$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer File: 16FC1DF2D807E338985DE30932EA34E250228796.cer (raw, json) Hash identifier: lb8p7PfU6hY3wSUl8ELN/uAJZQSQ4Dd6DYvo5v6ovMo= Subject key identifier: 16:FC:1D:F2:D8:07:E3:38:98:5D:E3:09:32:EA:34:E2:50:22:87:96 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4E579E3EC4E040F1978990A9EC44E6BAEEA0B4D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:21:51 +0000 Certificate not after: Sun 02 May 2027 00:26:51 +0000 Subordinate resources: IP: 103.119.116.0/22 IP: 2403:4340::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:57:9e:3e:c4:e0:40:f1:97:89:90:a9:ec:44:e6:ba:ee:a0:b4:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:21:51 2026 GMT Not After : May 2 00:26:51 2027 GMT Subject: CN=16FC1DF2D807E338985DE30932EA34E250228796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:99:ea:b7:df:40:51:5d:10:bd:39:d1:e9:a3: f0:a9:56:bc:b8:74:61:cf:e4:83:9b:2d:fa:c5:ae: ad:d0:43:60:78:e2:47:32:c5:77:6c:06:d0:04:94: 68:1f:cc:51:70:ba:cd:ad:14:77:c3:9c:ba:f8:3e: 64:c0:88:e5:47:f5:f6:6b:25:16:5b:cb:ee:5d:54: 72:96:61:dc:db:24:66:15:cb:23:55:48:aa:d6:d3: dc:7f:4e:22:3e:52:5f:ab:cc:1f:8a:32:9b:e6:11: b7:7a:f8:76:05:4b:e4:d9:49:d2:dd:7b:c0:81:f1: 6b:f1:0d:a3:56:e1:51:97:fd:2a:a4:05:c3:f6:c6: 0c:15:09:32:40:96:99:7d:51:20:05:af:13:9a:7e: ea:c4:21:19:4f:e9:19:fb:48:b6:bb:5f:c2:fe:3c: 1b:95:13:0e:22:00:26:4c:d2:fb:a5:b5:3d:39:05: 16:40:4a:cd:53:dc:70:5b:eb:cf:dd:1e:e9:34:d0: b2:76:24:69:18:c1:71:42:bc:8a:32:26:24:d1:af: 1b:48:e2:a4:bc:fe:bb:6f:cd:41:f8:cf:a1:71:60: d1:ab:f3:9d:0f:d0:5d:a8:40:77:50:e2:c5:75:ce: c9:1f:a3:05:ea:77:77:d4:89:9e:bc:fb:78:46:0c: 3f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 16:FC:1D:F2:D8:07:E3:38:98:5D:E3:09:32:EA:34:E2:50:22:87:96 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.119.116.0/22 IPv6: 2403:4340::/32 Signature Algorithm: sha256WithRSAEncryption 59:cc:28:5d:4e:e0:c5:71:cf:18:b2:18:5a:0d:e5:d5:1c:d4: 57:72:fe:48:ee:f2:4b:b8:c9:44:da:98:f7:c1:36:77:e4:a4: 91:36:bf:2f:e2:cf:35:7c:66:f9:51:2e:42:c5:14:ec:4c:08: f7:80:40:9c:51:64:9d:e2:4d:27:b2:d0:a7:87:bf:ee:6e:13: dc:47:6d:a6:d6:99:bb:b4:a3:f2:45:a9:4f:5f:ec:4b:3f:19: bf:56:ba:05:00:38:13:d4:f5:30:92:9c:e8:f4:21:9b:61:f4: dc:7a:45:64:de:42:e0:23:f0:57:03:2e:4d:51:22:a2:db:f0: 3f:63:68:38:fb:52:ac:b6:d3:b4:78:3f:38:4e:fe:72:7c:e9: a0:0f:72:63:46:cc:4d:76:98:2b:34:a5:d9:b8:45:60:6d:eb: 1b:12:72:e5:77:b9:80:ca:24:e4:aa:ab:7d:c3:e6:59:9c:1c: bf:4b:79:9c:23:c0:66:73:af:d0:68:eb:77:cc:93:aa:d3:85: 1a:43:f0:86:96:83:81:ba:e8:7c:e1:a7:cd:63:bd:33:6b:4c: 64:82:92:1b:e1:a3:11:95:30:6f:32:f3:b0:f1:26:e8:61:4c: e0:fc:5d:d5:3f:44:50:65:75:13:43:79:bd:7a:6a:ed:89:f5: 62:12:d9:90 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUTleePsTgQPGXiZCp7ETmuu6gtNIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjE1MVoX DTI3MDUwMjAwMjY1MVowMzExMC8GA1UEAxMoMTZGQzFERjJEODA3RTMzODk4NURF MzA5MzJFQTM0RTI1MDIyODc5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOZ6rffQFFdEL050emj8KlWvLh0Yc/kg5st+sWurdBDYHjiRzLFd2wG0ASU aB/MUXC6za0Ud8Ocuvg+ZMCI5Uf19mslFlvL7l1UcpZh3NskZhXLI1VIqtbT3H9O Ij5SX6vMH4oym+YRt3r4dgVL5NlJ0t17wIHxa/ENo1bhUZf9KqQFw/bGDBUJMkCW mX1RIAWvE5p+6sQhGU/pGftItrtfwv48G5UTDiIAJkzS+6W1PTkFFkBKzVPccFvr z90e6TTQsnYkaRjBcUK8ijImJNGvG0jipLz+u2/NQfjPoXFg0avznQ/QXahAd1Di xXXOyR+jBep3d9SJnrz7eEYMPy0CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBb8HfLYB+M4mF3jCTLqNOJQIoeWMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzNlODk1MGYwLTNiMTQtNGE2ZC1iMzBmLTc1Mzc5Y2IyZWJjZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zZTg5NTBm MC0zYjE0LTRhNmQtYjMwZi03NTM3OWNiMmViY2UvMC8xNkZDMURGMkQ4MDdFMzM4 OTg1REUzMDkzMkVBMzRFMjUwMjI4Nzk2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ3d0MA0EAgACMAcDBQAkA0NAMA0GCSqGSIb3DQEBCwUAA4IBAQBZzChdTuDF cc8YshhaDeXVHNRXcv5I7vJLuMlE2pj3wTZ35KSRNr8v4s81fGb5US5CxRTsTAj3 gECcUWSd4k0nstCnh7/ubhPcR22m1pm7tKPyRalPX+xLPxm/VroFADgT1PUwkpzo 9CGbYfTcekVk3kLgI/BXAy5NUSKi2/A/Y2g4+1KsttO0eD84Tv5yfOmgD3JjRsxN dpgrNKXZuEVgbesbEnLld7mAyiTkqqt9w+ZZnBy/S3mcI8Bmc6/QaOt3zJOq04Ua Q/CGloOBuuh84afNY70za0xkgpIb4aMRlTBvMvOw8SboYUzg/F3VP0RQZXUTQ3m9 emrtifViEtmQ -----END CERTIFICATE-----Generated at Wed May 13 03:16:40 2026 by rpki-client