$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/934C6F41C654B1993222EAFE6F2C8AEB91C25C43.cer File: 934C6F41C654B1993222EAFE6F2C8AEB91C25C43.cer (raw, json) Hash identifier: 2WowacmNo/5uAG67W8Ua+VE8QA0DpOQhoCJk46T0Tsg= Subject key identifier: 93:4C:6F:41:C6:54:B1:99:32:22:EA:FE:6F:2C:8A:EB:91:C2:5C:43 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 38AD21885B947FE51642E6D45F9E2BCDB6FDFA53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/934C6F41C654B1993222EAFE6F2C8AEB91C25C43.mft caRepository: rsync://rpki-rsync.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:44:23 +0000 Certificate not after: Sun 02 May 2027 02:49:23 +0000 Subordinate resources: IP: 103.186.26.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ad:21:88:5b:94:7f:e5:16:42:e6:d4:5f:9e:2b:cd:b6:fd:fa:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:44:23 2026 GMT Not After : May 2 02:49:23 2027 GMT Subject: CN=934C6F41C654B1993222EAFE6F2C8AEB91C25C43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b3:9d:fc:2c:17:74:a6:80:cb:90:fc:fe:18: 2d:ad:73:95:0c:af:6d:25:a9:43:40:79:65:fb:4b: 30:21:69:79:dc:80:31:24:be:8f:21:c6:81:52:5d: ef:5b:6e:54:5b:03:1b:de:60:d9:d3:f8:6e:b1:0d: eb:70:7c:1e:f3:4a:a4:f4:4c:60:40:7c:84:df:95: 5c:ca:d5:f2:1a:de:e7:8e:cd:4f:3d:fe:58:de:a4: 7c:72:6b:a8:a8:5d:da:bc:22:22:f9:1d:76:bd:b6: e4:18:87:bc:c9:9c:4d:1f:be:88:ba:6a:33:f1:0c: 31:01:f7:a0:2b:6e:bb:eb:72:67:0d:b3:84:16:20: 2b:e9:0e:40:54:41:f5:f0:96:dc:80:fa:71:2b:e6: 4b:91:77:96:7a:3b:35:19:75:2a:73:4b:2a:23:84: de:fd:86:3a:95:82:c1:c6:c9:9c:3b:b6:83:1b:78: 8b:1b:93:4e:a7:27:85:1e:d0:4c:a3:62:e0:b9:3f: b2:b0:91:65:02:2d:8c:ea:a8:47:82:e3:60:41:b1: 96:b7:f0:fc:1c:d4:61:4b:e6:12:c3:5b:56:de:3c: ce:4c:82:a1:92:d1:97:77:72:18:87:cc:0f:95:9f: 8b:0b:57:e0:82:9b:65:1c:93:33:87:9c:ab:dd:8c: 67:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 93:4C:6F:41:C6:54:B1:99:32:22:EA:FE:6F:2C:8A:EB:91:C2:5C:43 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/934C6F41C654B1993222EAFE6F2C8AEB91C25C43.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.26.0/23 Signature Algorithm: sha256WithRSAEncryption a5:d4:f5:c3:6a:01:05:fc:23:4c:af:b5:80:9b:74:79:d0:49: 5d:2e:79:8d:18:3e:29:d2:3c:f4:f4:6c:17:6a:c8:bf:ae:ca: a0:b6:28:11:5c:cb:5c:8b:0c:e0:aa:23:dc:8c:f3:86:d0:82: bc:7c:60:81:17:90:1a:9b:0b:4c:da:84:e7:83:99:61:c4:b6: ee:b9:56:1a:18:4f:b3:5d:69:a8:d8:16:06:9b:f2:e6:eb:ee: ae:ce:54:de:3d:2c:11:d0:44:cf:22:0d:a7:bc:34:5a:b5:b9: d3:36:4a:94:50:d7:e8:c9:8b:85:de:0a:3e:63:7f:fb:cb:a2: 03:77:f8:d7:5e:a8:fa:65:2d:a9:02:52:3a:d6:90:96:0c:ec: 7e:00:6f:11:6e:c7:76:d0:9d:1a:8d:ba:53:52:54:7d:36:d9: dc:83:68:36:59:41:2a:1e:d5:8f:33:10:b9:e9:98:8a:bd:4d: 71:db:46:bc:b8:02:b3:c7:94:a9:a4:8a:c9:31:1a:f3:01:c0: 39:42:5b:6a:f2:54:08:ac:c9:26:26:ff:7c:65:3f:a8:c2:ca: 5f:e9:98:ed:34:96:0d:f0:3f:de:84:61:32:72:e3:6f:54:d3: 50:14:83:80:15:40:01:ee:fe:82:0a:1b:45:70:0e:b2:df:bd: a2:4e:bc:9f -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUOK0hiFuUf+UWQubUX54rzbb9+lMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyNDQyM1oX DTI3MDUwMjAyNDkyM1owMzExMC8GA1UEAxMoOTM0QzZGNDFDNjU0QjE5OTMyMjJF QUZFNkYyQzhBRUI5MUMyNUM0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6znfwsF3SmgMuQ/P4YLa1zlQyvbSWpQ0B5ZftLMCFpedyAMSS+jyHGgVJd 71tuVFsDG95g2dP4brEN63B8HvNKpPRMYEB8hN+VXMrV8hre547NTz3+WN6kfHJr qKhd2rwiIvkddr225BiHvMmcTR++iLpqM/EMMQH3oCtuu+tyZw2zhBYgK+kOQFRB 9fCW3ID6cSvmS5F3lno7NRl1KnNLKiOE3v2GOpWCwcbJnDu2gxt4ixuTTqcnhR7Q TKNi4Lk/srCRZQItjOqoR4LjYEGxlrfw/BzUYUvmEsNbVt48zkyCoZLRl3dyGIfM D5WfiwtX4IKbZRyTM4ecq92MZ58CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJNMb0HGVLGZMiLq/m8siuuRwlxDMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ZjMWU4NjVmLWQ1YTEtNGFmNy1hNzE5LTBjMjZlNzRmY2Q2MS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mYzFlODY1 Zi1kNWExLTRhZjctYTcxOS0wYzI2ZTc0ZmNkNjEvMC85MzRDNkY0MUM2NTRCMTk5 MzIyMkVBRkU2RjJDOEFFQjkxQzI1QzQzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7oaMA0GCSqGSIb3DQEBCwUAA4IBAQCl1PXDagEF/CNMr7WAm3R50EldLnmN GD4p0jz09GwXasi/rsqgtigRXMtciwzgqiPcjPOG0IK8fGCBF5AamwtM2oTng5lh xLbuuVYaGE+zXWmo2BYGm/Lm6+6uzlTePSwR0ETPIg2nvDRatbnTNkqUUNfoyYuF 3go+Y3/7y6IDd/jXXqj6ZS2pAlI61pCWDOx+AG8Rbsd20J0ajbpTUlR9Ntncg2g2 WUEqHtWPMxC56ZiKvU1x20a8uAKzx5SppIrJMRrzAcA5Qltq8lQIrMkmJv98ZT+o wspf6ZjtNJYN8D/ehGEycuNvVNNQFIOAFUAB7v6CChtFcA6y372iTryf -----END CERTIFICATE-----Generated at Tue May 12 22:02:34 2026 by rpki-client