$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0F839E8933417407BE7F5816D8EA6AF790E1362D.cer File: 0F839E8933417407BE7F5816D8EA6AF790E1362D.cer (raw, json) Hash identifier: f3fxFehuuvwVHQ2hN5By521qrkdyPE/QWlTFIlVWIJs= Subject key identifier: 0F:83:9E:89:33:41:74:07:BE:7F:58:16:D8:EA:6A:F7:90:E1:36:2D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 617A7D59A40F2EF41EA5A2FD3A75329A3AE32445 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:32:10 +0000 Certificate not after: Sun 02 May 2027 01:37:10 +0000 Subordinate resources: IP: 103.80.77.0/24 IP: 103.100.195.0/24 IP: 2001:df6:da00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:7a:7d:59:a4:0f:2e:f4:1e:a5:a2:fd:3a:75:32:9a:3a:e3:24:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:32:10 2026 GMT Not After : May 2 01:37:10 2027 GMT Subject: CN=0F839E8933417407BE7F5816D8EA6AF790E1362D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bc:9b:1c:db:24:b9:8e:dc:c5:a3:be:2a:2a: a3:a4:a7:3c:86:c9:9c:39:8d:21:d2:a7:05:26:7c: b1:21:e9:9c:2b:0d:7c:ad:bb:cc:2c:e8:f1:c2:dd: 56:a1:2d:b6:ea:b2:76:31:c9:73:99:79:2d:db:57: 6e:18:b8:bb:f7:87:a7:21:49:5b:b1:a6:a1:55:88: 45:16:c2:17:c9:54:d8:7e:d0:c4:b3:24:51:5e:f7: 57:6c:a4:38:2e:a8:ae:53:ff:a5:fc:2a:31:f2:64: d8:2f:9a:da:9c:5a:24:4c:50:12:dd:41:70:f2:ad: 02:7b:c1:aa:9c:fc:d5:0c:a4:80:4f:38:1c:b5:05: 57:06:d7:fc:9b:e8:83:be:50:f2:4f:91:9e:42:8c: d5:7e:16:de:b6:e3:bc:bb:49:94:c8:e8:f9:7a:9c: 2c:8c:d5:1e:31:d9:83:07:bc:ce:64:65:36:3c:e8: 1e:ce:3c:5c:b0:e4:64:f1:9e:ca:74:93:58:55:23: e9:54:56:96:1d:55:d9:7b:56:3d:45:88:58:2c:d9: 5a:59:bc:cc:3c:33:f0:79:c9:58:df:82:9d:e6:0d: 51:71:02:14:05:91:6e:eb:1d:d7:a9:4f:4f:8b:23: 1b:e3:01:96:a5:c5:90:50:97:87:c2:c7:b7:14:26: 03:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0F:83:9E:89:33:41:74:07:BE:7F:58:16:D8:EA:6A:F7:90:E1:36:2D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.80.77.0/24 103.100.195.0/24 IPv6: 2001:df6:da00::/48 Signature Algorithm: sha256WithRSAEncryption 5f:a7:52:7e:f8:f3:40:a3:f5:8b:af:fc:3a:20:d2:97:70:a0: 03:c5:4f:d0:98:22:67:80:69:60:22:9c:ed:d5:53:05:ce:ef: d6:5d:08:a2:66:44:f9:27:1e:e9:2c:04:06:88:e6:51:01:68: 13:20:6b:cf:90:e5:26:9d:99:d0:01:03:d8:7c:95:37:3d:76: b9:56:ba:04:95:05:c1:12:1a:55:b6:6d:57:04:56:00:b1:6f: 22:b4:d1:4a:46:4f:3d:96:47:ef:78:96:a0:18:d6:1a:b6:36: 80:d1:7e:d1:12:38:4b:d8:0e:af:35:5c:68:f5:c6:8f:f5:d4: 65:30:52:e3:1a:9d:de:96:0d:d8:11:ea:23:b6:90:d9:2f:71: 5b:7c:16:ca:34:43:fb:10:83:95:15:f8:9c:b1:51:ff:df:ff: 3a:6c:d7:ac:2c:87:39:17:c1:95:40:3c:10:61:75:8e:11:9a: 2e:94:5a:f9:77:0d:f0:54:df:3d:1d:a8:3b:d6:f2:86:ba:e9: ea:d5:13:79:30:0b:f5:30:89:c6:91:50:cc:b4:ce:84:e4:ad: ed:06:e0:1f:44:01:72:0b:64:32:2a:2e:95:84:38:aa:76:fa: 87:8b:93:25:40:fd:4c:49:01:86:67:6f:1b:a7:10:ce:3b:3a: 23:cb:d1:cc -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUYXp9WaQPLvQepaL9OnUymjrjJEUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzIxMFoX DTI3MDUwMjAxMzcxMFowMzExMC8GA1UEAxMoMEY4MzlFODkzMzQxNzQwN0JFN0Y1 ODE2RDhFQTZBRjc5MEUxMzYyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALK8mxzbJLmO3MWjvioqo6SnPIbJnDmNIdKnBSZ8sSHpnCsNfK27zCzo8cLd VqEttuqydjHJc5l5LdtXbhi4u/eHpyFJW7GmoVWIRRbCF8lU2H7QxLMkUV73V2yk OC6orlP/pfwqMfJk2C+a2pxaJExQEt1BcPKtAnvBqpz81QykgE84HLUFVwbX/Jvo g75Q8k+RnkKM1X4W3rbjvLtJlMjo+XqcLIzVHjHZgwe8zmRlNjzoHs48XLDkZPGe ynSTWFUj6VRWlh1V2XtWPUWIWCzZWlm8zDwz8HnJWN+CneYNUXECFAWRbusd16lP T4sjG+MBlqXFkFCXh8LHtxQmAxsCAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFA+DnokzQXQHvn9YFtjqaveQ4TYtMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E3NGQyMGEzLTNkODMtNGM0Zi05MTM4LTc2YmM3YzUxMGViOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hNzRkMjBh My0zZDgzLTRjNGYtOTEzOC03NmJjN2M1MTBlYjkvMC8wRjgzOUU4OTMzNDE3NDA3 QkU3RjU4MTZEOEVBNkFGNzkwRTEzNjJELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQAZ1BNAwQAZ2TDMA8EAgACMAkDBwAgAQ322gAwDQYJKoZIhvcNAQELBQADggEB AF+nUn7480Cj9Yuv/Dog0pdwoAPFT9CYImeAaWAinO3VUwXO79ZdCKJmRPknHuks BAaI5lEBaBMga8+Q5SadmdABA9h8lTc9drlWugSVBcESGlW2bVcEVgCxbyK00UpG Tz2WR+94lqAY1hq2NoDRftESOEvYDq81XGj1xo/11GUwUuMand6WDdgR6iO2kNkv cVt8Fso0Q/sQg5UV+JyxUf/f/zps16wshzkXwZVAPBBhdY4Rmi6UWvl3DfBU3z0d qDvW8oa66erVE3kwC/UwicaRUMy0zoTkre0G4B9EAXILZDIqLpWEOKp2+oeLkyVA /UxJAYZnbxunEM47OiPL0cw= -----END CERTIFICATE-----Generated at Tue May 12 22:31:53 2026 by rpki-client