$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer File: B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer (raw, json) Hash identifier: C5iE1s070HrzgO5HGL2ndtmPyz+2Oee03RRiGUdg/TE= Subject key identifier: B9:90:8F:59:4E:63:0B:EA:1E:EA:0D:DB:F4:A3:0D:C8:CF:12:7C:AC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 706F4CFA24149938EA9D6DC8A7A01230BBACAF98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:00:30 +0000 Certificate not after: Sun 02 May 2027 02:05:30 +0000 Subordinate resources: IP: 103.73.72.0/22 IP: 2406:f080::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:6f:4c:fa:24:14:99:38:ea:9d:6d:c8:a7:a0:12:30:bb:ac:af:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:00:30 2026 GMT Not After : May 2 02:05:30 2027 GMT Subject: CN=B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:64:45:7c:8a:ce:11:ea:47:79:85:6b:08:63: 6b:ae:4c:3f:ff:2f:55:88:08:c9:75:1f:be:7f:0b: e9:51:63:d8:41:ec:65:22:a2:bc:1c:80:9a:60:89: 90:81:6f:91:95:aa:1d:b6:d0:16:f5:56:d0:54:01: 1f:89:ce:b2:2f:f8:74:e4:b2:e1:5d:ce:14:37:b8: 8a:70:a6:a6:81:33:59:0f:62:1a:71:15:11:f7:49: 77:eb:5e:5b:92:bd:29:7d:83:cb:a5:17:b1:89:03: b1:2d:a4:77:df:c5:0b:82:46:f1:ef:b7:b0:08:38: 08:a0:df:cd:35:09:c2:28:dd:5f:51:df:c7:26:a5: a9:38:1f:4f:71:cc:0a:a6:82:f6:5f:e1:1b:c6:0f: fd:c3:d6:11:be:e4:51:0e:f6:9c:c5:7b:dc:50:04: 20:72:c8:39:e7:d4:8d:6d:9a:f9:e2:10:cf:17:0b: 4e:ba:e9:2c:52:eb:cc:c8:e2:bc:81:dc:a6:a8:64: 90:f5:d1:03:d6:62:59:67:59:d5:94:88:19:36:64: 50:50:cd:a3:3d:7e:10:2b:cb:c4:ce:6e:93:b2:8c: ba:1b:c0:7c:77:d6:a0:22:b1:8d:cf:0e:43:d5:02: bd:e4:23:7f:3e:d5:d2:0e:9d:45:0b:09:15:e1:41: bd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B9:90:8F:59:4E:63:0B:EA:1E:EA:0D:DB:F4:A3:0D:C8:CF:12:7C:AC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.73.72.0/22 IPv6: 2406:f080::/32 Signature Algorithm: sha256WithRSAEncryption 3f:48:cd:20:79:6f:28:44:8e:d3:f9:c0:80:70:03:1b:05:52: be:f3:1d:ce:1f:d4:01:14:40:02:f4:d7:27:6c:48:64:b2:40: 2f:d3:0e:53:61:50:87:26:98:20:b7:bf:da:ea:08:de:d0:39: 7a:87:05:df:65:db:c4:da:a8:b3:2e:3a:ed:10:26:2e:ec:6b: 0e:26:26:21:cd:fd:0b:85:64:9f:08:fb:82:03:a4:b0:58:f0: 9f:f8:08:2b:3e:b2:99:b0:78:f4:2b:6f:0f:a7:e0:03:f7:9a: b7:11:94:ca:2a:82:be:92:d5:2b:16:90:f6:1b:e1:35:b8:e3: 75:f6:30:d9:c8:ea:de:6a:bf:e8:5f:3a:90:82:88:38:e0:58: 78:d9:1b:74:9d:ce:77:87:e3:80:54:bc:30:e2:a8:8f:ce:11: 8b:88:8c:d1:1e:1a:fc:d4:d5:7b:98:fa:00:0d:70:a2:7d:a1: fe:08:66:14:4d:32:f9:e1:b1:d6:33:8b:09:cc:a7:67:c2:81: bb:1d:bb:1b:47:4a:2f:b7:e2:8f:5e:91:fe:41:4e:f5:d3:b6: 6a:94:b2:3a:48:11:5c:01:4b:6f:5a:8c:54:ed:37:19:16:2a: 0c:2e:9a:9f:ed:1f:4b:9a:48:e7:64:61:ee:67:6e:44:4a:a1: 69:32:4a:9d -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUcG9M+iQUmTjqnW3Ip6ASMLusr5gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDAzMFoX DTI3MDUwMjAyMDUzMFowMzExMC8GA1UEAxMoQjk5MDhGNTk0RTYzMEJFQTFFRUEw RERCRjRBMzBEQzhDRjEyN0NBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMFkRXyKzhHqR3mFawhja65MP/8vVYgIyXUfvn8L6VFj2EHsZSKivByAmmCJ kIFvkZWqHbbQFvVW0FQBH4nOsi/4dOSy4V3OFDe4inCmpoEzWQ9iGnEVEfdJd+te W5K9KX2Dy6UXsYkDsS2kd9/FC4JG8e+3sAg4CKDfzTUJwijdX1HfxyalqTgfT3HM CqaC9l/hG8YP/cPWEb7kUQ72nMV73FAEIHLIOefUjW2a+eIQzxcLTrrpLFLrzMji vIHcpqhkkPXRA9ZiWWdZ1ZSIGTZkUFDNoz1+ECvLxM5uk7KMuhvAfHfWoCKxjc8O Q9UCveQjfz7V0g6dRQsJFeFBvRkCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLmQj1lOYwvqHuoN2/SjDcjPEnysMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q2ZWNjNzJhLWU5NTQtNDMwMi05MmM0LWY0ZjIzMDcwYjk5Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kNmVjYzcy YS1lOTU0LTQzMDItOTJjNC1mNGYyMzA3MGI5OTcvMC9COTkwOEY1OTRFNjMwQkVB MUVFQTBEREJGNEEzMERDOENGMTI3Q0FDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ0lIMA0EAgACMAcDBQAkBvCAMA0GCSqGSIb3DQEBCwUAA4IBAQA/SM0geW8o RI7T+cCAcAMbBVK+8x3OH9QBFEAC9NcnbEhkskAv0w5TYVCHJpggt7/a6gje0Dl6 hwXfZdvE2qizLjrtECYu7GsOJiYhzf0LhWSfCPuCA6SwWPCf+AgrPrKZsHj0K28P p+AD95q3EZTKKoK+ktUrFpD2G+E1uON19jDZyOrear/oXzqQgog44Fh42Rt0nc53 h+OAVLww4qiPzhGLiIzRHhr81NV7mPoADXCifaH+CGYUTTL54bHWM4sJzKdnwoG7 HbsbR0ovt+KPXpH+QU7107ZqlLI6SBFcAUtvWoxU7TcZFioMLpqf7R9LmkjnZGHu Z25ESqFpMkqd -----END CERTIFICATE-----Generated at Tue May 12 22:45:53 2026 by rpki-client