$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer File: F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.cer (raw, json) Hash identifier: 68rc0+s9TovLtSaybSTWsu85YVS8rHES+rZWOX1z8sU= Subject key identifier: F2:31:77:AE:A0:5E:C0:02:ED:9D:1A:9E:C6:0D:6A:12:42:AF:D4:58 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2C07E8747E408D7677968D58D2199803DF2C26DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:31:27 +0000 Certificate not after: Sun 02 May 2027 01:36:27 +0000 Subordinate resources: IP: 103.186.60.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:07:e8:74:7e:40:8d:76:77:96:8d:58:d2:19:98:03:df:2c:26:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:31:27 2026 GMT Not After : May 2 01:36:27 2027 GMT Subject: CN=F23177AEA05EC002ED9D1A9EC60D6A1242AFD458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:09:73:e6:1f:82:74:30:f2:43:b0:ab:98:3a: f2:c2:f8:84:94:ea:3c:42:05:b1:cf:fe:cb:b1:89: d4:a2:0b:99:31:7a:de:70:35:29:49:2c:81:41:ba: 9f:c7:94:f5:f2:2d:9c:66:a3:54:fa:6e:e2:33:67: fb:f5:81:4f:4d:2b:dc:0c:9f:0e:fa:b8:3a:cb:77: 17:ab:5e:09:af:35:fc:53:a8:95:5e:50:f0:28:d6: b1:98:b1:ea:d1:0f:f4:a1:02:71:21:46:4b:6e:4c: 85:e3:f0:d8:c0:a0:11:9c:e9:c1:fd:2b:38:b2:61: 7c:cc:e6:06:15:18:35:30:50:1e:a7:09:0d:b5:ab: 22:fc:31:27:09:b6:6a:5b:0b:70:c1:48:33:fb:3e: 0a:46:8e:ad:f6:a0:c4:d5:95:fd:0c:bf:23:f4:81: f0:76:2b:39:fb:28:e0:a5:c5:fa:7c:86:1c:44:91: d1:16:1e:c9:a1:de:bd:c9:c3:4f:10:0d:72:a7:7f: fa:af:01:a6:e4:73:9a:8e:93:3f:85:81:71:ed:2a: 19:1e:35:47:d7:57:af:be:c8:a3:93:1c:9d:9f:76: 61:f8:13:b1:fb:90:61:8c:52:ff:f4:07:14:a8:3b: 64:3f:05:96:8d:21:7c:0b:b5:94:4f:e0:0c:f3:af: 01:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:31:77:AE:A0:5E:C0:02:ED:9D:1A:9E:C6:0D:6A:12:42:AF:D4:58 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/F23177AEA05EC002ED9D1A9EC60D6A1242AFD458.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.60.0/23 Signature Algorithm: sha256WithRSAEncryption 65:af:82:15:42:1f:4b:d6:f7:7f:f1:e7:9e:d0:ba:1e:63:b1: be:47:70:06:11:1f:40:c2:82:c4:69:a5:dd:7e:dc:a4:56:9d: 5d:d5:8b:03:a4:23:b0:56:70:d1:b0:71:f3:f7:3b:49:44:14: 1c:5d:49:51:29:50:0e:b7:28:e5:02:e7:d0:40:43:89:17:cb: 7e:6c:d0:f8:38:b8:87:d5:f7:18:7b:9e:ad:20:9a:9a:23:3b: 0b:05:bd:77:3f:0b:27:da:5f:98:99:f1:28:6f:c4:35:53:0f: 9d:97:d9:b0:b2:33:70:50:06:d5:41:1c:92:cd:9b:59:f1:7e: 53:14:89:a6:f3:75:d5:5b:29:b8:25:3a:4c:f7:60:6b:f5:0f: 46:fd:83:75:bf:2b:d7:be:1a:93:c3:9b:01:f6:8f:f5:b1:15: fd:b4:6f:ec:1f:94:f7:4e:62:29:3d:42:68:ba:f6:8d:1f:57: 84:b1:93:c2:10:df:fa:c1:89:56:15:17:fd:85:e4:b6:a1:4b: 2b:1c:82:3c:88:fe:76:f7:53:3d:15:95:06:64:a1:eb:c3:aa: bf:25:ba:bf:15:c7:a1:14:3c:52:a4:0b:92:06:90:95:9d:72: 33:5f:ff:40:77:3a:0b:4e:85:ee:9e:bb:58:4e:2c:71:f7:4d: 72:cf:66:f0 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIULAfodH5AjXZ3lo1Y0hmYA98sJt0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzEyN1oX DTI3MDUwMjAxMzYyN1owMzExMC8GA1UEAxMoRjIzMTc3QUVBMDVFQzAwMkVEOUQx QTlFQzYwRDZBMTI0MkFGRDQ1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYJc+YfgnQw8kOwq5g68sL4hJTqPEIFsc/+y7GJ1KILmTF63nA1KUksgUG6 n8eU9fItnGajVPpu4jNn+/WBT00r3AyfDvq4Ost3F6teCa81/FOolV5Q8CjWsZix 6tEP9KECcSFGS25MhePw2MCgEZzpwf0rOLJhfMzmBhUYNTBQHqcJDbWrIvwxJwm2 alsLcMFIM/s+CkaOrfagxNWV/Qy/I/SB8HYrOfso4KXF+nyGHESR0RYeyaHevcnD TxANcqd/+q8BpuRzmo6TP4WBce0qGR41R9dXr77Io5McnZ92YfgTsfuQYYxS//QH FKg7ZD8Flo0hfAu1lE/gDPOvAdcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPIxd66gXsAC7Z0ansYNahJCr9RYMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E2Nzk4MjRmLTRlMDgtNDk3MC1iYmE2LTI3YjQ3MjZjYTU4MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hNjc5ODI0 Zi00ZTA4LTQ5NzAtYmJhNi0yN2I0NzI2Y2E1ODAvMC9GMjMxNzdBRUEwNUVDMDAy RUQ5RDFBOUVDNjBENkExMjQyQUZENDU4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7o8MA0GCSqGSIb3DQEBCwUAA4IBAQBlr4IVQh9L1vd/8eee0LoeY7G+R3AG ER9AwoLEaaXdftykVp1d1YsDpCOwVnDRsHHz9ztJRBQcXUlRKVAOtyjlAufQQEOJ F8t+bND4OLiH1fcYe56tIJqaIzsLBb13Pwsn2l+YmfEob8Q1Uw+dl9mwsjNwUAbV QRySzZtZ8X5TFImm83XVWym4JTpM92Br9Q9G/YN1vyvXvhqTw5sB9o/1sRX9tG/s H5T3TmIpPUJouvaNH1eEsZPCEN/6wYlWFRf9heS2oUsrHII8iP5291M9FZUGZKHr w6q/Jbq/FcehFDxSpAuSBpCVnXIzX/9AdzoLToXunrtYTixx901yz2bw -----END CERTIFICATE-----Generated at Tue May 12 22:52:35 2026 by rpki-client