$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.cer File: F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.cer (raw, json) Hash identifier: v490kQJGCJFWkwVVnAo+v9y7N5E8lTcVHeckFCQo52Y= Subject key identifier: F6:4D:06:FB:29:DD:7C:63:FD:12:E0:D2:83:1D:00:CF:CC:9D:3B:CA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 72D279F73324269708A8AE7FBE3231633ADB039B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:55:28 +0000 Certificate not after: Sun 02 May 2027 00:00:28 +0000 Subordinate resources: IP: 103.4.240.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:d2:79:f7:33:24:26:97:08:a8:ae:7f:be:32:31:63:3a:db:03:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:55:28 2026 GMT Not After : May 2 00:00:28 2027 GMT Subject: CN=F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fd:8b:dd:f5:f4:03:9c:62:8e:01:fc:43:be: 00:39:5d:5e:97:c8:18:90:18:0c:0f:e5:c7:a7:90: 82:62:59:d4:3e:94:c4:5e:38:8f:05:9c:70:d5:70: f4:bb:e5:40:4d:45:da:38:f1:e4:ea:62:ca:06:9f: 83:10:62:3f:82:db:69:de:33:c9:6c:ad:d9:75:05: ad:2c:bc:fb:15:35:ca:b7:49:e0:26:23:15:69:1f: 26:f2:f9:04:aa:df:62:91:a4:92:e4:9f:c8:28:a2: 13:2f:57:a4:d1:8e:88:aa:d1:0c:df:e6:f6:f6:14: b9:b6:90:39:5d:93:5b:48:95:b4:72:8c:17:49:5f: 95:1e:50:95:92:c4:85:18:b3:25:c1:7a:8b:f5:42: 40:51:48:a9:71:03:ec:88:aa:da:14:8b:46:b0:db: 32:a3:d8:63:5b:f3:02:ad:6e:7a:61:b5:38:01:97: 17:82:fe:68:9f:a5:a2:50:16:22:d1:73:45:33:5a: 60:a7:46:b1:8f:cc:3c:bc:22:2a:4c:bd:04:ba:27: 86:75:76:d5:12:4b:88:c6:a5:7b:7e:5b:a6:02:7a: 1d:1e:4c:68:96:f5:33:a0:a2:9b:15:a1:d8:76:ba: fb:69:fd:6f:cc:b0:88:88:cf:38:9c:22:03:4f:a0: 39:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F6:4D:06:FB:29:DD:7C:63:FD:12:E0:D2:83:1D:00:CF:CC:9D:3B:CA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.240.0/22 Signature Algorithm: sha256WithRSAEncryption 88:c7:29:a1:d8:97:2a:b6:ab:b4:4e:1e:b4:26:70:3f:36:d1: ee:68:40:46:37:cf:32:3a:e3:fd:4a:d3:f9:3f:31:ef:29:22: 0e:11:3c:ea:96:53:e5:03:4d:37:82:9a:8f:a8:5b:06:7c:c8: bf:8b:df:01:56:e7:ed:2a:8a:04:5e:3b:34:79:c7:8f:5c:5c: f3:8e:d0:f9:50:b0:d8:f0:77:58:d7:73:e6:3c:57:90:68:cb: 6f:b1:39:cc:c4:44:41:20:4c:80:23:eb:1d:94:4f:0c:a5:13: 25:ea:26:33:12:f2:7c:6d:c9:65:cc:e8:1c:fe:1e:6e:53:da: 7f:47:96:63:c2:84:f0:2c:1b:c1:9e:b9:f6:dd:b8:8b:27:4c: 82:f8:9b:e9:78:9e:c2:15:0e:07:b5:1a:4b:10:a9:21:4a:a8: ff:8d:0e:46:ca:2d:89:2e:16:00:86:15:f0:4f:a2:a5:05:5a: 42:20:bd:34:54:be:51:a7:c6:f4:51:7c:50:e2:28:7d:05:3a: c8:33:3c:11:33:69:4b:da:b5:6a:41:71:6d:22:96:76:dd:4b: 11:01:38:52:92:c8:eb:4e:db:19:06:fc:e1:5a:0a:e4:b9:57: 49:99:54:c0:f4:25:13:d3:0c:c1:a0:09:a5:1b:86:43:9c:35: 1e:67:52:57 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUctJ59zMkJpcIqK5/vjIxYzrbA5swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTUyOFoX DTI3MDUwMjAwMDAyOFowMzExMC8GA1UEAxMoRjY0RDA2RkIyOUREN0M2M0ZEMTJF MEQyODMxRDAwQ0ZDQzlEM0JDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ/9i9319AOcYo4B/EO+ADldXpfIGJAYDA/lx6eQgmJZ1D6UxF44jwWccNVw 9LvlQE1F2jjx5OpiygafgxBiP4Lbad4zyWyt2XUFrSy8+xU1yrdJ4CYjFWkfJvL5 BKrfYpGkkuSfyCiiEy9XpNGOiKrRDN/m9vYUubaQOV2TW0iVtHKMF0lflR5QlZLE hRizJcF6i/VCQFFIqXED7Iiq2hSLRrDbMqPYY1vzAq1uemG1OAGXF4L+aJ+lolAW ItFzRTNaYKdGsY/MPLwiKky9BLonhnV21RJLiMale35bpgJ6HR5MaJb1M6CimxWh 2Ha6+2n9b8ywiIjPOJwiA0+gOQkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPZNBvsp3Xxj/RLg0oMdAM/MnTvKMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE3ZThkZDQwLWJiOTQtNGQ0My1iODg5LThhMDk4ZDdmNDVhYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xN2U4ZGQ0 MC1iYjk0LTRkNDMtYjg4OS04YTA5OGQ3ZjQ1YWMvMC9GNjREMDZGQjI5REQ3QzYz RkQxMkUwRDI4MzFEMDBDRkNDOUQzQkNBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZwTwMA0GCSqGSIb3DQEBCwUAA4IBAQCIxymh2Jcqtqu0Th60JnA/NtHuaEBG N88yOuP9StP5PzHvKSIOETzqllPlA003gpqPqFsGfMi/i98BVuftKooEXjs0eceP XFzzjtD5ULDY8HdY13PmPFeQaMtvsTnMxERBIEyAI+sdlE8MpRMl6iYzEvJ8bcll zOgc/h5uU9p/R5ZjwoTwLBvBnrn23biLJ0yC+JvpeJ7CFQ4HtRpLEKkhSqj/jQ5G yi2JLhYAhhXwT6KlBVpCIL00VL5Rp8b0UXxQ4ih9BTrIMzwRM2lL2rVqQXFtIpZ2 3UsRAThSksjrTtsZBvzhWgrkuVdJmVTA9CUT0wzBoAmlG4ZDnDUeZ1JX -----END CERTIFICATE-----Generated at Tue May 12 22:03:44 2026 by rpki-client