$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer File: 5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer (raw, json) Hash identifier: 3vD/iN4PGtVxHYl/FwhTYzeE6Z5poGm9HhEQXGaoyrI= Subject key identifier: 5F:C6:89:EA:B9:41:D2:E0:F4:03:F4:D8:FE:7B:88:64:9C:CD:7D:C4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 732AB3BAFE4EF12266CB40D825FA0F4A724E8EF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:42:49 +0000 Certificate not after: Sun 02 May 2027 02:47:49 +0000 Subordinate resources: IP: 103.16.116.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:2a:b3:ba:fe:4e:f1:22:66:cb:40:d8:25:fa:0f:4a:72:4e:8e:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:42:49 2026 GMT Not After : May 2 02:47:49 2027 GMT Subject: CN=5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0f:2f:dd:9e:47:6f:27:ab:73:e0:e5:74:b7: 00:ea:96:77:a4:c7:73:06:8d:fa:2c:b3:d0:ed:29: f2:e7:12:6e:86:9a:0a:07:51:10:21:4c:6f:6d:55: ad:2e:91:6a:f9:d2:22:4c:27:fa:dc:b6:ab:86:bf: 00:7a:a0:fd:d5:16:26:21:74:de:0e:2c:fd:33:89: 59:68:eb:f5:c4:38:69:e8:89:ba:30:6c:9d:bb:13: d4:a6:cb:e9:1d:53:cf:74:a0:f5:84:8d:64:22:24: 89:5b:ea:ab:44:d5:2c:b0:b9:3f:6e:77:42:4c:51: 2f:05:bd:fe:46:3f:3e:39:f5:35:8a:50:26:dd:cf: 84:4f:d4:f0:31:eb:69:e0:2a:ab:0d:0e:d1:6e:5e: 91:5c:72:59:e4:d5:15:05:2e:11:a6:3f:cc:e2:cf: 3f:a1:8d:a1:58:60:76:b6:bb:8d:e6:7e:db:48:2e: 25:cd:07:33:2b:c9:fe:5c:ba:b4:04:ab:0e:6d:f1: 8a:22:7b:9e:f9:89:13:38:0d:d6:ae:c2:34:4c:e4: d9:60:f6:db:09:46:1f:99:80:7b:2e:6d:62:58:63: 46:27:d6:76:14:52:ed:96:dc:2b:60:14:16:5a:9c: cf:8a:f6:d3:72:8c:7a:6d:33:a5:db:31:7c:d0:d2: 7b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:C6:89:EA:B9:41:D2:E0:F4:03:F4:D8:FE:7B:88:64:9C:CD:7D:C4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.16.116.0/23 Signature Algorithm: sha256WithRSAEncryption 88:cc:5d:10:d2:ab:a5:0b:60:d2:10:ca:b6:9d:b9:db:9f:d7: 46:ce:8f:e7:85:1b:c0:6b:aa:1a:40:a4:10:03:a3:49:8c:f0: ef:72:8d:f8:aa:7f:e0:2f:ba:c1:42:65:e0:48:e2:b8:94:cb: 06:29:42:87:73:ab:c2:f9:d1:72:d5:07:44:be:aa:9b:12:6e: b8:d9:15:6c:55:05:0d:b9:ab:2f:c9:19:04:db:98:bb:18:31: b0:78:2d:a4:67:4b:7f:5b:ba:36:f2:79:41:23:80:13:c6:15: 63:5c:44:69:d8:69:e6:eb:89:4e:23:1e:3a:46:b9:54:ba:40: 82:5c:31:e0:b9:21:f7:08:f1:9f:65:2c:17:22:c7:0d:62:46: 2b:08:12:a3:3d:64:ee:90:48:25:7e:5e:77:25:57:e5:26:f4: 80:4b:80:79:63:76:de:fa:2d:59:5d:93:1e:59:e2:c7:fc:c6: e7:d9:c4:44:9b:13:93:6d:d6:a0:57:7f:5e:ca:70:99:c2:ae: 1b:9d:84:aa:77:99:50:3a:68:9d:c0:8e:cb:81:dd:76:b9:0a: 36:37:de:fa:18:69:b7:d5:e3:b8:9f:94:23:fa:d6:5d:c2:ad: c4:01:b7:cf:c4:05:74:a0:49:61:ca:3f:d5:40:67:1c:09:3e: cf:75:43:1a -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUcyqzuv5O8SJmy0DYJfoPSnJOjvcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyNDI0OVoX DTI3MDUwMjAyNDc0OVowMzExMC8GA1UEAxMoNUZDNjg5RUFCOTQxRDJFMEY0MDNG NEQ4RkU3Qjg4NjQ5Q0NEN0RDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALMPL92eR28nq3Pg5XS3AOqWd6THcwaN+iyz0O0p8ucSboaaCgdRECFMb21V rS6RavnSIkwn+ty2q4a/AHqg/dUWJiF03g4s/TOJWWjr9cQ4aeiJujBsnbsT1KbL 6R1Tz3Sg9YSNZCIkiVvqq0TVLLC5P253QkxRLwW9/kY/Pjn1NYpQJt3PhE/U8DHr aeAqqw0O0W5ekVxyWeTVFQUuEaY/zOLPP6GNoVhgdra7jeZ+20guJc0HMyvJ/ly6 tASrDm3xiiJ7nvmJEzgN1q7CNEzk2WD22wlGH5mAey5tYlhjRifWdhRS7ZbcK2AU Flqcz4r203KMem0zpdsxfNDSe90CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF/Gieq5QdLg9AP02P57iGSczX3EMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ZhZThiY2M5LTQzYTEtNGJhYi1iNmQ4LTFhOTdkMGQzYzIxZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mYWU4YmNj OS00M2ExLTRiYWItYjZkOC0xYTk3ZDBkM2MyMWQvMC81RkM2ODlFQUI5NDFEMkUw RjQwM0Y0RDhGRTdCODg2NDlDQ0Q3REM0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZxB0MA0GCSqGSIb3DQEBCwUAA4IBAQCIzF0Q0qulC2DSEMq2nbnbn9dGzo/n hRvAa6oaQKQQA6NJjPDvco34qn/gL7rBQmXgSOK4lMsGKUKHc6vC+dFy1QdEvqqb Em642RVsVQUNuasvyRkE25i7GDGweC2kZ0t/W7o28nlBI4ATxhVjXERp2Gnm64lO Ix46RrlUukCCXDHguSH3CPGfZSwXIscNYkYrCBKjPWTukEglfl53JVflJvSAS4B5 Y3be+i1ZXZMeWeLH/Mbn2cREmxOTbdagV39eynCZwq4bnYSqd5lQOmidwI7Lgd12 uQo2N976GGm31eO4n5Qj+tZdwq3EAbfPxAV0oElhyj/VQGccCT7PdUMa -----END CERTIFICATE-----Generated at Tue May 12 22:46:01 2026 by rpki-client