$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer File: D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.cer (raw, json) Hash identifier: u/9CFdTOwMGEMJgk7auWOGk+MgPKvOHRb+6qweEomK0= Subject key identifier: D9:00:F1:99:0F:32:4E:8B:FF:8E:6A:B4:F6:AF:00:66:2E:F4:A1:81 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0481554EDF6FCA2A3A37B7B14915F58440710CF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:15:36 +0000 Certificate not after: Sun 02 May 2027 00:20:36 +0000 Subordinate resources: IP: 103.70.92.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:81:55:4e:df:6f:ca:2a:3a:37:b7:b1:49:15:f5:84:40:71:0c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:15:36 2026 GMT Not After : May 2 00:20:36 2027 GMT Subject: CN=D900F1990F324E8BFF8E6AB4F6AF00662EF4A181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:48:2e:ee:b0:65:d7:66:6c:7c:4c:ba:82:bc: 17:6b:76:b9:a0:a0:af:e6:f0:6d:3b:ee:08:53:89: 40:e9:11:3f:a6:ef:85:84:9a:ae:de:df:64:d5:d4: cc:dd:65:c0:20:36:05:d2:68:f3:51:de:10:04:9c: 32:bd:e5:95:59:a5:90:56:23:4c:2e:a8:95:7c:39: 93:0a:c4:d2:b3:2f:1c:d1:7f:78:b6:d3:4d:e8:9f: f2:a2:da:93:e2:d1:61:ed:25:65:80:d3:e1:7d:a9: 1a:c1:1a:89:88:b7:00:b5:21:91:81:59:b4:80:01: 75:e2:b8:ae:97:85:08:96:9c:8b:8a:fb:2b:89:19: 2f:3f:4c:2a:0c:fa:ff:15:87:7e:82:c5:5e:02:da: 4c:c9:61:16:55:6f:0a:ed:ef:fc:f8:3e:fc:b3:8c: 69:1e:75:54:76:75:be:e6:09:16:af:2e:fe:60:55: ec:02:b7:53:08:79:eb:ec:b2:fa:70:43:29:eb:ba: 6c:75:5f:10:64:af:94:00:8b:cf:0d:c3:7d:f6:e1: 12:29:fe:c3:f5:c9:b5:94:f2:58:20:30:0d:b9:6d: 24:ac:b0:53:93:db:e8:c5:64:5b:95:4a:ff:5a:9f: 70:11:b2:97:79:fd:7f:35:c6:ac:f0:c2:bb:3b:77: 16:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:00:F1:99:0F:32:4E:8B:FF:8E:6A:B4:F6:AF:00:66:2E:F4:A1:81 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/D900F1990F324E8BFF8E6AB4F6AF00662EF4A181.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.70.92.0/23 Signature Algorithm: sha256WithRSAEncryption 16:c4:12:54:55:ba:86:ff:d3:f0:0c:2d:89:9f:1b:bf:0c:a8: 47:8c:e5:bb:88:94:6e:33:00:58:7b:6d:fd:16:4d:3c:59:52: f0:9c:69:31:5c:75:3d:d2:69:63:a1:fa:55:dc:34:c5:78:77: ed:77:f8:58:a6:77:43:7c:37:c0:74:f7:71:54:09:7e:ee:08: a8:2c:d7:4f:81:f3:8c:b7:fa:72:09:5f:c0:0d:2a:12:e5:bf: fc:eb:ce:1a:2a:16:a3:e2:f2:bf:bd:5a:2a:2c:48:d9:d7:a0: 28:90:9a:b8:eb:80:66:74:a3:35:02:c0:ac:a1:c1:3b:e8:2e: af:fc:c2:05:65:94:8f:fc:9a:f9:31:c8:35:1b:a1:11:ad:e4: b0:67:59:db:ee:ec:bd:75:18:db:09:10:45:c0:19:ea:18:ec: 52:a8:01:f8:69:04:97:17:3b:fa:49:eb:a3:df:87:81:79:67: 3f:ba:9e:4c:85:03:83:51:20:dc:7f:de:14:9b:5f:06:c8:be: 1c:25:a6:21:61:56:cb:f4:a6:d8:b6:3e:79:a0:b3:ad:7c:2b: 31:7e:a9:9b:32:6b:33:b6:53:95:2a:c3:b4:d6:46:9a:37:f8: 93:f0:fe:de:bd:9b:70:c7:c7:5d:86:71:2d:5f:53:26:7f:b5: c7:7d:43:af -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUBIFVTt9vyio6N7exSRX1hEBxDPkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTUzNloX DTI3MDUwMjAwMjAzNlowMzExMC8GA1UEAxMoRDkwMEYxOTkwRjMyNEU4QkZGOEU2 QUI0RjZBRjAwNjYyRUY0QTE4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOtILu6wZddmbHxMuoK8F2t2uaCgr+bwbTvuCFOJQOkRP6bvhYSart7fZNXU zN1lwCA2BdJo81HeEAScMr3llVmlkFYjTC6olXw5kwrE0rMvHNF/eLbTTeif8qLa k+LRYe0lZYDT4X2pGsEaiYi3ALUhkYFZtIABdeK4rpeFCJaci4r7K4kZLz9MKgz6 /xWHfoLFXgLaTMlhFlVvCu3v/Pg+/LOMaR51VHZ1vuYJFq8u/mBV7AK3Uwh56+yy +nBDKeu6bHVfEGSvlACLzw3DffbhEin+w/XJtZTyWCAwDbltJKywU5Pb6MVkW5VK /1qfcBGyl3n9fzXGrPDCuzt3FsECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNkA8ZkPMk6L/45qtPavAGYu9KGBMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM1ODlmNjQzLTM3YmMtNGZmYi05NTI5LTQwMWU0YjZlZjY3NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zNTg5ZjY0 My0zN2JjLTRmZmItOTUyOS00MDFlNGI2ZWY2NzUvMC9EOTAwRjE5OTBGMzI0RThC RkY4RTZBQjRGNkFGMDA2NjJFRjRBMTgxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ0ZcMA0GCSqGSIb3DQEBCwUAA4IBAQAWxBJUVbqG/9PwDC2Jnxu/DKhHjOW7 iJRuMwBYe239Fk08WVLwnGkxXHU90mljofpV3DTFeHftd/hYpndDfDfAdPdxVAl+ 7gioLNdPgfOMt/pyCV/ADSoS5b/8684aKhaj4vK/vVoqLEjZ16AokJq464BmdKM1 AsCsocE76C6v/MIFZZSP/Jr5Mcg1G6ERreSwZ1nb7uy9dRjbCRBFwBnqGOxSqAH4 aQSXFzv6Seuj34eBeWc/up5MhQODUSDcf94Um18GyL4cJaYhYVbL9KbYtj55oLOt fCsxfqmbMmsztlOVKsO01kaaN/iT8P7evZtwx8ddhnEtX1Mmf7XHfUOv -----END CERTIFICATE-----Generated at Wed May 13 00:33:51 2026 by rpki-client