$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer File: F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer (raw, json) Hash identifier: k+5PCbCuNaxJ4d9L4p4mdg/WCSrawZBupIG/UCtIMyE= Subject key identifier: F2:83:60:78:1F:A2:DA:6B:A2:F9:82:CB:9E:34:C0:DB:10:D2:F4:DE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1CD86F14A308FE90251C1D7F6ED786B079FC96A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft caRepository: rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:07:38 +0000 Certificate not after: Sun 02 May 2027 02:12:38 +0000 Subordinate resources: IP: 103.116.112.0/22 IP: 2001:df5:4d00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d8:6f:14:a3:08:fe:90:25:1c:1d:7f:6e:d7:86:b0:79:fc:96:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:07:38 2026 GMT Not After : May 2 02:12:38 2027 GMT Subject: CN=F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fa:51:9f:62:d2:3d:68:15:33:95:29:9b:6f: 85:b2:2f:1f:c7:11:05:d9:79:db:ce:d7:60:6b:d1: be:84:ec:19:8e:17:e6:27:01:8f:0b:90:07:6e:9c: c3:dd:a3:c2:e8:72:64:e9:67:2b:cf:65:4e:9b:6b: 59:61:d9:b4:c8:96:9d:99:88:e5:11:38:06:e2:1a: 96:03:7f:c3:0a:49:f5:06:0a:0f:0b:20:e1:53:c4: e7:08:46:26:b0:f2:ee:91:b0:d2:f1:1f:9e:0b:c7: e0:91:00:dc:e9:07:ad:97:92:a5:b5:3f:2d:3a:53: 8e:23:20:9d:df:49:41:89:25:b5:0e:e8:60:9b:f0: bc:2e:cd:00:70:e6:36:56:00:f8:5d:7c:4c:b0:78: 92:4e:e3:1b:61:be:0c:72:c4:6b:5b:a5:12:81:6b: 0c:c7:41:f2:55:7a:93:14:35:22:1b:d1:3b:cc:f0: 83:90:a5:c2:ec:ea:14:66:19:8b:74:e3:7f:20:68: 99:b0:72:fa:72:73:ca:b0:4d:90:68:3f:10:82:1a: 6e:7c:dd:92:01:11:97:61:86:ab:a1:d1:4b:06:dc: bf:f8:79:b2:28:66:cf:3e:b3:ec:34:bf:14:dc:6e: 69:22:17:3e:35:54:68:ca:81:81:72:ee:45:16:1a: 8f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:83:60:78:1F:A2:DA:6B:A2:F9:82:CB:9E:34:C0:DB:10:D2:F4:DE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.116.112.0/22 IPv6: 2001:df5:4d00::/48 Signature Algorithm: sha256WithRSAEncryption 57:da:0e:b6:04:a1:9f:09:36:13:74:26:27:9b:e3:ec:a3:dd: 1a:ef:9d:88:0d:09:fe:5e:50:d0:60:58:be:df:3b:cc:ed:49: 93:94:84:c8:0b:61:04:e8:16:28:6c:95:84:57:60:c7:6a:87: ab:0d:9d:1f:ac:47:6c:4b:11:03:bf:66:d0:5a:06:f0:ad:97: 11:b2:6d:57:c9:07:01:3d:ca:69:62:d3:f5:16:e7:b2:be:8b: ff:42:76:76:2e:8e:1a:b6:ce:d3:f7:cf:0c:2a:ff:86:76:34: f0:81:30:ff:46:c0:61:88:10:24:6c:ce:d5:3c:ef:0b:a0:5f: 88:3f:46:b1:a0:d0:a8:7d:6f:07:f4:3d:46:40:2d:38:5a:92: 38:65:32:5a:2a:c9:ed:45:64:28:60:10:44:8b:de:eb:9e:b4: fc:5b:b0:23:06:28:20:91:6f:82:d0:2a:b1:1c:cb:75:70:42: 00:c1:a8:36:f5:30:de:e6:e3:6b:0f:49:bc:6a:6c:cc:fa:f9: 00:5d:5d:26:f0:7a:64:cb:49:ac:09:ee:3a:90:e7:09:7c:ef: 1b:0e:4b:0e:10:54:ef:db:49:c6:59:85:b5:ff:c1:4a:53:81: bb:c0:f3:d7:e4:61:ce:d8:b1:c7:7f:6c:b0:36:9f:e1:43:76: 10:b3:8f:15 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUHNhvFKMI/pAlHB1/bteGsHn8lqAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDczOFoX DTI3MDUwMjAyMTIzOFowMzExMC8GA1UEAxMoRjI4MzYwNzgxRkEyREE2QkEyRjk4 MkNCOUUzNEMwREIxMEQyRjRERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOf6UZ9i0j1oFTOVKZtvhbIvH8cRBdl5287XYGvRvoTsGY4X5icBjwuQB26c w92jwuhyZOlnK89lTptrWWHZtMiWnZmI5RE4BuIalgN/wwpJ9QYKDwsg4VPE5whG JrDy7pGw0vEfngvH4JEA3OkHrZeSpbU/LTpTjiMgnd9JQYkltQ7oYJvwvC7NAHDm NlYA+F18TLB4kk7jG2G+DHLEa1ulEoFrDMdB8lV6kxQ1IhvRO8zwg5ClwuzqFGYZ i3TjfyBombBy+nJzyrBNkGg/EIIabnzdkgERl2GGq6HRSwbcv/h5sihmzz6z7DS/ FNxuaSIXPjVUaMqBgXLuRRYajwkCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPKDYHgfotprovmCy540wNsQ0vTeMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RmOWJmNzk3LTkxM2QtNDhkZC04MzJjLTMzYjQwOWI1Zjc5Yi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kZjliZjc5 Ny05MTNkLTQ4ZGQtODMyYy0zM2I0MDliNWY3OWIvMC9GMjgzNjA3ODFGQTJEQTZC QTJGOTgyQ0I5RTM0QzBEQjEwRDJGNERFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZ3RwMA8EAgACMAkDBwAgAQ31TQAwDQYJKoZIhvcNAQELBQADggEBAFfaDrYE oZ8JNhN0Jieb4+yj3RrvnYgNCf5eUNBgWL7fO8ztSZOUhMgLYQToFihslYRXYMdq h6sNnR+sR2xLEQO/ZtBaBvCtlxGybVfJBwE9ymli0/UW57K+i/9CdnYujhq2ztP3 zwwq/4Z2NPCBMP9GwGGIECRsztU87wugX4g/RrGg0Kh9bwf0PUZALThakjhlMloq ye1FZChgEESL3uuetPxbsCMGKCCRb4LQKrEcy3VwQgDBqDb1MN7m42sPSbxqbMz6 +QBdXSbwemTLSawJ7jqQ5wl87xsOSw4QVO/bScZZhbX/wUpTgbvA89fkYc7Yscd/ bLA2n+FDdhCzjxU= -----END CERTIFICATE-----Generated at Tue May 12 22:10:21 2026 by rpki-client