$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer File: 15FBEACFAED3F9F332597338F402C8726321A5C0.cer (raw, json) Hash identifier: P5fnCU1ZIB7nRwH4rMs5QsjtuDMCMU0zoEFHl3Wtlgs= Subject key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 46D4805F09DE8CF749C1271B483B3A8737A27442 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:48:38 +0000 Certificate not after: Sun 02 May 2027 01:53:38 +0000 Subordinate resources: IP: 103.44.36.0/22 IP: 203.128.248.0/22 IP: 203.174.5.0/24 IP: 2402:5680::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d4:80:5f:09:de:8c:f7:49:c1:27:1b:48:3b:3a:87:37:a2:74:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:48:38 2026 GMT Not After : May 2 01:53:38 2027 GMT Subject: CN=15FBEACFAED3F9F332597338F402C8726321A5C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2d:5e:b0:d2:a6:fe:c2:49:7d:83:37:c6:e2: ef:1e:ed:51:96:a4:d0:e9:d7:73:50:73:44:0a:6c: 06:b7:6a:a9:d8:fe:a4:44:5f:d5:21:7f:42:99:48: 4d:bb:ca:f6:75:f1:25:6c:ba:ac:31:b1:a1:7d:26: fb:7d:26:36:e6:18:b0:f6:b4:9a:2b:be:94:7b:aa: ba:1e:77:98:30:3d:b7:24:ef:d4:6a:33:7d:85:4d: 68:78:c2:14:0b:ab:b7:37:1e:bc:b7:fa:86:aa:bb: 8f:b6:47:13:86:f8:66:d0:00:11:c8:ce:16:1e:9c: d9:59:4e:24:d9:6a:bc:d1:df:c0:79:70:22:68:06: a9:15:18:d1:5f:d5:81:b9:75:d8:a6:d0:02:a6:02: 5f:97:8e:82:bb:6a:f3:97:49:7a:ba:45:f5:52:bf: 29:6b:ea:59:50:ca:5a:33:ed:15:70:0f:48:af:3a: 1a:ec:19:3d:37:71:92:9f:23:6c:e3:cf:0d:ba:ab: fa:8a:14:c3:07:57:5b:28:db:94:f1:b2:14:8d:67: 7a:b4:03:0a:7c:71:76:66:0f:4a:10:16:f0:be:6f: d4:5a:63:db:59:29:17:5f:9b:d5:e2:e4:ff:95:95: 48:a2:d7:7c:66:0e:35:ae:4b:5d:1b:91:9d:45:2e: c4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.44.36.0/22 203.128.248.0/22 203.174.5.0/24 IPv6: 2402:5680::/32 Signature Algorithm: sha256WithRSAEncryption 19:14:a1:5d:0f:79:d8:05:85:50:b3:a4:62:36:68:20:d8:b5: 00:43:c6:20:f3:5d:8d:1e:96:c2:d6:0a:fa:15:a7:21:92:30: 57:36:f5:4b:40:14:84:ea:ca:2b:f1:97:bd:f3:e7:95:59:9b: ae:74:b4:7e:a3:ce:bb:12:e4:4b:71:14:6c:ad:71:3d:df:d7: cb:27:ee:5d:5a:16:39:ba:4c:14:69:d4:a9:aa:a3:1a:3a:80: 9b:1e:f0:f2:e6:de:71:7a:ea:f7:25:25:41:ad:d8:d2:39:8e: 05:2f:1f:6f:3d:a9:39:dd:8d:42:1b:32:95:b4:7d:c0:ae:52: 1a:a6:b3:c6:38:09:3b:64:5e:09:1d:f4:7f:11:a5:b1:d2:80: 41:c3:70:f7:20:38:5d:0b:cf:71:15:c6:c8:c5:bb:f8:c8:cc: 26:b1:20:0d:e5:f3:fe:6b:61:19:40:c1:eb:61:a2:04:e5:91: 23:d4:20:c1:77:e9:72:97:91:86:cf:f7:d5:1d:21:3d:d6:62: 10:68:16:39:91:f2:a6:97:99:5e:4a:a8:92:8a:7f:ef:a5:f8: 5a:7e:5b:59:aa:f8:86:88:b4:65:1b:40:13:0e:c8:f2:30:ef: 28:b5:62:67:de:45:ee:29:ca:e0:43:5e:35:24:98:e2:c8:c9: be:cf:81:c7 -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIURtSAXwnejPdJwScbSDs6hzeidEIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDgzOFoX DTI3MDUwMjAxNTMzOFowMzExMC8GA1UEAxMoMTVGQkVBQ0ZBRUQzRjlGMzMyNTk3 MzM4RjQwMkM4NzI2MzIxQTVDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALwtXrDSpv7CSX2DN8bi7x7tUZak0OnXc1BzRApsBrdqqdj+pERf1SF/QplI TbvK9nXxJWy6rDGxoX0m+30mNuYYsPa0miu+lHuquh53mDA9tyTv1GozfYVNaHjC FAurtzcevLf6hqq7j7ZHE4b4ZtAAEcjOFh6c2VlOJNlqvNHfwHlwImgGqRUY0V/V gbl12KbQAqYCX5eOgrtq85dJerpF9VK/KWvqWVDKWjPtFXAPSK86GuwZPTdxkp8j bOPPDbqr+ooUwwdXWyjblPGyFI1nerQDCnxxdmYPShAW8L5v1Fpj21kpF1+b1eLk /5WVSKLXfGYONa5LXRuRnUUuxAkCAwEAAaOCAtQwggLQMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBX76s+u0/nzMllzOPQCyHJjIaXAMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2MzMDNlNmJiLTczNDktNDdhYS1hNGNkLTUxZDhhMGUyMjJmNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jMzAzZTZi Yi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8xNUZCRUFDRkFFRDNGOUYz MzI1OTczMzhGNDAyQzg3MjYzMjFBNUMwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATAS AwQCZywkAwQCy4D4AwQAy64FMA0EAgACMAcDBQAkAlaAMA0GCSqGSIb3DQEBCwUA A4IBAQAZFKFdD3nYBYVQs6RiNmgg2LUAQ8Yg812NHpbC1gr6FachkjBXNvVLQBSE 6sor8Ze98+eVWZuudLR+o867EuRLcRRsrXE939fLJ+5dWhY5ukwUadSpqqMaOoCb HvDy5t5xeur3JSVBrdjSOY4FLx9vPak53Y1CGzKVtH3ArlIaprPGOAk7ZF4JHfR/ EaWx0oBBw3D3IDhdC89xFcbIxbv4yMwmsSAN5fP+a2EZQMHrYaIE5ZEj1CDBd+ly l5GGz/fVHSE91mIQaBY5kfKml5leSqiSin/vpfhafltZqviGiLRlG0ATDsjyMO8o tWJn3kXuKcrgQ141JJjiyMm+z4HH -----END CERTIFICATE-----Generated at Tue May 12 22:03:19 2026 by rpki-client