$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F8C619ADD100D297A2F864708157AB59332532B3.cer File: F8C619ADD100D297A2F864708157AB59332532B3.cer (raw, json) Hash identifier: 6f6p4XZk1Z/+s18Qpjv6uFR+qGRKMRDtSkeTjdbhKvI= Subject key identifier: F8:C6:19:AD:D1:00:D2:97:A2:F8:64:70:81:57:AB:59:33:25:32:B3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 71C95BD5AB048367D34EA311AEE2A5B2359A9D3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/F8C619ADD100D297A2F864708157AB59332532B3.mft caRepository: rsync://rpki-rsync.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:26:07 +0000 Certificate not after: Sun 02 May 2027 00:31:07 +0000 Subordinate resources: IP: 103.41.169.0/24 IP: 202.4.186.0/24 IP: 2001:df0:b6::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c9:5b:d5:ab:04:83:67:d3:4e:a3:11:ae:e2:a5:b2:35:9a:9d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:26:07 2026 GMT Not After : May 2 00:31:07 2027 GMT Subject: CN=F8C619ADD100D297A2F864708157AB59332532B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a9:8e:0c:ae:80:9f:20:8f:eb:20:c4:a3:66: 6b:eb:9d:fe:2e:8e:3b:c3:83:cc:af:f0:16:0f:74: 5a:a9:9a:9c:81:ed:a2:28:ef:c5:6f:fa:bf:cf:4f: b7:4e:4c:2b:69:56:3c:9e:e3:f6:b9:f9:51:ee:99: 3c:8f:05:e6:93:25:57:0c:2b:dd:10:82:b2:fe:21: 17:30:09:2c:70:ff:8b:58:fc:9f:7d:43:9e:ba:b5: 73:99:14:12:34:17:5f:6a:e4:ee:e5:66:0f:ff:a2: 42:3c:6e:e3:41:8e:b5:2d:f9:f6:93:b3:96:71:e5: 1c:ad:09:ad:1e:39:3e:00:40:94:10:78:20:1b:8a: a7:b7:43:3c:8f:d9:97:d8:ff:e2:f7:f0:9f:31:c5: 3b:db:40:db:3a:d7:cb:fb:31:fe:d6:5c:46:b4:97: c2:d3:b0:e0:21:c7:eb:83:ff:6e:81:84:25:bb:d7: 91:3d:ec:3e:04:ac:8d:80:46:3b:a3:e8:38:cd:bf: c6:89:5f:6d:d4:9b:de:cb:d2:68:21:f0:52:f4:a4: 24:77:38:25:82:47:76:ea:3e:f0:0f:cd:c2:af:e9: c6:47:39:f6:7e:21:4d:db:48:58:f4:35:21:1e:0a: 66:9d:40:44:9d:50:b8:3c:b9:0c:4a:8d:9a:77:52: 63:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:C6:19:AD:D1:00:D2:97:A2:F8:64:70:81:57:AB:59:33:25:32:B3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/F8C619ADD100D297A2F864708157AB59332532B3.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.41.169.0/24 202.4.186.0/24 IPv6: 2001:df0:b6::/48 Signature Algorithm: sha256WithRSAEncryption a8:9a:84:ef:0e:58:9e:e6:3d:ad:a9:56:6c:62:23:6b:d4:fd: 19:49:13:52:f8:98:17:27:6d:c7:6b:e6:aa:76:a7:a1:e6:d9: 89:14:85:fa:45:75:4f:51:da:2f:cf:4b:45:6b:3a:1f:9e:52: ec:28:b4:1a:2f:6b:59:ce:6e:a8:4b:65:06:fe:7a:a8:c7:52: f2:42:89:91:f0:9e:75:a1:17:75:3f:f7:b4:85:c7:2a:e4:27: dd:6b:92:93:82:1f:1c:82:cc:a4:ed:c5:e4:db:31:ff:61:fd: 1b:ff:f7:18:52:fb:5b:e6:7c:8b:51:87:f4:b1:a7:2e:cc:36: 44:a7:01:b0:a2:b1:ce:00:88:c7:7d:4f:98:24:63:6d:95:5b: 4a:5e:94:5a:cb:ad:58:dd:c1:63:21:65:9f:c4:10:5e:5b:64: 82:bf:c8:1b:27:74:4e:5b:87:3c:f9:66:63:72:76:ed:56:08: 79:c6:e2:c5:ac:5b:97:2b:a9:04:94:33:88:8e:f7:92:55:90: dd:08:93:b2:bd:dd:5c:b3:6d:76:00:7b:ca:d1:7a:37:a7:35: 30:ef:2f:07:87:3b:29:2f:af:cd:ed:f3:53:a5:51:b6:9d:64: ee:81:bf:f6:75:fa:8b:5b:3f:46:8b:c3:b9:91:7d:74:07:9e: 13:ee:8f:03 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUcclb1asEg2fTTqMRruKlsjWanTwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjYwN1oX DTI3MDUwMjAwMzEwN1owMzExMC8GA1UEAxMoRjhDNjE5QUREMTAwRDI5N0EyRjg2 NDcwODE1N0FCNTkzMzI1MzJCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMypjgyugJ8gj+sgxKNma+ud/i6OO8ODzK/wFg90WqmanIHtoijvxW/6v89P t05MK2lWPJ7j9rn5Ue6ZPI8F5pMlVwwr3RCCsv4hFzAJLHD/i1j8n31Dnrq1c5kU EjQXX2rk7uVmD/+iQjxu40GOtS359pOzlnHlHK0JrR45PgBAlBB4IBuKp7dDPI/Z l9j/4vfwnzHFO9tA2zrXy/sx/tZcRrSXwtOw4CHH64P/boGEJbvXkT3sPgSsjYBG O6PoOM2/xolfbdSb3svSaCHwUvSkJHc4JYJHduo+8A/Nwq/pxkc59n4hTdtIWPQ1 IR4KZp1ARJ1QuDy5DEqNmndSYyECAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPjGGa3RANKXovhkcIFXq1kzJTKzMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQ1ODY5MTgxLWVhNTUtNDIxZC1hYmE4LTY5NjgzMTRjOGQ4MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80NTg2OTE4 MS1lYTU1LTQyMWQtYWJhOC02OTY4MzE0YzhkODAvMC9GOEM2MTlBREQxMDBEMjk3 QTJGODY0NzA4MTU3QUI1OTMzMjUzMkIzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQAZympAwQAygS6MA8EAgACMAkDBwAgAQ3wALYwDQYJKoZIhvcNAQELBQADggEB AKiahO8OWJ7mPa2pVmxiI2vU/RlJE1L4mBcnbcdr5qp2p6Hm2YkUhfpFdU9R2i/P S0VrOh+eUuwotBova1nObqhLZQb+eqjHUvJCiZHwnnWhF3U/97SFxyrkJ91rkpOC HxyCzKTtxeTbMf9h/Rv/9xhS+1vmfItRh/Sxpy7MNkSnAbCisc4AiMd9T5gkY22V W0pelFrLrVjdwWMhZZ/EEF5bZIK/yBsndE5bhzz5ZmNydu1WCHnG4sWsW5crqQSU M4iO95JVkN0Ik7K93VyzbXYAe8rRejenNTDvLweHOykvr83t81OlUbadZO6Bv/Z1 +otbP0aLw7mRfXQHnhPujwM= -----END CERTIFICATE-----Generated at Tue May 12 22:33:08 2026 by rpki-client