$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2FE1FA7D4DD3388355BABAD73020013D485C168C.cer File: 2FE1FA7D4DD3388355BABAD73020013D485C168C.cer (raw, json) Hash identifier: uOCisr4rWQl5Ch7frYmsJ/0aZWRM74OcYbPuH7I+28I= Subject key identifier: 2F:E1:FA:7D:4D:D3:38:83:55:BA:BA:D7:30:20:01:3D:48:5C:16:8C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4798320573A613BD8D6349B87DAE5636EFE61D7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:08:28 +0000 Certificate not after: Sun 02 May 2027 02:13:28 +0000 Subordinate resources: IP: 103.95.22.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:98:32:05:73:a6:13:bd:8d:63:49:b8:7d:ae:56:36:ef:e6:1d:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:08:28 2026 GMT Not After : May 2 02:13:28 2027 GMT Subject: CN=2FE1FA7D4DD3388355BABAD73020013D485C168C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f7:e9:c2:28:51:cf:f9:9c:77:41:dd:28:9b: 7d:77:55:dd:65:80:92:56:1f:ab:d8:0e:ef:42:89: df:1b:d0:19:09:d7:74:46:07:96:b0:b1:4a:01:80: 4b:29:ae:eb:06:3a:c6:0a:95:15:cd:1e:a4:9b:a9: 87:ab:77:2b:6d:98:bb:28:4a:42:2e:42:86:49:b3: a6:c8:85:cb:8b:13:e1:51:70:2d:52:ac:1a:14:60: a6:2a:74:79:be:12:6c:41:c0:a5:54:a5:f1:e5:0b: aa:2a:e9:98:07:c6:cd:32:a2:d5:34:03:49:54:58: 61:80:dd:ee:8b:9f:65:cf:b5:1a:f1:f9:5b:35:7a: 22:7f:a0:8a:4d:34:0e:ab:00:ea:3c:6b:88:d6:e2: 40:50:59:5f:c3:f9:54:c6:62:ef:e7:1a:23:57:5f: 43:46:08:b1:63:9c:fe:24:2d:e4:84:e7:09:db:03: f3:b6:1a:e8:c0:87:f6:75:7b:77:db:de:fe:13:91: 44:c9:16:a7:1e:8e:2d:e2:9d:a0:34:cb:73:5d:ad: 2f:6b:ef:0d:a9:53:da:27:82:3c:ae:89:cf:4c:95: ff:f2:13:8a:e2:7c:f0:ab:52:91:5d:67:da:1e:4c: a9:5b:08:78:98:b6:ab:bf:16:87:79:88:0f:d4:48: 08:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:E1:FA:7D:4D:D3:38:83:55:BA:BA:D7:30:20:01:3D:48:5C:16:8C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/2FE1FA7D4DD3388355BABAD73020013D485C168C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.95.22.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:be:c5:fa:55:c4:3a:3d:39:e8:64:e0:68:96:5c:0c:93:ec: f8:6e:1a:8b:79:2c:3b:3a:b4:e4:db:49:43:1c:b7:f9:44:4e: 8b:b2:ec:6f:d0:c4:19:2d:fa:cd:f7:98:e3:36:0c:8e:d7:6d: 09:8a:ae:bd:5c:0b:5c:05:d7:6b:f4:82:cc:28:f5:c9:18:31: be:f0:d4:fc:1e:d3:1c:3e:b9:06:0e:1f:55:c4:a4:bb:13:8f: 38:05:9f:e1:ea:2c:00:01:96:0b:ac:a7:4e:d4:17:f5:53:1a: a2:1e:12:3e:d1:f2:ab:fa:89:1e:64:0a:52:61:90:27:61:49: d9:28:4d:02:71:ba:6c:0c:79:62:8c:01:93:23:60:87:30:53: 9d:e0:86:cf:6b:ce:25:a0:1e:d8:d2:26:f7:b5:72:e1:53:80: 17:62:e8:98:d6:0c:c0:fc:b8:a9:dc:5e:46:7e:dd:2b:b9:3d: a0:1a:c3:27:bb:7c:79:46:69:1e:d2:86:7d:45:52:f8:88:c1: 84:40:e4:90:5b:dc:13:ec:a2:b6:7c:8f:be:58:29:2a:04:35: 06:de:2d:fd:77:e5:b2:85:0b:4c:f7:51:2e:d2:46:e2:d0:40: 01:86:11:06:ee:55:ed:cc:a6:a3:c1:95:bd:96:f4:0d:76:1a: 59:a8:00:8d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUR5gyBXOmE72NY0m4fa5WNu/mHX4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDgyOFoX DTI3MDUwMjAyMTMyOFowMzExMC8GA1UEAxMoMkZFMUZBN0Q0REQzMzg4MzU1QkFC QUQ3MzAyMDAxM0Q0ODVDMTY4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKD36cIoUc/5nHdB3SibfXdV3WWAklYfq9gO70KJ3xvQGQnXdEYHlrCxSgGA Symu6wY6xgqVFc0epJuph6t3K22YuyhKQi5ChkmzpsiFy4sT4VFwLVKsGhRgpip0 eb4SbEHApVSl8eULqirpmAfGzTKi1TQDSVRYYYDd7oufZc+1GvH5WzV6In+gik00 DqsA6jxriNbiQFBZX8P5VMZi7+caI1dfQ0YIsWOc/iQt5ITnCdsD87Ya6MCH9nV7 d9ve/hORRMkWpx6OLeKdoDTLc12tL2vvDalT2ieCPK6Jz0yV//ITiuJ88KtSkV1n 2h5MqVsIeJi2q78Wh3mID9RICF8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC/h+n1N0ziDVbq61zAgAT1IXBaMMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RmZDRmODY5LTRkYjYtNGIwYS1hYWI2LWNkZTQ3YjQ0N2Q3Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kZmQ0Zjg2 OS00ZGI2LTRiMGEtYWFiNi1jZGU0N2I0NDdkNzcvMC8yRkUxRkE3RDRERDMzODgz NTVCQUJBRDczMDIwMDEzRDQ4NUMxNjhDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ18WMA0GCSqGSIb3DQEBCwUAA4IBAQB+vsX6VcQ6PTnoZOBollwMk+z4bhqL eSw7OrTk20lDHLf5RE6Lsuxv0MQZLfrN95jjNgyO120Jiq69XAtcBddr9ILMKPXJ GDG+8NT8HtMcPrkGDh9VxKS7E484BZ/h6iwAAZYLrKdO1Bf1UxqiHhI+0fKr+oke ZApSYZAnYUnZKE0CcbpsDHlijAGTI2CHMFOd4IbPa84loB7Y0ib3tXLhU4AXYuiY 1gzA/Lip3F5Gft0ruT2gGsMnu3x5Rmke0oZ9RVL4iMGEQOSQW9wT7KK2fI++WCkq BDUG3i39d+WyhQtM91Eu0kbi0EABhhEG7lXtzKajwZW9lvQNdhpZqACN -----END CERTIFICATE-----Generated at Tue May 12 22:45:41 2026 by rpki-client