$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer File: F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer (raw, json) Hash identifier: 8gx9BVN39yBujEmX7BRyblC23jykRSwP+l0U3qi4Pc8= Subject key identifier: F2:95:85:61:97:3C:A6:92:FE:FC:E6:65:E5:EA:E6:7C:62:7C:DA:6A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4A30F78BFB3E1B6144D0E1B86B6AF03650BF7566 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:42:16 +0000 Certificate not after: Sun 02 May 2027 02:47:16 +0000 Subordinate resources: IP: 103.196.40.0/23 IP: 2001:df1:b5c0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:30:f7:8b:fb:3e:1b:61:44:d0:e1:b8:6b:6a:f0:36:50:bf:75:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:42:16 2026 GMT Not After : May 2 02:47:16 2027 GMT Subject: CN=F2958561973CA692FEFCE665E5EAE67C627CDA6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f9:99:f1:35:8a:e2:60:ef:e9:08:ac:9f:d3: 78:89:e3:53:25:c8:26:15:6f:7e:b1:b3:37:cc:36: 30:74:6c:4f:24:86:ca:31:f3:c1:e5:88:d1:f1:5e: d9:9f:05:2b:7a:25:64:eb:6c:ee:30:2f:13:7d:35: a6:17:e8:ec:7a:6a:cd:b5:c9:bb:aa:df:db:3c:55: 28:0b:f5:eb:10:14:e2:cf:eb:07:bc:6c:16:27:06: ab:cc:c9:ff:f9:36:0d:92:21:f4:3a:3b:74:72:15: 86:0c:da:f6:23:ba:d7:0e:3d:2e:d7:4f:e0:b5:1b: 08:60:a9:87:0e:97:70:d1:69:7d:c6:96:45:9d:74: e5:18:bf:0b:1d:71:61:e4:61:50:6d:d8:09:eb:0f: fa:cc:2d:b8:c5:d6:93:40:22:e0:47:3a:29:a5:e3: 83:57:bb:f8:39:29:e7:ce:bf:e4:4c:54:64:63:d0: c2:07:96:aa:99:a1:54:51:80:bb:9c:6d:27:b8:2a: 44:ae:9c:29:7a:3f:7b:56:19:6e:db:1b:2a:0f:5b: 0c:00:b6:a9:69:c7:83:2b:fb:6f:3e:df:dd:ff:98: 28:15:a1:6e:6d:ef:c6:5f:a9:48:ee:a5:af:a6:a5: b0:52:ee:47:27:7b:dd:a8:f2:a9:ed:eb:3c:43:79: 88:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:95:85:61:97:3C:A6:92:FE:FC:E6:65:E5:EA:E6:7C:62:7C:DA:6A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.196.40.0/23 IPv6: 2001:df1:b5c0::/48 Signature Algorithm: sha256WithRSAEncryption 93:03:f9:7f:ad:7f:8d:49:e3:1f:de:30:52:8a:e2:00:6f:89: 7a:11:33:dc:14:23:36:5a:07:4b:40:a5:32:1e:d0:42:f7:a0: 75:53:a2:35:30:a7:8a:40:c7:27:e0:42:dc:30:4d:b8:41:2e: cd:fc:cc:6b:e2:cc:90:3e:e6:c0:3a:d5:f2:7f:56:cd:33:65: 4d:f3:cb:b4:5a:a3:a8:29:40:4e:83:88:b3:73:4d:e7:fc:df: 73:b2:6f:df:cd:24:be:f9:2b:cd:99:e7:f8:60:df:04:02:a9: 29:4f:bd:42:12:66:7d:6f:ee:eb:3f:4f:37:7f:68:da:bd:df: e6:5b:0f:5f:56:16:c4:2a:70:55:1a:eb:50:56:3a:65:d8:7e: 9f:32:2a:9d:01:e0:5c:86:8d:a6:bf:c3:3c:a9:09:c3:72:09: 76:55:f0:72:e0:50:19:09:17:22:70:6d:fc:bb:3c:63:f0:18: 2c:ea:83:e5:f7:14:b6:5f:3b:fa:ba:dd:51:3a:89:ef:10:8a: d6:eb:34:f7:fb:dc:d0:43:be:62:69:cc:97:df:20:bd:f5:19: 15:c8:65:df:62:73:1f:78:5a:46:c1:97:33:b4:11:42:43:cf: 12:ad:6f:7a:c1:cc:66:12:bf:9e:94:0c:69:2c:91:81:42:be: 9a:45:31:d8 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUSjD3i/s+G2FE0OG4a2rwNlC/dWYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyNDIxNloX DTI3MDUwMjAyNDcxNlowMzExMC8GA1UEAxMoRjI5NTg1NjE5NzNDQTY5MkZFRkNF NjY1RTVFQUU2N0M2MjdDREE2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALL5mfE1iuJg7+kIrJ/TeInjUyXIJhVvfrGzN8w2MHRsTySGyjHzweWI0fFe 2Z8FK3olZOts7jAvE301phfo7HpqzbXJu6rf2zxVKAv16xAU4s/rB7xsFicGq8zJ //k2DZIh9Do7dHIVhgza9iO61w49LtdP4LUbCGCphw6XcNFpfcaWRZ105Ri/Cx1x YeRhUG3YCesP+swtuMXWk0Ai4Ec6KaXjg1e7+Dkp586/5ExUZGPQwgeWqpmhVFGA u5xtJ7gqRK6cKXo/e1YZbtsbKg9bDAC2qWnHgyv7bz7f3f+YKBWhbm3vxl+pSO6l r6alsFLuRyd73ajyqe3rPEN5iK8CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPKVhWGXPKaS/vzmZeXq5nxifNpqMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ZhNWI0ZmE0LTMyOGMtNGNmMi1hZGUzLWM4NjgxMzFkNGUwZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mYTViNGZh NC0zMjhjLTRjZjItYWRlMy1jODY4MTMxZDRlMGQvMC9GMjk1ODU2MTk3M0NBNjky RkVGQ0U2NjVFNUVBRTY3QzYyN0NEQTZBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ8QoMA8EAgACMAkDBwAgAQ3xtcAwDQYJKoZIhvcNAQELBQADggEBAJMD+X+t f41J4x/eMFKK4gBviXoRM9wUIzZaB0tApTIe0EL3oHVTojUwp4pAxyfgQtwwTbhB Ls38zGvizJA+5sA61fJ/Vs0zZU3zy7Rao6gpQE6DiLNzTef833Oyb9/NJL75K82Z 5/hg3wQCqSlPvUISZn1v7us/Tzd/aNq93+ZbD19WFsQqcFUa61BWOmXYfp8yKp0B 4FyGjaa/wzypCcNyCXZV8HLgUBkJFyJwbfy7PGPwGCzqg+X3FLZfO/q63VE6ie8Q itbrNPf73NBDvmJpzJffIL31GRXIZd9icx94WkbBlzO0EUJDzxKtb3rBzGYSv56U DGkskYFCvppFMdg= -----END CERTIFICATE-----Generated at Tue May 12 22:03:09 2026 by rpki-client