$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.cer File: F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.cer (raw, json) Hash identifier: F3fbfG4+8XeBjr06SHFFiEN6z/lt8KIJGok4DkZSB74= Subject key identifier: F4:31:03:75:2A:46:87:6C:27:47:E9:4E:0F:3C:4F:7F:8A:E7:D1:EA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3670F61B33B4770560B58677C1578638F57F7A1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:19:17 +0000 Certificate not after: Sun 02 May 2027 02:24:17 +0000 Subordinate resources: IP: 103.162.141.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:70:f6:1b:33:b4:77:05:60:b5:86:77:c1:57:86:38:f5:7f:7a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:19:17 2026 GMT Not After : May 2 02:24:17 2027 GMT Subject: CN=F43103752A46876C2747E94E0F3C4F7F8AE7D1EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b8:a0:04:55:00:4a:7d:ff:fa:5e:ef:40:cb: 76:9f:5f:23:2d:29:f1:f0:d0:52:44:c3:e2:83:18: ad:02:82:c5:6c:fb:e6:ec:82:12:fa:ed:38:fe:51: 44:2e:78:1b:f7:b1:0a:48:42:37:80:6c:6a:a8:a4: 9c:7d:97:c1:f8:d8:73:47:9f:1d:cf:c4:10:ed:65: 78:c0:0f:24:7d:f2:93:97:e0:ed:3f:10:28:5a:9f: 12:2b:bf:37:e9:1b:fd:a3:e7:e7:f5:2f:1b:70:fe: 97:21:59:ef:3e:34:4a:1f:2f:23:49:c5:c7:bc:45: 25:e8:12:bd:b0:82:f0:27:3d:8e:b8:1e:8c:0b:c6: bc:67:53:bb:7f:04:71:38:db:9b:dc:89:d2:c1:56: 52:26:72:2e:50:ae:6b:40:af:35:57:fb:3c:2f:7b: a0:cd:f5:d2:da:f4:1b:1d:c1:a1:aa:f6:60:45:f1: 05:b8:49:35:ed:c8:6a:92:df:8a:90:31:f3:2e:84: e6:20:41:4e:59:d3:56:52:20:fc:c3:f8:c9:04:b0: 06:e8:27:a4:6d:17:94:b7:5c:70:c5:77:68:b0:6a: e1:c0:9e:46:7d:39:3a:33:5c:ee:63:8c:16:58:09: ce:de:08:49:6b:3d:38:02:65:52:71:11:07:1c:76: 85:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F4:31:03:75:2A:46:87:6C:27:47:E9:4E:0F:3C:4F:7F:8A:E7:D1:EA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/F43103752A46876C2747E94E0F3C4F7F8AE7D1EA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.141.0/24 Signature Algorithm: sha256WithRSAEncryption 26:bb:56:22:7b:bd:3f:59:ce:c5:58:0e:1e:16:28:6d:f2:f0: c3:c6:12:76:99:cc:68:50:c6:95:4e:3b:f4:64:d8:43:4b:46: 22:bb:a4:b6:55:86:3c:86:f3:72:91:7e:49:e5:78:af:c4:76: 78:c0:d2:34:b5:fd:1d:03:19:6d:28:c5:dd:a8:c0:82:47:bf: ff:a3:d9:fb:47:f5:6f:b2:4e:d3:85:a3:2b:45:0d:62:0f:ac: f8:7c:ed:66:ab:54:7a:2b:86:07:98:1e:a5:38:8a:49:fd:8d: 67:e9:37:13:27:45:ed:0d:15:dc:c1:8a:16:55:4d:a5:29:6b: fd:77:40:ba:bb:95:47:31:7e:00:00:1d:39:5e:d7:cc:c6:66: 0d:e9:5e:6a:21:b7:5b:0c:18:fc:73:72:da:4f:e7:87:b2:03: 62:c9:71:4c:ba:01:64:82:3f:64:45:95:8a:9c:b4:80:86:28: 84:a8:ae:cd:53:d0:81:22:1c:14:47:92:f6:01:f0:1d:f7:fd: b9:8c:6d:4a:07:7b:c0:c7:ff:8a:d6:98:76:c3:15:3b:69:b9: b4:97:42:83:be:fe:58:a5:e6:70:fc:00:3c:f7:70:c5:71:0f: 8a:2e:cc:e8:7e:73:c4:30:58:25:70:a5:ed:f6:48:69:db:76: ca:bd:07:4b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUNnD2GzO0dwVgtYZ3wVeGOPV/eh8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTkxN1oX DTI3MDUwMjAyMjQxN1owMzExMC8GA1UEAxMoRjQzMTAzNzUyQTQ2ODc2QzI3NDdF OTRFMEYzQzRGN0Y4QUU3RDFFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKK4oARVAEp9//pe70DLdp9fIy0p8fDQUkTD4oMYrQKCxWz75uyCEvrtOP5R RC54G/exCkhCN4BsaqiknH2XwfjYc0efHc/EEO1leMAPJH3yk5fg7T8QKFqfEiu/ N+kb/aPn5/UvG3D+lyFZ7z40Sh8vI0nFx7xFJegSvbCC8Cc9jrgejAvGvGdTu38E cTjbm9yJ0sFWUiZyLlCua0CvNVf7PC97oM310tr0Gx3Boar2YEXxBbhJNe3IapLf ipAx8y6E5iBBTlnTVlIg/MP4yQSwBugnpG0XlLdccMV3aLBq4cCeRn05OjNc7mOM FlgJzt4ISWs9OAJlUnERBxx2hV0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPQxA3UqRodsJ0fpTg88T3+K59HqMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2U4YTkyMzdhLTcyNmMtNGMxOS05YjRlLTdiOTRiMTQyNGM0Yi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lOGE5MjM3 YS03MjZjLTRjMTktOWI0ZS03Yjk0YjE0MjRjNGIvMC9GNDMxMDM3NTJBNDY4NzZD Mjc0N0U5NEUwRjNDNEY3RjhBRTdEMUVBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6KNMA0GCSqGSIb3DQEBCwUAA4IBAQAmu1Yie70/Wc7FWA4eFiht8vDDxhJ2 mcxoUMaVTjv0ZNhDS0Yiu6S2VYY8hvNykX5J5XivxHZ4wNI0tf0dAxltKMXdqMCC R7//o9n7R/Vvsk7ThaMrRQ1iD6z4fO1mq1R6K4YHmB6lOIpJ/Y1n6TcTJ0XtDRXc wYoWVU2lKWv9d0C6u5VHMX4AAB05XtfMxmYN6V5qIbdbDBj8c3LaT+eHsgNiyXFM ugFkgj9kRZWKnLSAhiiEqK7NU9CBIhwUR5L2AfAd9/25jG1KB3vAx/+K1ph2wxU7 abm0l0KDvv5YpeZw/AA893DFcQ+KLszofnPEMFglcKXt9khp23bKvQdL -----END CERTIFICATE-----Generated at Tue May 12 22:16:36 2026 by rpki-client