$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.cer File: 92CAA744707BC6EC7B059C523AD55BFB0DD800DF.cer (raw, json) Hash identifier: apvw/Q58fm2kMjuiWSE6IR2zICRE48+os92cuKZ8JWY= Subject key identifier: 92:CA:A7:44:70:7B:C6:EC:7B:05:9C:52:3A:D5:5B:FB:0D:D8:00:DF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6B1B2C22ADF52C7846409294574A470C3FB9F9F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:48:26 +0000 Certificate not after: Sat 01 May 2027 23:53:26 +0000 Subordinate resources: IP: 103.184.180.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:1b:2c:22:ad:f5:2c:78:46:40:92:94:57:4a:47:0c:3f:b9:f9:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:48:26 2026 GMT Not After : May 1 23:53:26 2027 GMT Subject: CN=92CAA744707BC6EC7B059C523AD55BFB0DD800DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f3:10:a9:60:4d:64:2e:0e:58:62:1c:8d:f8: bf:9b:31:07:e7:9d:b7:b8:36:26:43:ab:aa:69:79: 4a:c9:4c:ab:75:61:c6:c3:39:00:81:96:ae:2d:ad: e0:85:97:81:18:da:9f:2d:43:b8:d6:0d:80:b5:61: 8f:bd:e6:81:19:f5:00:a6:b7:da:b3:2a:81:5b:c0: e6:6f:a9:16:7c:e1:72:8d:67:80:a6:16:07:05:13: f0:e4:3a:2b:3b:da:ca:ea:0d:4d:eb:07:0f:65:74: ef:a9:a0:5f:0b:7d:bc:a7:ef:0b:88:1e:e6:2a:c6: 1c:5d:47:ad:f9:fb:91:af:e0:8c:25:cb:52:3c:96: 62:99:40:38:ed:50:6a:3f:6c:1a:89:79:fe:a4:ef: c7:5b:09:a8:44:bc:28:d5:b1:8f:f3:af:42:51:d7: b8:53:d1:66:4a:4b:4f:8e:ee:14:8b:a6:2d:8e:5f: 9e:0a:bd:1a:e8:76:0d:c4:63:c3:12:66:95:79:03: 0d:eb:e3:d7:49:08:f4:be:c1:40:94:0c:78:03:63: e9:1e:83:fe:50:ee:c9:26:1b:4b:17:0f:4c:a3:1f: 66:c2:44:5c:a0:74:e1:47:44:b0:8e:88:6f:e1:43: ab:0e:b4:0e:de:63:8e:5f:14:92:a8:1c:ac:52:b5: 41:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 92:CA:A7:44:70:7B:C6:EC:7B:05:9C:52:3A:D5:5B:FB:0D:D8:00:DF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.180.0/23 Signature Algorithm: sha256WithRSAEncryption 81:3a:5d:08:da:2e:10:86:64:d4:39:8a:ef:52:aa:f7:e9:a8: b5:35:99:fe:57:98:70:02:37:f5:4b:5f:c5:0d:12:18:01:80: a0:42:0c:7e:97:2b:69:62:b1:2b:0e:7e:61:05:fb:49:62:ed: 6e:03:23:5b:dd:49:e7:40:d1:78:42:92:cc:f9:ab:a0:a1:f0: b8:41:4b:23:50:41:06:21:bf:f0:9e:83:e9:34:f4:cc:95:44: 8c:08:69:0a:c4:6f:1a:41:64:24:e5:3a:66:af:09:1f:1a:f7: 40:29:ea:2a:ad:73:51:a3:57:79:1d:31:b3:10:32:cd:75:b9: c5:0e:6d:49:cc:c6:b1:68:b1:a3:b2:6c:7a:53:af:6e:83:dd: 6c:48:d7:18:c6:f5:cf:a3:41:62:a7:0e:02:de:12:a2:44:cd: 60:f8:ad:54:a0:e6:5c:23:a2:3a:95:28:0c:c5:2f:18:60:fe: 40:3b:72:e2:56:24:3c:0f:e7:6b:78:22:f6:45:04:6d:5c:ec: 98:fb:98:bc:70:e2:e9:ae:e6:be:1c:fd:ca:5d:88:c0:09:a2: 5b:74:80:aa:16:6a:4a:8c:70:69:40:b1:d5:ea:88:5d:bb:68: a0:9e:f3:0d:ba:6d:05:ad:99:4a:0d:df:93:2c:18:3b:75:e4: 8d:16:68:d8 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUaxssIq31LHhGQJKUV0pHDD+5+fYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDgyNloX DTI3MDUwMTIzNTMyNlowMzExMC8GA1UEAxMoOTJDQUE3NDQ3MDdCQzZFQzdCMDU5 QzUyM0FENTVCRkIwREQ4MDBERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM7zEKlgTWQuDlhiHI34v5sxB+edt7g2JkOrqml5SslMq3VhxsM5AIGWri2t 4IWXgRjany1DuNYNgLVhj73mgRn1AKa32rMqgVvA5m+pFnzhco1ngKYWBwUT8OQ6 KzvayuoNTesHD2V076mgXwt9vKfvC4ge5irGHF1Hrfn7ka/gjCXLUjyWYplAOO1Q aj9sGol5/qTvx1sJqES8KNWxj/OvQlHXuFPRZkpLT47uFIumLY5fngq9Guh2DcRj wxJmlXkDDevj10kI9L7BQJQMeANj6R6D/lDuySYbSxcPTKMfZsJEXKB04UdEsI6I b+FDqw60Dt5jjl8UkqgcrFK1QW8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJLKp0Rwe8bsewWcUjrVW/sN2ADfMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzBlNTc5OTFhLTE1NmQtNGI1NS05MGNiLTc5Yjg3NmNmNmE0YS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wZTU3OTkx YS0xNTZkLTRiNTUtOTBjYi03OWI4NzZjZjZhNGEvMC85MkNBQTc0NDcwN0JDNkVD N0IwNTlDNTIzQUQ1NUJGQjBERDgwMERGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7i0MA0GCSqGSIb3DQEBCwUAA4IBAQCBOl0I2i4QhmTUOYrvUqr36ai1NZn+ V5hwAjf1S1/FDRIYAYCgQgx+lytpYrErDn5hBftJYu1uAyNb3UnnQNF4QpLM+aug ofC4QUsjUEEGIb/wnoPpNPTMlUSMCGkKxG8aQWQk5TpmrwkfGvdAKeoqrXNRo1d5 HTGzEDLNdbnFDm1JzMaxaLGjsmx6U69ug91sSNcYxvXPo0Fipw4C3hKiRM1g+K1U oOZcI6I6lSgMxS8YYP5AO3LiViQ8D+dreCL2RQRtXOyY+5i8cOLprua+HP3KXYjA CaJbdICqFmpKjHBpQLHV6ohdu2ignvMNum0FrZlKDd+TLBg7deSNFmjY -----END CERTIFICATE-----Generated at Tue May 12 22:10:08 2026 by rpki-client