$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer File: F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer (raw, json) Hash identifier: TqmTkXmi+dMHTb9/g6TLdPCTr0H25jXe7/mKP4q6kvs= Subject key identifier: F0:D3:48:1C:E1:72:4B:32:24:37:7F:DE:7E:9A:BD:9D:41:D7:CC:DA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 71A01FC1EF2BB115B794143DE66EA0A7C93BB7CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:40:25 +0000 Certificate not after: Sun 02 May 2027 01:45:25 +0000 Subordinate resources: IP: 103.155.192.0/23 IP: 2406:75c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a0:1f:c1:ef:2b:b1:15:b7:94:14:3d:e6:6e:a0:a7:c9:3b:b7:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:40:25 2026 GMT Not After : May 2 01:45:25 2027 GMT Subject: CN=F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:04:36:7b:7c:70:0c:57:4d:61:71:be:e2:25: c1:52:aa:45:82:4a:d6:a9:6b:ab:3c:18:9f:cf:90: dd:11:2c:c0:9c:b1:7b:38:8c:a7:96:ca:8f:7e:01: c1:ce:be:5a:8b:a8:b9:0f:44:3b:34:cf:8b:b5:d9: 0f:eb:eb:30:6a:1f:a8:e8:c4:4a:15:e4:5c:d9:1f: 4f:81:ed:2e:60:92:20:56:b8:86:81:f4:db:fe:2d: 4b:a0:f2:ed:85:d7:b2:73:1c:d3:3d:b9:a5:30:ae: 66:ef:c7:22:c7:f0:6b:55:36:96:fd:e9:f0:21:ad: 02:b0:b3:46:80:6b:b1:49:56:75:77:ff:cc:58:74: 8d:93:f2:11:b9:63:5c:cb:40:37:8f:31:9e:3d:1b: 7a:d5:6f:97:cd:90:28:ab:a4:57:c0:43:d0:17:d9: 9f:49:af:06:8e:18:4f:13:86:1e:2e:58:66:f4:cd: 38:81:b5:4a:79:e3:42:ad:e2:38:f5:57:e5:f8:e1: ad:57:d9:a1:ad:2f:a6:35:2c:7e:3f:ed:93:52:b6: 0e:f0:82:e8:1f:76:d8:fd:3d:4b:36:bf:10:b4:90: 26:96:7f:b8:ef:18:13:1c:26:32:bb:b5:32:a7:12: da:bd:06:25:57:3c:56:2e:b9:64:6f:0f:72:e4:b4: 84:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F0:D3:48:1C:E1:72:4B:32:24:37:7F:DE:7E:9A:BD:9D:41:D7:CC:DA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.192.0/23 IPv6: 2406:75c0::/32 Signature Algorithm: sha256WithRSAEncryption 90:5f:16:0a:fb:4c:e8:d5:a9:e3:9f:56:bc:5c:18:85:b1:54: e2:c8:25:2c:37:67:f5:79:f1:82:e5:fc:c0:61:2c:5e:02:8c: a3:a3:84:3e:33:4f:ac:38:4f:6a:21:29:11:3c:c6:92:50:0c: 30:9f:d7:2f:fa:b5:a4:0f:b5:5a:63:83:1c:9d:84:ea:35:39: 2a:34:ec:b3:b8:17:4a:45:11:7e:ae:86:70:40:15:5b:97:c9: d2:be:87:33:cd:98:1c:f1:fc:3e:b9:01:6b:0c:8d:c9:c8:8a: d5:1e:4c:46:b2:bc:a9:6b:05:03:76:84:f2:df:56:ee:b4:97: 79:51:78:eb:5b:33:f2:fd:d3:6b:94:25:5b:8e:e3:34:10:0b: 93:c4:c2:4b:ca:d9:a2:c9:6f:20:6a:f7:36:2c:e3:b6:99:c9: f9:f2:3a:2f:09:ac:ee:a6:f9:22:0f:34:2e:6c:24:ca:db:38: a8:dc:24:82:f8:b8:62:1e:03:03:5b:fb:7b:6f:0a:20:38:f5: 7f:22:0b:0b:89:5a:8c:81:ef:d2:84:9c:0a:f9:02:45:3f:fb: e0:9e:f3:40:39:6d:97:af:ac:66:36:95:d1:ba:69:4e:0b:b6: f2:55:75:8a:d5:5b:0a:60:69:b3:d4:7b:98:8d:a1:b3:eb:bf: f0:5a:53:a7 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUcaAfwe8rsRW3lBQ95m6gp8k7t8wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDAyNVoX DTI3MDUwMjAxNDUyNVowMzExMC8GA1UEAxMoRjBEMzQ4MUNFMTcyNEIzMjI0Mzc3 RkRFN0U5QUJEOUQ0MUQ3Q0NEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANEENnt8cAxXTWFxvuIlwVKqRYJK1qlrqzwYn8+Q3REswJyxeziMp5bKj34B wc6+WououQ9EOzTPi7XZD+vrMGofqOjEShXkXNkfT4HtLmCSIFa4hoH02/4tS6Dy 7YXXsnMc0z25pTCuZu/HIsfwa1U2lv3p8CGtArCzRoBrsUlWdXf/zFh0jZPyEblj XMtAN48xnj0betVvl82QKKukV8BD0BfZn0mvBo4YTxOGHi5YZvTNOIG1SnnjQq3i OPVX5fjhrVfZoa0vpjUsfj/tk1K2DvCC6B922P09Sza/ELSQJpZ/uO8YExwmMru1 MqcS2r0GJVc8Vi65ZG8PcuS0hL8CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPDTSBzhcksyJDd/3n6avZ1B18zaMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2I0NTBkOTU2LTliMDAtNDZjMS1hNjMxLTM1NjRlMTg2YTA3OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iNDUwZDk1 Ni05YjAwLTQ2YzEtYTYzMS0zNTY0ZTE4NmEwNzkvMC9GMEQzNDgxQ0UxNzI0QjMy MjQzNzdGREU3RTlBQkQ5RDQxRDdDQ0RBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5vAMA0EAgACMAcDBQAkBnXAMA0GCSqGSIb3DQEBCwUAA4IBAQCQXxYK+0zo 1anjn1a8XBiFsVTiyCUsN2f1efGC5fzAYSxeAoyjo4Q+M0+sOE9qISkRPMaSUAww n9cv+rWkD7VaY4McnYTqNTkqNOyzuBdKRRF+roZwQBVbl8nSvoczzZgc8fw+uQFr DI3JyIrVHkxGsrypawUDdoTy31butJd5UXjrWzPy/dNrlCVbjuM0EAuTxMJLytmi yW8gavc2LOO2mcn58jovCazupvkiDzQubCTK2zio3CSC+LhiHgMDW/t7bwogOPV/ IgsLiVqMge/ShJwK+QJFP/vgnvNAOW2Xr6xmNpXRumlOC7byVXWK1VsKYGmz1HuY jaGz67/wWlOn -----END CERTIFICATE-----Generated at Tue May 12 22:47:51 2026 by rpki-client