$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F690A110357924F87D7056A8B32736A17D483A45.cer File: F690A110357924F87D7056A8B32736A17D483A45.cer (raw, json) Hash identifier: ndpZhi4pFYxU9HNidMXBnAXDH9gfMMBRyJm1Z0Ua04k= Subject key identifier: F6:90:A1:10:35:79:24:F8:7D:70:56:A8:B3:27:36:A1:7D:48:3A:45 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 342EA6CF1C8CA3437971E3F4F963B01FE22701B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/F690A110357924F87D7056A8B32736A17D483A45.mft caRepository: rsync://rpki-rsync.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:59:19 +0000 Certificate not after: Sun 02 May 2027 01:04:19 +0000 Subordinate resources: IP: 103.177.214.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:2e:a6:cf:1c:8c:a3:43:79:71:e3:f4:f9:63:b0:1f:e2:27:01:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:59:19 2026 GMT Not After : May 2 01:04:19 2027 GMT Subject: CN=F690A110357924F87D7056A8B32736A17D483A45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:55:15:31:9d:3e:35:bb:9b:54:8b:f3:a1:74: 42:ea:11:83:82:87:37:86:33:a7:9e:50:6a:49:df: 75:a9:da:ae:58:d8:ac:5f:95:07:58:fb:fb:06:59: 3f:80:e5:41:78:3b:6f:df:22:7c:09:7a:ef:52:b6: 05:49:c4:9f:3b:87:cf:ca:c7:62:a8:0e:a8:31:f1: b2:2f:79:3d:33:4e:2f:5d:e2:68:e5:56:05:a4:f1: 66:df:53:d3:c6:30:b1:a7:7b:6b:a8:6c:0f:14:9d: ff:72:ef:a9:a7:01:22:fa:3f:01:ec:07:ce:c7:3a: a8:4f:aa:c7:10:a8:1b:3a:96:14:43:46:65:a7:5a: 15:28:c0:36:cf:35:8a:bc:db:ab:cd:a8:1a:00:e3: a3:8c:22:91:89:5d:e0:69:3f:fe:3a:bd:84:8d:80: 9d:72:4f:50:81:c1:39:ab:82:b2:ad:01:db:ac:51: fc:5e:83:f7:75:b6:60:e3:33:7b:7a:1c:f5:f8:68: a2:4f:8e:bc:63:d8:e4:fc:c2:1c:cd:df:27:03:48: 4d:82:aa:16:90:31:b5:38:5e:5c:d7:0c:43:fa:07: 4b:33:a0:2d:55:b1:a3:00:33:ac:d4:65:e1:89:e7: 10:99:f2:e8:ec:52:76:16:64:f1:7b:8f:46:ca:9a: 71:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F6:90:A1:10:35:79:24:F8:7D:70:56:A8:B3:27:36:A1:7D:48:3A:45 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/F690A110357924F87D7056A8B32736A17D483A45.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.214.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:da:52:61:3f:f1:ee:1f:37:b8:30:7d:7d:2a:86:6b:24:45: c2:8f:2f:28:ce:82:4d:5e:5c:79:52:5b:e3:01:ab:3b:08:24: ca:45:44:1a:f0:d9:62:14:c7:e7:1f:82:c7:2d:6b:38:bf:c8: 67:9c:fa:9f:0b:3f:25:a3:18:47:ea:d2:7f:e1:7d:98:a6:2a: 25:9c:34:d4:61:29:56:4b:b6:0e:93:42:23:6b:07:da:17:b6: e6:7c:93:e0:33:81:14:9c:89:53:d6:27:1a:c2:3f:6f:70:72: d1:9d:29:d4:35:7c:a3:9e:56:8b:72:8e:f2:f9:a2:b5:92:b4: 36:45:83:37:f3:a9:bc:20:6f:9b:c6:c1:58:29:6a:cc:2d:25: 2a:53:65:12:e3:a7:7b:14:fa:5d:91:f9:b9:d0:e3:f1:ac:99: 4b:c1:2a:df:2a:53:87:8d:bc:c7:56:34:78:cc:c4:ca:7f:f6: 4d:b6:8c:86:28:0a:ae:e0:69:ef:55:fc:f8:69:e3:33:50:60: 49:38:75:7c:9a:d2:97:21:c5:6a:86:00:99:93:1a:56:e5:23: 95:2a:bd:ce:62:e0:08:08:62:8c:63:0c:53:4e:6c:0e:46:74: dd:65:f4:80:6d:fb:06:e1:01:7a:a9:8e:0a:4a:9b:11:af:b4: dc:d1:de:19 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUNC6mzxyMo0N5ceP0+WOwH+InAbUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTkxOVoX DTI3MDUwMjAxMDQxOVowMzExMC8GA1UEAxMoRjY5MEExMTAzNTc5MjRGODdENzA1 NkE4QjMyNzM2QTE3RDQ4M0E0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ9VFTGdPjW7m1SL86F0QuoRg4KHN4Yzp55QaknfdanarljYrF+VB1j7+wZZ P4DlQXg7b98ifAl671K2BUnEnzuHz8rHYqgOqDHxsi95PTNOL13iaOVWBaTxZt9T 08Ywsad7a6hsDxSd/3LvqacBIvo/AewHzsc6qE+qxxCoGzqWFENGZadaFSjANs81 irzbq82oGgDjo4wikYld4Gk//jq9hI2AnXJPUIHBOauCsq0B26xR/F6D93W2YOMz e3oc9fhook+OvGPY5PzCHM3fJwNITYKqFpAxtTheXNcMQ/oHSzOgLVWxowAzrNRl 4YnnEJny6OxSdhZk8XuPRsqacQ0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPaQoRA1eST4fXBWqLMnNqF9SDpFMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc3M2QyYjYwLTEyYzgtNDEzZS1iOTQxLTM5M2UwMGZkZDY1My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83NzNkMmI2 MC0xMmM4LTQxM2UtYjk0MS0zOTNlMDBmZGQ2NTMvMC9GNjkwQTExMDM1NzkyNEY4 N0Q3MDU2QThCMzI3MzZBMTdENDgzQTQ1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7HWMA0GCSqGSIb3DQEBCwUAA4IBAQCM2lJhP/HuHze4MH19KoZrJEXCjy8o zoJNXlx5UlvjAas7CCTKRUQa8NliFMfnH4LHLWs4v8hnnPqfCz8loxhH6tJ/4X2Y piolnDTUYSlWS7YOk0IjawfaF7bmfJPgM4EUnIlT1icawj9vcHLRnSnUNXyjnlaL co7y+aK1krQ2RYM386m8IG+bxsFYKWrMLSUqU2US46d7FPpdkfm50OPxrJlLwSrf KlOHjbzHVjR4zMTKf/ZNtoyGKAqu4GnvVfz4aeMzUGBJOHV8mtKXIcVqhgCZkxpW 5SOVKr3OYuAICGKMYwxTTmwORnTdZfSAbfsG4QF6qY4KSpsRr7Tc0d4Z -----END CERTIFICATE-----Generated at Wed May 13 00:34:25 2026 by rpki-client