$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.cer File: F0EB208891BC3271A7761F7969A4F4B152C4F0E5.cer (raw, json) Hash identifier: F7b5CoDMawPf8wizIvOif46yx+fpJdN5AL5qoG6RT40= Subject key identifier: F0:EB:20:88:91:BC:32:71:A7:76:1F:79:69:A4:F4:B1:52:C4:F0:E5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6AF59AC0F7483D8F8D74BCD3F3878825AAB18E00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:49:28 +0000 Certificate not after: Sun 02 May 2027 01:54:28 +0000 Subordinate resources: IP: 103.171.79.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f5:9a:c0:f7:48:3d:8f:8d:74:bc:d3:f3:87:88:25:aa:b1:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:49:28 2026 GMT Not After : May 2 01:54:28 2027 GMT Subject: CN=F0EB208891BC3271A7761F7969A4F4B152C4F0E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:19:6a:6c:5f:66:1a:51:a5:e6:26:25:f7:b2: cd:e8:7d:1e:34:78:ac:8e:fe:03:07:84:36:3f:ae: 1f:f9:77:27:87:3c:91:a7:0d:0c:09:3b:4f:6c:18: 9d:93:00:ce:28:d1:d2:10:7a:ee:d0:23:77:94:86: cd:c3:0b:00:8d:12:a9:bf:51:60:0f:54:31:3a:22: ee:fd:ac:50:75:6c:5f:cc:5f:d3:21:84:f9:c5:de: 7b:5b:fd:7f:d7:56:86:82:1a:62:17:3d:1d:83:a1: 57:12:b0:5d:14:27:94:ab:b4:50:b1:2c:a8:09:59: 7f:55:07:c1:c7:9a:6a:d4:d9:1f:28:d7:7e:d8:73: 13:8a:4d:b7:e5:f1:99:b0:84:bd:58:4d:cf:4a:3b: ed:53:ab:c4:2b:80:af:40:34:08:70:81:9f:71:90: 2b:4f:91:90:e2:99:2f:46:50:05:82:e3:fe:f6:cc: 1c:7a:f1:d2:64:de:af:d6:b3:63:52:08:1c:15:6f: f8:22:71:c4:90:66:76:27:5c:27:f7:f8:ce:9f:a2: 34:85:67:80:a7:39:3e:fe:33:4a:e7:d2:8b:37:50: 07:b6:48:cc:8b:09:ee:1d:04:d0:34:4d:91:5d:68: c4:91:6f:ab:f7:4a:6a:60:6e:d7:51:06:f5:f9:51: 29:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F0:EB:20:88:91:BC:32:71:A7:76:1F:79:69:A4:F4:B1:52:C4:F0:E5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/F0EB208891BC3271A7761F7969A4F4B152C4F0E5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.171.79.0/24 Signature Algorithm: sha256WithRSAEncryption 74:fd:e2:9a:1f:18:5b:a7:ab:d6:5b:6d:e2:dc:a2:be:7a:20: aa:81:e0:f0:87:e5:c9:8d:3a:8d:81:43:79:1c:a6:0d:af:6f: 00:98:cc:99:fa:05:09:6a:65:d2:88:b8:71:5f:4a:33:58:48: 78:45:8d:70:3a:da:ea:7d:da:3c:97:14:65:de:77:6e:34:44: a8:73:7b:e9:5a:71:b0:2d:f8:b6:a5:9d:5f:d9:05:c8:00:7c: 59:54:ad:4d:96:8d:c1:fe:15:1f:ac:88:ce:d3:ec:cd:c9:ef: cf:bd:94:96:61:07:36:53:4b:f5:7d:ac:88:ba:45:d3:2c:d9: 2d:1a:52:78:bd:72:e0:75:19:dc:2a:e7:1f:3e:f8:37:68:43: 54:ea:b0:2b:ff:70:0e:80:c6:94:61:40:a6:6a:de:6e:65:13: 16:b1:af:1b:bf:cc:d9:86:17:6d:69:23:68:c9:d2:f4:fa:ef: 31:8c:3b:29:c6:e6:ca:85:08:44:ee:a2:11:1c:b2:3b:08:b2: 02:95:59:73:45:b8:5e:db:22:7a:57:5a:d9:4d:aa:89:44:2b: 64:5e:19:dd:44:dd:f7:cf:33:fb:fc:f6:1d:b6:d4:70:eb:d3: c1:f9:41:41:e5:20:a5:68:cc:62:03:f3:4b:4f:16:86:c9:c7: 13:32:04:60 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUavWawPdIPY+NdLzT84eIJaqxjgAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDkyOFoX DTI3MDUwMjAxNTQyOFowMzExMC8GA1UEAxMoRjBFQjIwODg5MUJDMzI3MUE3NzYx Rjc5NjlBNEY0QjE1MkM0RjBFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPIZamxfZhpRpeYmJfeyzeh9HjR4rI7+AweENj+uH/l3J4c8kacNDAk7T2wY nZMAzijR0hB67tAjd5SGzcMLAI0Sqb9RYA9UMToi7v2sUHVsX8xf0yGE+cXee1v9 f9dWhoIaYhc9HYOhVxKwXRQnlKu0ULEsqAlZf1UHwceaatTZHyjXfthzE4pNt+Xx mbCEvVhNz0o77VOrxCuAr0A0CHCBn3GQK0+RkOKZL0ZQBYLj/vbMHHrx0mTer9az Y1IIHBVv+CJxxJBmdidcJ/f4zp+iNIVngKc5Pv4zSufSizdQB7ZIzIsJ7h0E0DRN kV1oxJFvq/dKamBu11EG9flRKUMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPDrIIiRvDJxp3YfeWmk9LFSxPDlMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2MzYjhjZWFiLWZiNWMtNDBhOS1iODg5LTJkMTg4OWE1MDA0Yi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jM2I4Y2Vh Yi1mYjVjLTQwYTktYjg4OS0yZDE4ODlhNTAwNGIvMC9GMEVCMjA4ODkxQkMzMjcx QTc3NjFGNzk2OUE0RjRCMTUyQzRGMEU1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6tPMA0GCSqGSIb3DQEBCwUAA4IBAQB0/eKaHxhbp6vWW23i3KK+eiCqgeDw h+XJjTqNgUN5HKYNr28AmMyZ+gUJamXSiLhxX0ozWEh4RY1wOtrqfdo8lxRl3ndu NESoc3vpWnGwLfi2pZ1f2QXIAHxZVK1Nlo3B/hUfrIjO0+zNye/PvZSWYQc2U0v1 fayIukXTLNktGlJ4vXLgdRncKucfPvg3aENU6rAr/3AOgMaUYUCmat5uZRMWsa8b v8zZhhdtaSNoydL0+u8xjDspxubKhQhE7qIRHLI7CLIClVlzRbhe2yJ6V1rZTaqJ RCtkXhndRN33zzP7/PYdttRw69PB+UFB5SClaMxiA/NLTxaGyccTMgRg -----END CERTIFICATE-----Generated at Tue May 12 22:39:05 2026 by rpki-client