$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer File: F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer (raw, json) Hash identifier: ZYP2vE2JjNno4vhNA7dSc4kn+4aXiE3OILEGdWN/hcQ= Subject key identifier: F2:DE:D7:D1:AF:52:5B:DA:D6:41:4B:3E:2B:AF:7B:50:53:99:A7:D1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 430DF78B8D3153B55C50A380B3FBCB6EB889B962 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:38:44 +0000 Certificate not after: Sun 02 May 2027 00:43:44 +0000 Subordinate resources: IP: 103.212.236.0/22 IP: 2404:aa80::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:0d:f7:8b:8d:31:53:b5:5c:50:a3:80:b3:fb:cb:6e:b8:89:b9:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:38:44 2026 GMT Not After : May 2 00:43:44 2027 GMT Subject: CN=F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9b:97:da:37:8d:99:3a:06:db:c1:68:44:bf: d1:ac:69:1c:67:de:8a:49:2a:3b:8f:2a:52:a3:75: 4e:3b:8d:11:dc:7a:63:8c:5b:93:be:1f:22:e7:8a: 0a:2d:d6:e0:92:eb:5c:89:97:a5:45:de:bd:68:cc: 23:44:49:c1:b9:6c:79:b3:f6:3c:39:e0:c9:0c:9a: b7:11:da:36:db:41:c2:e1:d6:6f:d1:eb:b5:56:8c: a5:70:f9:30:d3:ef:4f:b1:b8:84:ed:82:19:8c:57: 8e:1c:43:81:21:22:69:ff:12:21:d3:1c:39:23:9f: f2:db:79:80:5b:94:b4:9f:ee:2f:65:4a:60:b8:69: 57:84:79:fc:5e:61:a3:cd:1b:55:8c:3b:1e:26:15: 43:aa:6d:b3:4c:0f:b4:e8:bf:00:b5:7f:12:0d:aa: 35:e1:b0:44:50:ed:61:e3:f5:db:83:32:80:4e:cd: 42:05:da:f5:32:56:b8:50:1f:27:c3:10:55:c9:fc: 08:2b:93:54:15:16:4d:ad:69:6a:5d:49:f4:1f:6f: 7c:dd:f5:31:fa:4b:c0:65:54:5c:2a:a8:d2:3d:c7: ff:4f:f3:3f:b4:72:a9:4e:d1:ba:dd:0b:4f:bc:bd: 02:95:15:dd:b6:57:de:a2:49:97:9a:ab:c8:67:48: 76:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:DE:D7:D1:AF:52:5B:DA:D6:41:4B:3E:2B:AF:7B:50:53:99:A7:D1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.212.236.0/22 IPv6: 2404:aa80::/32 Signature Algorithm: sha256WithRSAEncryption 86:78:f2:db:74:fc:29:6a:ed:65:5b:81:68:93:ee:6d:ed:e3: e8:d4:ad:6c:dd:37:be:86:a7:22:93:bc:b9:5d:77:4d:03:12: ca:b6:d4:d2:a1:27:d9:bf:c9:ba:c9:bb:40:11:3d:11:61:27: cc:7f:35:8e:a1:b9:7a:79:d7:ea:be:b1:f6:9b:d7:6a:9f:af: 9b:73:f0:f4:a5:b2:90:b8:37:61:a9:5a:eb:8a:25:54:e3:6e: 9f:f4:66:42:2a:a9:64:36:86:d0:0f:fc:c5:f7:a1:ff:0f:17: 46:e5:44:5d:3a:b9:5c:08:21:31:d4:98:4a:c2:e9:7e:10:9b: cc:1f:85:6c:21:a8:6f:d8:8c:c4:11:2a:f0:6f:3c:b2:97:0b: 2a:ef:49:16:a1:b9:09:5e:52:d0:97:af:c5:0f:f9:67:ea:79: 70:d4:ec:63:d7:f6:f1:eb:17:95:21:1a:45:ca:2c:d0:43:db: 14:6b:65:23:68:47:15:e0:cd:16:1a:4c:46:fa:b3:7f:14:d1: fd:35:b2:c4:d9:6c:ea:d2:db:3e:45:24:9b:7d:db:bb:cf:7b: 93:ab:ef:68:79:aa:ca:73:7b:4b:31:5d:e9:4c:e6:e8:6a:f6: 82:dc:bb:45:52:17:33:67:df:cb:d7:a3:85:ce:4b:72:b9:63: 9e:1c:f1:be -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUQw33i40xU7VcUKOAs/vLbriJuWIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzg0NFoX DTI3MDUwMjAwNDM0NFowMzExMC8GA1UEAxMoRjJERUQ3RDFBRjUyNUJEQUQ2NDE0 QjNFMkJBRjdCNTA1Mzk5QTdEMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMObl9o3jZk6BtvBaES/0axpHGfeikkqO48qUqN1TjuNEdx6Y4xbk74fIueK Ci3W4JLrXImXpUXevWjMI0RJwblsebP2PDngyQyatxHaNttBwuHWb9HrtVaMpXD5 MNPvT7G4hO2CGYxXjhxDgSEiaf8SIdMcOSOf8tt5gFuUtJ/uL2VKYLhpV4R5/F5h o80bVYw7HiYVQ6pts0wPtOi/ALV/Eg2qNeGwRFDtYeP124MygE7NQgXa9TJWuFAf J8MQVcn8CCuTVBUWTa1pal1J9B9vfN31MfpLwGVUXCqo0j3H/0/zP7RyqU7Rut0L T7y9ApUV3bZX3qJJl5qryGdIdkcCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPLe19GvUlva1kFLPiuve1BTmafRMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzU5NzJmOWEyLWIwZmYtNDI5OC04ZGE2LWUyZTM4MzQ4YTA3Yi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81OTcyZjlh Mi1iMGZmLTQyOTgtOGRhNi1lMmUzODM0OGEwN2IvMC9GMkRFRDdEMUFGNTI1QkRB RDY0MTRCM0UyQkFGN0I1MDUzOTlBN0QxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ9TsMA0EAgACMAcDBQAkBKqAMA0GCSqGSIb3DQEBCwUAA4IBAQCGePLbdPwp au1lW4Fok+5t7ePo1K1s3Te+hqcik7y5XXdNAxLKttTSoSfZv8m6ybtAET0RYSfM fzWOobl6edfqvrH2m9dqn6+bc/D0pbKQuDdhqVrriiVU426f9GZCKqlkNobQD/zF 96H/DxdG5URdOrlcCCEx1JhKwul+EJvMH4VsIahv2IzEESrwbzyylwsq70kWobkJ XlLQl6/FD/ln6nlw1Oxj1/bx6xeVIRpFyizQQ9sUa2UjaEcV4M0WGkxG+rN/FNH9 NbLE2Wzq0ts+RSSbfdu7z3uTq+9oearKc3tLMV3pTOboavaC3LtFUhczZ9/L16OF zktyuWOeHPG+ -----END CERTIFICATE-----Generated at Tue May 12 22:45:40 2026 by rpki-client