$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.cer File: F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.cer (raw, json) Hash identifier: GXYxuwWjfMJJRO+abix3acGHeYp+M6xnDSpn9xfNNwA= Subject key identifier: F4:3C:8B:96:3D:A9:DF:03:87:7C:5B:FF:0D:A1:F7:2C:20:8D:91:92 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 084758268AD95DEEBD3E62994A19CF951A6F0F5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:38:47 +0000 Certificate not after: Sun 02 May 2027 02:43:47 +0000 Subordinate resources: IP: 103.177.60.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:47:58:26:8a:d9:5d:ee:bd:3e:62:99:4a:19:cf:95:1a:6f:0f:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:38:47 2026 GMT Not After : May 2 02:43:47 2027 GMT Subject: CN=F43C8B963DA9DF03877C5BFF0DA1F72C208D9192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:95:0c:71:59:a6:e8:9c:6a:1f:d5:e2:5e:51: d9:b8:63:86:63:87:eb:fa:35:60:73:37:37:f8:40: b2:f0:7f:2d:33:96:86:04:22:a0:03:ff:8a:7b:29: bd:ce:ba:60:90:c1:15:2a:5d:2d:0d:71:85:ba:8c: fb:f5:06:90:15:b7:5b:e1:7a:38:c8:1e:46:bd:d3: 99:d5:ac:85:b6:e7:2c:67:af:72:10:0c:7a:e0:cb: 6c:7f:59:8b:61:ff:eb:5e:33:cd:0e:66:c2:8d:53: 83:8b:74:81:05:f4:44:29:ce:cf:4e:36:b7:fe:36: 1b:46:fc:4a:53:c7:0f:da:f8:19:2a:db:d1:ce:7d: cc:36:00:14:48:38:db:e5:3c:93:20:42:61:2e:9b: f5:2d:71:ef:be:5d:0c:94:c8:ac:8b:0a:5e:bd:90: f8:52:2a:af:d6:a6:4a:59:18:6a:29:0a:97:a5:44: 21:60:f4:11:83:a5:e6:ca:43:56:98:66:9f:45:8a: 10:cf:f2:e5:da:2b:27:e5:74:37:4c:46:46:0b:4a: ad:0a:bd:c9:1a:9d:95:78:28:68:bb:4a:34:bb:7a: d4:7b:04:16:a1:53:42:cd:4d:ea:53:f8:9f:fc:87: d4:99:08:7a:ee:87:85:06:c2:53:34:25:b1:31:f1: b6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F4:3C:8B:96:3D:A9:DF:03:87:7C:5B:FF:0D:A1:F7:2C:20:8D:91:92 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.60.0/24 Signature Algorithm: sha256WithRSAEncryption 77:5e:50:1e:5c:a6:34:54:a3:62:72:f1:7b:79:79:35:c2:55: e3:6f:50:d7:2c:51:28:cd:4e:2f:0a:a5:de:c8:1e:93:68:c7: 4e:f7:37:cb:67:38:5c:d2:7e:7b:c8:59:cc:82:c9:d0:2c:ff: 3b:0a:98:c7:86:48:7f:74:2e:53:bc:8a:2b:48:87:46:d2:cd: 8c:0e:e9:8c:36:00:00:4d:62:c7:6e:98:b8:a7:19:38:53:ee: 2f:24:d1:67:41:e6:5b:4f:f5:28:9e:8c:07:a5:ab:5d:cb:81: ac:dc:e1:0f:12:e8:05:bc:e2:4f:b0:fa:ae:8b:1f:60:13:37: 7e:12:7b:7a:8f:75:3b:c1:4e:d7:cf:e0:0e:60:69:32:83:d5: de:e4:20:d6:a0:ab:51:a8:78:4e:4f:5c:f3:d7:91:b8:77:fd: 7b:31:d5:5f:29:dd:05:13:97:7c:0b:8d:76:4b:15:33:fc:7e: 6a:8a:a1:0c:4f:6a:c7:52:e4:77:9b:10:da:34:df:6f:0a:d9: 02:cb:4e:13:c0:39:c7:86:ab:8a:14:28:72:bf:9e:04:ec:a8: 2a:24:c8:cb:06:67:36:51:b7:ab:f2:f4:87:59:b9:6c:03:e5: 8c:47:c6:fd:60:a0:c1:b9:c4:af:f8:42:48:22:8f:f5:f3:d6: fd:06:17:83 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUCEdYJorZXe69PmKZShnPlRpvD1swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzg0N1oX DTI3MDUwMjAyNDM0N1owMzExMC8GA1UEAxMoRjQzQzhCOTYzREE5REYwMzg3N0M1 QkZGMERBMUY3MkMyMDhEOTE5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMWVDHFZpuicah/V4l5R2bhjhmOH6/o1YHM3N/hAsvB/LTOWhgQioAP/insp vc66YJDBFSpdLQ1xhbqM+/UGkBW3W+F6OMgeRr3TmdWshbbnLGevchAMeuDLbH9Z i2H/614zzQ5mwo1Tg4t0gQX0RCnOz042t/42G0b8SlPHD9r4GSrb0c59zDYAFEg4 2+U8kyBCYS6b9S1x775dDJTIrIsKXr2Q+FIqr9amSlkYaikKl6VEIWD0EYOl5spD Vphmn0WKEM/y5dorJ+V0N0xGRgtKrQq9yRqdlXgoaLtKNLt61HsEFqFTQs1N6lP4 n/yH1JkIeu6HhQbCUzQlsTHxthcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPQ8i5Y9qd8Dh3xb/w2h9ywgjZGSMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y3MzVlMTVmLWQ0NDktNDZkOC1iZTBlLTg1ZTM4OWJlZGM1ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mNzM1ZTE1 Zi1kNDQ5LTQ2ZDgtYmUwZS04NWUzODliZWRjNWUvMC9GNDNDOEI5NjNEQTlERjAz ODc3QzVCRkYwREExRjcyQzIwOEQ5MTkyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ7E8MA0GCSqGSIb3DQEBCwUAA4IBAQB3XlAeXKY0VKNicvF7eXk1wlXjb1DX LFEozU4vCqXeyB6TaMdO9zfLZzhc0n57yFnMgsnQLP87CpjHhkh/dC5TvIorSIdG 0s2MDumMNgAATWLHbpi4pxk4U+4vJNFnQeZbT/UonowHpatdy4Gs3OEPEugFvOJP sPquix9gEzd+Ent6j3U7wU7Xz+AOYGkyg9Xe5CDWoKtRqHhOT1zz15G4d/17MdVf Kd0FE5d8C412SxUz/H5qiqEMT2rHUuR3mxDaNN9vCtkCy04TwDnHhquKFChyv54E 7KgqJMjLBmc2Uber8vSHWblsA+WMR8b9YKDBucSv+EJIIo/189b9BheD -----END CERTIFICATE-----Generated at Tue May 12 22:16:55 2026 by rpki-client