$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer File: F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer (raw, json) Hash identifier: +Aa+dbPnqjHSm2MWL3TN+0YlKHtbeWLYBz9dtkSpnDo= Subject key identifier: F2:36:C7:A7:7A:63:71:D1:7F:E8:7C:85:E2:C5:B6:96:6B:9B:28:83 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0CCABB42DA517DB88BC1B8B0A94CEE00EADE05A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft caRepository: rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:45:41 +0000 Certificate not after: Sat 01 May 2027 23:50:41 +0000 Subordinate resources: IP: 42.62.176.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ca:bb:42:da:51:7d:b8:8b:c1:b8:b0:a9:4c:ee:00:ea:de:05:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:45:41 2026 GMT Not After : May 1 23:50:41 2027 GMT Subject: CN=F236C7A77A6371D17FE87C85E2C5B6966B9B2883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3a:b6:6a:c3:1e:89:9a:79:29:63:fe:ff:8d: 26:e2:6b:73:af:91:f4:f0:c4:32:af:17:02:40:cd: e7:ae:25:a8:5a:06:60:e4:a0:63:c1:74:c9:4a:b8: 92:e7:b0:a0:8c:8d:c4:39:34:83:19:c3:3a:b1:8c: 92:c8:ae:3e:09:3b:06:fd:5e:e1:cd:05:71:99:7d: d9:a3:06:49:58:22:a5:cf:d2:5d:a5:8a:d9:c9:94: e2:09:38:ab:74:60:fd:6d:50:70:f1:b5:4a:82:52: 2d:7c:8e:45:44:67:dc:b5:53:2c:d6:95:64:cc:59: aa:f1:60:87:b5:a3:67:71:40:c2:44:cf:d4:a0:46: 2c:9b:67:c2:60:2c:e1:e5:c8:c8:a1:00:4b:fe:71: 0c:53:bf:d9:05:06:a4:d6:0b:64:db:7e:92:8a:7f: 1e:34:ed:b3:9d:b2:00:8e:fe:75:5f:55:03:71:8d: b4:ff:6a:f3:2d:fe:d3:06:e2:26:a0:f7:ec:7e:bb: ad:ee:d9:af:0f:ac:9c:12:bd:d0:ab:b6:f7:82:08: 76:07:30:10:02:6b:55:ff:75:e3:e4:dc:5c:78:e3: 60:25:a4:d6:6a:9a:d5:df:0a:5b:1e:78:5d:d9:24: d3:fa:d0:90:8f:12:88:8a:15:cf:96:d1:82:9e:07: 00:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:36:C7:A7:7A:63:71:D1:7F:E8:7C:85:E2:C5:B6:96:6B:9B:28:83 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.62.176.0/22 Signature Algorithm: sha256WithRSAEncryption 98:e9:be:fb:fb:59:a7:79:4c:ed:b0:97:45:bc:e6:d4:c7:d9: 03:50:be:66:d5:4e:84:12:78:2f:d8:ca:2c:71:89:7b:86:37: 6e:f1:cb:3c:49:5e:c8:a2:0b:45:6f:35:25:2a:7c:00:b2:b4: 3e:b6:bd:8d:57:a2:9a:47:a4:42:3d:56:9c:32:86:0d:36:b5: e3:13:12:15:32:10:a6:c0:c6:92:82:27:c8:60:11:25:cc:1e: c1:2b:e2:4a:87:e7:7f:88:56:37:f0:b6:e0:1a:69:5d:39:c8: 7e:33:40:f3:64:58:eb:c1:91:9b:a9:19:2f:d8:4c:5d:56:18: 1e:47:bb:ba:0d:fb:8f:d9:e2:9a:ab:00:c1:ea:16:04:ce:64: 0c:f3:a5:a7:74:18:4c:7e:d8:de:aa:fa:21:4d:c2:02:d4:82: 2d:9f:78:12:05:ae:8d:8b:44:0a:3a:9c:91:30:74:da:1e:ea: 54:43:53:7b:85:86:f4:0a:1c:6b:d6:3c:ea:87:25:d5:60:e5: 88:ba:2b:05:53:63:33:6f:ac:58:b1:2a:c3:9e:77:25:8c:0d: 74:bf:c0:ed:3f:5d:cd:d8:41:3f:c7:8e:14:77:bf:fc:f6:3c: 29:d8:3f:b3:fb:ba:0b:2c:0b:65:a3:19:c1:5b:c9:aa:8a:74: 99:f4:d7:03 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUDMq7QtpRfbiLwbiwqUzuAOreBaEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDU0MVoX DTI3MDUwMTIzNTA0MVowMzExMC8GA1UEAxMoRjIzNkM3QTc3QTYzNzFEMTdGRTg3 Qzg1RTJDNUI2OTY2QjlCMjg4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ86tmrDHomaeSlj/v+NJuJrc6+R9PDEMq8XAkDN564lqFoGYOSgY8F0yUq4 kuewoIyNxDk0gxnDOrGMksiuPgk7Bv1e4c0FcZl92aMGSVgipc/SXaWK2cmU4gk4 q3Rg/W1QcPG1SoJSLXyORURn3LVTLNaVZMxZqvFgh7WjZ3FAwkTP1KBGLJtnwmAs 4eXIyKEAS/5xDFO/2QUGpNYLZNt+kop/HjTts52yAI7+dV9VA3GNtP9q8y3+0wbi JqD37H67re7Zrw+snBK90Ku294IIdgcwEAJrVf914+TcXHjjYCWk1mqa1d8KWx54 Xdkk0/rQkI8SiIoVz5bRgp4HAC0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPI2x6d6Y3HRf+h8heLFtpZrmyiDMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzA3ZjhmNmE0LThkODctNGVmMy1iNGRjLTUyYzI1Y2I1NzdjMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wN2Y4ZjZh NC04ZDg3LTRlZjMtYjRkYy01MmMyNWNiNTc3YzIvMC9GMjM2QzdBNzdBNjM3MUQx N0ZFODdDODVFMkM1QjY5NjZCOUIyODgzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCKj6wMA0GCSqGSIb3DQEBCwUAA4IBAQCY6b77+1mneUztsJdFvObUx9kDUL5m 1U6EEngv2MoscYl7hjdu8cs8SV7IogtFbzUlKnwAsrQ+tr2NV6KaR6RCPVacMoYN NrXjExIVMhCmwMaSgifIYBElzB7BK+JKh+d/iFY38LbgGmldOch+M0DzZFjrwZGb qRkv2ExdVhgeR7u6DfuP2eKaqwDB6hYEzmQM86WndBhMftjeqvohTcIC1IItn3gS Ba6Ni0QKOpyRMHTaHupUQ1N7hYb0Chxr1jzqhyXVYOWIuisFU2Mzb6xYsSrDnncl jA10v8DtP13N2EE/x44Ud7/89jwp2D+z+7oLLAtloxnBW8mqinSZ9NcD -----END CERTIFICATE-----Generated at Tue May 12 22:02:37 2026 by rpki-client