$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F1D3A95017C5154231E294B063B353766A127193.cer File: F1D3A95017C5154231E294B063B353766A127193.cer (raw, json) Hash identifier: mL5F/OXYCDonSTlqutg7sUxHdvtD7hjnCgyfx0Fh50Y= Subject key identifier: F1:D3:A9:50:17:C5:15:42:31:E2:94:B0:63:B3:53:76:6A:12:71:93 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 409AA9670AF54B9780A2D940131E7BBED3D5DD7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/F1D3A95017C5154231E294B063B353766A127193.mft caRepository: rsync://rpki-rsync.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:54:15 +0000 Certificate not after: Sun 02 May 2027 00:59:15 +0000 Subordinate resources: IP: 103.106.116.0/24 IP: 2001:df3:a500::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:9a:a9:67:0a:f5:4b:97:80:a2:d9:40:13:1e:7b:be:d3:d5:dd:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:54:15 2026 GMT Not After : May 2 00:59:15 2027 GMT Subject: CN=F1D3A95017C5154231E294B063B353766A127193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9b:26:77:64:fb:6e:2d:46:60:42:55:0d:d3: 7f:a7:fb:ea:2f:94:33:62:5f:55:d9:fc:2a:df:f0: 3a:7a:59:9d:75:9e:4f:a1:b1:7f:04:bb:be:3a:5e: 92:8a:ba:a3:a9:f8:6c:0b:0e:b0:8b:cb:17:83:b8: 34:4e:cb:c2:54:ea:a0:a0:87:f3:33:a6:3b:85:42: 48:d4:c7:23:5e:95:46:8b:7b:4d:99:00:cf:62:1f: e9:3a:6c:1f:e8:17:0f:82:bf:e9:85:5a:69:79:e8: 8c:1a:71:d2:d6:b2:ee:a3:0c:a0:94:53:27:52:35: d8:49:61:43:b4:4b:d7:6e:10:bb:dd:53:d5:8d:95: a9:18:e1:6e:70:03:8a:f4:ad:4f:03:79:f8:47:09: 0d:53:c5:5b:f5:00:f3:b6:b0:eb:af:60:c0:41:74: 40:4d:52:8f:b5:b8:5b:0b:29:8d:18:86:15:cf:b8: 22:18:c0:b0:7b:b2:eb:38:d1:a3:65:30:09:10:40: d5:ef:63:2f:84:e6:b0:35:79:2d:00:ef:52:da:15: 22:b2:e4:1a:26:3e:1b:c7:c6:7c:63:9a:85:eb:07: 81:ed:5c:5c:6e:10:fb:27:62:c4:a1:b8:e3:76:ce: aa:d7:a4:cd:ef:56:3f:79:b2:71:cc:7b:0a:4f:f5: cb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F1:D3:A9:50:17:C5:15:42:31:E2:94:B0:63:B3:53:76:6A:12:71:93 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/F1D3A95017C5154231E294B063B353766A127193.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.106.116.0/24 IPv6: 2001:df3:a500::/48 Signature Algorithm: sha256WithRSAEncryption 18:d9:0e:c3:43:93:a0:18:1d:6b:97:c4:eb:30:73:bd:14:13: d5:07:23:df:b7:75:eb:2e:36:4c:76:cb:97:b8:ad:b5:16:df: ab:80:ac:a8:c8:b1:b5:cf:0e:6c:7f:10:89:59:c3:61:34:71: dd:f8:9a:cf:d9:52:3e:b2:31:c7:17:c6:d7:88:91:1e:cc:fc: 78:e7:23:41:b4:57:c5:5a:33:e6:bb:8d:b1:f3:9c:ee:ed:75: 99:99:53:d9:81:96:f2:7c:1b:cb:2b:76:0b:bf:a8:77:da:2c: ea:14:bb:b2:27:46:d4:cd:80:18:c8:5e:a4:84:7e:27:e3:9b: 62:fd:a9:fe:92:63:2e:ba:e3:f7:a9:c3:6f:35:3f:a9:c0:c7: 29:b1:b4:b1:8c:b8:37:f2:6b:4f:b5:33:3f:6d:81:92:37:d7: 1d:63:19:16:50:1c:10:c3:76:4a:65:f8:bf:45:78:6e:97:e2: ec:80:20:31:07:13:25:f0:0c:19:c7:28:fe:98:a3:79:ad:38: 7e:9e:27:25:22:bf:d8:5d:04:80:93:f0:5c:72:b9:66:c1:6d: 00:e9:3d:fa:7b:54:00:ad:84:5d:61:3a:48:3c:68:e4:dc:fb: 80:81:e7:ba:a5:8a:d5:1a:a3:d8:0e:2c:32:97:5e:1d:b9:1c: 0c:0e:97:54 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUQJqpZwr1S5eAotlAEx57vtPV3XwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTQxNVoX DTI3MDUwMjAwNTkxNVowMzExMC8GA1UEAxMoRjFEM0E5NTAxN0M1MTU0MjMxRTI5 NEIwNjNCMzUzNzY2QTEyNzE5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJybJndk+24tRmBCVQ3Tf6f76i+UM2JfVdn8Kt/wOnpZnXWeT6GxfwS7vjpe koq6o6n4bAsOsIvLF4O4NE7LwlTqoKCH8zOmO4VCSNTHI16VRot7TZkAz2If6Tps H+gXD4K/6YVaaXnojBpx0tay7qMMoJRTJ1I12ElhQ7RL124Qu91T1Y2VqRjhbnAD ivStTwN5+EcJDVPFW/UA87aw669gwEF0QE1Sj7W4WwspjRiGFc+4IhjAsHuy6zjR o2UwCRBA1e9jL4TmsDV5LQDvUtoVIrLkGiY+G8fGfGOahesHge1cXG4Q+ydixKG4 43bOqtekze9WP3myccx7Ck/1y4MCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPHTqVAXxRVCMeKUsGOzU3ZqEnGTMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzcwMGFlZDFkLTk0YzktNDlhNi1hNjA5LTg4MmUwM2NkMDdiYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83MDBhZWQx ZC05NGM5LTQ5YTYtYTYwOS04ODJlMDNjZDA3YmEvMC9GMUQzQTk1MDE3QzUxNTQy MzFFMjk0QjA2M0IzNTM3NjZBMTI3MTkzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ2p0MA8EAgACMAkDBwAgAQ3zpQAwDQYJKoZIhvcNAQELBQADggEBABjZDsND k6AYHWuXxOswc70UE9UHI9+3desuNkx2y5e4rbUW36uArKjIsbXPDmx/EIlZw2E0 cd34ms/ZUj6yMccXxteIkR7M/HjnI0G0V8VaM+a7jbHznO7tdZmZU9mBlvJ8G8sr dgu/qHfaLOoUu7InRtTNgBjIXqSEfifjm2L9qf6SYy664/epw281P6nAxymxtLGM uDfya0+1Mz9tgZI31x1jGRZQHBDDdkpl+L9FeG6X4uyAIDEHEyXwDBnHKP6Yo3mt OH6eJyUiv9hdBICT8FxyuWbBbQDpPfp7VACthF1hOkg8aOTc+4CB57qlitUao9gO LDKXXh25HAwOl1Q= -----END CERTIFICATE-----Generated at Tue May 12 22:33:24 2026 by rpki-client