$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.cer File: 01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.cer (raw, json) Hash identifier: YV3RvZCm6NtWWYT+vnNBY7jh0dFnNPkeUg4RfrHM/yk= Subject key identifier: 01:F3:FD:C8:60:81:CF:E1:B3:4E:89:CC:89:FD:13:E3:FC:55:20:A0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0444E6999E1536C9863F262F9DF939AD165AA302 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:01:07 +0000 Certificate not after: Sun 02 May 2027 02:06:07 +0000 Subordinate resources: IP: 103.190.94.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:44:e6:99:9e:15:36:c9:86:3f:26:2f:9d:f9:39:ad:16:5a:a3:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:01:07 2026 GMT Not After : May 2 02:06:07 2027 GMT Subject: CN=01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f6:7e:49:ae:ce:88:e6:f2:14:30:00:66:ec: 47:e8:5d:20:2c:52:f8:82:b7:1a:48:ef:b9:f2:f0: 46:3b:ed:ef:59:4e:3e:90:65:71:2d:32:da:bb:e7: ff:1b:82:e5:ea:40:84:0c:b2:81:28:d2:63:3f:d6: b5:7b:5a:63:ff:da:42:b8:c2:18:a0:7e:5f:7d:f1: af:c5:bf:ff:f9:47:3f:40:4b:c7:66:df:c7:b0:d4: a5:b3:01:da:7b:7d:4a:da:a8:3e:e3:76:e0:02:87: c4:84:8f:09:de:cb:6a:d2:ae:57:a9:e7:b4:5a:7f: 19:42:6d:38:19:b3:40:f6:6f:52:be:90:09:7f:c5: 9f:9f:3f:9e:78:29:8b:44:1f:5f:d4:cc:e1:d4:81: 28:b1:8e:38:be:be:6c:a6:41:b7:5f:75:78:f5:b1: 46:d1:af:41:04:a5:0f:2d:b1:74:8d:de:02:ce:e3: 6e:9c:89:1e:88:7d:1b:12:e3:fa:5b:ea:20:c5:5e: a9:2d:bd:2f:76:c9:32:08:f6:56:fd:2a:79:46:4b: a8:45:17:55:67:55:d8:6e:8a:a7:23:eb:71:05:95: c7:51:f0:3f:9c:bb:b2:11:de:3d:c2:f3:c1:c0:a4: ca:56:55:19:ae:32:52:8c:90:a0:03:8d:fd:69:51: 93:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:F3:FD:C8:60:81:CF:E1:B3:4E:89:CC:89:FD:13:E3:FC:55:20:A0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.94.0/24 Signature Algorithm: sha256WithRSAEncryption 41:3d:24:ef:24:18:b1:42:36:46:81:29:7e:f6:e6:d1:c7:ba: 64:8f:0a:5a:60:96:b3:63:eb:a2:90:df:5e:d2:ce:d1:ec:4a: 28:37:34:05:6f:d7:8f:a9:84:91:de:c5:5c:51:e8:c3:13:12: af:fa:0a:f3:0c:74:14:f7:b2:31:e4:23:f3:50:3e:31:43:45: b8:f1:e8:0d:d8:9b:ee:ad:39:9e:59:be:43:34:94:bc:59:1f: 45:ca:7e:f7:eb:b9:6f:6b:b6:c6:b7:55:d1:5f:38:95:9f:6b: 90:b7:87:50:ef:42:2b:0e:57:db:97:b6:7d:7a:da:1a:0a:98: 18:25:75:d9:41:0e:6f:d7:15:f2:31:8d:5f:40:c9:cc:da:e4: 28:37:8f:76:d7:a1:47:f0:17:eb:e7:66:a7:48:c2:5c:54:97: f4:5f:94:f4:42:66:96:c0:bf:8f:c2:18:1f:47:9d:5e:b5:c5: d1:6a:7b:63:e7:a0:6b:6a:43:d5:02:f0:10:bc:d7:76:e5:c1: ad:cd:5c:4f:a4:a9:c6:a7:65:4e:61:09:c1:9c:e2:fb:f7:46: c5:1a:4c:e5:80:0b:61:a1:8e:bc:7a:80:45:4c:63:32:d0:f5: 85:49:ae:7a:7a:1f:25:65:46:b6:b7:ae:50:31:b2:2f:26:8c: 79:ce:88:e9 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUBETmmZ4VNsmGPyYvnfk5rRZaowIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDEwN1oX DTI3MDUwMjAyMDYwN1owMzExMC8GA1UEAxMoMDFGM0ZEQzg2MDgxQ0ZFMUIzNEU4 OUNDODlGRDEzRTNGQzU1MjBBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO/2fkmuzojm8hQwAGbsR+hdICxS+IK3GkjvufLwRjvt71lOPpBlcS0y2rvn /xuC5epAhAyygSjSYz/WtXtaY//aQrjCGKB+X33xr8W///lHP0BLx2bfx7DUpbMB 2nt9StqoPuN24AKHxISPCd7LatKuV6nntFp/GUJtOBmzQPZvUr6QCX/Fn58/nngp i0QfX9TM4dSBKLGOOL6+bKZBt191ePWxRtGvQQSlDy2xdI3eAs7jbpyJHoh9GxLj +lvqIMVeqS29L3bJMgj2Vv0qeUZLqEUXVWdV2G6KpyPrcQWVx1HwP5y7shHePcLz wcCkylZVGa4yUoyQoAON/WlRk6kCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAHz/chggc/hs06JzIn9E+P8VSCgMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q3OTgwOTFlLWMxYWUtNDA0OS05NmQyLWM0Y2UzN2ZkYzM1Yi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kNzk4MDkx ZS1jMWFlLTQwNDktOTZkMi1jNGNlMzdmZGMzNWIvMC8wMUYzRkRDODYwODFDRkUx QjM0RTg5Q0M4OUZEMTNFM0ZDNTUyMEEwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ75eMA0GCSqGSIb3DQEBCwUAA4IBAQBBPSTvJBixQjZGgSl+9ubRx7pkjwpa YJazY+uikN9e0s7R7EooNzQFb9ePqYSR3sVcUejDExKv+grzDHQU97Ix5CPzUD4x Q0W48egN2JvurTmeWb5DNJS8WR9Fyn7367lva7bGt1XRXziVn2uQt4dQ70IrDlfb l7Z9etoaCpgYJXXZQQ5v1xXyMY1fQMnM2uQoN49216FH8Bfr52anSMJcVJf0X5T0 QmaWwL+PwhgfR51etcXRantj56BrakPVAvAQvNd25cGtzVxPpKnGp2VOYQnBnOL7 90bFGkzlgAthoY68eoBFTGMy0PWFSa56eh8lZUa2t65QMbIvJox5zojp -----END CERTIFICATE-----Generated at Tue May 12 22:52:31 2026 by rpki-client