$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.cer File: 72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.cer (raw, json) Hash identifier: GhtUJ7tFWXqHcKrQG8WyaRFsC4nSxGepnWFW0mAmQ/k= Subject key identifier: 72:FB:F9:6A:21:CE:2D:61:C4:B3:D6:84:6C:7F:E6:A1:D1:7B:B1:1F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5E6FEC18374453EE9DB03A7E1C41A5E8112B74E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:47:24 +0000 Certificate not after: Sun 02 May 2027 01:52:24 +0000 Subordinate resources: IP: 103.244.23.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:6f:ec:18:37:44:53:ee:9d:b0:3a:7e:1c:41:a5:e8:11:2b:74:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:47:24 2026 GMT Not After : May 2 01:52:24 2027 GMT Subject: CN=72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:24:89:37:58:27:e9:28:ac:db:d4:6c:a6:69: 8c:1a:1b:05:93:04:ff:a0:70:ce:35:30:3b:0d:ab: 78:1b:68:58:2f:00:8b:40:29:95:0b:65:70:98:58: 72:5f:59:13:41:65:64:b5:01:3d:ae:cc:e4:fe:f7: b9:b5:6d:30:fd:7d:a6:eb:4e:a6:8e:5d:e8:81:0e: 6d:00:04:20:58:54:6a:19:29:13:3f:50:65:f5:f9: ac:57:b8:81:5a:7f:bd:99:13:af:06:74:81:77:bb: 0a:a8:20:5d:20:c5:2e:df:96:73:18:04:ef:05:1f: 74:a0:43:8f:6a:37:15:fc:b9:35:d0:5e:2e:44:6f: 26:4f:08:b6:f2:5e:3e:07:0e:11:d4:29:bd:6b:f5: 89:f7:4f:60:11:3c:9a:5d:e9:29:f3:d7:90:dd:0e: bc:87:ef:7e:7a:d8:6e:f7:3f:b2:80:70:65:c5:85: 42:66:5e:bc:bc:de:ef:2e:b4:79:90:7b:aa:b2:e3: 9f:85:46:12:b7:c8:33:cb:ec:cd:1a:a6:81:bc:83: e8:6d:26:50:60:49:f6:49:1d:6f:f3:df:51:90:4e: e4:39:2b:5d:9a:07:91:b1:db:5a:1b:2f:1b:49:c2: c6:51:5a:17:c1:7a:c6:a2:57:61:b0:05:a7:12:ce: fa:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 72:FB:F9:6A:21:CE:2D:61:C4:B3:D6:84:6C:7F:E6:A1:D1:7B:B1:1F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.244.23.0/24 Signature Algorithm: sha256WithRSAEncryption a4:b6:4a:59:bd:62:83:51:ab:f6:65:92:b6:ef:b9:27:93:d7: ec:97:a7:ce:bc:f4:35:d2:eb:c2:b5:d8:9b:55:63:ca:db:36: 01:ef:1a:d6:2b:81:11:4f:39:f3:aa:88:66:39:09:8f:07:b6: 95:08:c2:1a:c8:75:8a:5d:2c:a6:41:23:88:d8:9d:17:6d:7c: 92:be:f0:0a:34:f4:27:c3:75:80:5e:16:87:04:d8:eb:4b:0d: 67:e5:a1:db:52:d0:2f:b6:4b:11:f6:26:f6:88:69:00:58:a6: dc:8a:00:ab:6d:60:b4:46:c2:75:5c:5b:bf:37:9f:89:38:aa: 47:d1:12:10:29:90:dc:3d:2e:39:d9:63:1b:db:41:70:05:47: bf:ff:d9:e4:7e:51:b2:1b:0c:40:61:67:0d:d8:dc:25:0b:0f: a0:b5:98:fa:c6:3a:be:ef:8f:e0:a8:7a:ae:c5:b7:f4:89:ab: 77:88:0a:26:12:fd:18:7a:df:89:99:c3:ba:97:32:af:53:88: 0e:73:d0:ce:ba:63:e8:37:4f:b4:59:31:03:a3:9f:23:f8:d0: ac:62:ff:9d:89:e4:3a:d8:d6:8c:1d:fe:d0:74:5e:fd:3e:c7: a9:b6:84:b6:c4:37:fe:61:df:d7:36:3b:d8:ac:9c:dc:3f:a5: b7:5a:75:db -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUXm/sGDdEU+6dsDp+HEGl6BErdOIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDcyNFoX DTI3MDUwMjAxNTIyNFowMzExMC8GA1UEAxMoNzJGQkY5NkEyMUNFMkQ2MUM0QjNE Njg0NkM3RkU2QTFEMTdCQjExRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANUkiTdYJ+korNvUbKZpjBobBZME/6BwzjUwOw2reBtoWC8Ai0AplQtlcJhY cl9ZE0FlZLUBPa7M5P73ubVtMP19putOpo5d6IEObQAEIFhUahkpEz9QZfX5rFe4 gVp/vZkTrwZ0gXe7CqggXSDFLt+WcxgE7wUfdKBDj2o3Ffy5NdBeLkRvJk8ItvJe PgcOEdQpvWv1ifdPYBE8ml3pKfPXkN0OvIfvfnrYbvc/soBwZcWFQmZevLze7y60 eZB7qrLjn4VGErfIM8vszRqmgbyD6G0mUGBJ9kkdb/PfUZBO5DkrXZoHkbHbWhsv G0nCxlFaF8F6xqJXYbAFpxLO+okCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHL7+Wohzi1hxLPWhGx/5qHRe7EfMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2MwZWE1MDU2LTBmYmMtNDAzMi04NjgwLTNmYTU0NDFlNGQ1NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jMGVhNTA1 Ni0wZmJjLTQwMzItODY4MC0zZmE1NDQxZTRkNTUvMC83MkZCRjk2QTIxQ0UyRDYx QzRCM0Q2ODQ2QzdGRTZBMUQxN0JCMTFGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ/QXMA0GCSqGSIb3DQEBCwUAA4IBAQCktkpZvWKDUav2ZZK277knk9fsl6fO vPQ10uvCtdibVWPK2zYB7xrWK4ERTznzqohmOQmPB7aVCMIayHWKXSymQSOI2J0X bXySvvAKNPQnw3WAXhaHBNjrSw1n5aHbUtAvtksR9ib2iGkAWKbcigCrbWC0RsJ1 XFu/N5+JOKpH0RIQKZDcPS452WMb20FwBUe//9nkflGyGwxAYWcN2NwlCw+gtZj6 xjq+74/gqHquxbf0iat3iAomEv0Yet+JmcO6lzKvU4gOc9DOumPoN0+0WTEDo58j +NCsYv+dieQ62NaMHf7QdF79PseptoS2xDf+Yd/XNjvYrJzcP6W3WnXb -----END CERTIFICATE-----Generated at Tue May 12 22:03:48 2026 by rpki-client