$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.cer File: F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.cer (raw, json) Hash identifier: s8LA9PgZYTnnQF/NkSrMCE5HDBWVtFYCncfFs7wSX50= Subject key identifier: F0:36:C2:8E:B7:9F:3E:EA:FE:68:70:FD:FB:62:F2:85:8E:A8:D4:91 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 50918B6EB1BDE389567B0337A9FA8B6B778A00A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:44:01 +0000 Certificate not after: Sun 02 May 2027 00:49:01 +0000 Subordinate resources: IP: 103.20.88.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:91:8b:6e:b1:bd:e3:89:56:7b:03:37:a9:fa:8b:6b:77:8a:00:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:44:01 2026 GMT Not After : May 2 00:49:01 2027 GMT Subject: CN=F036C28EB79F3EEAFE6870FDFB62F2858EA8D491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a8:ae:ab:fc:8d:c1:c1:b0:88:f3:3c:73:4b: 84:bb:34:a8:da:42:fc:30:07:bf:6b:a1:a8:6a:9a: 71:75:97:a6:6a:f4:d3:45:7e:91:28:dd:1e:30:a5: a0:fe:0a:eb:1e:a2:83:a4:d1:b2:72:14:25:5f:27: a8:11:5e:ac:ef:1b:bb:95:17:92:c3:90:03:d8:b9: c3:06:8d:39:ef:d1:0f:25:92:d8:71:7c:c5:ff:a9: 03:76:ce:60:88:eb:cd:7b:fc:4f:83:0b:5d:a2:42: 1b:0f:02:8e:6f:be:70:de:00:7b:15:b6:ad:c2:ec: fa:be:ce:8c:37:75:d3:21:dd:80:4b:df:d9:33:e2: 41:13:39:f2:05:bd:e6:3e:cc:e4:1b:e6:d6:43:3a: 02:dd:95:3f:92:9a:65:1f:b4:a8:bd:21:92:48:28: 2a:fa:99:1c:90:bc:26:ee:b0:30:7f:8d:40:e1:de: 8c:02:9a:f5:ad:e5:a3:1d:87:f3:60:28:98:29:87: 39:ed:36:5f:b7:fd:59:08:99:75:bd:e2:e0:25:0d: 72:2b:5a:83:26:a3:d8:fe:a8:22:05:bd:fb:e8:8c: f2:b2:39:8a:9e:da:f3:4f:da:11:25:d8:6d:6d:df: ab:63:25:65:3d:d6:55:17:26:49:2f:37:00:6a:91: bd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F0:36:C2:8E:B7:9F:3E:EA:FE:68:70:FD:FB:62:F2:85:8E:A8:D4:91 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.88.0/24 Signature Algorithm: sha256WithRSAEncryption 65:2e:59:b8:d7:0c:83:f2:ad:cc:32:0f:07:1c:9b:99:78:e0: ee:d7:b4:cc:8f:07:72:3d:bd:2c:62:76:2f:e0:10:94:21:03: df:25:ab:a9:3b:88:c1:6b:97:53:7c:8a:02:4b:0b:c2:26:0b: f8:72:2d:a8:07:10:96:b0:6e:ae:1c:03:f7:0c:b8:c2:58:c1: 1e:fa:8e:89:74:48:c5:5c:85:69:8a:47:61:ce:b2:45:9f:8a: 1c:2f:d7:74:5e:f2:4f:aa:1a:a4:1c:2d:63:4a:b7:a2:49:48: 6a:06:fe:23:be:cf:ce:51:b9:ae:a0:f6:4b:a7:b0:66:ae:84: fe:64:d4:66:62:77:dc:a9:b1:f4:2b:2e:78:b8:3b:b8:1f:9d: 0f:e3:b7:34:ff:75:28:1b:c6:b2:98:78:35:57:22:13:f2:97: 02:84:72:a4:ce:83:89:4c:9c:00:d1:27:ca:3c:d4:21:9e:de: 7f:28:a6:ac:73:12:b1:90:3e:f2:85:b3:7a:34:87:06:7f:c1: da:ff:ea:a5:c2:32:f5:97:d3:18:ee:e4:56:4a:e7:10:02:b4: a1:f7:aa:6c:e1:7f:57:d4:4b:20:4d:01:14:c1:52:33:97:4a: b2:23:5d:04:d6:76:e9:a7:ac:25:9b:94:ab:e2:a2:af:31:68: 22:75:23:77 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUUJGLbrG944lWewM3qfqLa3eKAKYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDQwMVoX DTI3MDUwMjAwNDkwMVowMzExMC8GA1UEAxMoRjAzNkMyOEVCNzlGM0VFQUZFNjg3 MEZERkI2MkYyODU4RUE4RDQ5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGorqv8jcHBsIjzPHNLhLs0qNpC/DAHv2uhqGqacXWXpmr000V+kSjdHjCl oP4K6x6ig6TRsnIUJV8nqBFerO8bu5UXksOQA9i5wwaNOe/RDyWS2HF8xf+pA3bO YIjrzXv8T4MLXaJCGw8Cjm++cN4AexW2rcLs+r7OjDd10yHdgEvf2TPiQRM58gW9 5j7M5Bvm1kM6At2VP5KaZR+0qL0hkkgoKvqZHJC8Ju6wMH+NQOHejAKa9a3lox2H 82AomCmHOe02X7f9WQiZdb3i4CUNcitagyaj2P6oIgW9++iM8rI5ip7a80/aESXY bW3fq2MlZT3WVRcmSS83AGqRvfkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPA2wo63nz7q/mhw/fti8oWOqNSRMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVmY2MxZWY2LTc2OWYtNGFhZi05ZDE0LTJlNWIxNWE2ZmYyMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81ZmNjMWVm Ni03NjlmLTRhYWYtOWQxNC0yZTViMTVhNmZmMjMvMC9GMDM2QzI4RUI3OUYzRUVB RkU2ODcwRkRGQjYyRjI4NThFQThENDkxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZxRYMA0GCSqGSIb3DQEBCwUAA4IBAQBlLlm41wyD8q3MMg8HHJuZeODu17TM jwdyPb0sYnYv4BCUIQPfJaupO4jBa5dTfIoCSwvCJgv4ci2oBxCWsG6uHAP3DLjC WMEe+o6JdEjFXIVpikdhzrJFn4ocL9d0XvJPqhqkHC1jSreiSUhqBv4jvs/OUbmu oPZLp7BmroT+ZNRmYnfcqbH0Ky54uDu4H50P47c0/3UoG8aymHg1VyIT8pcChHKk zoOJTJwA0SfKPNQhnt5/KKascxKxkD7yhbN6NIcGf8Ha/+qlwjL1l9MY7uRWSucQ ArSh96ps4X9X1EsgTQEUwVIzl0qyI10E1nbpp6wlm5Sr4qKvMWgidSN3 -----END CERTIFICATE-----Generated at Tue May 12 22:10:35 2026 by rpki-client