$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.cer File: F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.cer (raw, json) Hash identifier: NEDfE/DWOv7dKDUjUOQap7RhpsKuUw57e0LlaZghTRA= Subject key identifier: F4:BC:09:AF:A8:A6:E3:A9:7D:00:C6:10:04:D6:5E:9F:AC:D4:D8:DC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 11E6E3E5FFBE6A9B030CEADDDBB8F11F74A603FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:19:32 +0000 Certificate not after: Sun 02 May 2027 01:24:32 +0000 Subordinate resources: IP: 103.5.149.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:e6:e3:e5:ff:be:6a:9b:03:0c:ea:dd:db:b8:f1:1f:74:a6:03:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:19:32 2026 GMT Not After : May 2 01:24:32 2027 GMT Subject: CN=F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:86:9f:a1:7c:7a:e0:36:9b:f2:42:fa:32:b0: 6d:0e:95:fb:e7:d9:eb:bb:45:77:46:d0:90:fe:51: a8:e2:9e:78:c2:59:d5:c2:29:5d:92:89:cc:2c:a4: fc:e3:ed:ed:24:32:11:2e:a8:e8:aa:bd:37:c3:a1: 94:24:2e:36:23:7f:23:34:83:47:b4:6b:4a:99:6f: 1a:6b:5c:69:02:a5:20:dc:0d:d5:fa:b1:5b:52:db: ab:12:a6:ff:49:46:92:43:1b:55:c9:b6:52:8b:21: 6f:de:60:a7:13:c1:5a:ed:72:83:e3:86:7a:db:74: fe:a8:e7:de:01:07:6c:d8:45:e8:4d:f6:fb:20:42: 03:9c:fe:39:33:83:f7:21:c3:52:b0:79:9c:00:8c: fc:0d:43:33:5a:ae:9d:18:a0:2d:a8:04:c7:33:1b: 5c:62:21:e5:07:10:32:97:76:27:0e:57:1e:84:f6: 2a:54:f9:84:14:e0:b0:55:40:89:a0:57:2d:81:a1: 31:1f:4f:57:93:e6:7e:c9:be:db:18:80:9c:9f:d1: c9:79:e0:39:11:26:b0:ad:18:c8:75:f7:c5:cc:ca: 20:83:1c:ca:0e:8f:9e:c0:ae:fc:7d:75:38:b6:1e: 46:a3:e1:86:4b:6a:60:ba:dd:90:1b:89:3b:10:3a: cf:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F4:BC:09:AF:A8:A6:E3:A9:7D:00:C6:10:04:D6:5E:9F:AC:D4:D8:DC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.5.149.0/24 Signature Algorithm: sha256WithRSAEncryption 92:6e:c8:04:39:a4:d0:d5:f7:62:d8:56:3f:76:65:45:73:bc: 2e:cb:ef:86:4b:99:35:45:be:17:44:98:a9:0e:79:49:5c:ef: 28:0a:6c:7f:85:0e:47:2b:d7:e2:19:6f:78:b2:9c:d3:9f:dd: 97:b1:14:eb:96:40:21:4d:49:d8:0e:82:ac:89:0a:d2:4a:37: a0:a1:f4:cc:f2:f3:78:cc:06:e4:50:c2:b1:58:98:e0:cd:e4: 22:12:e4:be:c4:74:48:cf:17:bc:12:41:22:22:f8:c9:eb:d9: 25:65:06:9a:1c:fd:83:17:c9:83:31:a7:68:a7:4c:bb:d9:ae: 63:45:a4:b8:7f:7a:b3:9b:07:c1:05:2d:e2:41:36:0d:4d:75: 1a:52:92:03:6b:97:37:17:68:d7:3f:ab:2a:59:48:d4:b6:86: b6:41:25:0c:79:b9:62:96:f0:fb:1b:27:d6:26:c6:e9:7e:45: 19:c1:5b:8f:a8:9d:3b:00:76:47:ce:4f:3c:3f:37:72:83:9e: 59:2c:11:6a:e7:46:34:aa:67:61:42:2f:b0:e4:44:b3:6e:0c: c5:bd:b0:f7:77:1e:c2:e6:c9:71:a3:b0:dd:5d:d9:67:25:b9: b6:1e:76:e4:97:16:91:da:74:b2:70:18:87:2d:32:a4:37:a3: 8a:3e:ed:1c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUEebj5f++apsDDOrd27jxH3SmA/0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTkzMloX DTI3MDUwMjAxMjQzMlowMzExMC8GA1UEAxMoRjRCQzA5QUZBOEE2RTNBOTdEMDBD NjEwMDRENjVFOUZBQ0Q0RDhEQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM6Gn6F8euA2m/JC+jKwbQ6V++fZ67tFd0bQkP5RqOKeeMJZ1cIpXZKJzCyk /OPt7SQyES6o6Kq9N8OhlCQuNiN/IzSDR7RrSplvGmtcaQKlINwN1fqxW1LbqxKm /0lGkkMbVcm2Uoshb95gpxPBWu1yg+OGett0/qjn3gEHbNhF6E32+yBCA5z+OTOD 9yHDUrB5nACM/A1DM1qunRigLagExzMbXGIh5QcQMpd2Jw5XHoT2KlT5hBTgsFVA iaBXLYGhMR9PV5Pmfsm+2xiAnJ/RyXngOREmsK0YyHX3xczKIIMcyg6PnsCu/H11 OLYeRqPhhktqYLrdkBuJOxA6z58CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPS8Ca+opuOpfQDGEATWXp+s1NjcMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzk0OTdkODI4LTk4NGEtNDNmMS05YjZlLWEwMWJhMjFiYjUxOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85NDk3ZDgy OC05ODRhLTQzZjEtOWI2ZS1hMDFiYTIxYmI1MTgvMC9GNEJDMDlBRkE4QTZFM0E5 N0QwMEM2MTAwNEQ2NUU5RkFDRDREOERDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZwWVMA0GCSqGSIb3DQEBCwUAA4IBAQCSbsgEOaTQ1fdi2FY/dmVFc7wuy++G S5k1Rb4XRJipDnlJXO8oCmx/hQ5HK9fiGW94spzTn92XsRTrlkAhTUnYDoKsiQrS SjegofTM8vN4zAbkUMKxWJjgzeQiEuS+xHRIzxe8EkEiIvjJ69klZQaaHP2DF8mD Madop0y72a5jRaS4f3qzmwfBBS3iQTYNTXUaUpIDa5c3F2jXP6sqWUjUtoa2QSUM eblilvD7GyfWJsbpfkUZwVuPqJ07AHZHzk88Pzdyg55ZLBFq50Y0qmdhQi+w5ESz bgzFvbD3dx7C5slxo7DdXdlnJbm2HnbklxaR2nSycBiHLTKkN6OKPu0c -----END CERTIFICATE-----Generated at Tue May 12 22:38:55 2026 by rpki-client