$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.cer File: F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.cer (raw, json) Hash identifier: ROCT5pyXLlglpjUBlnw/66FLdBs4cN0ImJ1h/+DGwvY= Subject key identifier: F4:93:B4:B7:B6:C0:93:2E:D4:59:0B:DF:81:32:9D:0E:AE:5E:EB:68 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7B7B298B3A15C54EF4CDEE888D9C72DB1B2EC13A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:27:08 +0000 Certificate not after: Sun 02 May 2027 00:32:08 +0000 Subordinate resources: IP: 103.107.18.0/23 IP: 2001:df3:bd00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7b:29:8b:3a:15:c5:4e:f4:cd:ee:88:8d:9c:72:db:1b:2e:c1:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:27:08 2026 GMT Not After : May 2 00:32:08 2027 GMT Subject: CN=F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:db:4a:9c:32:3b:af:7e:04:5a:0a:ad:a7:d3: 40:52:c1:20:ec:62:aa:18:f0:7d:4b:ae:da:ef:2e: 6d:27:01:e9:3f:e3:c1:db:20:d8:81:37:c9:1e:94: 33:45:59:47:d8:d0:bc:cb:84:98:f5:c2:de:ec:f2: 87:70:86:22:fc:ea:7f:8f:00:31:e5:93:d0:54:d6: c7:b6:54:f7:22:63:db:f3:71:cc:a8:91:02:31:9a: 29:62:55:9f:ab:83:68:08:81:d8:1c:62:9f:e5:82: 31:8d:f7:ab:47:7a:06:54:8a:df:40:17:a7:e5:b5: 95:28:fe:15:48:70:fb:83:f3:16:31:44:fa:39:ab: ba:68:30:0c:16:3c:01:41:6b:a3:3c:66:f0:ac:fb: 63:45:77:2f:86:82:9b:5f:e1:f7:b8:f3:d6:f9:f7: d2:cf:f7:ca:99:81:11:01:33:ed:2a:ec:38:cf:19: 20:e1:81:b1:e6:51:db:75:b8:e5:b9:c6:6e:8a:0d: 4a:c6:fe:a1:c3:76:8e:86:dd:ac:f1:81:40:74:89: f2:8e:ac:43:d7:62:ff:0b:83:fe:54:77:24:05:72: de:9f:9e:da:1a:dd:c0:0d:db:ea:6e:52:6f:09:b8: 15:31:53:a2:ce:10:ce:0c:6e:7e:55:13:f5:c7:e8: 2d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F4:93:B4:B7:B6:C0:93:2E:D4:59:0B:DF:81:32:9D:0E:AE:5E:EB:68 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.107.18.0/23 IPv6: 2001:df3:bd00::/48 Signature Algorithm: sha256WithRSAEncryption 9e:cc:0b:5c:f4:94:b6:28:27:de:3f:c6:95:20:dc:2c:12:cd: c7:9a:22:f1:dd:02:fa:78:49:1a:7d:18:23:b3:91:bc:84:60: 98:3c:12:51:af:85:e0:d0:41:d9:de:ce:37:e2:8f:b6:d8:78: af:81:b9:2c:8d:a5:bc:73:3b:62:f0:d7:f8:7d:1b:98:f8:44: b3:76:c8:72:ed:b2:0a:f0:de:c3:90:cf:37:26:65:9c:1d:55: 59:2a:2b:2b:a9:c0:14:fd:0a:fd:55:52:4d:c8:82:59:03:d8: 2d:f3:6a:54:c8:4b:bb:75:6b:85:69:6e:37:dc:29:a1:e1:f5: 03:ee:04:e4:ac:35:8d:06:2a:8d:43:06:ec:6d:32:93:b3:06: 18:b7:2f:0e:0d:3f:5e:d0:aa:dd:f2:0e:b4:d4:95:be:8e:24: d6:9b:13:c0:02:96:5b:f5:a1:70:ee:65:a6:28:48:b4:e7:e0: 9b:7b:60:f2:6c:b4:d2:e5:24:39:04:6c:41:48:ef:d2:c9:81: 43:69:4c:bc:a0:18:13:24:ac:65:76:68:0a:ed:2e:2b:27:d7: 31:ea:c5:96:f4:24:7b:0b:f8:8d:42:4e:c1:5b:61:3a:21:4b: 8f:34:3a:f0:6b:13:db:1e:f9:f3:78:31:42:1d:ae:9b:36:11: 9d:86:af:9c -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUe3spizoVxU70ze6IjZxy2xsuwTowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjcwOFoX DTI3MDUwMjAwMzIwOFowMzExMC8GA1UEAxMoRjQ5M0I0QjdCNkMwOTMyRUQ0NTkw QkRGODEzMjlEMEVBRTVFRUI2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALDbSpwyO69+BFoKrafTQFLBIOxiqhjwfUuu2u8ubScB6T/jwdsg2IE3yR6U M0VZR9jQvMuEmPXC3uzyh3CGIvzqf48AMeWT0FTWx7ZU9yJj2/NxzKiRAjGaKWJV n6uDaAiB2Bxin+WCMY33q0d6BlSK30AXp+W1lSj+FUhw+4PzFjFE+jmrumgwDBY8 AUFrozxm8Kz7Y0V3L4aCm1/h97jz1vn30s/3ypmBEQEz7SrsOM8ZIOGBseZR23W4 5bnGbooNSsb+ocN2jobdrPGBQHSJ8o6sQ9di/wuD/lR3JAVy3p+e2hrdwA3b6m5S bwm4FTFTos4QzgxuflUT9cfoLc0CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPSTtLe2wJMu1FkL34EynQ6uXutoMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQ3MTFjMTEwLTdhYjEtNGEzOS1iOWNhLTNhOWIwZTgxYmNmNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80NzExYzEx MC03YWIxLTRhMzktYjljYS0zYTliMGU4MWJjZjUvMC9GNDkzQjRCN0I2QzA5MzJF RDQ1OTBCREY4MTMyOUQwRUFFNUVFQjY4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ2sSMA8EAgACMAkDBwAgAQ3zvQAwDQYJKoZIhvcNAQELBQADggEBAJ7MC1z0 lLYoJ94/xpUg3CwSzceaIvHdAvp4SRp9GCOzkbyEYJg8ElGvheDQQdnezjfij7bY eK+BuSyNpbxzO2Lw1/h9G5j4RLN2yHLtsgrw3sOQzzcmZZwdVVkqKyupwBT9Cv1V Uk3IglkD2C3zalTIS7t1a4VpbjfcKaHh9QPuBOSsNY0GKo1DBuxtMpOzBhi3Lw4N P17Qqt3yDrTUlb6OJNabE8ACllv1oXDuZaYoSLTn4Jt7YPJstNLlJDkEbEFI79LJ gUNpTLygGBMkrGV2aArtLisn1zHqxZb0JHsL+I1CTsFbYTohS480OvBrE9se+fN4 MUIdrps2EZ2Gr5w= -----END CERTIFICATE-----Generated at Tue May 12 22:45:31 2026 by rpki-client