$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer File: 02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer (raw, json) Hash identifier: C08OEag9neYL/MYw7J6c84+xcRwCLhirNyNVaehjfsA= Subject key identifier: 02:F8:6D:79:30:66:6A:C9:B0:80:9D:7A:E4:2C:20:B1:D2:9C:A9:97 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 36EA3F0BF6D40C09170E8C701895D1661100F233 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:42:45 +0000 Certificate not after: Sun 02 May 2027 00:47:45 +0000 Subordinate resources: IP: 103.190.60.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ea:3f:0b:f6:d4:0c:09:17:0e:8c:70:18:95:d1:66:11:00:f2:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:42:45 2026 GMT Not After : May 2 00:47:45 2027 GMT Subject: CN=02F86D7930666AC9B0809D7AE42C20B1D29CA997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1f:fd:dd:f0:23:24:a8:62:33:f3:c5:90:84: aa:86:61:1f:f8:7b:a7:45:f8:3a:8c:cf:c1:9e:1b: c6:0c:1b:ab:78:ca:ae:f3:2a:82:4c:91:d6:4a:51: 48:c6:64:5f:d2:c0:1c:1e:db:ed:64:a1:e9:31:8e: 74:cf:9d:23:72:01:d1:07:84:39:58:09:bc:0a:97: 2e:83:93:29:a6:7b:ef:2c:8d:dc:b9:d1:e7:42:44: 45:0b:e5:6b:93:a0:af:e6:25:39:6f:14:57:a5:bf: 9c:a7:40:6a:f1:01:3d:03:76:97:d0:1b:59:08:10: 05:43:a9:21:00:a9:b2:4c:d5:10:72:38:eb:06:70: 54:75:dc:02:08:ea:82:8c:72:eb:f4:0b:20:ef:b8: 8f:62:8e:cd:85:40:b8:ba:fc:6d:10:6a:d3:ea:a9: 1d:91:0f:cc:fb:18:45:8d:1f:03:f7:f5:3a:82:7f: 8e:73:6a:89:f5:d7:15:c3:ee:c6:ff:e9:ce:0d:54: 67:7b:80:44:12:22:ea:08:3a:3a:41:eb:ee:93:74: 30:81:69:00:80:1a:d4:ab:f0:54:62:5d:90:0d:b8: 33:13:b1:17:91:4d:e0:6e:37:41:da:f7:fc:09:83: a5:8a:ec:69:ec:5c:de:0c:b2:b2:75:31:af:6f:9c: b1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:F8:6D:79:30:66:6A:C9:B0:80:9D:7A:E4:2C:20:B1:D2:9C:A9:97 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.60.0/23 Signature Algorithm: sha256WithRSAEncryption 99:b5:13:74:09:cd:f0:5d:bc:68:c5:42:c9:b4:e2:71:c8:5a: ea:69:b1:64:2e:78:de:8b:c3:14:20:a0:54:c9:8a:19:6b:5c: 92:c0:0e:68:2c:dc:e9:75:97:bd:a9:4c:5d:08:34:8c:38:86: 72:d9:32:d8:5d:79:2c:49:ff:a2:7d:44:bc:e1:0b:0c:a6:5a: c7:2c:6f:f8:2b:a2:ec:01:71:19:e8:e1:6d:00:ae:3f:47:87: 87:92:4e:3d:4e:c8:d2:66:02:3c:34:c8:c1:73:2f:fd:17:dd: 10:86:97:a1:cb:f0:80:f3:89:af:5a:9c:e3:78:20:53:aa:75: 1c:33:b9:43:9d:a5:c4:5f:50:88:2a:b5:fd:d6:80:3b:8f:ea: 2b:a2:4d:12:68:ca:7e:b4:35:3e:2f:ed:e4:0f:cc:08:74:e5: 52:90:b7:12:17:46:db:8f:53:03:50:d2:16:74:3d:9b:4e:61: cd:93:26:ef:49:12:41:a7:de:ac:b7:0f:34:a4:72:68:55:1c: da:46:6e:5e:2f:03:e3:59:fc:8a:ec:8e:3d:7a:e9:02:c4:13: 1b:e5:16:9e:59:af:07:4a:58:a6:ea:f6:91:09:95:43:a6:5f: 3a:60:7c:73:6c:a2:4c:bc:78:1e:18:be:43:80:da:98:20:bb: 4c:04:88:b8 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUNuo/C/bUDAkXDoxwGJXRZhEA8jMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDI0NVoX DTI3MDUwMjAwNDc0NVowMzExMC8GA1UEAxMoMDJGODZENzkzMDY2NkFDOUIwODA5 RDdBRTQyQzIwQjFEMjlDQTk5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJcf/d3wIySoYjPzxZCEqoZhH/h7p0X4OozPwZ4bxgwbq3jKrvMqgkyR1kpR SMZkX9LAHB7b7WSh6TGOdM+dI3IB0QeEOVgJvAqXLoOTKaZ77yyN3LnR50JERQvl a5Ogr+YlOW8UV6W/nKdAavEBPQN2l9AbWQgQBUOpIQCpskzVEHI46wZwVHXcAgjq goxy6/QLIO+4j2KOzYVAuLr8bRBq0+qpHZEPzPsYRY0fA/f1OoJ/jnNqifXXFcPu xv/pzg1UZ3uARBIi6gg6OkHr7pN0MIFpAIAa1KvwVGJdkA24MxOxF5FN4G43Qdr3 /AmDpYrsaexc3gyysnUxr2+csd8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAL4bXkwZmrJsICdeuQsILHSnKmXMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVlMzE0ODU4LWIzM2EtNGI2NS05YTU1LWRjZTQxZTIyMzg3My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81ZTMxNDg1 OC1iMzNhLTRiNjUtOWE1NS1kY2U0MWUyMjM4NzMvMC8wMkY4NkQ3OTMwNjY2QUM5 QjA4MDlEN0FFNDJDMjBCMUQyOUNBOTk3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ748MA0GCSqGSIb3DQEBCwUAA4IBAQCZtRN0Cc3wXbxoxULJtOJxyFrqabFk Lnjei8MUIKBUyYoZa1ySwA5oLNzpdZe9qUxdCDSMOIZy2TLYXXksSf+ifUS84QsM plrHLG/4K6LsAXEZ6OFtAK4/R4eHkk49TsjSZgI8NMjBcy/9F90Qhpehy/CA84mv WpzjeCBTqnUcM7lDnaXEX1CIKrX91oA7j+orok0SaMp+tDU+L+3kD8wIdOVSkLcS F0bbj1MDUNIWdD2bTmHNkybvSRJBp96stw80pHJoVRzaRm5eLwPjWfyK7I49eukC xBMb5RaeWa8HSlim6vaRCZVDpl86YHxzbKJMvHgeGL5DgNqYILtMBIi4 -----END CERTIFICATE-----Generated at Tue May 12 22:45:41 2026 by rpki-client