$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer File: D09EA95FF10C0166C2954C997A8A4989BD890A87.cer (raw, json) Hash identifier: lTqfRR3yBF8qqIleiZkEGoewJu0XOLBkUyK5G35OFiM= Subject key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4B99FC8B503FACC15FBC9E632C87C04C8BA85CC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft caRepository: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:00:23 +0000 Certificate not after: Sun 02 May 2027 00:05:23 +0000 Subordinate resources: IP: 43.229.253.0 -- 43.229.255.255 IP: 103.31.44.0/22 IP: 110.232.64.0/19 IP: 150.107.136.0/22 IP: 202.162.192.0/20 IP: 2401:2900::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:99:fc:8b:50:3f:ac:c1:5f:bc:9e:63:2c:87:c0:4c:8b:a8:5c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:00:23 2026 GMT Not After : May 2 00:05:23 2027 GMT Subject: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:63:44:80:88:52:a2:bf:49:4e:69:11:41:d5: cb:9e:53:fa:af:1e:b7:85:96:2c:f9:f3:72:90:a1: 3e:3d:02:f3:e4:c8:bd:07:71:94:1d:2e:29:c7:2e: 98:d5:9d:6c:6b:d2:ad:43:63:ce:b9:24:4c:47:62: 0c:4f:66:88:b8:e8:0e:d4:7e:e7:05:63:dd:e1:7e: 87:e7:4f:f6:32:5a:d0:2e:a7:90:be:a8:23:02:ef: 7b:10:f1:95:b4:86:8b:58:31:9b:55:ff:75:12:bc: 19:e4:5a:8b:cb:98:3f:5a:68:a7:60:d9:99:71:d2: fd:ca:ea:ea:d2:3a:cd:f4:37:cd:b1:87:1a:4c:06: f4:55:76:3e:17:7e:bc:17:ed:e5:1e:7b:c0:20:09: 3d:ad:c9:34:76:e8:30:cb:c3:10:d4:45:ac:4a:8b: 0d:59:67:49:66:ba:76:a2:cf:e2:2f:65:dc:95:6a: b6:12:57:ef:4c:c7:fa:9d:b5:97:36:cf:7e:37:b8: 7f:ab:1f:49:a3:ab:bb:fc:17:67:18:9f:1c:cd:48: d7:a2:f3:fa:96:78:69:7e:9d:9b:06:f0:19:00:66: 1e:a9:4f:b5:a7:1c:39:50:b3:18:b1:14:77:88:70: 63:75:84:25:26:6f:7c:ca:11:5c:cd:3d:9a:81:94: 42:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.229.253.0-43.229.255.255 103.31.44.0/22 110.232.64.0/19 150.107.136.0/22 202.162.192.0/20 IPv6: 2401:2900::/32 Signature Algorithm: sha256WithRSAEncryption 66:4c:62:bb:47:e2:f1:c4:77:8e:25:32:90:6c:94:07:cc:e9: 6c:87:6f:31:d1:83:e8:f1:e8:1d:2e:d4:75:be:1c:96:9a:7f: 7b:71:5b:ad:c2:7b:77:05:a6:04:21:b0:b1:1f:f9:0a:64:a2: 38:6b:fc:2a:32:1e:ff:96:11:ef:1d:26:65:85:9a:8c:14:fc: 5f:1e:11:fa:a3:4b:24:06:f9:f9:3e:f2:78:f8:db:a3:ee:f6: a1:00:84:7b:ab:29:04:e1:90:20:7c:7f:07:fc:2f:56:fb:d6: 27:71:34:1a:17:43:7c:9b:53:78:41:38:ff:0a:6a:25:e4:9e: 60:b4:70:76:0f:e1:b2:5d:46:98:ce:24:f2:ff:5f:e7:b3:fe: 0c:09:3f:cb:14:d7:0d:f3:27:ed:49:cc:ed:f2:0d:28:9c:77: ea:2f:fb:e2:d5:33:ef:5c:67:87:f1:e4:a4:ec:b5:16:8c:31: 9a:d2:68:70:98:77:75:fe:6c:6a:70:e9:81:92:24:c4:4e:20: e1:41:d4:a1:b6:b7:4d:80:9a:1b:26:68:28:5d:80:8a:f8:a4: 68:1d:94:e7:3b:c2:ac:e0:f1:1b:2b:80:ec:6d:4a:76:5b:05: 6b:6c:94:75:f6:7b:92:64:aa:2b:e1:31:6f:67:2a:ca:dc:3d: 12:28:e5:f1 -----BEGIN CERTIFICATE----- MIIF9DCCBNygAwIBAgIUS5n8i1A/rMFfvJ5jLIfATIuoXMQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDAyM1oX DTI3MDUwMjAwMDUyM1owMzExMC8GA1UEAxMoRDA5RUE5NUZGMTBDMDE2NkMyOTU0 Qzk5N0E4QTQ5ODlCRDg5MEE4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ5jRICIUqK/SU5pEUHVy55T+q8et4WWLPnzcpChPj0C8+TIvQdxlB0uKccu mNWdbGvSrUNjzrkkTEdiDE9miLjoDtR+5wVj3eF+h+dP9jJa0C6nkL6oIwLvexDx lbSGi1gxm1X/dRK8GeRai8uYP1pop2DZmXHS/crq6tI6zfQ3zbGHGkwG9FV2Phd+ vBft5R57wCAJPa3JNHboMMvDENRFrEqLDVlnSWa6dqLP4i9l3JVqthJX70zH+p21 lzbPfje4f6sfSaOru/wXZxifHM1I16Lz+pZ4aX6dmwbwGQBmHqlPtaccOVCzGLEU d4hwY3WEJSZvfMoRXM09moGUQlUCAwEAAaOCAucwggLjMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNCeqV/xDAFmwpVMmXqKSYm9iQqHMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzIwMTQzMmNjLTNiYzktNDg1OC1iNTA2LTIxOGFhYjBiMDg5Yy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yMDE0MzJj Yy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC9EMDlFQTk1RkYxMEMwMTY2 QzI5NTRDOTk3QThBNDk4OUJEODkwQTg3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDArBAIAATAl MAsDBAAr5f0DAwEr5AMEAmcfLAMEBW7oQAMEApZriAMEBMqiwDANBAIAAjAHAwUA JAEpADANBgkqhkiG9w0BAQsFAAOCAQEAZkxiu0fi8cR3jiUykGyUB8zpbIdvMdGD 6PHoHS7Udb4clpp/e3FbrcJ7dwWmBCGwsR/5CmSiOGv8KjIe/5YR7x0mZYWajBT8 Xx4R+qNLJAb5+T7yePjbo+72oQCEe6spBOGQIHx/B/wvVvvWJ3E0GhdDfJtTeEE4 /wpqJeSeYLRwdg/hsl1GmM4k8v9f57P+DAk/yxTXDfMn7UnM7fINKJx36i/74tUz 71xnh/HkpOy1FowxmtJocJh3df5sanDpgZIkxE4g4UHUoba3TYCaGyZoKF2Aivik aB2U5zvCrODxGyuA7G1KdlsFa2yUdfZ7kmSqK+Exb2cqytw9Eijl8Q== -----END CERTIFICATE-----Generated at Tue May 12 22:32:26 2026 by rpki-client