$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F831F8D1B7EB333E836D19E2C6659AA968449902.cer File: F831F8D1B7EB333E836D19E2C6659AA968449902.cer (raw, json) Hash identifier: 6UqxJIVQZuo6uPe5ta9UyYIDMRsLq7PObk1lQz7Nbbw= Subject key identifier: F8:31:F8:D1:B7:EB:33:3E:83:6D:19:E2:C6:65:9A:A9:68:44:99:02 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3AD01B5F9410439899738B74CFB6368B7C134365 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.mft caRepository: rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:35:25 +0000 Certificate not after: Sun 02 May 2027 00:40:25 +0000 Subordinate resources: IP: 103.58.100.0/22 IP: 137.59.124.0/22 IP: 2001:df7:aa00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d0:1b:5f:94:10:43:98:99:73:8b:74:cf:b6:36:8b:7c:13:43:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:35:25 2026 GMT Not After : May 2 00:40:25 2027 GMT Subject: CN=F831F8D1B7EB333E836D19E2C6659AA968449902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:74:ce:f4:e6:16:75:e0:58:18:6a:6c:4c:74: 9c:33:54:3f:a9:8e:f7:8f:f9:d3:ae:b3:3f:31:bd: 03:f9:32:b7:6c:18:93:ec:03:63:8e:45:d7:00:a9: 27:44:61:43:77:f6:38:bf:45:47:7f:a0:9b:d8:5f: bb:0b:77:b4:4e:05:d1:54:bd:c7:0d:c8:b6:94:be: f1:40:6f:6f:60:ce:33:ad:de:fa:a3:63:49:7f:38: bb:0d:59:fb:fc:7c:0a:75:dd:fa:17:72:62:c0:8e: 84:fe:7e:30:76:08:2a:23:72:8c:d6:11:de:b8:ca: ad:ea:32:d7:aa:f4:15:8e:ee:02:18:ac:c8:00:09: 42:7a:ca:f6:39:77:28:b6:73:52:f4:20:dc:76:5b: d0:b0:db:3b:33:6a:ce:1e:1f:aa:aa:ce:4b:b3:d4: 34:48:bb:f7:eb:65:44:41:b3:5f:8e:47:34:1b:ea: 97:d3:d8:1e:9a:3f:6d:27:ae:67:11:d7:c6:e9:b5: 41:12:ac:24:6c:54:68:c5:56:aa:4c:4d:19:00:f0: 64:c9:3a:53:92:f5:7d:16:05:c1:30:11:1c:cb:2a: 5a:17:6e:03:67:43:20:fb:1c:c1:49:45:fe:6f:49: 49:ac:a1:e4:dd:7e:12:3c:75:c0:fd:9b:e0:77:26: 74:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:31:F8:D1:B7:EB:33:3E:83:6D:19:E2:C6:65:9A:A9:68:44:99:02 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.58.100.0/22 137.59.124.0/22 IPv6: 2001:df7:aa00::/48 Signature Algorithm: sha256WithRSAEncryption 02:41:18:e8:94:cc:25:83:4c:12:0a:8a:be:a9:27:26:cc:27: 0e:bc:3a:0e:3d:88:cd:e6:86:d4:08:9a:81:e5:b8:7e:e3:04: fb:a1:62:b8:6a:c9:a3:c1:ab:d5:d9:79:d7:50:22:da:16:31: ba:c6:93:88:28:e2:34:38:4b:2c:18:95:a3:ab:fd:ed:4e:b7: b7:6e:e3:dd:25:63:2e:66:b2:1d:84:b8:e6:8f:c9:33:13:e8: c7:41:de:fa:28:26:2e:f5:89:4d:94:38:4c:ba:d9:2e:ab:cf: e9:63:ff:e0:d1:a3:0b:3b:3f:36:5b:73:16:14:09:88:c0:c2: 67:dc:e9:08:2a:92:ec:56:7e:a7:dc:76:5b:7b:a7:e6:44:a9: b2:83:5f:82:66:bc:15:42:8f:00:c9:bb:04:c3:a7:75:ed:eb: ea:2e:a0:46:d6:7c:fe:1d:37:01:c3:e9:fe:8f:dc:d9:8e:78: 29:68:a5:d6:0e:cf:de:aa:5c:ac:5e:b0:f0:fb:84:ef:6a:da: d3:c0:f8:a2:fc:90:7e:28:6e:b1:af:c0:d5:08:0f:f7:81:56: b0:2d:17:87:0a:a8:0e:31:87:c0:3e:88:69:e3:d2:90:c6:23: bc:79:53:f6:5d:93:dd:7f:09:8b:86:6f:fc:6d:51:8d:8a:b8: 8b:ff:a1:1c -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUOtAbX5QQQ5iZc4t0z7Y2i3wTQ2UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzUyNVoX DTI3MDUwMjAwNDAyNVowMzExMC8GA1UEAxMoRjgzMUY4RDFCN0VCMzMzRTgzNkQx OUUyQzY2NTlBQTk2ODQ0OTkwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKR0zvTmFnXgWBhqbEx0nDNUP6mO94/5066zPzG9A/kyt2wYk+wDY45F1wCp J0RhQ3f2OL9FR3+gm9hfuwt3tE4F0VS9xw3ItpS+8UBvb2DOM63e+qNjSX84uw1Z +/x8CnXd+hdyYsCOhP5+MHYIKiNyjNYR3rjKreoy16r0FY7uAhisyAAJQnrK9jl3 KLZzUvQg3HZb0LDbOzNqzh4fqqrOS7PUNEi79+tlREGzX45HNBvql9PYHpo/bSeu ZxHXxum1QRKsJGxUaMVWqkxNGQDwZMk6U5L1fRYFwTARHMsqWhduA2dDIPscwUlF /m9JSayh5N1+Ejx1wP2b4HcmdA0CAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPgx+NG36zM+g20Z4sZlmqloRJkCMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzU0NGNiOGQ4LTE1MDUtNDY4Mi05ZGRiLWZjZDg2MjAwYjk2Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81NDRjYjhk OC0xNTA1LTQ2ODItOWRkYi1mY2Q4NjIwMGI5NjYvMC9GODMxRjhEMUI3RUIzMzNF ODM2RDE5RTJDNjY1OUFBOTY4NDQ5OTAyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQCZzpkAwQCiTt8MA8EAgACMAkDBwAgAQ33qgAwDQYJKoZIhvcNAQELBQADggEB AAJBGOiUzCWDTBIKir6pJybMJw68Og49iM3mhtQImoHluH7jBPuhYrhqyaPBq9XZ eddQItoWMbrGk4go4jQ4SywYlaOr/e1Ot7du490lYy5msh2EuOaPyTMT6MdB3voo Ji71iU2UOEy62S6rz+lj/+DRows7PzZbcxYUCYjAwmfc6QgqkuxWfqfcdlt7p+ZE qbKDX4JmvBVCjwDJuwTDp3Xt6+ouoEbWfP4dNwHD6f6P3NmOeClopdYOz96qXKxe sPD7hO9q2tPA+KL8kH4obrGvwNUID/eBVrAtF4cKqA4xh8A+iGnj0pDGI7x5U/Zd k91/CYuGb/xtUY2KuIv/oRw= -----END CERTIFICATE-----Generated at Tue May 12 22:47:52 2026 by rpki-client