$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer File: F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.cer (raw, json) Hash identifier: bur8ofiTGlAFpOqsU0Xir13ayEfFkVhFbQdC4LP41J8= Subject key identifier: F8:93:39:26:AE:83:9D:ED:72:9A:FA:2E:0E:4D:CB:FB:07:49:DF:1B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 464A23F5738777667566F83C3A3EA78548B9B279 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:53:20 +0000 Certificate not after: Sat 01 May 2027 23:58:20 +0000 Subordinate resources: IP: 103.190.108.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:4a:23:f5:73:87:77:66:75:66:f8:3c:3a:3e:a7:85:48:b9:b2:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:53:20 2026 GMT Not After : May 1 23:58:20 2027 GMT Subject: CN=F8933926AE839DED729AFA2E0E4DCBFB0749DF1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8d:2c:a7:15:65:9f:71:97:b4:db:c6:3f:b8: bc:7b:a5:8d:24:5e:cc:84:7b:35:23:e1:a5:56:2e: 67:d8:10:e0:33:62:49:56:51:f9:ee:0d:37:17:ff: 45:0e:79:73:5a:80:22:f9:31:1e:c3:34:ca:c9:8c: fd:4e:00:dd:c1:3e:d6:ed:a4:5c:12:90:9c:76:8c: 62:23:d2:67:12:7f:3b:ad:f4:b9:94:bc:7b:7c:69: 6a:c0:e8:00:01:e2:bd:3a:b1:a8:30:f1:63:06:6d: 00:a8:02:e6:aa:aa:4e:00:c9:5a:b1:cf:89:e0:ac: de:fc:33:c2:b9:e1:c5:90:86:2a:b7:0d:ae:4e:c4: 0c:2e:21:6f:36:c4:b4:31:d6:7d:f8:5b:18:80:b0: 7f:b9:d0:0f:db:a2:f5:36:0e:63:9e:c9:8c:40:af: 26:8d:af:bc:5e:38:a2:75:bf:6b:1d:6f:b9:b0:0b: 4b:20:d4:c1:a8:d9:c9:7b:67:6a:00:dd:61:09:30: 8a:82:3a:75:5d:25:93:54:c2:74:d3:a2:74:68:62: 29:e2:ca:2e:0b:8a:b5:66:13:e2:f2:6a:f3:09:bd: 16:2d:5c:55:9c:f8:b5:c3:90:11:5c:e7:2b:53:63: 72:6b:62:34:c7:87:eb:18:b4:a5:24:ff:7a:13:e8: 66:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:93:39:26:AE:83:9D:ED:72:9A:FA:2E:0E:4D:CB:FB:07:49:DF:1B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/15521099-3ba1-4f91-b5bb-712c3bba6337/0/F8933926AE839DED729AFA2E0E4DCBFB0749DF1B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.108.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:0b:cd:20:c2:a5:40:34:63:fd:9f:fd:88:3c:6c:09:f1:47: 2e:3e:bf:db:81:91:84:03:d1:f4:23:45:76:31:c9:34:0e:2c: f7:bf:e7:49:b5:64:c2:d6:f7:5e:08:87:a8:a9:05:22:bb:85: 12:de:70:80:a0:f9:64:40:ec:67:0a:e1:82:fb:97:8e:e4:ff: 11:23:14:5f:8e:1a:36:0f:98:0c:8e:03:1b:78:16:7d:c0:1c: 48:7b:8a:99:24:2f:55:d1:29:d8:ee:8c:d1:b1:85:91:16:35: c8:75:69:7c:4f:85:58:ff:ea:72:b0:42:04:38:44:4a:63:7d: d5:2c:5c:c1:db:fc:03:d9:9d:17:22:55:2f:99:b3:6c:21:4c: 32:f1:4a:9a:12:21:88:7f:30:a4:aa:1b:c2:24:d7:ef:df:1b: 33:3c:78:3c:50:9a:65:74:8d:53:e4:de:56:f4:ae:b5:3b:a4: 73:be:77:16:5e:c2:14:57:e5:00:35:0e:50:9b:85:a5:0d:c1: 05:e6:b6:e8:19:17:39:63:54:db:41:34:f7:ea:20:b3:b9:09: 4a:0d:1c:44:08:d3:43:3b:e7:2f:a5:51:51:c3:b0:81:c1:10: ef:d2:a9:5a:08:cb:91:49:5c:2e:ce:88:1c:ea:7a:f1:70:77: e7:af:99:22 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIURkoj9XOHd2Z1Zvg8Oj6nhUi5snkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTMyMFoX DTI3MDUwMTIzNTgyMFowMzExMC8GA1UEAxMoRjg5MzM5MjZBRTgzOURFRDcyOUFG QTJFMEU0RENCRkIwNzQ5REYxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALSNLKcVZZ9xl7Tbxj+4vHuljSRezIR7NSPhpVYuZ9gQ4DNiSVZR+e4NNxf/ RQ55c1qAIvkxHsM0ysmM/U4A3cE+1u2kXBKQnHaMYiPSZxJ/O630uZS8e3xpasDo AAHivTqxqDDxYwZtAKgC5qqqTgDJWrHPieCs3vwzwrnhxZCGKrcNrk7EDC4hbzbE tDHWffhbGICwf7nQD9ui9TYOY57JjECvJo2vvF44onW/ax1vubALSyDUwajZyXtn agDdYQkwioI6dV0lk1TCdNOidGhiKeLKLguKtWYT4vJq8wm9Fi1cVZz4tcOQEVzn K1NjcmtiNMeH6xi0pST/ehPoZjcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPiTOSaug53tcpr6Lg5Ny/sHSd8bMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE1NTIxMDk5LTNiYTEtNGY5MS1iNWJiLTcxMmMzYmJhNjMzNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xNTUyMTA5 OS0zYmExLTRmOTEtYjViYi03MTJjM2JiYTYzMzcvMC9GODkzMzkyNkFFODM5REVE NzI5QUZBMkUwRTREQ0JGQjA3NDlERjFCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ75sMA0GCSqGSIb3DQEBCwUAA4IBAQA9C80gwqVANGP9n/2IPGwJ8UcuPr/b gZGEA9H0I0V2Mck0Diz3v+dJtWTC1vdeCIeoqQUiu4US3nCAoPlkQOxnCuGC+5eO 5P8RIxRfjho2D5gMjgMbeBZ9wBxIe4qZJC9V0SnY7ozRsYWRFjXIdWl8T4VY/+py sEIEOERKY33VLFzB2/wD2Z0XIlUvmbNsIUwy8UqaEiGIfzCkqhvCJNfv3xszPHg8 UJpldI1T5N5W9K61O6RzvncWXsIUV+UANQ5Qm4WlDcEF5rboGRc5Y1TbQTT36iCz uQlKDRxECNNDO+cvpVFRw7CBwRDv0qlaCMuRSVwuzogc6nrxcHfnr5ki -----END CERTIFICATE-----Generated at Tue May 12 22:03:44 2026 by rpki-client