$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.cer File: F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.cer (raw, json) Hash identifier: zag9DGeSLw+qRJia77b4Lq1MyONmj4537nLXGo2lccM= Subject key identifier: F2:E1:9D:B4:C9:E2:49:1D:3C:DE:40:63:FE:F6:6E:3F:7A:3C:1D:66 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7DD3E0DEDFD6345C955945FFA5BABBB262D1D96E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft caRepository: rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:42:27 +0000 Certificate not after: Sun 02 May 2027 02:47:27 +0000 Subordinate resources: IP: 103.175.206.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:d3:e0:de:df:d6:34:5c:95:59:45:ff:a5:ba:bb:b2:62:d1:d9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:42:27 2026 GMT Not After : May 2 02:47:27 2027 GMT Subject: CN=F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d5:36:73:4d:82:48:a1:58:1a:20:7d:69:29: db:fc:1a:67:62:f4:3f:75:3c:b4:cb:79:33:be:8f: 31:7c:9f:13:55:c9:46:96:2d:b2:f7:fe:00:7f:cd: 71:02:05:14:13:28:3c:ca:ba:ae:65:31:77:9b:5a: c8:1a:6f:56:8a:37:f5:0b:51:b4:3a:a4:c9:8c:47: 83:23:4b:06:c1:4a:0c:6d:73:3c:f8:da:2c:60:07: eb:1d:17:b9:d3:2e:e4:eb:ec:d7:0a:2e:10:45:81: 28:83:5b:39:f0:5c:d9:0a:f5:cb:88:d9:13:89:cb: a4:0b:5c:c2:7e:0d:ca:13:a9:92:6b:81:d0:81:a6: 6e:09:a5:fd:8d:e4:29:ed:18:aa:51:e5:07:ae:8b: f3:7e:7a:84:ad:64:5c:2e:a5:1d:b6:22:0e:d5:36: ea:ba:75:65:80:e6:0b:2c:82:dc:1c:f2:8a:1e:61: 44:7d:6e:7c:68:de:49:bb:2d:22:82:ff:00:ce:1c: 75:b3:5d:55:ef:80:7d:74:2e:26:fb:19:04:e5:52: 59:f0:da:77:13:dd:1b:67:4c:87:68:1d:70:7e:c3: 07:2d:2c:40:26:b5:3f:dc:71:1e:d7:bd:a2:e4:de: e0:27:af:b8:11:5f:4c:37:5e:76:30:c2:41:18:29: f6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:E1:9D:B4:C9:E2:49:1D:3C:DE:40:63:FE:F6:6E:3F:7A:3C:1D:66 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.206.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:e9:95:ed:87:5f:65:37:8d:d7:10:9d:eb:19:84:4f:fb:1b: 92:93:c9:32:ef:f0:75:ee:03:b3:e0:f0:71:92:e6:af:53:68: 5f:eb:bd:47:d6:a6:58:3f:db:6f:04:7b:ff:55:bf:63:44:de: 64:64:b1:da:f5:5b:0e:9f:b4:52:f5:21:e7:54:e0:df:4d:5d: cd:b4:77:2d:9e:8f:b5:e7:a3:86:f1:3a:01:a4:3b:b9:85:4c: 1d:8c:97:40:f8:d4:f0:16:b0:32:d2:c8:3e:3c:91:1e:e6:34: da:1b:7d:45:6b:41:33:19:ce:5a:db:21:32:f6:e7:d5:e1:e5: f7:f6:1f:1c:8e:cf:29:50:dc:63:3b:1a:6f:ba:19:59:94:ab: f7:7b:5a:78:0b:e7:fb:a5:ed:1b:a9:52:2e:a6:0c:33:9e:8e: 57:d9:be:a3:ab:be:68:60:86:d8:f5:b6:25:01:a8:98:c5:cb: 53:f6:ed:c5:74:0f:27:2f:c7:26:61:ed:a8:04:46:be:ae:ed: af:24:6f:4d:2a:0b:13:be:8c:b7:12:09:5d:d5:d5:6f:c8:57: e0:47:d6:a5:07:2c:96:5a:eb:2f:2b:16:ad:5d:95:5c:d5:13: 28:43:9f:6b:ce:85:81:f0:48:95:4d:35:66:48:8d:fd:59:9c: 2d:94:16:0c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUfdPg3t/WNFyVWUX/pbq7smLR2W4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyNDIyN1oX DTI3MDUwMjAyNDcyN1owMzExMC8GA1UEAxMoRjJFMTlEQjRDOUUyNDkxRDNDREU0 MDYzRkVGNjZFM0Y3QTNDMUQ2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKbVNnNNgkihWBogfWkp2/waZ2L0P3U8tMt5M76PMXyfE1XJRpYtsvf+AH/N cQIFFBMoPMq6rmUxd5tayBpvVoo39QtRtDqkyYxHgyNLBsFKDG1zPPjaLGAH6x0X udMu5Ovs1wouEEWBKINbOfBc2Qr1y4jZE4nLpAtcwn4NyhOpkmuB0IGmbgml/Y3k Ke0YqlHlB66L8356hK1kXC6lHbYiDtU26rp1ZYDmCyyC3Bzyih5hRH1ufGjeSbst IoL/AM4cdbNdVe+AfXQuJvsZBOVSWfDadxPdG2dMh2gdcH7DBy0sQCa1P9xxHte9 ouTe4CevuBFfTDdedjDCQRgp9p8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPLhnbTJ4kkdPN5AY/72bj96PB1mMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ZhYTZhNjdkLWNiYTMtNDI3Yi05MDU1LTVmNTI4ZjJkMjMyZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mYWE2YTY3 ZC1jYmEzLTQyN2ItOTA1NS01ZjUyOGYyZDIzMmYvMC9GMkUxOURCNEM5RTI0OTFE M0NERTQwNjNGRUY2NkUzRjdBM0MxRDY2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6/OMA0GCSqGSIb3DQEBCwUAA4IBAQAc6ZXth19lN43XEJ3rGYRP+xuSk8ky 7/B17gOz4PBxkuavU2hf671H1qZYP9tvBHv/Vb9jRN5kZLHa9VsOn7RS9SHnVODf TV3NtHctno+156OG8ToBpDu5hUwdjJdA+NTwFrAy0sg+PJEe5jTaG31Fa0EzGc5a 2yEy9ufV4eX39h8cjs8pUNxjOxpvuhlZlKv3e1p4C+f7pe0bqVIupgwzno5X2b6j q75oYIbY9bYlAaiYxctT9u3FdA8nL8cmYe2oBEa+ru2vJG9NKgsTvoy3Egld1dVv yFfgR9alByyWWusvKxatXZVc1RMoQ59rzoWB8EiVTTVmSI39WZwtlBYM -----END CERTIFICATE-----Generated at Tue May 12 22:03:52 2026 by rpki-client