$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F908019F3DDAFD79BB1C8B63809C31742646ED94.cer File: F908019F3DDAFD79BB1C8B63809C31742646ED94.cer (raw, json) Hash identifier: 7Tz+GtO6fTXsgl/M5capOt5l5ZktPlM3O8RAx94cf+c= Subject key identifier: F9:08:01:9F:3D:DA:FD:79:BB:1C:8B:63:80:9C:31:74:26:46:ED:94 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 65C6B1B35681721614911798BB665C16CE0DA4CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.mft caRepository: rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:37:47 +0000 Certificate not after: Sun 02 May 2027 00:42:47 +0000 Subordinate resources: IP: 150.242.176.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c6:b1:b3:56:81:72:16:14:91:17:98:bb:66:5c:16:ce:0d:a4:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:37:47 2026 GMT Not After : May 2 00:42:47 2027 GMT Subject: CN=F908019F3DDAFD79BB1C8B63809C31742646ED94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:18:c9:30:5a:56:51:17:23:a8:e0:c3:85:ef: 00:11:e6:22:0e:10:dd:0d:49:dc:7e:e8:67:d3:b8: af:10:8e:25:23:38:ac:0a:94:36:a9:d7:bc:91:e2: c3:84:7d:93:e6:f3:06:86:57:8e:40:b8:04:7b:f3: 25:08:62:f3:78:c6:b7:a8:08:89:7e:18:8d:f8:24: f4:1e:b2:3e:03:a6:fe:b8:eb:1f:89:69:eb:03:28: 4a:60:40:43:f7:6e:8e:46:79:3d:f9:80:e5:4a:ff: 49:0a:14:85:01:bb:0d:8b:60:37:75:4b:42:1f:b5: c1:12:10:d9:cd:b8:ef:e8:e0:79:dc:1a:7c:1c:cf: 17:85:47:2f:d1:9d:f6:71:53:2d:87:0c:ee:2f:1d: 6b:96:25:99:67:46:0a:24:21:4d:14:74:13:1d:48: 48:f6:03:d9:d6:fa:9a:ae:f3:c2:52:71:5b:3e:72: fe:11:d3:94:55:1b:ed:46:e3:11:da:e8:fd:10:a2: 07:a4:f3:49:a3:22:6a:29:81:cf:85:cc:02:e6:ae: d1:06:69:b7:d3:92:86:be:e3:5f:ed:62:48:88:d1: 28:ee:80:3a:b1:63:0f:b7:be:93:76:82:63:f7:47: 73:38:82:ad:95:08:c8:d9:32:86:29:48:fc:f5:9b: 69:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:08:01:9F:3D:DA:FD:79:BB:1C:8B:63:80:9C:31:74:26:46:ED:94 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.242.176.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:62:98:0f:e0:b3:8a:b9:36:9d:19:2f:d1:90:cf:2c:9d:4a: fc:2a:5e:6c:6f:09:6b:a3:71:d8:a3:27:ec:87:59:9e:71:76: 6c:9e:b0:2e:41:3b:1b:00:48:da:97:22:fa:d3:b6:1e:74:a8: 02:d3:44:af:c6:8d:30:11:1c:88:66:7f:91:bd:41:f5:36:79: 4e:7b:cb:e9:50:05:d8:a5:3a:2e:67:e1:fd:52:eb:29:8a:ea: c2:04:df:5f:bb:fc:2c:ad:23:64:9a:01:96:83:5a:89:4b:dc: 6b:9e:86:6c:7c:81:b8:39:ef:e1:59:85:df:72:d7:73:53:d0: 10:fa:50:25:76:b8:0d:09:f7:08:52:f4:e7:db:70:be:be:b4: a8:d8:de:4d:28:fb:31:79:11:42:75:a3:b1:2a:22:4f:e0:b7: 7a:d0:91:15:65:d2:80:62:a5:43:f2:c6:67:c1:8a:d8:f0:44: 4b:e7:9a:89:bc:c4:b3:96:c3:70:89:d3:b2:54:61:e4:a3:56: 54:d4:15:cf:f3:cf:3c:2e:f2:56:71:c5:3a:90:32:fe:31:3d: 76:09:bc:df:9f:5e:f1:b6:a7:f6:54:51:3e:1c:2b:92:97:f3: 41:a3:a5:23:81:c6:d7:30:31:f5:bd:98:57:fc:fd:20:fa:b8: 3d:1d:bf:49 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUZcaxs1aBchYUkReYu2ZcFs4NpM4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzc0N1oX DTI3MDUwMjAwNDI0N1owMzExMC8GA1UEAxMoRjkwODAxOUYzRERBRkQ3OUJCMUM4 QjYzODA5QzMxNzQyNjQ2RUQ5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4YyTBaVlEXI6jgw4XvABHmIg4Q3Q1J3H7oZ9O4rxCOJSM4rAqUNqnXvJHi w4R9k+bzBoZXjkC4BHvzJQhi83jGt6gIiX4Yjfgk9B6yPgOm/rjrH4lp6wMoSmBA Q/dujkZ5PfmA5Ur/SQoUhQG7DYtgN3VLQh+1wRIQ2c247+jgedwafBzPF4VHL9Gd 9nFTLYcM7i8da5YlmWdGCiQhTRR0Ex1ISPYD2db6mq7zwlJxWz5y/hHTlFUb7Ubj Edro/RCiB6TzSaMiaimBz4XMAuau0QZpt9OShr7jX+1iSIjRKO6AOrFjD7e+k3aC Y/dHcziCrZUIyNkyhilI/PWbaSMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPkIAZ892v15uxyLY4CcMXQmRu2UMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzU3YzA1NTIxLTAzMzgtNGYzMS1hMjA5LTRmODc4YmVmNjM4YS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81N2MwNTUy MS0wMzM4LTRmMzEtYTIwOS00Zjg3OGJlZjYzOGEvMC9GOTA4MDE5RjNEREFGRDc5 QkIxQzhCNjM4MDlDMzE3NDI2NDZFRDk0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBlvKwMA0GCSqGSIb3DQEBCwUAA4IBAQBaYpgP4LOKuTadGS/RkM8snUr8Kl5s bwlro3HYoyfsh1mecXZsnrAuQTsbAEjalyL607YedKgC00Svxo0wERyIZn+RvUH1 NnlOe8vpUAXYpTouZ+H9UuspiurCBN9fu/wsrSNkmgGWg1qJS9xrnoZsfIG4Oe/h WYXfctdzU9AQ+lAldrgNCfcIUvTn23C+vrSo2N5NKPsxeRFCdaOxKiJP4Ld60JEV ZdKAYqVD8sZnwYrY8ERL55qJvMSzlsNwidOyVGHko1ZU1BXP8888LvJWccU6kDL+ MT12Cbzfn17xtqf2VFE+HCuSl/NBo6UjgcbXMDH1vZhX/P0g+rg9Hb9J -----END CERTIFICATE-----Generated at Tue May 12 22:39:02 2026 by rpki-client