$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1FF488AB707220858C10BA99E5944DE409195015.cer File: 1FF488AB707220858C10BA99E5944DE409195015.cer (raw, json) Hash identifier: s3OdZgWoYzbILS6nLhDjltPgQVeUAdtrwtVkthCoGO4= Subject key identifier: 1F:F4:88:AB:70:72:20:85:8C:10:BA:99:E5:94:4D:E4:09:19:50:15 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2BB218B608D4E96941574AEA11B56C2802C1C5E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:48:53 +0000 Certificate not after: Sun 02 May 2027 01:53:53 +0000 Subordinate resources: IP: 103.189.114.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b2:18:b6:08:d4:e9:69:41:57:4a:ea:11:b5:6c:28:02:c1:c5:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:48:53 2026 GMT Not After : May 2 01:53:53 2027 GMT Subject: CN=1FF488AB707220858C10BA99E5944DE409195015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ca:32:44:7d:84:dd:2f:02:43:da:7a:d6:77: 42:54:fd:cf:39:72:9d:c8:3f:2c:9b:88:0e:d4:39: bd:ea:d2:6f:cb:71:6b:b8:8e:5d:bc:2e:0a:95:af: e2:44:46:76:b0:87:56:45:d5:1d:7c:e6:ea:10:e2: 07:c9:8e:b1:9a:e7:89:90:d2:f8:9e:f0:1d:33:e8: 64:6c:a2:72:f2:3e:63:92:04:da:2d:33:31:44:9c: d4:14:eb:e0:ae:8d:26:ca:a4:53:30:66:30:0c:c6: d0:42:a4:80:e8:f1:4e:8a:37:c4:78:f5:02:4b:9a: 22:8e:9b:1e:37:10:2d:46:f6:77:a7:bf:a8:58:e9: 62:9d:14:46:64:76:50:16:86:62:3d:10:69:9d:b5: fe:0b:7d:36:2c:68:2a:10:35:cf:22:36:4d:79:69: c0:51:40:bc:92:b5:69:30:b0:82:17:8e:dc:17:db: e4:20:fd:69:8a:dc:63:ea:b7:19:8b:90:f2:fb:b9: 44:9b:f7:ca:0c:75:63:19:f3:e2:fe:2c:c2:14:e1: ae:75:94:31:84:d1:b0:21:dd:97:c9:aa:a0:d2:5a: 3d:8b:e2:fd:f9:a7:a7:3b:24:23:ef:5e:da:31:b8: 19:e9:17:e3:fe:07:6a:b6:3a:df:5b:8a:0e:f7:97: 97:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:F4:88:AB:70:72:20:85:8C:10:BA:99:E5:94:4D:E4:09:19:50:15 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/1FF488AB707220858C10BA99E5944DE409195015.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.114.0/24 Signature Algorithm: sha256WithRSAEncryption 42:5f:bc:75:b5:97:10:c7:32:f6:c3:ed:25:93:be:d5:de:eb: 48:82:9d:d1:18:7a:f4:d5:96:e0:d7:64:18:83:13:c9:fd:10: 9e:db:dd:31:8d:02:c5:83:1e:3e:a7:c3:c4:36:56:0b:f4:5a: 1b:b3:6a:72:e1:c4:3e:43:b3:c5:76:a5:a7:34:bc:d4:53:08: e1:a5:5f:02:6e:6b:f9:6e:e7:29:63:c3:d2:a0:60:86:66:7a: 84:e8:83:13:9f:22:75:e4:8e:bd:03:c3:4e:3b:d9:1b:61:9d: ef:59:38:4d:0f:7f:34:de:22:34:e4:fb:84:c8:08:76:60:1d: a5:0e:0e:56:08:78:94:46:5e:27:c6:0c:49:e3:d6:c8:54:8b: 96:e0:d3:7e:74:b3:8c:66:47:f2:8b:5b:d2:32:d2:0b:df:18: ae:48:2b:9f:17:c6:0d:b9:39:6e:4e:10:db:f8:3a:9f:82:63: e9:3a:17:b6:7a:28:31:90:46:7d:64:23:84:88:df:0b:66:b7: 83:8f:21:24:32:fd:39:5a:eb:63:49:31:f8:eb:52:7f:f0:d9: 1b:5a:e8:88:10:7d:8c:2f:78:cc:a0:f4:a3:02:a4:0a:f5:79: af:b2:28:ea:4f:03:6f:e4:99:91:a9:0f:ff:ac:b6:33:8f:f9: ef:12:87:89 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUK7IYtgjU6WlBV0rqEbVsKALBxegwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDg1M1oX DTI3MDUwMjAxNTM1M1owMzExMC8GA1UEAxMoMUZGNDg4QUI3MDcyMjA4NThDMTBC QTk5RTU5NDRERTQwOTE5NTAxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIDKMkR9hN0vAkPaetZ3QlT9zzlyncg/LJuIDtQ5verSb8txa7iOXbwuCpWv 4kRGdrCHVkXVHXzm6hDiB8mOsZrniZDS+J7wHTPoZGyicvI+Y5IE2i0zMUSc1BTr 4K6NJsqkUzBmMAzG0EKkgOjxToo3xHj1AkuaIo6bHjcQLUb2d6e/qFjpYp0URmR2 UBaGYj0QaZ21/gt9NixoKhA1zyI2TXlpwFFAvJK1aTCwgheO3Bfb5CD9aYrcY+q3 GYuQ8vu5RJv3ygx1Yxnz4v4swhThrnWUMYTRsCHdl8mqoNJaPYvi/fmnpzskI+9e 2jG4GekX4/4HarY631uKDveXl5UCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB/0iKtwciCFjBC6meWUTeQJGVAVMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2MzNTliNmEzLWI3NGItNGJhYS05OTNhLTgxOGZiNzIxMDcyMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jMzU5YjZh My1iNzRiLTRiYWEtOTkzYS04MThmYjcyMTA3MjIvMC8xRkY0ODhBQjcwNzIyMDg1 OEMxMEJBOTlFNTk0NERFNDA5MTk1MDE1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ71yMA0GCSqGSIb3DQEBCwUAA4IBAQBCX7x1tZcQxzL2w+0lk77V3utIgp3R GHr01Zbg12QYgxPJ/RCe290xjQLFgx4+p8PENlYL9Fobs2py4cQ+Q7PFdqWnNLzU UwjhpV8Cbmv5bucpY8PSoGCGZnqE6IMTnyJ15I69A8NOO9kbYZ3vWThND3803iI0 5PuEyAh2YB2lDg5WCHiURl4nxgxJ49bIVIuW4NN+dLOMZkfyi1vSMtIL3xiuSCuf F8YNuTluThDb+DqfgmPpOhe2eigxkEZ9ZCOEiN8LZreDjyEkMv05WutjSTH461J/ 8NkbWuiIEH2ML3jMoPSjAqQK9XmvsijqTwNv5JmRqQ//rLYzj/nvEoeJ -----END CERTIFICATE-----Generated at Tue May 12 22:32:33 2026 by rpki-client