$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F29E13162A7FAF445019923879EB8E64CC4CFA65.cer File: F29E13162A7FAF445019923879EB8E64CC4CFA65.cer (raw, json) Hash identifier: IWa90dzfNlBVv27H0qdn7gxb7M70JT/Iqr8Ukh5xX9s= Subject key identifier: F2:9E:13:16:2A:7F:AF:44:50:19:92:38:79:EB:8E:64:CC:4C:FA:65 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 16D893EE439075930F988C47F375A28E9A1C9DC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.mft caRepository: rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:41:21 +0000 Certificate not after: Sat 01 May 2027 23:46:21 +0000 Subordinate resources: IP: 103.142.182.0/23 IP: 2405:3fc0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:d8:93:ee:43:90:75:93:0f:98:8c:47:f3:75:a2:8e:9a:1c:9d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:41:21 2026 GMT Not After : May 1 23:46:21 2027 GMT Subject: CN=F29E13162A7FAF445019923879EB8E64CC4CFA65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:46:37:c5:de:f6:14:b5:ac:9d:f5:aa:57:fb: 00:fe:1a:9a:45:f1:00:e1:55:25:a9:84:89:70:8f: ce:53:ed:ec:2d:27:b8:b1:da:a8:cc:6d:3f:aa:14: 59:39:1b:ac:69:0d:1b:e9:66:36:3f:84:2f:5c:19: 22:8c:4b:35:12:95:2f:46:ae:5a:d0:76:99:5e:b1: 84:59:40:57:90:1e:79:2b:f4:66:f9:21:22:59:16: 1c:2f:af:81:c3:cd:13:f5:a3:9f:80:cf:48:2c:ae: 5e:bf:b5:45:34:99:56:d4:01:6e:32:fd:1c:5e:17: bf:f0:73:7d:41:ef:b5:a1:0d:79:8a:b1:32:9a:94: 50:e5:41:81:e4:c4:42:12:b9:fd:97:05:99:b9:9a: 1b:c7:ab:15:1f:6f:2a:fb:7a:1f:97:ff:38:e6:2d: 7e:26:c6:b1:35:72:19:fc:f5:59:63:f8:ee:6c:59: ca:01:53:11:81:40:89:ca:45:6d:ad:9f:ef:d0:0e: 45:5a:ff:76:af:3e:6a:8d:e3:79:2c:86:87:ba:f0: e1:4f:ee:9d:14:29:44:ae:fb:dd:60:d1:d4:72:11: 47:5d:36:11:57:82:c3:c6:db:4e:36:64:4e:7f:9e: e2:3c:fd:0c:6c:ca:e6:d5:0a:3a:f7:93:10:80:fe: 09:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:9E:13:16:2A:7F:AF:44:50:19:92:38:79:EB:8E:64:CC:4C:FA:65 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/F29E13162A7FAF445019923879EB8E64CC4CFA65.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.182.0/23 IPv6: 2405:3fc0::/32 Signature Algorithm: sha256WithRSAEncryption 97:86:a2:56:78:2b:78:df:44:1d:4b:fa:46:cd:69:5b:8e:db: 62:48:b4:e5:8d:b6:ec:da:2d:86:b6:f0:a8:9a:33:3f:71:0d: 12:72:4c:d7:de:45:8a:46:a2:9b:e8:db:6c:7b:bd:3d:5f:cc: 53:74:8b:3a:db:2c:db:a0:ea:20:85:10:1c:6e:1b:d6:f1:b1: f4:17:07:d3:42:83:83:b0:4e:f3:5d:32:c9:cb:a9:18:55:52: 61:37:dd:91:24:bf:6f:31:b3:c0:34:8b:ea:3a:be:fc:be:aa: d4:66:22:52:eb:5c:e5:88:02:50:a7:6f:aa:9d:70:84:82:90: 39:9b:17:a3:a9:01:c9:51:2f:08:c9:ba:68:4a:bb:57:98:8f: d2:3d:4d:8e:5d:c2:ab:b4:a5:51:80:7a:d2:98:0d:1d:a3:9d: 78:dd:d5:2d:55:09:84:78:74:d8:b4:f3:8b:95:21:b0:c1:62: ea:76:29:08:fa:4c:19:7d:48:34:42:a3:1d:da:52:35:4e:e8: 5e:5e:e3:ce:e8:0c:b1:0c:d1:51:09:5e:1b:c2:dc:18:4b:5d: ee:63:94:b9:63:fd:dc:2c:e0:3e:c3:cd:b8:cc:df:ca:dc:48: 5e:2d:2a:8e:21:4e:b7:82:56:3a:57:fa:d3:d2:25:7d:6c:2d: 6b:95:7a:28 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUFtiT7kOQdZMPmIxH83WijpocnckwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDEyMVoX DTI3MDUwMTIzNDYyMVowMzExMC8GA1UEAxMoRjI5RTEzMTYyQTdGQUY0NDUwMTk5 MjM4NzlFQjhFNjRDQzRDRkE2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPFGN8Xe9hS1rJ31qlf7AP4amkXxAOFVJamEiXCPzlPt7C0nuLHaqMxtP6oU WTkbrGkNG+lmNj+EL1wZIoxLNRKVL0auWtB2mV6xhFlAV5AeeSv0ZvkhIlkWHC+v gcPNE/Wjn4DPSCyuXr+1RTSZVtQBbjL9HF4Xv/BzfUHvtaENeYqxMpqUUOVBgeTE QhK5/ZcFmbmaG8erFR9vKvt6H5f/OOYtfibGsTVyGfz1WWP47mxZygFTEYFAicpF ba2f79AORVr/dq8+ao3jeSyGh7rw4U/unRQpRK773WDR1HIRR102EVeCw8bbTjZk Tn+e4jz9DGzK5tUKOveTEID+CT0CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPKeExYqf69EUBmSOHnrjmTMTPplMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzAyNmNmMjhkLWZmYzctNDM1MS1hOGNiLTI1ZDE5ZmM0MzE3Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wMjZjZjI4 ZC1mZmM3LTQzNTEtYThjYi0yNWQxOWZjNDMxNzcvMC9GMjlFMTMxNjJBN0ZBRjQ0 NTAxOTkyMzg3OUVCOEU2NENDNENGQTY1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ462MA0EAgACMAcDBQAkBT/AMA0GCSqGSIb3DQEBCwUAA4IBAQCXhqJWeCt4 30QdS/pGzWlbjttiSLTljbbs2i2GtvComjM/cQ0SckzX3kWKRqKb6Ntse709X8xT dIs62yzboOoghRAcbhvW8bH0FwfTQoODsE7zXTLJy6kYVVJhN92RJL9vMbPANIvq Or78vqrUZiJS61zliAJQp2+qnXCEgpA5mxejqQHJUS8IybpoSrtXmI/SPU2OXcKr tKVRgHrSmA0do5143dUtVQmEeHTYtPOLlSGwwWLqdikI+kwZfUg0QqMd2lI1Tuhe XuPO6AyxDNFRCV4bwtwYS13uY5S5Y/3cLOA+w824zN/K3EheLSqOIU63glY6V/rT 0iV9bC1rlXoo -----END CERTIFICATE-----Generated at Tue May 12 22:45:25 2026 by rpki-client