$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F5C0FC6C55DA7B3C3AD59472BF87C517D63F69CC.cer File: F5C0FC6C55DA7B3C3AD59472BF87C517D63F69CC.cer (raw, json) Hash identifier: tNTRLIAgFK3qX3EgLMR7Fj1MfViAp0C1zyYb3h1qZ9k= Subject key identifier: F5:C0:FC:6C:55:DA:7B:3C:3A:D5:94:72:BF:87:C5:17:D6:3F:69:CC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2B1D11648337419DC001BB0EFCC55F562A79072A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/F5C0FC6C55DA7B3C3AD59472BF87C517D63F69CC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:38:18 +0000 Certificate not after: Sun 02 May 2027 02:43:18 +0000 Subordinate resources: IP: 103.83.172.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:1d:11:64:83:37:41:9d:c0:01:bb:0e:fc:c5:5f:56:2a:79:07:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:38:18 2026 GMT Not After : May 2 02:43:18 2027 GMT Subject: CN=F5C0FC6C55DA7B3C3AD59472BF87C517D63F69CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f3:7c:02:5d:99:37:50:42:ba:8b:17:61:31: a8:0c:b0:0f:fd:c1:59:df:4e:aa:d8:52:14:da:03: 7e:89:d3:0b:88:b9:17:98:dc:16:8b:d0:08:79:aa: 20:07:73:8a:36:4b:e3:02:6a:ce:5c:f4:c7:3b:62: 18:c2:e8:35:20:e8:d8:55:12:bb:85:e7:69:ea:76: 14:ba:3c:bd:18:88:12:5e:55:02:00:c6:19:93:e1: e1:1d:bf:a4:6b:00:d9:05:a8:0b:0e:7f:d3:60:77: 40:a5:5a:e3:f2:15:0a:31:11:19:4b:63:11:1d:5a: 93:b7:b8:35:2e:c6:63:53:0f:a5:87:63:4b:dd:72: 9a:c1:c2:a3:6c:b9:4c:46:57:38:82:6e:8a:5e:2d: 96:9b:0f:31:91:55:15:21:4f:b5:f5:66:8a:46:69: f0:26:3b:f4:f1:7d:ac:72:55:66:61:6b:f7:b5:85: 8d:cc:14:13:e8:50:39:59:ee:99:bc:f6:4d:e1:2d: 4b:40:bc:23:f7:45:31:08:54:a1:66:48:60:4d:38: f1:fa:e0:39:59:cb:8d:5a:de:30:04:87:52:d5:5f: a3:f1:82:fc:74:a8:30:ab:bb:3d:51:7c:d1:78:64: d9:df:d1:68:47:40:c8:0d:f0:88:2e:ba:50:76:3e: bd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F5:C0:FC:6C:55:DA:7B:3C:3A:D5:94:72:BF:87:C5:17:D6:3F:69:CC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/F5C0FC6C55DA7B3C3AD59472BF87C517D63F69CC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.83.172.0/22 Signature Algorithm: sha256WithRSAEncryption 99:b7:65:61:6f:3e:c3:f4:c3:2a:97:7b:eb:73:43:96:3a:49: 39:0f:17:48:87:bf:21:18:03:4d:50:ca:95:3b:ea:61:40:21: 75:e4:65:c7:a9:d3:69:8d:2c:ba:c7:5f:12:d6:66:82:34:e9: 33:a8:ae:ae:2f:c6:86:23:7e:1a:4d:2d:04:11:5f:d3:67:bb: 62:21:42:2d:84:56:4a:b9:07:64:8c:bf:19:cf:7d:5a:a4:43: 62:8f:8b:0c:c3:52:0c:4f:18:4a:4b:52:4d:36:66:c9:3f:e9: dc:19:0f:dd:6f:38:9a:c9:0e:d4:50:b7:43:7b:fd:f5:d9:b0: 3c:08:25:69:36:c8:36:1d:0d:1d:7b:45:5a:1b:e3:a9:42:f8: 7d:04:7f:2a:0d:78:70:80:34:f6:31:b1:cc:e6:1f:8d:da:08: 29:26:f5:45:4e:9c:65:55:95:a7:f4:14:75:9e:a6:e7:7b:7e: b4:c3:33:e5:7a:e8:52:56:42:3e:b1:b8:99:06:a3:b2:39:9f: cf:04:65:ff:c6:f1:e7:12:56:d0:41:88:44:4c:e5:4c:91:f2: 0a:61:7c:8d:dc:c0:bf:03:b9:91:bb:94:d3:40:ba:bb:13:1c: cd:9f:3d:3b:51:18:21:08:02:72:df:c3:9a:86:14:78:73:85: e1:30:bc:d6 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUKx0RZIM3QZ3AAbsO/MVfVip5ByowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzgxOFoX DTI3MDUwMjAyNDMxOFowMzExMC8GA1UEAxMoRjVDMEZDNkM1NURBN0IzQzNBRDU5 NDcyQkY4N0M1MTdENjNGNjlDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMzzfAJdmTdQQrqLF2ExqAywD/3BWd9OqthSFNoDfonTC4i5F5jcFovQCHmq IAdzijZL4wJqzlz0xztiGMLoNSDo2FUSu4Xnaep2FLo8vRiIEl5VAgDGGZPh4R2/ pGsA2QWoCw5/02B3QKVa4/IVCjERGUtjER1ak7e4NS7GY1MPpYdjS91ymsHCo2y5 TEZXOIJuil4tlpsPMZFVFSFPtfVmikZp8CY79PF9rHJVZmFr97WFjcwUE+hQOVnu mbz2TeEtS0C8I/dFMQhUoWZIYE048frgOVnLjVreMASHUtVfo/GC/HSoMKu7PVF8 0Xhk2d/RaEdAyA3wiC66UHY+vXcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPXA/GxV2ns8OtWUcr+HxRfWP2nMMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y2ZjY1ZGMzLTRhMmItNDIwNy1iY2NiLWIwZDE0ZGQ5MzQwMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mNmY2NWRj My00YTJiLTQyMDctYmNjYi1iMGQxNGRkOTM0MDMvMC9GNUMwRkM2QzU1REE3QjND M0FENTk0NzJCRjg3QzUxN0Q2M0Y2OUNDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ1OsMA0GCSqGSIb3DQEBCwUAA4IBAQCZt2Vhbz7D9MMql3vrc0OWOkk5DxdI h78hGANNUMqVO+phQCF15GXHqdNpjSy6x18S1maCNOkzqK6uL8aGI34aTS0EEV/T Z7tiIUIthFZKuQdkjL8Zz31apENij4sMw1IMTxhKS1JNNmbJP+ncGQ/dbziayQ7U ULdDe/312bA8CCVpNsg2HQ0de0VaG+OpQvh9BH8qDXhwgDT2MbHM5h+N2ggpJvVF TpxlVZWn9BR1nqbne360wzPleuhSVkI+sbiZBqOyOZ/PBGX/xvHnElbQQYhETOVM kfIKYXyN3MC/A7mRu5TTQLq7ExzNnz07URghCAJy38OahhR4c4XhMLzW -----END CERTIFICATE-----Generated at Tue May 12 22:09:57 2026 by rpki-client