$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.cer File: FB0412ADF5C0AF38828205671C38D8AE99F5707A.cer (raw, json) Hash identifier: KUTOuzq0jk69ATbdAllMcZcGTARKay2myW1gIkAX7R4= Subject key identifier: FB:04:12:AD:F5:C0:AF:38:82:82:05:67:1C:38:D8:AE:99:F5:70:7A Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 60B6D2EA802296FFDF4A4EC2250184C10AD00BA7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:08:44 +0000 Certificate not after: Sun 02 May 2027 01:13:44 +0000 Subordinate resources: IP: 157.10.178.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b6:d2:ea:80:22:96:ff:df:4a:4e:c2:25:01:84:c1:0a:d0:0b:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:08:44 2026 GMT Not After : May 2 01:13:44 2027 GMT Subject: CN=FB0412ADF5C0AF38828205671C38D8AE99F5707A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:66:2b:50:ee:ab:41:6f:f5:e3:6f:c9:de:c8: f5:72:70:39:33:04:a4:32:80:48:d4:90:de:bd:d9: de:5d:37:48:67:aa:12:84:a3:04:0c:72:2b:2e:8a: e7:dd:02:ff:f3:48:fd:0e:5c:12:72:71:2a:25:e7: af:a9:f7:19:5e:ac:eb:09:6e:c6:ed:22:c7:ed:5f: ba:ca:6e:ed:ae:ad:ac:2e:ce:e7:cd:36:87:e1:d5: 3c:6a:20:d9:6e:48:9a:fb:3c:74:06:e2:db:da:36: 52:09:d8:b8:3d:39:dc:47:c2:f4:b4:2c:2c:d1:f6: 0e:3f:c8:ef:bd:5d:01:1a:d5:98:be:15:13:77:06: ed:0f:3d:4f:4a:db:9a:a8:00:31:2d:a3:7a:d4:f8: 31:96:a2:19:c5:99:dc:5b:63:cd:4b:1f:3d:01:2d: 74:64:a0:a9:37:53:80:de:f4:77:de:1b:a2:21:c4: d4:18:29:d7:33:76:9a:17:74:6e:fb:56:18:be:83: ff:89:83:66:37:27:a4:3a:ff:bb:b7:66:26:ea:c2: fa:7a:44:42:96:e9:12:1a:85:5c:c5:d5:d0:ae:8f: 40:43:b6:ac:8e:63:f6:fc:8f:cd:57:cf:9f:90:d4: 97:a9:33:a6:bf:55:3e:e1:d6:32:46:20:8b:7c:ba: 49:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:04:12:AD:F5:C0:AF:38:82:82:05:67:1C:38:D8:AE:99:F5:70:7A X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/FB0412ADF5C0AF38828205671C38D8AE99F5707A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.178.0/24 Signature Algorithm: sha256WithRSAEncryption 04:ad:80:be:15:2c:76:62:84:a3:ec:52:57:89:0a:99:f5:62: 3d:fd:b2:1c:6a:c4:21:e3:bd:88:34:64:cb:1a:21:fa:e4:64: 73:cb:cb:33:d8:e4:96:f2:e7:03:47:63:08:d4:eb:3d:1d:e4: a0:e9:33:79:00:aa:f4:94:a5:4f:15:39:60:6e:3f:4a:08:b0: 4f:c3:25:72:63:eb:9b:29:f2:fd:d9:cc:76:1a:fc:64:6a:3a: 02:b8:14:90:8e:48:d5:d4:cd:75:ac:6d:9d:0b:3e:c2:68:45: b5:b0:9a:50:a1:c5:32:3d:30:a2:03:53:6d:e8:d6:ef:16:1a: f0:37:f4:8d:8d:ea:66:29:3b:ea:f4:58:79:96:41:12:68:48: 0c:b8:e7:bf:57:1b:63:d1:fe:bd:89:3a:b0:61:4d:28:58:e9: 9c:26:62:85:dd:e0:9f:c9:06:a7:6c:e2:61:a4:2c:24:98:5c: 1c:97:5d:22:09:c9:4a:84:1e:5b:b9:8c:55:f9:e8:fe:6d:41: 00:03:cd:a8:3f:2c:21:fe:1c:6a:b1:bf:17:df:6e:cd:25:89: af:76:57:58:85:c5:a4:5c:0e:ff:38:b3:da:83:70:89:af:d0: ce:92:28:11:9c:a9:8c:6b:4d:2e:47:15:79:7b:7a:b8:1f:38: a2:33:e6:75 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUYLbS6oAilv/fSk7CJQGEwQrQC6cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMDg0NFoX DTI3MDUwMjAxMTM0NFowMzExMC8GA1UEAxMoRkIwNDEyQURGNUMwQUYzODgyODIw NTY3MUMzOEQ4QUU5OUY1NzA3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdmK1Duq0Fv9eNvyd7I9XJwOTMEpDKASNSQ3r3Z3l03SGeqEoSjBAxyKy6K 590C//NI/Q5cEnJxKiXnr6n3GV6s6wluxu0ix+1fuspu7a6trC7O5802h+HVPGog 2W5Imvs8dAbi29o2UgnYuD053EfC9LQsLNH2Dj/I771dARrVmL4VE3cG7Q89T0rb mqgAMS2jetT4MZaiGcWZ3FtjzUsfPQEtdGSgqTdTgN70d94boiHE1Bgp1zN2mhd0 bvtWGL6D/4mDZjcnpDr/u7dmJurC+npEQpbpEhqFXMXV0K6PQEO2rI5j9vyPzVfP n5DUl6kzpr9VPuHWMkYgi3y6STsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPsEEq31wK84goIFZxw42K6Z9XB6MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzgzYzg5MWQ3LTRmY2MtNDc3MC04MmQ0LTM2N2I4N2JiNTUxZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84M2M4OTFk Ny00ZmNjLTQ3NzAtODJkNC0zNjdiODdiYjU1MWUvMC9GQjA0MTJBREY1QzBBRjM4 ODI4MjA1NjcxQzM4RDhBRTk5RjU3MDdBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAnQqyMA0GCSqGSIb3DQEBCwUAA4IBAQAErYC+FSx2YoSj7FJXiQqZ9WI9/bIc asQh472INGTLGiH65GRzy8sz2OSW8ucDR2MI1Os9HeSg6TN5AKr0lKVPFTlgbj9K CLBPwyVyY+ubKfL92cx2GvxkajoCuBSQjkjV1M11rG2dCz7CaEW1sJpQocUyPTCi A1Nt6NbvFhrwN/SNjepmKTvq9Fh5lkESaEgMuOe/Vxtj0f69iTqwYU0oWOmcJmKF 3eCfyQanbOJhpCwkmFwcl10iCclKhB5buYxV+ej+bUEAA82oPywh/hxqsb8X327N JYmvdldYhcWkXA7/OLPag3CJr9DOkigRnKmMa00uRxV5e3q4HziiM+Z1 -----END CERTIFICATE-----Generated at Tue May 12 22:47:42 2026 by rpki-client