$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer File: 3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer (raw, json) Hash identifier: vYUashVV07f2DmUqSCZ7sctvbyAfBzLox5g/hBNXkK0= Subject key identifier: 3F:E5:A0:9F:80:C2:2C:04:D7:7F:30:DE:DF:26:B9:08:BE:77:77:F9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5FDAF92102ECE1138724447F7C7209B81819FCC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft caRepository: rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:38:27 +0000 Certificate not after: Sun 02 May 2027 00:43:27 +0000 Subordinate resources: IP: 103.193.146.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:da:f9:21:02:ec:e1:13:87:24:44:7f:7c:72:09:b8:18:19:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:38:27 2026 GMT Not After : May 2 00:43:27 2027 GMT Subject: CN=3FE5A09F80C22C04D77F30DEDF26B908BE7777F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c2:9a:9c:e4:68:be:05:71:09:4b:c6:4b:ee: ea:c8:6c:08:c4:fd:4d:3c:6f:8f:cc:10:2d:5c:11: 8b:17:54:20:6e:ee:d2:37:f0:ed:e4:3d:cb:1d:cc: b2:aa:ef:09:70:09:59:ba:4d:c5:c4:87:79:6e:88: ec:95:9d:d1:47:cb:65:b0:7f:0e:a0:08:59:8b:95: 83:fd:10:8a:85:8f:35:6e:1c:75:07:95:64:19:f0: d8:cb:e5:a3:92:9b:17:1f:f9:a9:06:fb:a0:ea:1e: ff:69:f6:43:5e:bc:6a:53:43:eb:3c:ff:57:62:e3: 32:45:af:c2:fe:e8:90:b2:8a:75:70:4f:d1:cf:c5: 31:4a:ed:d4:5f:10:a4:c0:e9:7a:38:aa:ec:50:50: 46:47:79:a4:49:22:d3:5b:85:59:13:93:50:a1:8e: 82:a7:0e:49:bc:e1:cc:e4:1c:5e:b2:76:2f:36:6e: fb:39:32:3d:5d:37:f9:94:13:25:fe:89:2f:24:96: fb:a8:be:f3:43:aa:bb:12:63:56:49:7e:d8:ca:82: 03:a2:44:bf:7c:fb:af:7e:85:08:39:86:10:9b:d0: 79:66:c5:44:b4:37:0c:d6:0f:29:1d:94:b0:a5:e1: 88:65:56:13:14:60:57:b3:c8:7d:5d:5a:b7:a6:56: 74:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:E5:A0:9F:80:C2:2C:04:D7:7F:30:DE:DF:26:B9:08:BE:77:77:F9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.193.146.0/23 Signature Algorithm: sha256WithRSAEncryption 62:d6:97:77:a1:17:cf:ac:5b:0f:c8:fb:4e:3a:c8:a0:36:8b: 35:a5:23:17:89:46:a9:c1:f4:a3:e3:1f:77:b1:37:83:89:67: 71:6c:80:80:97:e0:0e:41:91:39:fe:71:b3:bb:e0:cd:2c:52: 12:31:f2:47:19:8b:ed:62:c2:bd:1c:53:b7:7e:49:87:10:e1: 56:e7:d5:57:cd:62:ce:e1:2d:8f:c6:50:59:73:9a:d5:84:2b: 42:37:87:f4:d9:12:cb:e9:57:c2:b8:35:28:18:e3:b7:b6:a1: df:da:f7:28:0d:77:52:5a:fe:f5:be:61:64:32:46:63:ff:4b: 45:cf:40:1a:ab:10:ce:54:46:a2:89:89:7e:74:0c:5e:0f:52: 14:db:ee:16:a3:9f:7c:77:2d:c7:e3:c6:c9:41:2e:a0:3c:f9: f0:e1:8b:eb:ec:d9:f1:e3:bc:1f:9a:ab:87:8b:16:1a:8b:b4: b1:91:fb:a1:ad:31:ec:ee:e1:fe:a5:e3:69:fd:f6:94:31:8b: 87:ea:de:ef:67:9e:0c:d5:7c:70:4c:05:e3:46:a9:06:c2:50: 72:c0:dd:09:c0:3b:ab:b7:25:93:bf:c2:89:e7:48:8e:0d:5b: b6:f9:79:a9:e9:ac:bb:b3:db:1b:cb:17:8b:39:37:17:8b:ce: e2:69:bc:b5 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUX9r5IQLs4ROHJER/fHIJuBgZ/MAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzgyN1oX DTI3MDUwMjAwNDMyN1owMzExMC8GA1UEAxMoM0ZFNUEwOUY4MEMyMkMwNEQ3N0Yz MERFREYyNkI5MDhCRTc3NzdGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAInCmpzkaL4FcQlLxkvu6shsCMT9TTxvj8wQLVwRixdUIG7u0jfw7eQ9yx3M sqrvCXAJWbpNxcSHeW6I7JWd0UfLZbB/DqAIWYuVg/0QioWPNW4cdQeVZBnw2Mvl o5KbFx/5qQb7oOoe/2n2Q168alND6zz/V2LjMkWvwv7okLKKdXBP0c/FMUrt1F8Q pMDpejiq7FBQRkd5pEki01uFWROTUKGOgqcOSbzhzOQcXrJ2LzZu+zkyPV03+ZQT Jf6JLySW+6i+80OquxJjVkl+2MqCA6JEv3z7r36FCDmGEJvQeWbFRLQ3DNYPKR2U sKXhiGVWExRgV7PIfV1at6ZWdPUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD/loJ+AwiwE138w3t8muQi+d3f5MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzU5MTU3Y2VkLWU4MmMtNDMzNC05MDNhLWNjY2JiZTljZmU4OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81OTE1N2Nl ZC1lODJjLTQzMzQtOTAzYS1jY2NiYmU5Y2ZlODkvMC8zRkU1QTA5RjgwQzIyQzA0 RDc3RjMwREVERjI2QjkwOEJFNzc3N0Y5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ8GSMA0GCSqGSIb3DQEBCwUAA4IBAQBi1pd3oRfPrFsPyPtOOsigNos1pSMX iUapwfSj4x93sTeDiWdxbICAl+AOQZE5/nGzu+DNLFISMfJHGYvtYsK9HFO3fkmH EOFW59VXzWLO4S2PxlBZc5rVhCtCN4f02RLL6VfCuDUoGOO3tqHf2vcoDXdSWv71 vmFkMkZj/0tFz0AaqxDOVEaiiYl+dAxeD1IU2+4Wo598dy3H48bJQS6gPPnw4Yvr 7Nnx47wfmquHixYai7SxkfuhrTHs7uH+peNp/faUMYuH6t7vZ54M1XxwTAXjRqkG wlBywN0JwDurtyWTv8KJ50iODVu2+Xmp6ay7s9sbyxeLOTcXi87iaby1 -----END CERTIFICATE-----Generated at Tue May 12 22:09:56 2026 by rpki-client