$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer File: 5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.cer (raw, json) Hash identifier: VTGIyNYz0S8NKRbzNCw44oFWR5/ssigNo6tEkiLBNf8= Subject key identifier: 5F:C4:5B:E9:ED:AC:7B:AD:3D:07:04:61:0E:37:4B:87:3F:C7:B6:1C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 538F43FAC88A4CCB5B49B10F4409F34B54E6B01F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:38:59 +0000 Certificate not after: Sun 02 May 2027 01:43:59 +0000 Subordinate resources: IP: 103.138.70.0/23 IP: 2404:ce40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:8f:43:fa:c8:8a:4c:cb:5b:49:b1:0f:44:09:f3:4b:54:e6:b0:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:38:59 2026 GMT Not After : May 2 01:43:59 2027 GMT Subject: CN=5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b5:b2:71:d4:24:17:72:d5:58:91:c1:1d:18: 99:44:a6:00:a5:c9:ee:99:ed:42:2f:3d:e6:9a:98: 27:2f:6f:12:cc:d5:a9:72:c6:47:97:53:64:09:06: bd:18:bc:fa:e2:f1:c6:d6:28:ce:5c:b0:0f:6e:c4: b0:b4:c2:2b:c6:77:43:52:79:35:fb:61:dc:c0:ea: 03:1c:e6:f8:56:9d:ba:11:a0:1c:1d:82:be:ed:75: 53:0f:8e:ed:5c:5a:65:bb:bd:3b:67:e9:4e:c1:2b: 16:bf:7c:e2:70:3d:3f:03:3b:80:27:4f:c8:68:8d: c0:fb:1b:f3:d6:3c:ad:53:12:ff:66:9c:20:aa:db: ef:f6:c5:ca:0c:b8:54:49:67:60:a3:64:f7:82:d8: df:e9:8f:76:8f:cc:d0:28:be:21:9d:8e:e1:84:c0: 3a:5d:16:ae:b4:a8:f1:6c:4c:13:81:1a:65:69:0e: 9e:c6:c7:9c:e4:dc:56:55:3a:6b:a2:25:04:4a:63: f6:47:c5:69:37:24:e0:d4:76:8c:39:cb:72:fb:17: 56:8c:55:35:1a:0f:33:e4:de:9c:1c:fa:f6:67:ec: 17:0a:e9:cb:1a:88:69:cb:30:a0:4a:1a:58:f6:9a: 5e:ed:29:16:f6:c6:f5:5d:b6:95:02:da:c2:cb:38: 24:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:C4:5B:E9:ED:AC:7B:AD:3D:07:04:61:0E:37:4B:87:3F:C7:B6:1C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/5FC45BE9EDAC7BAD3D0704610E374B873FC7B61C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.70.0/23 IPv6: 2404:ce40::/32 Signature Algorithm: sha256WithRSAEncryption 4e:b7:26:9f:b9:a1:60:07:be:d6:4b:a6:f4:6f:69:9b:e9:4e: 5d:6c:90:8b:c2:2c:3a:3f:64:51:85:86:da:a6:5e:72:b3:b1: 44:e2:31:c0:dc:46:25:d7:f3:3a:9e:5a:52:e4:bd:47:34:b7: 28:6a:c7:24:8b:b3:44:2f:21:78:ce:2a:ae:d9:e4:c8:33:5b: d8:3e:3e:1e:29:4f:9b:2d:5d:89:66:50:f9:a9:1e:6f:22:4b: 6f:da:eb:44:38:ae:f7:60:b3:65:fe:e7:97:2f:95:1f:ed:be: 50:ee:e0:fd:9a:e5:22:1c:02:ae:79:83:bd:6b:31:84:92:73: 18:ab:52:80:5e:bc:2a:32:90:d4:3f:59:37:9d:d3:46:d5:9e: 92:c1:53:b6:6a:6f:17:c8:90:79:8f:39:6f:bf:a3:dd:62:df: 60:85:bc:56:26:1c:36:99:dc:d9:7d:e7:33:cd:d6:a7:57:29: 3c:98:f2:44:2a:bb:4f:25:ec:13:21:30:0f:d4:c4:80:f9:22: c7:c7:35:ab:ac:53:86:21:ff:e3:02:8f:25:e9:8e:2a:53:f9: 1e:a6:4f:76:92:4d:ac:53:f2:0f:a4:11:27:22:a0:29:59:a7: 93:86:1b:8a:f2:7d:21:8b:01:70:23:10:9a:c8:f9:e0:bc:6d: 1a:8f:af:4f -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUU49D+siKTMtbSbEPRAnzS1TmsB8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzg1OVoX DTI3MDUwMjAxNDM1OVowMzExMC8GA1UEAxMoNUZDNDVCRTlFREFDN0JBRDNEMDcw NDYxMEUzNzRCODczRkM3QjYxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJK1snHUJBdy1ViRwR0YmUSmAKXJ7pntQi895pqYJy9vEszVqXLGR5dTZAkG vRi8+uLxxtYozlywD27EsLTCK8Z3Q1J5Nfth3MDqAxzm+FaduhGgHB2Cvu11Uw+O 7VxaZbu9O2fpTsErFr984nA9PwM7gCdPyGiNwPsb89Y8rVMS/2acIKrb7/bFygy4 VElnYKNk94LY3+mPdo/M0Ci+IZ2O4YTAOl0WrrSo8WxME4EaZWkOnsbHnOTcVlU6 a6IlBEpj9kfFaTck4NR2jDnLcvsXVoxVNRoPM+TenBz69mfsFwrpyxqIacswoEoa WPaaXu0pFvbG9V22lQLawss4JM0CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF/EW+ntrHutPQcEYQ43S4c/x7YcMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2IyMGM2ZDY5LTYyOTAtNDAyZi1hODRlLWQyODljNmU5M2E3My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iMjBjNmQ2 OS02MjkwLTQwMmYtYTg0ZS1kMjg5YzZlOTNhNzMvMC81RkM0NUJFOUVEQUM3QkFE M0QwNzA0NjEwRTM3NEI4NzNGQzdCNjFDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ4pGMA0EAgACMAcDBQAkBM5AMA0GCSqGSIb3DQEBCwUAA4IBAQBOtyafuaFg B77WS6b0b2mb6U5dbJCLwiw6P2RRhYbapl5ys7FE4jHA3EYl1/M6nlpS5L1HNLco ascki7NELyF4ziqu2eTIM1vYPj4eKU+bLV2JZlD5qR5vIktv2utEOK73YLNl/ueX L5Uf7b5Q7uD9muUiHAKueYO9azGEknMYq1KAXrwqMpDUP1k3ndNG1Z6SwVO2am8X yJB5jzlvv6PdYt9ghbxWJhw2mdzZfeczzdanVyk8mPJEKrtPJewTITAP1MSA+SLH xzWrrFOGIf/jAo8l6Y4qU/kepk92kk2sU/IPpBEnIqApWaeThhuK8n0hiwFwIxCa yPngvG0aj69P -----END CERTIFICATE-----Generated at Tue May 12 22:52:39 2026 by rpki-client