2:ec:07:8d:d4:c2:c4:dc:76:61:b7:81:93:8f: 38:28:95:bc:77:bc:5c:45:c5:6d:be:07:fd:24:56:3e:75:bf: 9f:c2:c4:59:f5:7c:a2:e0:6e:97:21:8a:15:6e:cd:4e:b7:00: bd:f7:57:7e:47:85:76:85:65:90:60:a8:ad:b7:5a:ed:c6:f9: 61:0f:d8:af -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUe9SaoVSXGDrG0rAqYZc3l42zhpkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjIzNloX DTI3MDUwMjAwMjczNlowMzExMC8GA1UEAxMoOTI5MDY5N0I5MkQwOEFGQUFGQjAx MjUzMDkwQkUwRkUyODg3MUVBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMmN8kF6ePS3kmPuTRsqXHY41AVFodLNXB5gof7E1dMegkI2QAKv0exRFT3X dv+1Ar08Uo0n+O8zs2ME0t8Kl5eq9MwC+LjaGWZbpj5wIN98JlDNhz349tlZSJNS /g8MJRcMLXCDnM6GC4k2tpveX6p5QYRHySuC6TphkxQViyPNDwAPRECowWJyn7dP TLJn/44vhxRTQOPVuUZkArGJovPwYNmOXs7ga6NtycejApaq7hYhXBayINIoc54D cCrlDL6YoYUMH4uaQ3Lb+tsBO3/h+NbT+T77H7g30JOgiShO8Zrnj6CVry/e3+gj Q/pRyaCufSjdPuy0MdCd8Qb0ha8CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJKQaXuS0Ir6r7ASUwkL4P4ohx6pMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQwMWM0ZDYxLWRjZWYtNGEyMC1iZDRjLWEyODJhMzdhYTY5ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80MDFjNGQ2 MS1kY2VmLTRhMjAtYmQ0Yy1hMjgyYTM3YWE2OWUvMC85MjkwNjk3QjkyRDA4QUZB QUZCMDEyNTMwOTBCRTBGRTI4ODcxRUE5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ6SWMA8EAgACMAkDBwAgAQ33fYAwDQYJKoZIhvcNAQELBQADggEBABsY1ElD k2pSb6Npqo4IdObzxX56tmyhodaQNpDYXQedr7LR2Csu9WJocPfI/jh+zU0+sG6s xp0ms3ZepM9sTZkc9js9mC1Ied60u+fbiP8uWGhiCpXEi9QjFusPFTOs8Bm7G2qZ hdyLcKvNrUc86CsPqZnXgpY+EBig6wI2eMpwfkqwsEcEibKh2y6jaa2zddKqzKwZ 9SfFm73tfbpoVovS3S7TX2JGXD3CfgKTGH1YOBWb0dM9iqqi7AeN1MLE3HZht4GT jzgolbx3vFxFxW2+B/0kVj51v5/CxFn1fKLgbpchihVuzU63AL33V35HhXaFZZBg qK23Wu3G+WEP2K8= -----END CERTIFICATE-----Generated at Tue May 12 22:03:55 2026 by rpki-client