$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer File: F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer (raw, json) Hash identifier: HMUHx1RI+2rLxNJLlcqglhxml47qUg5dls6jvI2gbpM= Subject key identifier: F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5F5A6A901F8FE11B2857E5AA57FB792A3679F5A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:35:26 +0000 Certificate not after: Sun 02 May 2027 02:40:26 +0000 Subordinate resources: IP: 103.217.172.0/23 IP: 103.232.32.0/23 IP: 2401:a9c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:5a:6a:90:1f:8f:e1:1b:28:57:e5:aa:57:fb:79:2a:36:79:f5:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:35:26 2026 GMT Not After : May 2 02:40:26 2027 GMT Subject: CN=F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f1:ff:fd:08:97:19:92:fa:d2:ca:66:d2:93: 0e:16:62:0b:13:67:a8:50:34:a7:d8:3c:01:0e:a0: 39:49:25:04:e9:1a:f1:51:af:4a:f5:f2:d7:08:d3: 77:56:26:80:42:54:3d:be:55:69:4b:67:77:c0:2c: 0d:ee:90:19:12:7b:ec:eb:65:4a:f6:a7:e7:2b:2d: 21:6d:79:6d:11:d4:26:be:e7:e8:94:4e:fa:f1:f9: 48:a9:e4:20:1c:1d:1d:24:5d:03:8f:42:c9:cf:e0: 49:c6:db:c6:b9:15:74:b4:38:e1:a4:8d:88:22:13: 26:e3:1d:62:69:26:14:e3:b6:73:fa:17:2e:b5:48: 50:53:ee:b5:8b:49:ae:a7:48:a1:9c:df:f7:12:b0: f3:96:b5:92:b5:43:62:46:6d:25:e5:5c:5b:3f:18: e5:35:49:d6:a2:a1:a5:f1:4b:14:eb:d4:ee:61:99: f8:fa:0f:f9:5b:35:be:c8:d7:f9:2e:6d:2c:59:72: 0a:d0:de:0a:4b:b6:9d:4f:3c:5f:84:37:28:01:bc: 8d:79:35:e2:ff:fe:f1:4b:ce:f1:6c:f8:ea:b7:18: 2d:0d:af:8d:90:1f:6a:38:dd:36:3c:02:95:1b:70: ec:67:27:c7:55:ef:f8:90:6c:c6:cd:14:69:97:06: 56:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.217.172.0/23 103.232.32.0/23 IPv6: 2401:a9c0::/32 Signature Algorithm: sha256WithRSAEncryption 42:a1:e0:6b:70:41:87:6e:16:ce:8a:91:fc:6d:44:9b:7a:72: 5b:9e:78:b6:62:43:d3:b2:6d:35:eb:31:c8:33:b7:42:9b:7f: b9:77:40:14:f6:3f:1f:7e:06:0c:5d:cc:ff:8c:77:34:ef:bd: b7:19:d2:da:c9:c5:2e:ee:4e:5e:e0:a9:ee:b6:95:b5:7d:f8: cb:be:93:dc:51:de:45:19:23:93:71:91:e3:f2:3a:3c:69:2d: 50:0a:ed:c8:d4:82:da:73:32:f7:70:06:3e:c2:16:2c:73:2f: 4d:85:89:2e:20:4a:b5:80:6d:4c:96:ab:6b:7f:b0:e8:78:aa: e8:0a:7a:e3:3a:6c:31:3e:e4:9a:cd:ac:1c:c9:af:e0:2e:63: 43:ac:bf:1b:16:13:e2:44:44:ef:22:95:73:9e:cf:72:3b:0b: 3c:ba:45:5e:9e:a9:29:38:f6:03:1c:81:61:e3:42:a5:dd:d0: 3e:15:73:d8:e1:ca:5d:c3:dc:a6:77:b6:00:34:1e:90:52:4c: 9a:60:03:a4:c0:ec:19:01:52:27:fb:48:57:05:6e:d1:58:24: b1:e2:ea:1c:76:4f:bc:7d:52:c0:ff:77:d4:f4:42:91:93:1c: ee:42:f1:00:f0:47:3c:58:ec:b9:9a:35:f7:2d:c1:20:ab:04: 1a:e8:3f:b2 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUX1pqkB+P4RsoV+WqV/t5KjZ59aQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzUyNloX DTI3MDUwMjAyNDAyNlowMzExMC8GA1UEAxMoRjVFMTMzQkNFNTAxNEI3QTc5QUU2 RThFNDgwQkMzNUJEM0MzMTg3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMfx//0IlxmS+tLKZtKTDhZiCxNnqFA0p9g8AQ6gOUklBOka8VGvSvXy1wjT d1YmgEJUPb5VaUtnd8AsDe6QGRJ77OtlSvan5ystIW15bRHUJr7n6JRO+vH5SKnk IBwdHSRdA49Cyc/gScbbxrkVdLQ44aSNiCITJuMdYmkmFOO2c/oXLrVIUFPutYtJ rqdIoZzf9xKw85a1krVDYkZtJeVcWz8Y5TVJ1qKhpfFLFOvU7mGZ+PoP+Vs1vsjX +S5tLFlyCtDeCku2nU88X4Q3KAG8jXk14v/+8UvO8Wz46rcYLQ2vjZAfajjdNjwC lRtw7Gcnx1Xv+JBsxs0UaZcGVqcCAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPXhM7zlAUt6ea5ujkgLw1vTwxh6MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2YzZTQ1MDM5LTZlZDAtNDgzZC1hMWI5LWM0ZjQ4NTRjNWNmNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mM2U0NTAz OS02ZWQwLTQ4M2QtYTFiOS1jNGY0ODU0YzVjZjUvMC9GNUUxMzNCQ0U1MDE0QjdB NzlBRTZFOEU0ODBCQzM1QkQzQzMxODdBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQBZ9msAwQBZ+ggMA0EAgACMAcDBQAkAanAMA0GCSqGSIb3DQEBCwUAA4IBAQBC oeBrcEGHbhbOipH8bUSbenJbnni2YkPTsm016zHIM7dCm3+5d0AU9j8ffgYMXcz/ jHc07723GdLaycUu7k5e4KnutpW1ffjLvpPcUd5FGSOTcZHj8jo8aS1QCu3I1ILa czL3cAY+whYscy9NhYkuIEq1gG1Mlqtrf7DoeKroCnrjOmwxPuSazawcya/gLmND rL8bFhPiRETvIpVzns9yOws8ukVenqkpOPYDHIFh40Kl3dA+FXPY4cpdw9ymd7YA NB6QUkyaYAOkwOwZAVIn+0hXBW7RWCSx4uocdk+8fVLA/3fU9EKRkxzuQvEA8Ec8 WOy5mjX3LcEgqwQa6D+y -----END CERTIFICATE-----Generated at Wed May 13 02:40:04 2026 by rpki-client