$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer File: FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer (raw, json) Hash identifier: uCmps8MHUuNMUrc9dqwURG3sG0AdXpbOc7BDMhoagEQ= Subject key identifier: FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 72BB5E1E18CC48D61D256B0023AFDFBD004D5A43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:43:40 +0000 Certificate not after: Sun 02 May 2027 02:48:40 +0000 Subordinate resources: IP: 160.20.104.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:bb:5e:1e:18:cc:48:d6:1d:25:6b:00:23:af:df:bd:00:4d:5a:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 02:43:40 2026 GMT Not After : May 2 02:48:40 2027 GMT Subject: CN=FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f2:bd:94:b5:ce:0d:f8:6d:49:5f:8a:5a:7e: b7:d7:1c:24:6c:ce:bd:b4:22:1e:e9:04:6c:70:41: 3e:e9:50:09:f4:df:a6:5b:ce:3f:14:96:57:7e:47: 03:e3:fe:b6:01:3f:ba:92:81:80:cc:c3:d0:4f:32: 0b:26:fc:e2:5e:c7:ca:4b:9c:f2:3e:56:40:cf:6c: 8c:af:47:5d:ba:64:08:6f:96:54:cf:27:19:2f:3d: 5a:b8:85:d5:50:91:fb:b7:f3:bd:b4:fa:b4:4d:c7: c5:9a:ee:52:11:05:cf:aa:46:b9:01:17:bf:5e:d8: a0:25:04:08:ed:6a:d8:ba:2e:56:23:54:48:36:5f: 40:3e:13:6c:0a:93:6b:ba:7d:37:70:eb:c3:b8:10: 49:d3:7c:f0:68:02:86:16:06:68:2a:8c:5a:88:9c: 67:b0:a5:b7:39:75:ca:59:91:e9:3d:aa:2e:d6:f7: 57:33:40:34:99:a5:a5:9a:89:ed:d0:39:4a:a0:5d: 7b:36:a3:49:36:94:01:79:1b:14:4a:d0:e9:26:9f: af:aa:3d:f8:73:76:8e:dc:27:57:02:d3:a2:b4:43: fb:8d:e7:35:c1:2b:4e:60:95:7b:38:38:67:15:a1: 03:d7:7a:77:25:ae:a7:96:6d:70:27:e3:1d:73:b1: 42:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.104.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:00:3b:b8:96:7b:79:29:6b:40:72:10:87:6a:dc:c0:f8:eb: 5e:ca:8c:a8:44:4e:6c:c4:d3:fa:aa:f9:76:5e:d2:8c:1c:76: a9:4b:95:3e:3e:48:ae:65:41:9a:79:03:e1:7e:21:b2:a5:5f: 41:7c:e3:56:f1:c4:2b:99:d0:6c:ed:fd:32:60:04:e3:f2:ee: 13:95:7a:7a:1d:15:b4:e1:17:c1:96:c9:09:c6:9b:80:95:8c: e1:3e:16:dd:d2:38:32:00:1f:f9:2a:2c:59:6e:f1:7a:a0:55: 9a:99:13:87:69:36:d1:38:da:62:6d:14:ce:64:46:a3:84:07: e1:6c:1a:7e:c6:77:3c:5a:ae:cc:a5:94:52:05:63:be:a9:47: 78:f0:e7:5d:89:86:c9:c9:9e:a5:f2:f2:6f:a1:a7:c4:3f:c1: 60:31:ab:10:cc:ea:81:94:b7:bf:b4:dc:97:d2:da:03:91:4a: f4:77:4a:56:2e:93:25:f0:c0:b4:c4:a7:a5:06:89:3c:b5:a4: 6c:83:b8:cc:d0:56:e0:37:17:64:2a:ad:4f:10:f3:8d:60:6d: 02:72:1d:d8:f9:c5:77:71:86:af:1b:34:a0:ce:b0:b4:92:2c: 84:94:e6:b1:5f:91:96:56:a0:a9:75:58:e5:97:61:68:03:aa: 9e:b8:0e:89 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUcrteHhjMSNYdJWsAI6/fvQBNWkMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAyNDM0MFoX DTI3MDUwMjAyNDg0MFowMzExMC8GA1UEAxMoRkQ1RkFFOEYyNDFFQzdCNzJCRDRC QTg3OTUyMTY3NkIxREE4RjM4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAInyvZS1zg34bUlfilp+t9ccJGzOvbQiHukEbHBBPulQCfTfplvOPxSWV35H A+P+tgE/upKBgMzD0E8yCyb84l7Hykuc8j5WQM9sjK9HXbpkCG+WVM8nGS89WriF 1VCR+7fzvbT6tE3HxZruUhEFz6pGuQEXv17YoCUECO1q2LouViNUSDZfQD4TbAqT a7p9N3Drw7gQSdN88GgChhYGaCqMWoicZ7Cltzl1ylmR6T2qLtb3VzNANJmlpZqJ 7dA5SqBdezajSTaUAXkbFErQ6Safr6o9+HN2jtwnVwLTorRD+43nNcErTmCVezg4 ZxWhA9d6dyWup5ZtcCfjHXOxQh8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP1fro8kHse3K9S6h5UhZ2sdqPOMMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ZiYjVmYTRhLWJlYTYtNDY0Zi1iNDA5LTExZDlhMzc2MWE2Yy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mYmI1ZmE0 YS1iZWE2LTQ2NGYtYjQwOS0xMWQ5YTM3NjFhNmMvMC9GRDVGQUU4RjI0MUVDN0I3 MkJENEJBODc5NTIxNjc2QjFEQThGMzhDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBRoMA0GCSqGSIb3DQEBCwUAA4IBAQAaADu4lnt5KWtAchCHatzA+Oteyoyo RE5sxNP6qvl2XtKMHHapS5U+PkiuZUGaeQPhfiGypV9BfONW8cQrmdBs7f0yYATj 8u4TlXp6HRW04RfBlskJxpuAlYzhPhbd0jgyAB/5KixZbvF6oFWamROHaTbRONpi bRTOZEajhAfhbBp+xnc8Wq7MpZRSBWO+qUd48OddiYbJyZ6l8vJvoafEP8FgMasQ zOqBlLe/tNyX0toDkUr0d0pWLpMl8MC0xKelBok8taRsg7jM0FbgNxdkKq1PEPON YG0Cch3Y+cV3cYavGzSgzrC0kiyElOaxX5GWVqCpdVjll2FoA6qeuA6J -----END CERTIFICATE-----Generated at Tue May 12 22:10:06 2026 by rpki-client