$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer File: F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer (raw, json) Hash identifier: amYD1cmeyXsFW1P58iAE6ERTKPokZbQFngm5tPrr4f4= Subject key identifier: F7:5F:7D:8D:FA:60:FC:8B:77:F8:A8:B5:9B:44:F5:BC:BF:A9:EF:03 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 49B2F841410B5CEC01FD8F5B70C45BC6A6A21504 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:02:28 +0000 Certificate not after: Sun 02 May 2027 02:07:28 +0000 Subordinate resources: IP: 103.138.68.0/23 IP: 2404:cdc0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:b2:f8:41:41:0b:5c:ec:01:fd:8f:5b:70:c4:5b:c6:a6:a2:15:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:02:28 2026 GMT Not After : May 2 02:07:28 2027 GMT Subject: CN=F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:17:63:d5:2a:e5:c1:85:ff:22:7f:8e:f7:84: 2b:70:d2:a2:17:3b:c0:32:28:89:1e:c0:df:63:f6: 84:d3:61:39:72:f1:a6:26:70:00:aa:f2:dc:b1:ba: 4d:d6:d7:55:81:a9:96:7c:d1:2f:d5:ab:a9:a4:b9: ad:6d:f5:12:16:3b:04:ed:63:72:25:33:66:63:bf: fd:e0:0d:af:ae:36:25:8b:ae:42:3d:62:18:e8:8c: 8e:16:7a:d1:35:a6:a5:d5:c1:41:18:f5:5d:d0:84: ac:a1:78:90:fa:25:62:31:ab:29:83:11:77:ab:4e: f5:24:75:17:7a:24:d6:12:61:44:bd:a8:35:4d:8c: fb:57:cc:67:db:a8:71:33:37:59:63:4e:04:c5:41: 59:d2:e2:8b:75:dd:dc:7e:68:b3:bc:87:0b:07:c5: a2:39:00:29:27:81:ec:91:83:1a:eb:21:f9:5d:fb: f9:74:d4:1e:a2:a0:9d:d1:13:98:17:92:3e:f5:39: ae:b3:c1:3d:93:30:a5:64:89:32:87:2f:35:a1:b8: 3a:fb:a0:5c:d1:24:63:b1:77:4a:b1:42:bc:cc:f1: 6d:20:00:be:9d:99:66:8b:04:fb:23:d1:bc:72:c1: 9e:cf:cd:06:98:c5:d1:12:3d:20:53:29:5d:13:8f: 08:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F7:5F:7D:8D:FA:60:FC:8B:77:F8:A8:B5:9B:44:F5:BC:BF:A9:EF:03 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.68.0/23 IPv6: 2404:cdc0::/32 Signature Algorithm: sha256WithRSAEncryption 2c:c9:d2:e7:24:39:68:a8:41:9b:21:00:7a:48:5b:4c:06:42: 2e:67:4c:01:54:de:e3:59:c1:97:3d:39:4c:b6:e3:83:67:a2: dd:61:b9:2a:7c:14:ed:af:2b:dd:22:a2:85:cd:5a:41:8d:d6: 34:b3:10:35:1d:27:51:3a:f1:a7:26:68:44:c8:87:a5:1f:5e: 71:a8:98:67:3b:98:a8:e4:ca:ec:14:5f:8b:76:d0:a1:d8:d2: 3c:6f:fb:5f:29:35:1b:62:42:e7:39:99:3e:e8:00:99:4b:a0: 4c:cd:28:e0:3a:59:3c:43:98:b7:53:3a:5f:5a:52:ae:cf:c4: ec:0f:f0:17:24:57:7e:40:4c:a5:bd:6f:75:f8:1b:90:47:eb: f6:91:3c:61:58:f8:70:6a:c3:33:25:5b:a6:28:11:5e:4a:07: c8:0e:98:80:57:1e:71:c8:73:44:61:f4:7f:9c:6a:f8:c8:61: 0e:c3:d4:a5:28:51:53:5f:77:50:aa:cf:7f:3a:4e:39:0b:23: 24:21:4b:0a:d6:a5:e4:35:22:39:63:e1:7b:9a:b6:7d:1e:64: 21:ab:e8:1c:d3:f2:76:fa:98:6c:01:c1:0f:92:b1:2c:b4:03: b4:25:65:ee:24:7f:01:3b:87:f9:ab:89:be:5e:33:36:ec:83: 01:46:7d:5b -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUSbL4QUELXOwB/Y9bcMRbxqaiFQQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDIyOFoX DTI3MDUwMjAyMDcyOFowMzExMC8GA1UEAxMoRjc1RjdEOERGQTYwRkM4Qjc3RjhB OEI1OUI0NEY1QkNCRkE5RUYwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUXY9Uq5cGF/yJ/jveEK3DSohc7wDIoiR7A32P2hNNhOXLxpiZwAKry3LG6 TdbXVYGplnzRL9WrqaS5rW31EhY7BO1jciUzZmO//eANr642JYuuQj1iGOiMjhZ6 0TWmpdXBQRj1XdCErKF4kPolYjGrKYMRd6tO9SR1F3ok1hJhRL2oNU2M+1fMZ9uo cTM3WWNOBMVBWdLii3Xd3H5os7yHCwfFojkAKSeB7JGDGush+V37+XTUHqKgndET mBeSPvU5rrPBPZMwpWSJMocvNaG4OvugXNEkY7F3SrFCvMzxbSAAvp2ZZosE+yPR vHLBns/NBpjF0RI9IFMpXROPCB8CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPdffY36YPyLd/iotZtE9by/qe8DMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q5MzY3NGE2LTExNGYtNGJiNS04NWJiLWNiYjY3ZGIyYTk1NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kOTM2NzRh Ni0xMTRmLTRiYjUtODViYi1jYmI2N2RiMmE5NTUvMC9GNzVGN0Q4REZBNjBGQzhC NzdGOEE4QjU5QjQ0RjVCQ0JGQTlFRjAzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ4pEMA0EAgACMAcDBQAkBM3AMA0GCSqGSIb3DQEBCwUAA4IBAQAsydLnJDlo qEGbIQB6SFtMBkIuZ0wBVN7jWcGXPTlMtuODZ6LdYbkqfBTtryvdIqKFzVpBjdY0 sxA1HSdROvGnJmhEyIelH15xqJhnO5io5MrsFF+LdtCh2NI8b/tfKTUbYkLnOZk+ 6ACZS6BMzSjgOlk8Q5i3UzpfWlKuz8TsD/AXJFd+QEylvW91+BuQR+v2kTxhWPhw asMzJVumKBFeSgfIDpiAVx5xyHNEYfR/nGr4yGEOw9SlKFFTX3dQqs9/Ok45CyMk IUsK1qXkNSI5Y+F7mrZ9HmQhq+gc0/J2+phsAcEPkrEstAO0JWXuJH8BO4f5q4m+ XjM27IMBRn1b -----END CERTIFICATE-----Generated at Tue May 12 22:45:43 2026 by rpki-client