$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer File: FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer (raw, json) Hash identifier: +dH/ZbVF7mjQWM+D0pGmmv7uhsnvMFTc6WAmJBU7dbQ= Subject key identifier: FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 551689D087071FE86924B6B7DC171E889B369BA0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:33:08 +0000 Certificate not after: Sun 02 May 2027 00:38:08 +0000 Subordinate resources: IP: 157.15.62.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:16:89:d0:87:07:1f:e8:69:24:b6:b7:dc:17:1e:88:9b:36:9b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:33:08 2026 GMT Not After : May 2 00:38:08 2027 GMT Subject: CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6b:75:5a:51:6e:b1:0e:95:ff:cf:82:be:1d: 3e:b1:e7:f9:87:03:7d:bf:36:d2:08:93:72:91:9b: 91:94:ff:58:99:02:7d:eb:08:04:61:31:e7:fd:dd: dd:50:53:fc:95:f0:9a:0d:13:f5:ff:75:10:92:da: 63:14:d7:00:5f:25:70:31:9d:c6:65:87:ad:6a:f3: 0c:86:00:5a:62:97:c0:56:1e:13:69:9c:21:b8:da: 88:35:57:60:0e:c1:fa:05:14:9d:ed:83:b3:0d:fb: f4:d6:46:22:fb:4b:76:4e:1f:1b:7c:71:0c:8d:8d: e7:af:d8:59:b0:fb:60:9f:35:48:8f:56:72:89:3d: a7:63:fe:1b:b6:24:0a:0a:aa:25:25:38:25:b7:3f: c4:ea:60:b7:cd:10:82:46:08:3e:d6:74:1e:1d:5d: 96:d9:12:4a:7e:27:f3:c2:d5:d9:5c:e4:f4:2d:67: e2:44:a7:29:b8:89:d0:f0:1d:d2:f1:74:cc:ee:9c: be:6d:99:03:c9:a2:20:10:58:61:57:0c:57:b2:ae: 5a:05:04:10:69:84:a4:c3:15:91:26:67:54:46:7a: 15:71:3f:75:de:63:fd:79:da:f0:d9:97:92:4b:5c: 94:3e:b9:33:6d:12:f1:2c:dd:66:2d:07:03:f3:01: 24:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.62.0/23 Signature Algorithm: sha256WithRSAEncryption 35:f8:35:52:2f:8e:3d:31:5f:5d:40:b7:93:70:b5:38:44:3f: 85:aa:d5:6c:35:e8:b1:12:db:e2:5a:cb:4a:3b:85:cf:7c:42: 59:e1:34:0e:c5:0b:9d:64:b1:ae:ae:02:22:c9:cc:15:7a:da: 67:c5:07:02:8d:bf:4c:05:8c:c8:8c:d1:42:30:ef:fa:db:b7: 7e:21:c3:53:e2:6c:2d:31:89:51:2d:70:f0:fe:47:b1:a8:87: 0d:c0:f3:40:00:9e:6d:b6:65:71:79:06:81:a0:e0:21:a0:15: 82:70:05:e6:37:14:b2:eb:62:bd:0f:93:b4:24:c8:1c:23:22: 56:63:87:0d:b4:31:b1:d0:c1:89:c2:e0:69:51:09:bb:66:86: 43:22:f3:fb:9a:d7:69:a7:01:6e:c2:df:da:ff:16:54:f5:1c: 9c:4c:c3:2e:df:26:b9:60:fb:69:73:ac:ad:ff:b8:95:00:b8: 2d:d9:e2:3e:87:e6:6b:c7:a4:5e:cc:01:c3:74:7f:88:94:94: cb:fa:e8:08:81:5b:63:31:b7:99:d8:aa:5c:06:f3:01:9b:7b: 46:81:5a:97:f2:2b:af:6f:58:b0:b9:41:96:c2:5a:4e:86:13: 0d:7e:f0:97:28:e9:89:36:d1:a2:ee:46:d1:83:a2:d7:fd:8e: 20:b5:0b:fa -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUVRaJ0IcHH+hpJLa33BceiJs2m6AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMzMwOFoX DTI3MDUwMjAwMzgwOFowMzExMC8GA1UEAxMoRkMxNzEwRTJBOTJGNkQ3MEJEMzk0 NUJGN0NEOEM1QzFBMjk0RUYxRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALRrdVpRbrEOlf/Pgr4dPrHn+YcDfb820giTcpGbkZT/WJkCfesIBGEx5/3d 3VBT/JXwmg0T9f91EJLaYxTXAF8lcDGdxmWHrWrzDIYAWmKXwFYeE2mcIbjaiDVX YA7B+gUUne2Dsw379NZGIvtLdk4fG3xxDI2N56/YWbD7YJ81SI9Wcok9p2P+G7Yk CgqqJSU4Jbc/xOpgt80QgkYIPtZ0Hh1dltkSSn4n88LV2Vzk9C1n4kSnKbiJ0PAd 0vF0zO6cvm2ZA8miIBBYYVcMV7KuWgUEEGmEpMMVkSZnVEZ6FXE/dd5j/Xna8NmX kktclD65M20S8SzdZi0HA/MBJHECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPwXEOKpL21wvTlFv3zYxcGilO8dMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzUxMjM0YzRhLWE4ZmYtNDAzNi04NDIwLWRhODE2MjExMTgwNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81MTIzNGM0 YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMC9GQzE3MTBFMkE5MkY2RDcw QkQzOTQ1QkY3Q0Q4QzVDMUEyOTRFRjFELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnQ8+MA0GCSqGSIb3DQEBCwUAA4IBAQA1+DVSL449MV9dQLeTcLU4RD+FqtVs NeixEtviWstKO4XPfEJZ4TQOxQudZLGurgIiycwVetpnxQcCjb9MBYzIjNFCMO/6 27d+IcNT4mwtMYlRLXDw/kexqIcNwPNAAJ5ttmVxeQaBoOAhoBWCcAXmNxSy62K9 D5O0JMgcIyJWY4cNtDGx0MGJwuBpUQm7ZoZDIvP7mtdppwFuwt/a/xZU9RycTMMu 3ya5YPtpc6yt/7iVALgt2eI+h+Zrx6RezAHDdH+IlJTL+ugIgVtjMbeZ2KpcBvMB m3tGgVqX8iuvb1iwuUGWwlpOhhMNfvCXKOmJNtGi7kbRg6LX/Y4gtQv6 -----END CERTIFICATE-----Generated at Tue May 12 22:38:52 2026 by rpki-client