$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F23594312FE527F86185AE38CC16265280FD40FA.cer File: F23594312FE527F86185AE38CC16265280FD40FA.cer (raw, json) Hash identifier: kpazdZr7xG0xXeK9DisHtFEoTY6V4LbBJSxzEJ+uFh4= Subject key identifier: F2:35:94:31:2F:E5:27:F8:61:85:AE:38:CC:16:26:52:80:FD:40:FA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5F6291CD439C405207BE162343607C81FD4EA8F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:25:24 +0000 Certificate not after: Sun 02 May 2027 00:30:24 +0000 Subordinate resources: IP: 103.231.196.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:62:91:cd:43:9c:40:52:07:be:16:23:43:60:7c:81:fd:4e:a8:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:25:24 2026 GMT Not After : May 2 00:30:24 2027 GMT Subject: CN=F23594312FE527F86185AE38CC16265280FD40FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f5:80:bf:63:ee:96:f7:25:ca:ae:dc:1b:0c: 55:2c:15:78:4d:37:5b:43:9a:97:b3:f8:e8:0f:76: f8:cd:e8:df:c9:06:9c:da:b4:23:11:f9:fe:10:04: ee:ff:e6:dd:97:85:55:d9:ec:f2:ef:66:1a:7d:24: 0e:f0:4d:cb:51:30:b6:4a:5b:71:e7:c0:d2:aa:94: 50:7e:45:c1:e1:c6:20:77:4c:e9:7a:86:c9:bc:27: 9e:d9:31:cf:41:a1:60:33:83:33:8f:ad:8d:a8:b6: 02:88:be:28:a4:6c:e8:81:46:bd:cc:23:38:c9:b1: c0:cf:cf:7e:01:06:87:24:ce:d1:a0:7a:66:d0:48: 9b:af:06:05:58:d7:de:2a:6c:32:54:a7:93:60:7f: 57:f6:1f:6f:32:d3:a1:72:f7:98:f5:a1:38:51:61: 16:bd:70:62:62:9e:69:fb:46:4c:78:77:1a:fc:4a: cc:57:e5:73:47:57:b2:b8:7a:14:f3:7b:7f:32:9e: 9f:53:ab:2d:34:08:be:31:80:4f:a9:f9:c9:92:2c: 9d:59:23:54:2d:ac:35:e8:f0:be:5b:71:1f:fe:9c: 8c:4e:e7:bd:4c:56:c5:41:0f:d5:10:87:4a:ca:ec: e0:5e:3c:26:75:5a:1f:b3:cb:06:27:4f:17:ce:f9: 35:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:35:94:31:2F:E5:27:F8:61:85:AE:38:CC:16:26:52:80:FD:40:FA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/F23594312FE527F86185AE38CC16265280FD40FA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.231.196.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:04:3e:4b:58:25:f3:9f:c1:9b:fc:15:c8:98:06:90:ba:ee: 0d:e7:bc:cd:58:da:9c:8f:d2:fb:06:13:e0:42:a3:25:79:51: 78:86:f7:74:a7:12:84:8b:1e:eb:d7:f8:b6:8c:73:bf:4a:ad: 69:28:2c:63:03:b5:33:e3:4d:7a:49:98:0e:ba:ae:fa:b9:81: e2:c5:6d:14:8d:22:af:75:81:2c:e5:cc:a8:e3:fc:7f:d5:64: 1b:57:74:71:76:90:3f:b4:b5:4e:5d:3d:8f:13:6f:31:60:8f: 07:df:4a:23:db:55:f8:28:72:26:91:ff:8d:31:23:a6:e5:bc: 48:a6:6c:16:74:52:e7:2d:8d:b1:00:e8:40:dd:58:70:10:61: 2a:59:98:b0:df:51:e2:8b:18:5a:ba:60:2d:95:5c:f6:8d:d5: ad:f3:b5:0f:b7:92:ae:61:c4:b0:af:b2:51:66:af:85:77:83: 4c:54:a4:a9:86:6c:95:3e:b5:ca:24:6c:24:23:b7:a5:3c:cf: 1b:3b:3d:8d:a6:b1:d2:9e:ee:2c:f3:e7:5a:c7:ad:5f:61:c0: 77:10:74:fd:86:4a:46:37:02:ba:73:2e:03:18:f2:20:5a:30: be:b8:b6:7c:bd:84:7d:6b:94:76:eb:2a:cb:8c:2a:df:3c:64: 3c:01:18:7b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUX2KRzUOcQFIHvhYjQ2B8gf1OqPkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjUyNFoX DTI3MDUwMjAwMzAyNFowMzExMC8GA1UEAxMoRjIzNTk0MzEyRkU1MjdGODYxODVB RTM4Q0MxNjI2NTI4MEZENDBGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALL1gL9j7pb3Jcqu3BsMVSwVeE03W0Oal7P46A92+M3o38kGnNq0IxH5/hAE 7v/m3ZeFVdns8u9mGn0kDvBNy1EwtkpbcefA0qqUUH5FweHGIHdM6XqGybwnntkx z0GhYDODM4+tjai2Aoi+KKRs6IFGvcwjOMmxwM/PfgEGhyTO0aB6ZtBIm68GBVjX 3ipsMlSnk2B/V/YfbzLToXL3mPWhOFFhFr1wYmKeaftGTHh3GvxKzFflc0dXsrh6 FPN7fzKen1OrLTQIvjGAT6n5yZIsnVkjVC2sNejwvltxH/6cjE7nvUxWxUEP1RCH Ssrs4F48JnVaH7PLBidPF875NWkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPI1lDEv5Sf4YYWuOMwWJlKA/UD6MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQ0YTIzMjJmLWYzNTEtNDI4ZC1hNzQ3LTkwZGZkMzIyYjU0MS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80NGEyMzIy Zi1mMzUxLTQyOGQtYTc0Ny05MGRmZDMyMmI1NDEvMC9GMjM1OTQzMTJGRTUyN0Y4 NjE4NUFFMzhDQzE2MjY1MjgwRkQ0MEZBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ+fEMA0GCSqGSIb3DQEBCwUAA4IBAQAsBD5LWCXzn8Gb/BXImAaQuu4N57zN WNqcj9L7BhPgQqMleVF4hvd0pxKEix7r1/i2jHO/Sq1pKCxjA7Uz4016SZgOuq76 uYHixW0UjSKvdYEs5cyo4/x/1WQbV3RxdpA/tLVOXT2PE28xYI8H30oj21X4KHIm kf+NMSOm5bxIpmwWdFLnLY2xAOhA3VhwEGEqWZiw31HiixhaumAtlVz2jdWt87UP t5KuYcSwr7JRZq+Fd4NMVKSphmyVPrXKJGwkI7elPM8bOz2NprHSnu4s8+dax61f YcB3EHT9hkpGNwK6cy4DGPIgWjC+uLZ8vYR9a5R26yrLjCrfPGQ8ARh7 -----END CERTIFICATE-----Generated at Tue May 12 22:45:26 2026 by rpki-client