$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F24F92FEE32EF3FD89B142D403B664674EC45F20.cer File: F24F92FEE32EF3FD89B142D403B664674EC45F20.cer (raw, json) Hash identifier: 9pF7BCp/lwTEUdQcNhX1gICVpCb6MaWUngv1VyBhH94= Subject key identifier: F2:4F:92:FE:E3:2E:F3:FD:89:B1:42:D4:03:B6:64:67:4E:C4:5F:20 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4C0F119153101242D8AD9C3EA32AFF37C4FABB60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.mft caRepository: rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:11:36 +0000 Certificate not after: Sun 02 May 2027 01:16:36 +0000 Subordinate resources: IP: 103.114.144.0/24 IP: 2001:df4:f900::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:0f:11:91:53:10:12:42:d8:ad:9c:3e:a3:2a:ff:37:c4:fa:bb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:11:36 2026 GMT Not After : May 2 01:16:36 2027 GMT Subject: CN=F24F92FEE32EF3FD89B142D403B664674EC45F20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b4:43:a9:a1:bb:e4:54:ea:68:d9:3e:ad:18: 03:66:a6:72:4c:88:5c:a5:1b:e0:a6:35:9c:a6:48: b6:f4:59:f9:5c:9e:c2:4c:ef:a3:ad:24:0d:a4:25: 0f:9a:49:f6:f3:5d:b1:94:be:23:eb:6c:78:ad:8a: 99:31:23:bd:39:83:1f:1e:e6:8e:d7:a8:22:af:24: 2d:ba:b6:11:ea:1a:32:74:c8:6e:8e:48:05:98:61: c9:0a:c7:8c:3e:fe:2b:a3:b9:16:2e:f8:53:80:20: 75:46:0c:10:ae:96:33:14:36:a6:1b:f0:e6:3d:bc: eb:94:3b:29:53:00:f7:fa:a4:64:51:8c:86:dc:82: 60:91:ba:d1:5c:00:1a:fa:02:67:9b:2b:b9:d0:c9: 5f:33:b2:73:14:b6:95:cb:38:9e:5b:4b:2c:19:36: 1c:81:37:80:56:b6:76:14:37:43:82:ba:63:46:77: 05:78:f8:9b:be:1a:d3:68:bf:ed:fc:46:ac:dc:98: 12:7f:d1:e4:06:db:95:97:9a:60:94:5b:3d:02:4e: 6e:43:47:20:ca:5a:00:c5:ac:29:f3:c5:70:fc:5d: ba:5c:aa:2c:37:d7:09:5e:cc:46:7e:1b:73:ec:37: 09:1c:c9:2a:04:69:67:22:d6:64:aa:51:42:c6:90: 31:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:4F:92:FE:E3:2E:F3:FD:89:B1:42:D4:03:B6:64:67:4E:C4:5F:20 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.114.144.0/24 IPv6: 2001:df4:f900::/48 Signature Algorithm: sha256WithRSAEncryption 62:b2:ed:e9:6a:13:d0:df:35:d8:0f:31:f7:d0:cc:e0:c8:06: 4e:50:17:4f:14:09:3e:36:71:d3:cd:b0:80:58:72:be:54:d4: c9:ca:37:76:10:5d:17:c8:c1:a1:91:1d:17:7e:e3:14:87:cf: 62:ca:18:ef:49:83:d3:de:48:56:7c:0e:dd:49:f4:e1:74:03: bb:26:71:da:f5:1e:29:7e:62:50:f4:d2:8f:e8:9b:48:14:3b: ec:19:bc:77:cd:69:2f:18:9e:09:ef:ec:69:2e:55:7d:82:58: 7b:74:64:27:71:02:a5:e5:b9:13:f6:02:c2:70:6a:f1:9d:80: a8:ef:f2:4d:36:c9:fc:89:90:09:56:f3:d9:ba:97:25:bb:cd: 40:84:05:dc:37:7e:07:da:41:88:6f:22:ca:c7:d8:98:f3:65: 84:fc:59:a3:90:f6:85:9f:e5:38:a0:d1:e4:cf:10:e8:4c:b9: 16:7f:4d:10:71:50:04:5a:20:18:3f:8f:53:fd:94:f9:96:65: 7b:a6:bf:16:92:16:99:ec:9a:cd:5d:b5:f2:de:d8:f7:b9:e1: 34:17:72:13:8b:5e:03:99:39:ec:ed:03:ae:25:96:e1:ff:cc: be:4a:62:43:f8:88:36:6b:0d:e0:4b:72:bc:d4:94:b6:4a:ec: 80:51:93:bb -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUTA8RkVMQEkLYrZw+oyr/N8T6u2AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTEzNloX DTI3MDUwMjAxMTYzNlowMzExMC8GA1UEAxMoRjI0RjkyRkVFMzJFRjNGRDg5QjE0 MkQ0MDNCNjY0Njc0RUM0NUYyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMG0Q6mhu+RU6mjZPq0YA2amckyIXKUb4KY1nKZItvRZ+Vyewkzvo60kDaQl D5pJ9vNdsZS+I+tseK2KmTEjvTmDHx7mjteoIq8kLbq2EeoaMnTIbo5IBZhhyQrH jD7+K6O5Fi74U4AgdUYMEK6WMxQ2phvw5j2865Q7KVMA9/qkZFGMhtyCYJG60VwA GvoCZ5srudDJXzOycxS2lcs4nltLLBk2HIE3gFa2dhQ3Q4K6Y0Z3BXj4m74a02i/ 7fxGrNyYEn/R5AbblZeaYJRbPQJObkNHIMpaAMWsKfPFcPxdulyqLDfXCV7MRn4b c+w3CRzJKgRpZyLWZKpRQsaQMcUCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPJPkv7jLvP9ibFC1AO2ZGdOxF8gMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg4Nzg4YThiLTU0MWItNGNiZi1iYWI5LThkYzM3N2JjMTI4NC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84ODc4OGE4 Yi01NDFiLTRjYmYtYmFiOS04ZGMzNzdiYzEyODQvMC9GMjRGOTJGRUUzMkVGM0ZE ODlCMTQyRDQwM0I2NjQ2NzRFQzQ1RjIwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ3KQMA8EAgACMAkDBwAgAQ30+QAwDQYJKoZIhvcNAQELBQADggEBAGKy7elq E9DfNdgPMffQzODIBk5QF08UCT42cdPNsIBYcr5U1MnKN3YQXRfIwaGRHRd+4xSH z2LKGO9Jg9PeSFZ8Dt1J9OF0A7smcdr1Hil+YlD00o/om0gUO+wZvHfNaS8Yngnv 7GkuVX2CWHt0ZCdxAqXluRP2AsJwavGdgKjv8k02yfyJkAlW89m6lyW7zUCEBdw3 fgfaQYhvIsrH2JjzZYT8WaOQ9oWf5Tig0eTPEOhMuRZ/TRBxUARaIBg/j1P9lPmW ZXumvxaSFpnsms1dtfLe2Pe54TQXchOLXgOZOeztA64lluH/zL5KYkP4iDZrDeBL crzUlLZK7IBRk7s= -----END CERTIFICATE-----Generated at Tue May 12 22:10:20 2026 by rpki-client