$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F26A4E07987CD08DFF498C430FCD4B3D4E6FED1A.cer File: F26A4E07987CD08DFF498C430FCD4B3D4E6FED1A.cer (raw, json) Hash identifier: l77Z53ELUhtSUvwpLiVIbGMKrXZsQF6Hgz09Xb6nOkE= Subject key identifier: F2:6A:4E:07:98:7C:D0:8D:FF:49:8C:43:0F:CD:4B:3D:4E:6F:ED:1A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0965D1D9711DAE479A6E380128030D93D724F8D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F26A4E07987CD08DFF498C430FCD4B3D4E6FED1A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:14:43 +0000 Certificate not after: Sun 02 May 2027 01:19:43 +0000 Subordinate resources: IP: 103.55.224.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:65:d1:d9:71:1d:ae:47:9a:6e:38:01:28:03:0d:93:d7:24:f8:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:14:43 2026 GMT Not After : May 2 01:19:43 2027 GMT Subject: CN=F26A4E07987CD08DFF498C430FCD4B3D4E6FED1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5f:91:fe:25:8d:88:79:9a:07:55:9b:ca:88: f9:31:c2:03:61:5f:0e:d5:98:b9:2c:87:fb:3b:ae: a3:3b:09:20:2f:d8:c7:89:30:98:91:89:77:79:0a: 50:1e:ab:85:ba:f1:eb:ce:b1:3d:78:1a:57:fd:b0: cc:17:7f:08:22:ce:8c:2b:33:8d:5f:47:34:ee:d7: f7:24:f2:93:0b:83:19:ba:7a:e6:13:30:1c:dc:2b: a1:8c:cd:4f:3f:95:4a:89:6d:1c:e5:64:43:7a:9c: 38:fc:18:94:91:c5:40:37:4b:4b:d0:fb:0d:b8:c4: 12:00:7a:19:fc:53:52:3f:6e:06:02:7b:25:f5:88: bc:a7:a1:0d:a1:b1:9e:d1:96:b9:30:91:9c:95:25: f5:dd:03:aa:10:44:7b:0f:82:81:e3:90:7f:d3:7c: f6:c2:d3:b8:16:df:42:c0:8b:43:09:68:4f:e3:91: e0:51:4e:74:36:8e:85:ea:a5:7c:88:73:7b:72:d4: ca:8e:14:88:16:8a:c8:1e:cf:23:ea:3c:bc:0d:90: e4:56:90:82:1c:c2:1e:a6:bd:15:f0:fd:f8:d3:ee: ea:fe:c2:f4:94:9c:6d:36:a1:5d:5c:74:1c:36:91: d9:b7:8e:e5:d1:86:69:e7:fa:f8:bc:d6:b4:59:0e: 02:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:6A:4E:07:98:7C:D0:8D:FF:49:8C:43:0F:CD:4B:3D:4E:6F:ED:1A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F26A4E07987CD08DFF498C430FCD4B3D4E6FED1A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.55.224.0/23 Signature Algorithm: sha256WithRSAEncryption 90:d0:69:66:04:0f:de:10:5e:56:6f:97:67:1c:6e:58:bf:72: 0b:7d:bc:d2:9e:1f:87:f2:81:8a:aa:a6:67:7d:69:dd:19:0f: 3b:2f:ec:74:27:b5:4c:d6:4e:53:b3:5b:84:a3:ef:81:3a:7d: cb:0f:5f:41:fc:f6:b7:24:6e:49:5d:cb:69:36:f7:97:fc:7e: 7e:9d:53:f4:9f:3e:0a:21:4c:a8:d3:7a:b1:32:8a:81:a5:d4: dd:b8:1a:4c:fd:42:6f:db:2c:53:07:17:c4:63:b4:c5:04:33: 16:a4:ca:db:6d:2e:01:7f:00:84:86:c8:e3:f6:6e:29:42:53: 39:5f:2b:17:78:6b:1a:50:01:d1:d3:21:d1:5d:5e:5a:8f:25: a5:66:a6:40:de:e2:87:5a:84:8a:5a:ae:f0:80:6e:7c:e2:a1: 71:4f:5f:aa:f3:44:e8:95:ec:9d:00:fd:e2:82:91:58:5a:4c: e7:0a:0b:48:28:3b:cc:b0:02:28:79:b9:63:cf:54:66:f0:c0: e6:29:6d:98:ce:fa:13:12:ee:94:83:e0:a2:a5:c1:4b:60:c3: 52:9a:ed:5f:2a:c0:89:c9:e9:d3:19:f2:65:ea:1e:9e:d1:92: f6:ce:f5:b5:8a:42:43:5c:30:d9:67:8a:c0:03:f8:ec:89:03: 29:f0:52:46 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUCWXR2XEdrkeabjgBKAMNk9ck+NQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTQ0M1oX DTI3MDUwMjAxMTk0M1owMzExMC8GA1UEAxMoRjI2QTRFMDc5ODdDRDA4REZGNDk4 QzQzMEZDRDRCM0Q0RTZGRUQxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJlfkf4ljYh5mgdVm8qI+THCA2FfDtWYuSyH+zuuozsJIC/Yx4kwmJGJd3kK UB6rhbrx686xPXgaV/2wzBd/CCLOjCszjV9HNO7X9yTykwuDGbp65hMwHNwroYzN Tz+VSoltHOVkQ3qcOPwYlJHFQDdLS9D7DbjEEgB6GfxTUj9uBgJ7JfWIvKehDaGx ntGWuTCRnJUl9d0DqhBEew+CgeOQf9N89sLTuBbfQsCLQwloT+OR4FFOdDaOheql fIhze3LUyo4UiBaKyB7PI+o8vA2Q5FaQghzCHqa9FfD9+NPu6v7C9JScbTahXVx0 HDaR2beO5dGGaef6+LzWtFkOAiUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPJqTgeYfNCN/0mMQw/NSz1Ob+0aMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzhjZjJjNzMzLWQ2N2YtNDgxMy1iOGY3LTA1OGQ5NWEwOTU4Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84Y2YyYzcz My1kNjdmLTQ4MTMtYjhmNy0wNThkOTVhMDk1ODcvMC9GMjZBNEUwNzk4N0NEMDhE RkY0OThDNDMwRkNENEIzRDRFNkZFRDFBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZzfgMA0GCSqGSIb3DQEBCwUAA4IBAQCQ0GlmBA/eEF5Wb5dnHG5Yv3ILfbzS nh+H8oGKqqZnfWndGQ87L+x0J7VM1k5Ts1uEo++BOn3LD19B/Pa3JG5JXctpNveX /H5+nVP0nz4KIUyo03qxMoqBpdTduBpM/UJv2yxTBxfEY7TFBDMWpMrbbS4BfwCE hsjj9m4pQlM5XysXeGsaUAHR0yHRXV5ajyWlZqZA3uKHWoSKWq7wgG584qFxT1+q 80ToleydAP3igpFYWkznCgtIKDvMsAIoebljz1Rm8MDmKW2YzvoTEu6Ug+CipcFL YMNSmu1fKsCJyenTGfJl6h6e0ZL2zvW1ikJDXDDZZ4rAA/jsiQMp8FJG -----END CERTIFICATE-----Generated at Tue May 12 22:45:59 2026 by rpki-client