$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.cer File: 92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.cer (raw, json) Hash identifier: BlK5c45PfTcenX4koqJEYgnIN7owdtA8thgZmHaBtD4= Subject key identifier: 92:A9:FA:5A:9F:B8:67:F8:A8:19:F3:5E:87:7A:7F:B5:31:CC:D4:D1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0948573460424FC263822B627E61440E6B36328A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:32:44 +0000 Certificate not after: Sun 02 May 2027 01:37:44 +0000 Subordinate resources: IP: 103.134.87.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:48:57:34:60:42:4f:c2:63:82:2b:62:7e:61:44:0e:6b:36:32:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:32:44 2026 GMT Not After : May 2 01:37:44 2027 GMT Subject: CN=92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:48:5a:44:83:64:ca:10:f5:ed:c9:96:fc:80: a5:85:a5:53:c0:af:68:ee:71:d6:9d:26:92:fd:f1: 38:e2:64:9f:f3:3a:40:2b:60:f2:d1:84:51:82:6f: 37:7b:3f:35:a1:99:5b:31:38:f2:ee:ad:ef:4e:0e: a4:7b:a4:98:dd:34:bc:27:b1:cc:a2:d2:84:76:d1: 55:fb:66:f0:03:83:56:2a:61:1d:47:20:c1:6a:c3: b9:1f:13:34:5f:7d:ef:5f:be:1c:12:67:cb:87:5c: d2:a0:82:51:58:bc:4e:79:18:f7:a6:cf:27:88:80: 58:bd:c6:75:cf:b8:27:5e:fa:1f:a6:70:a2:22:59: dc:57:32:df:c6:12:18:b7:a1:3d:aa:fc:9e:b8:1f: 11:67:4e:f8:68:dc:ee:6c:24:cb:a4:86:8f:78:c1: e3:42:c6:33:26:fa:38:91:e0:34:13:d1:42:86:4f: a8:11:73:b2:4d:f8:21:07:4c:80:8e:5e:f9:47:a2: 8c:d9:07:92:61:2d:46:5f:3b:20:3f:da:a7:79:d7: 8e:df:8d:25:cf:72:14:aa:c7:6d:87:ec:2a:3e:de: 8b:a0:7b:e0:b5:1c:37:b5:34:18:a9:ea:21:81:6f: 08:97:3f:be:45:6e:7d:d1:61:ef:42:1b:60:f6:fd: 10:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 92:A9:FA:5A:9F:B8:67:F8:A8:19:F3:5E:87:7A:7F:B5:31:CC:D4:D1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.87.0/24 Signature Algorithm: sha256WithRSAEncryption 72:3a:f8:78:69:68:49:13:69:40:52:86:a3:30:4e:95:ea:69: 5d:8f:77:86:62:34:84:95:7f:39:23:02:28:84:23:22:12:85: 67:6c:b7:3a:2d:75:80:60:10:36:5d:b6:1e:10:b2:e2:12:0d: 82:fa:04:e8:ef:d0:5a:5c:38:72:a5:0a:e1:fb:67:dc:92:6d: 66:57:ce:f4:f0:5f:aa:35:43:84:9c:e4:34:91:1a:44:f4:bc: ae:98:d0:14:29:cd:45:e3:44:13:e6:e0:61:3c:bd:08:7e:0b: 36:fa:d7:40:1d:29:7f:a2:fb:6e:e3:e2:b8:95:d6:ed:62:d1: 29:44:b8:11:46:80:07:c1:f3:5c:6b:4e:23:9e:31:42:97:a6: 02:2d:1e:0e:a0:e9:93:9b:05:0d:79:af:98:13:ee:97:40:32: 54:7f:8b:08:48:90:16:31:63:f4:29:77:ca:97:31:1f:b7:d6: 58:8e:96:ca:02:4c:20:d6:ba:07:e4:6b:3d:f5:4a:eb:ec:5f: 47:09:43:95:f3:23:8d:0f:15:63:2e:be:b4:73:b9:db:83:f0: 0a:d7:bb:41:d4:0f:ad:25:47:9a:9c:85:ca:03:ab:b8:d3:27: 80:6b:d1:8c:32:eb:24:a1:73:67:13:e0:fa:30:1e:2c:91:4d: 21:4c:d1:74 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUCUhXNGBCT8JjgitifmFEDms2MoowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzI0NFoX DTI3MDUwMjAxMzc0NFowMzExMC8GA1UEAxMoOTJBOUZBNUE5RkI4NjdGOEE4MTlG MzVFODc3QTdGQjUzMUNDRDREMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANZIWkSDZMoQ9e3JlvyApYWlU8CvaO5x1p0mkv3xOOJkn/M6QCtg8tGEUYJv N3s/NaGZWzE48u6t704OpHukmN00vCexzKLShHbRVftm8AODViphHUcgwWrDuR8T NF9971++HBJny4dc0qCCUVi8TnkY96bPJ4iAWL3Gdc+4J176H6ZwoiJZ3Fcy38YS GLehPar8nrgfEWdO+Gjc7mwky6SGj3jB40LGMyb6OJHgNBPRQoZPqBFzsk34IQdM gI5e+UeijNkHkmEtRl87ID/ap3nXjt+NJc9yFKrHbYfsKj7ei6B74LUcN7U0GKnq IYFvCJc/vkVufdFh70IbYPb9EOECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJKp+lqfuGf4qBnzXod6f7UxzNTRMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E4MmRiOWQzLWQ2ZWItNGQ2Yi05YTI0LWZlZWIyMWFhOGY1My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hODJkYjlk My1kNmViLTRkNmItOWEyNC1mZWViMjFhYThmNTMvMC85MkE5RkE1QTlGQjg2N0Y4 QTgxOUYzNUU4NzdBN0ZCNTMxQ0NENEQxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ4ZXMA0GCSqGSIb3DQEBCwUAA4IBAQByOvh4aWhJE2lAUoajME6V6mldj3eG YjSElX85IwIohCMiEoVnbLc6LXWAYBA2XbYeELLiEg2C+gTo79BaXDhypQrh+2fc km1mV8708F+qNUOEnOQ0kRpE9LyumNAUKc1F40QT5uBhPL0Ifgs2+tdAHSl/ovtu 4+K4ldbtYtEpRLgRRoAHwfNca04jnjFCl6YCLR4OoOmTmwUNea+YE+6XQDJUf4sI SJAWMWP0KXfKlzEft9ZYjpbKAkwg1roH5Gs99Urr7F9HCUOV8yONDxVjLr60c7nb g/AK17tB1A+tJUeanIXKA6u40yeAa9GMMuskoXNnE+D6MB4skU0hTNF0 -----END CERTIFICATE-----Generated at Tue May 12 22:16:47 2026 by rpki-client