$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer File: 930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer (raw, json) Hash identifier: 9rLFO7ubkP1ZeeQNiqJyqUGZzCfVF8uZ7T/ZEp2pRow= Subject key identifier: 93:0E:77:88:E3:DC:48:3D:C5:F8:5C:12:B8:BB:0C:4F:41:31:2B:C1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 632BCDC93FC88B44989E6156DD49A452C4450E26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:35:41 +0000 Certificate not after: Sun 02 May 2027 01:40:41 +0000 Subordinate resources: IP: 202.169.240.0/20 IP: 2403:aa00::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:2b:cd:c9:3f:c8:8b:44:98:9e:61:56:dd:49:a4:52:c4:45:0e:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:35:41 2026 GMT Not After : May 2 01:40:41 2027 GMT Subject: CN=930E7788E3DC483DC5F85C12B8BB0C4F41312BC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:04:88:6e:bb:c0:17:ba:94:fe:eb:19:b8:47: 84:4a:be:f6:d5:3a:e4:1e:9a:93:85:4f:78:74:28: c4:8e:56:5a:b7:92:ee:f6:3f:7a:02:8c:90:91:a8: 44:09:24:5d:cd:fa:fd:f5:ce:ea:28:2c:27:95:8a: 6c:3d:20:aa:dc:ea:d1:a3:b2:d4:ed:79:56:0f:82: 89:a9:5b:ef:35:93:c5:5f:5f:8c:48:0e:52:9d:ae: 3f:e8:5c:4f:ce:07:75:0f:40:21:fe:87:9e:26:d1: b8:f1:fc:54:05:4c:4e:28:7c:3a:cd:7a:1c:5d:2c: 6c:8e:61:29:7b:a2:e0:b4:9f:82:b4:fa:84:d5:8c: 4e:57:d7:cd:2f:a2:d8:13:3f:a0:38:80:b3:8f:bc: b9:b6:cb:1d:02:57:6f:89:ea:4a:8e:04:d2:ff:57: 2e:c9:28:42:3b:72:94:9c:99:ff:55:2b:62:ff:55: 6b:fd:16:1d:49:f7:16:bc:bd:7e:70:55:c9:0c:3e: cd:43:c8:d1:63:fe:bf:43:69:9e:47:54:b8:d9:8a: b4:cc:da:eb:ce:bd:d4:22:8e:78:2f:8f:b3:89:40: f9:a2:f5:d4:f8:16:ce:31:fc:60:53:27:90:07:63: af:c8:5f:2b:7a:3c:d4:cc:fd:34:cc:bb:cd:84:a2: d6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 93:0E:77:88:E3:DC:48:3D:C5:F8:5C:12:B8:BB:0C:4F:41:31:2B:C1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.169.240.0/20 IPv6: 2403:aa00::/32 Signature Algorithm: sha256WithRSAEncryption 65:a0:47:ea:7b:55:38:5e:3c:70:49:1d:cb:fd:6d:f5:67:8d: 06:91:e1:5f:30:b5:38:9a:09:d5:8e:9a:5f:63:ef:38:c0:1f: c8:a4:ed:ed:5c:bb:1d:3e:c5:da:98:e5:45:41:6d:b8:b2:fd: 49:b2:3f:ef:fe:fc:b4:03:fc:59:05:3c:b6:2f:18:c5:03:8c: 86:0f:16:78:37:f1:45:f4:44:49:cb:e4:89:f3:7f:ca:17:8b: 8a:d9:11:2e:a2:54:6f:ce:47:33:aa:d2:3e:e1:8b:cf:ae:98: 77:e2:04:00:51:9b:32:7e:0e:18:9f:5b:7e:71:08:03:7b:31: 79:26:71:b7:31:92:4b:a3:e4:d2:25:fa:0f:0b:e8:34:1a:0c: 25:86:64:12:61:2e:83:52:a8:88:bb:68:94:ed:85:3d:bd:c4: 25:76:07:40:4f:4e:10:3c:c1:9a:11:bc:00:1d:5e:aa:2e:c3: 0e:5a:d8:06:46:b8:0d:2a:c2:79:44:55:18:4d:67:70:71:2d: 21:fd:c5:b0:14:c5:c5:8f:f3:c8:2b:d7:b1:f6:b7:ef:92:39: a1:06:42:af:17:36:db:40:a9:1c:fc:81:8a:db:43:9b:6a:05: fe:91:ff:47:f0:9b:17:4c:d9:f9:a4:6a:16:65:12:77:e0:1a: d0:a8:e8:ce -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUYyvNyT/Ii0SYnmFW3UmkUsRFDiYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzU0MVoX DTI3MDUwMjAxNDA0MVowMzExMC8GA1UEAxMoOTMwRTc3ODhFM0RDNDgzREM1Rjg1 QzEyQjhCQjBDNEY0MTMxMkJDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALwEiG67wBe6lP7rGbhHhEq+9tU65B6ak4VPeHQoxI5WWreS7vY/egKMkJGo RAkkXc36/fXO6igsJ5WKbD0gqtzq0aOy1O15Vg+Cialb7zWTxV9fjEgOUp2uP+hc T84HdQ9AIf6HnibRuPH8VAVMTih8Os16HF0sbI5hKXui4LSfgrT6hNWMTlfXzS+i 2BM/oDiAs4+8ubbLHQJXb4nqSo4E0v9XLskoQjtylJyZ/1UrYv9Va/0WHUn3Fry9 fnBVyQw+zUPI0WP+v0NpnkdUuNmKtMza68691CKOeC+Ps4lA+aL11PgWzjH8YFMn kAdjr8hfK3o81Mz9NMy7zYSi1t8CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJMOd4jj3Eg9xfhcEri7DE9BMSvBMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FjYjlhNGI5LTRhZTMtNDY3YS1iOTE5LTQxMGUxNDJiNjc5Zi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hY2I5YTRi OS00YWUzLTQ2N2EtYjkxOS00MTBlMTQyYjY3OWYvMC85MzBFNzc4OEUzREM0ODNE QzVGODVDMTJCOEJCMEM0RjQxMzEyQkMxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQEyqnwMA0EAgACMAcDBQAkA6oAMA0GCSqGSIb3DQEBCwUAA4IBAQBloEfqe1U4 XjxwSR3L/W31Z40GkeFfMLU4mgnVjppfY+84wB/IpO3tXLsdPsXamOVFQW24sv1J sj/v/vy0A/xZBTy2LxjFA4yGDxZ4N/FF9ERJy+SJ83/KF4uK2REuolRvzkczqtI+ 4YvPrph34gQAUZsyfg4Yn1t+cQgDezF5JnG3MZJLo+TSJfoPC+g0GgwlhmQSYS6D UqiIu2iU7YU9vcQldgdAT04QPMGaEbwAHV6qLsMOWtgGRrgNKsJ5RFUYTWdwcS0h /cWwFMXFj/PIK9ex9rfvkjmhBkKvFzbbQKkc/IGK20ObagX+kf9H8JsXTNn5pGoW ZRJ34BrQqOjO -----END CERTIFICATE-----Generated at Tue May 12 22:47:29 2026 by rpki-client