$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer File: 935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer (raw, json) Hash identifier: W1AvN3HVednysWagR/bWP23k06UKudKk8uVa+Gnr2yY= Subject key identifier: 93:5F:90:BC:D1:5D:D0:7F:7A:AF:DC:21:AE:37:2B:1F:CF:50:71:7C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1DCDF3043A06DDADA5B9C245322BD9253A9F0632 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:35:31 +0000 Certificate not after: Sun 02 May 2027 02:40:31 +0000 Subordinate resources: IP: 103.191.70.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:cd:f3:04:3a:06:dd:ad:a5:b9:c2:45:32:2b:d9:25:3a:9f:06:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:35:31 2026 GMT Not After : May 2 02:40:31 2027 GMT Subject: CN=935F90BCD15DD07F7AAFDC21AE372B1FCF50717C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:99:1c:75:62:8d:bd:8e:8d:be:91:82:48:93: f6:3a:6a:e0:0e:de:76:e6:07:cd:e2:64:ed:40:8e: 8b:24:8e:cc:2a:20:af:a1:2b:bf:62:3e:60:04:06: e5:33:bd:ba:42:e8:e0:c5:dd:06:20:78:bf:cb:c9: 88:4a:a6:76:a5:62:19:21:9f:04:ff:be:05:e8:a1: 01:ee:85:0c:8f:8f:43:b1:5f:df:09:5f:35:1a:3f: d2:b8:b7:49:d8:a1:6d:bc:8a:b7:d2:8e:2e:94:69: 76:6b:bc:bd:3a:e7:ea:3b:34:fb:33:15:bf:90:ff: d2:47:d6:d7:d5:ec:9b:62:00:e9:e7:2d:6b:18:a5: 98:a1:86:16:66:ae:8f:2a:b7:62:70:20:f2:ac:c0: 9f:a6:f6:4e:e5:62:39:fc:31:a0:23:0f:a5:ba:d0: ae:de:52:66:7e:5d:00:5f:7b:3c:1e:7c:57:b6:3e: ee:e6:75:24:99:c4:17:37:15:27:d2:3b:bb:a8:dc: 52:92:99:27:b8:55:ab:75:12:18:e9:87:53:ae:a3: d8:43:c6:61:55:fe:40:03:25:a2:e9:9a:ee:16:1c: 3a:bd:ca:4c:26:6a:14:c4:13:73:57:73:39:40:83: 06:20:51:16:29:8d:48:78:ce:44:2e:ad:9c:66:11: 5c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 93:5F:90:BC:D1:5D:D0:7F:7A:AF:DC:21:AE:37:2B:1F:CF:50:71:7C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.70.0/23 Signature Algorithm: sha256WithRSAEncryption 72:47:17:8c:ca:33:cd:b5:80:a0:11:da:c3:aa:ce:97:f6:2b: c9:c3:36:c4:84:74:bb:45:e5:00:cf:59:e4:e3:33:ad:76:ca: a0:d2:4d:d2:ef:81:d0:4a:a1:f6:dc:3d:82:e2:47:5d:34:25: 06:11:72:6a:d0:c3:02:18:03:19:e5:91:61:3e:ad:02:8b:01: 85:bd:cb:bb:25:46:ca:7e:2b:2e:3b:a1:a8:08:65:98:71:67: f5:64:4a:84:ed:37:26:dc:c7:91:79:7b:ab:03:b7:3a:39:70: 8f:03:1b:c6:cf:6b:9e:ef:27:39:44:49:fd:c8:a7:ee:25:ac: d1:04:53:34:f3:c9:04:bb:9d:0d:ce:ea:ce:61:d0:ad:56:45: dc:b0:da:20:ac:87:23:dc:12:1e:48:5f:f6:9f:bb:e8:ba:d3: 9d:cd:13:40:ff:0d:87:ce:b2:2e:78:ea:d7:1e:0c:5d:8e:50: 2a:24:06:a4:e1:77:7d:03:6d:9c:fa:02:1a:f0:e0:07:f1:1e: 7a:4b:0a:49:87:dc:0c:ed:1c:ba:1b:ba:ba:3d:b8:64:d2:1d: 9e:b4:c1:5d:7a:e8:53:2a:59:8d:f7:bb:6f:56:ea:57:51:4c: dd:41:09:5c:d7:1b:a8:45:cb:2c:a4:5d:1c:50:d5:7d:71:91: fd:ef:5c:2c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUHc3zBDoG3a2lucJFMivZJTqfBjIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzUzMVoX DTI3MDUwMjAyNDAzMVowMzExMC8GA1UEAxMoOTM1RjkwQkNEMTVERDA3RjdBQUZE QzIxQUUzNzJCMUZDRjUwNzE3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI+ZHHVijb2Ojb6RgkiT9jpq4A7eduYHzeJk7UCOiySOzCogr6Erv2I+YAQG 5TO9ukLo4MXdBiB4v8vJiEqmdqViGSGfBP++BeihAe6FDI+PQ7Ff3wlfNRo/0ri3 SdihbbyKt9KOLpRpdmu8vTrn6js0+zMVv5D/0kfW19Xsm2IA6ectaxilmKGGFmau jyq3YnAg8qzAn6b2TuViOfwxoCMPpbrQrt5SZn5dAF97PB58V7Y+7uZ1JJnEFzcV J9I7u6jcUpKZJ7hVq3USGOmHU66j2EPGYVX+QAMlouma7hYcOr3KTCZqFMQTc1dz OUCDBiBRFimNSHjORC6tnGYRXFUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJNfkLzRXdB/eq/cIa43Kx/PUHF8MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y0MGUxZjIwLWIwY2QtNDY5Yi05MTA2LTFlYTAwMDc5NWY5Zi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mNDBlMWYy MC1iMGNkLTQ2OWItOTEwNi0xZWEwMDA3OTVmOWYvMC85MzVGOTBCQ0QxNUREMDdG N0FBRkRDMjFBRTM3MkIxRkNGNTA3MTdDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ79GMA0GCSqGSIb3DQEBCwUAA4IBAQByRxeMyjPNtYCgEdrDqs6X9ivJwzbE hHS7ReUAz1nk4zOtdsqg0k3S74HQSqH23D2C4kddNCUGEXJq0MMCGAMZ5ZFhPq0C iwGFvcu7JUbKfisuO6GoCGWYcWf1ZEqE7Tcm3MeReXurA7c6OXCPAxvGz2ue7yc5 REn9yKfuJazRBFM088kEu50NzurOYdCtVkXcsNogrIcj3BIeSF/2n7voutOdzRNA /w2HzrIueOrXHgxdjlAqJAak4Xd9A22c+gIa8OAH8R56SwpJh9wM7Ry6G7q6Pbhk 0h2etMFdeuhTKlmN97tvVupXUUzdQQlc1xuoRcsspF0cUNV9cZH971ws -----END CERTIFICATE-----Generated at Tue May 12 22:46:07 2026 by rpki-client