$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer File: C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer (raw, json) Hash identifier: JvikRSp5j7GaAfYwf59OSSFDQ1QXlGR+GgyPMeVuJlo= Subject key identifier: C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4DF7483FCFC50F8A86F22949B9BFE53D77788426 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:20:08 +0000 Certificate not after: Sun 02 May 2027 00:25:08 +0000 Subordinate resources: IP: 202.93.24.0/21 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:f7:48:3f:cf:c5:0f:8a:86:f2:29:49:b9:bf:e5:3d:77:78:84:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:20:08 2026 GMT Not After : May 2 00:25:08 2027 GMT Subject: CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:44:48:bf:99:5d:82:cb:5d:a4:9e:a1:c1:42: e2:70:17:54:c6:9e:53:d3:8f:0a:6f:c3:83:72:47: a4:74:08:72:c6:78:44:58:54:75:77:d0:95:33:91: 77:11:f7:bd:2c:85:83:a3:ab:a1:cb:69:0c:cd:4c: cd:bc:a3:ff:1e:ff:3b:29:75:47:77:b6:77:b6:03: 5c:d9:12:3d:42:25:53:30:e1:af:93:d1:1b:6d:91: ff:c1:2e:91:f6:ed:43:a5:96:e0:1b:69:9d:47:23: 4b:75:a5:e4:1d:70:41:58:96:6c:a2:a1:59:ed:c9: be:c8:9b:a6:eb:63:d8:16:09:64:0b:09:7f:78:46: 13:6a:7b:6c:80:e7:93:32:a2:7e:85:d6:e4:9a:85: 48:4c:89:4e:52:99:2a:4f:80:81:1f:b8:b4:8f:a8: 8d:1b:b4:ad:2a:e7:af:4b:39:4f:1e:a7:cb:d0:59: d9:54:c1:8a:a6:8c:18:25:69:0b:1a:02:e7:f0:da: 12:8d:9b:fa:2c:36:c6:76:a4:8c:87:5c:6f:cb:b1: 94:7f:cc:34:fa:a7:8c:69:ec:68:1a:b3:a9:63:2f: e5:3c:19:9e:c5:fb:72:00:ea:01:5b:10:0c:6e:5c: 49:44:b4:a8:c6:89:4d:9d:2d:c4:cc:56:14:1d:8d: 39:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.93.24.0/21 Signature Algorithm: sha256WithRSAEncryption 3b:ae:af:5c:30:63:da:46:56:7c:4e:a4:d6:81:26:68:43:dc: e4:05:87:92:25:e9:57:a1:68:a0:ba:6c:b0:68:24:a0:80:18: a7:9b:50:d6:d4:a2:9f:42:bc:aa:d1:48:3c:88:0b:b3:33:f6: 55:af:8a:08:1d:27:d7:97:d2:75:cd:f3:92:bc:aa:12:a0:3a: 2d:0b:29:91:da:d4:d0:46:5c:54:83:24:b3:37:4b:40:5a:bc: be:9e:af:8a:f6:6a:b3:ea:13:ca:2c:49:1f:e1:b3:9b:13:2f: 6f:2b:c4:11:a1:d2:07:c3:ba:e1:b7:7c:4e:28:f7:6b:be:90: 26:ff:60:a4:7e:f5:3c:d8:8c:62:b3:3a:2d:9e:16:4c:c6:6c: ba:a1:9f:28:f1:13:90:c2:4b:1a:9e:09:12:25:b2:8a:ba:2b: 1d:ca:5d:a6:ec:49:9b:ca:3d:c1:4c:00:ad:d3:74:95:47:76: e8:77:80:03:7d:26:9f:c7:30:94:bd:92:f1:f5:76:ce:2b:a2: 0f:51:b8:43:cb:4a:cb:af:0f:55:99:4a:c7:32:99:be:51:24: fa:eb:15:0c:82:3d:b6:2d:b4:fc:a1:35:48:b9:b6:f7:b5:f0: ec:93:8f:cd:96:66:c9:a7:43:66:ed:0b:0f:01:4f:d7:e8:f5: f7:e4:fb:19 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUTfdIP8/FD4qG8ilJub/lPXd4hCYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjAwOFoX DTI3MDUwMjAwMjUwOFowMzExMC8GA1UEAxMoQzJBOTBBQzM2NDgxQTE5RUU0MTRC QjVBQ0FBODAwMjQxRTU3MEExRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKtESL+ZXYLLXaSeocFC4nAXVMaeU9OPCm/Dg3JHpHQIcsZ4RFhUdXfQlTOR dxH3vSyFg6OroctpDM1Mzbyj/x7/Oyl1R3e2d7YDXNkSPUIlUzDhr5PRG22R/8Eu kfbtQ6WW4BtpnUcjS3Wl5B1wQViWbKKhWe3Jvsibputj2BYJZAsJf3hGE2p7bIDn kzKifoXW5JqFSEyJTlKZKk+AgR+4tI+ojRu0rSrnr0s5Tx6ny9BZ2VTBiqaMGCVp CxoC5/DaEo2b+iw2xnakjIdcb8uxlH/MNPqnjGnsaBqzqWMv5TwZnsX7cgDqAVsQ DG5cSUS0qMaJTZ0txMxWFB2NOT0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMKpCsNkgaGe5BS7WsqoACQeVwofMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzNjOGFiM2UwLWNhNjgtNDJmNi05OGY2LTY1NGEyNTJhODY0OC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zYzhhYjNl MC1jYTY4LTQyZjYtOThmNi02NTRhMjUyYTg2NDgvMC9DMkE5MEFDMzY0ODFBMTlF RTQxNEJCNUFDQUE4MDAyNDFFNTcwQTFGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQDyl0YMA0GCSqGSIb3DQEBCwUAA4IBAQA7rq9cMGPaRlZ8TqTWgSZoQ9zkBYeS JelXoWigumywaCSggBinm1DW1KKfQryq0Ug8iAuzM/ZVr4oIHSfXl9J1zfOSvKoS oDotCymR2tTQRlxUgySzN0tAWry+nq+K9mqz6hPKLEkf4bObEy9vK8QRodIHw7rh t3xOKPdrvpAm/2CkfvU82IxiszotnhZMxmy6oZ8o8ROQwksangkSJbKKuisdyl2m 7Embyj3BTACt03SVR3bod4ADfSafxzCUvZLx9XbOK6IPUbhDy0rLrw9VmUrHMpm+ UST66xUMgj22LbT8oTVIubb3tfDsk4/NlmbJp0Nm7QsPAU/X6PX35PsZ -----END CERTIFICATE-----Generated at Wed May 13 00:44:49 2026 by rpki-client