$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0FA563F934776139827AEC94F0EABC66549ABEA7.cer File: 0FA563F934776139827AEC94F0EABC66549ABEA7.cer (raw, json) Hash identifier: 1khdwM+rysmho1iZHOeH+T6PF6lDaRYuK62SQ7NgSKI= Subject key identifier: 0F:A5:63:F9:34:77:61:39:82:7A:EC:94:F0:EA:BC:66:54:9A:BE:A7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6E963BF5BE82C0F2F6ED725B10F6CB2E96A53EF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:41:03 +0000 Certificate not after: Sun 02 May 2027 00:46:03 +0000 Subordinate resources: IP: 103.53.28.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:96:3b:f5:be:82:c0:f2:f6:ed:72:5b:10:f6:cb:2e:96:a5:3e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:41:03 2026 GMT Not After : May 2 00:46:03 2027 GMT Subject: CN=0FA563F934776139827AEC94F0EABC66549ABEA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5d:b6:e9:f6:6d:bd:c5:11:7d:b7:7c:5e:48: 2e:95:8e:5a:09:e2:43:19:93:56:13:b9:d5:17:c1: 49:b3:b5:ec:c9:f9:7b:e1:97:ad:ba:db:f3:c8:84: a7:18:6b:ed:7b:ac:bf:a6:aa:d5:c4:3a:d2:c6:3d: 93:ca:25:33:18:d5:90:c0:71:94:78:66:54:3f:5c: 5f:49:e9:33:7e:ec:a4:16:75:7c:18:68:25:66:90: 53:58:15:eb:c5:05:7c:28:60:de:a4:a6:1f:9f:01: 1a:6e:7b:c1:ea:aa:f5:e2:69:16:44:15:1d:6f:a6: 14:9d:0f:f6:31:66:d4:54:0b:25:be:c7:e4:9a:a8: 1a:51:08:72:b7:89:00:7d:2c:f0:91:e6:e0:3d:b7: 1b:15:fb:47:6d:75:26:0d:35:0d:4f:9e:b5:33:11: 74:b6:89:40:30:79:8e:c3:8c:52:a7:61:e0:5d:34: 19:3d:24:7b:10:c3:9d:73:63:70:fa:fb:d2:21:1c: fc:f7:c6:43:d2:bb:08:60:df:41:01:cf:f4:be:1b: f6:e2:9d:c9:c0:6c:94:a5:af:bd:12:3f:d6:37:f8: 04:ff:0a:fe:53:4e:70:0c:8e:82:e9:25:52:da:df: 42:e3:c5:fc:7f:7e:fa:5a:ba:d1:76:65:c2:97:6c: d3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0F:A5:63:F9:34:77:61:39:82:7A:EC:94:F0:EA:BC:66:54:9A:BE:A7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.53.28.0/23 Signature Algorithm: sha256WithRSAEncryption 98:61:52:d8:c9:f0:ab:48:98:70:c7:65:bb:7e:9f:3d:8a:69: 3a:28:51:cd:02:63:d2:04:3b:50:5a:f7:3a:eb:54:8e:3a:1e: 0c:b1:5a:1e:83:87:ba:53:aa:ea:de:6e:8f:ef:86:ae:fa:f0: d5:ae:68:85:34:55:81:61:a1:82:fd:ac:15:c9:df:a0:c1:a8: 75:4b:71:16:09:df:63:93:e1:35:7d:39:ed:7b:21:43:fb:4e: 1d:cc:2a:c9:52:65:dd:77:f3:20:f7:1c:84:a8:a2:ed:66:7b: c6:ed:b2:0c:74:16:b0:1e:bd:70:ad:d5:27:2d:46:61:8a:46: 12:0f:95:f3:df:b7:30:88:d6:a3:25:66:da:5b:ee:f2:cf:b2: e5:39:a2:fe:31:3d:98:58:bc:d0:24:d8:3a:4e:d0:34:71:94: 19:ee:87:f1:85:b5:34:f3:79:ac:98:c6:a3:22:90:f2:99:92: a6:9c:07:f4:17:0a:4c:54:1e:eb:83:d1:58:a9:59:14:1d:80: d8:60:ab:40:8b:15:27:d2:31:5b:a9:e1:2b:c3:57:84:05:61: 31:91:0e:0f:ff:bd:8a:ec:2d:da:4f:3c:9b:6b:f9:20:ed:8e: 84:17:64:02:b0:0a:d4:ca:97:2f:1b:c5:d8:94:d4:10:7c:66: 3b:63:06:2d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUbpY79b6CwPL27XJbEPbLLpalPvMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDEwM1oX DTI3MDUwMjAwNDYwM1owMzExMC8GA1UEAxMoMEZBNTYzRjkzNDc3NjEzOTgyN0FF Qzk0RjBFQUJDNjY1NDlBQkVBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJZdtun2bb3FEX23fF5ILpWOWgniQxmTVhO51RfBSbO17Mn5e+GXrbrb88iE pxhr7Xusv6aq1cQ60sY9k8olMxjVkMBxlHhmVD9cX0npM37spBZ1fBhoJWaQU1gV 68UFfChg3qSmH58BGm57weqq9eJpFkQVHW+mFJ0P9jFm1FQLJb7H5JqoGlEIcreJ AH0s8JHm4D23GxX7R211Jg01DU+etTMRdLaJQDB5jsOMUqdh4F00GT0kexDDnXNj cPr70iEc/PfGQ9K7CGDfQQHP9L4b9uKdycBslKWvvRI/1jf4BP8K/lNOcAyOgukl UtrfQuPF/H9++lq60XZlwpds0wMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFA+lY/k0d2E5gnrslPDqvGZUmr6nMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzViYjQzZWM4LWY1ODItNDAyNS04ZjM2LTNjZWE1MzlkMGIwOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81YmI0M2Vj OC1mNTgyLTQwMjUtOGYzNi0zY2VhNTM5ZDBiMDkvMC8wRkE1NjNGOTM0Nzc2MTM5 ODI3QUVDOTRGMEVBQkM2NjU0OUFCRUE3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZzUcMA0GCSqGSIb3DQEBCwUAA4IBAQCYYVLYyfCrSJhwx2W7fp89imk6KFHN AmPSBDtQWvc661SOOh4MsVoeg4e6U6rq3m6P74au+vDVrmiFNFWBYaGC/awVyd+g wah1S3EWCd9jk+E1fTnteyFD+04dzCrJUmXdd/Mg9xyEqKLtZnvG7bIMdBawHr1w rdUnLUZhikYSD5Xz37cwiNajJWbaW+7yz7LlOaL+MT2YWLzQJNg6TtA0cZQZ7ofx hbU083msmMajIpDymZKmnAf0FwpMVB7rg9FYqVkUHYDYYKtAixUn0jFbqeErw1eE BWExkQ4P/72K7C3aTzyba/kg7Y6EF2QCsArUypcvG8XYlNQQfGY7YwYt -----END CERTIFICATE-----Generated at Tue May 12 22:16:06 2026 by rpki-client