$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer File: F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer (raw, json) Hash identifier: ThT4OhidtI/pFsR9/Dp+YuJRQecBYG3VwKq3LnFMH+Y= Subject key identifier: F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 61B090F9377946229DC4BE80726E4DB2DB4C7639 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:02:12 +0000 Certificate not after: Sun 02 May 2027 00:07:12 +0000 Subordinate resources: IP: 103.39.68.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:b0:90:f9:37:79:46:22:9d:c4:be:80:72:6e:4d:b2:db:4c:76:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:02:12 2026 GMT Not After : May 2 00:07:12 2027 GMT Subject: CN=F8F6686532E7BB704E802B6D3B48B33DD061D9A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2f:71:17:8c:be:1e:2e:11:34:6d:36:d8:06: ca:46:cc:3f:9d:8a:84:71:53:1a:31:79:24:de:fd: b1:5c:ca:e3:bc:5b:16:be:2a:4d:e6:25:f7:3d:5c: d6:99:be:69:ce:79:48:a0:6b:18:9a:c4:f8:b3:7a: c3:23:ae:eb:70:75:9f:73:83:05:3c:0d:5e:78:5d: 24:53:dd:4d:c5:7c:19:c1:1d:83:d0:71:37:ff:99: 41:2f:bf:9a:15:8c:86:b5:2a:79:10:bc:43:74:72: 5d:28:7f:f1:dd:b5:b9:f1:d6:f2:32:cf:51:b4:92: cf:04:15:e7:70:7e:00:a3:0f:6c:92:24:37:db:f6: f8:24:75:3a:00:03:2c:0c:4a:93:44:53:1f:bc:c6: 54:87:b0:07:e4:f9:e2:f3:88:72:32:e8:76:d8:97: 65:5a:ff:55:ed:aa:3b:62:8a:72:ea:fb:6a:b5:83: 01:bd:ad:0f:6c:36:ff:2c:47:ec:15:fb:56:4c:b4: 50:82:ef:95:17:71:9e:94:04:77:57:29:9d:7d:36: 6f:19:20:a0:b4:b4:49:78:d7:72:60:d8:25:ca:89: 0c:d4:7c:e8:02:a4:ce:3c:e8:5a:86:5e:5a:27:f3: 85:bf:25:ac:14:b9:ea:b2:45:42:cf:31:5e:a4:67: 2e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.39.68.0/23 Signature Algorithm: sha256WithRSAEncryption 12:a2:5d:a0:68:01:e6:ea:7f:c2:8e:76:03:08:da:3f:a6:b2: 00:2c:40:e6:08:2d:b0:a3:00:5f:82:a5:c8:bf:1d:01:3f:17: d4:45:f5:9f:86:f2:85:87:67:f6:ac:ab:71:f2:c7:5a:9a:f8: 75:5e:4c:1d:0f:dd:10:61:9c:c5:86:cc:63:9e:b6:f9:7c:27: 4f:00:54:f6:30:99:0d:3d:a7:5c:a2:7c:c1:eb:6d:51:60:97: 70:60:6f:3a:e2:ad:9d:5d:78:bd:b9:a4:32:09:65:5d:15:83: bf:ec:f5:7f:0a:cc:0f:ef:81:9e:1e:a8:6c:87:d6:de:2b:32: 24:2f:dd:a6:36:ab:6d:42:be:90:7c:d3:0f:17:8b:5d:7d:8d: 08:87:f4:e1:46:13:bf:5e:2e:ae:20:21:69:f1:3e:00:e1:a1: e8:4e:92:7b:12:c5:c8:51:40:21:d9:d2:d0:ac:23:94:e7:b5: 59:67:15:1b:7c:8b:04:a5:42:d6:df:e4:34:6c:bf:40:9d:c9: 71:08:c8:a7:ae:66:f4:42:ef:b4:07:15:27:98:92:df:a0:81: 05:83:3d:6f:30:e5:71:1c:24:42:64:5a:0b:0d:4e:72:12:1a: e2:ab:a4:33:4b:be:e4:7c:b6:f0:97:7a:f2:e5:ae:0a:ca:92: 50:e3:18:c2 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUYbCQ+Td5RiKdxL6Acm5NsttMdjkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDIxMloX DTI3MDUwMjAwMDcxMlowMzExMC8GA1UEAxMoRjhGNjY4NjUzMkU3QkI3MDRFODAy QjZEM0I0OEIzM0REMDYxRDlBNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALQvcReMvh4uETRtNtgGykbMP52KhHFTGjF5JN79sVzK47xbFr4qTeYl9z1c 1pm+ac55SKBrGJrE+LN6wyOu63B1n3ODBTwNXnhdJFPdTcV8GcEdg9BxN/+ZQS+/ mhWMhrUqeRC8Q3RyXSh/8d21ufHW8jLPUbSSzwQV53B+AKMPbJIkN9v2+CR1OgAD LAxKk0RTH7zGVIewB+T54vOIcjLodtiXZVr/Ve2qO2KKcur7arWDAb2tD2w2/yxH 7BX7Vky0UILvlRdxnpQEd1cpnX02bxkgoLS0SXjXcmDYJcqJDNR86AKkzjzoWoZe Wifzhb8lrBS56rJFQs8xXqRnLnECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPj2aGUy57twToArbTtIsz3QYdmkMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzIyMjZiZTdiLTJlMjgtNDk1MC1hYTRjLTIxODVlNjQ3ZGIzZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yMjI2YmU3 Yi0yZTI4LTQ5NTAtYWE0Yy0yMTg1ZTY0N2RiM2YvMC9GOEY2Njg2NTMyRTdCQjcw NEU4MDJCNkQzQjQ4QjMzREQwNjFEOUE0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZydEMA0GCSqGSIb3DQEBCwUAA4IBAQASol2gaAHm6n/CjnYDCNo/prIALEDm CC2wowBfgqXIvx0BPxfURfWfhvKFh2f2rKtx8sdamvh1XkwdD90QYZzFhsxjnrb5 fCdPAFT2MJkNPadconzB621RYJdwYG864q2dXXi9uaQyCWVdFYO/7PV/CswP74Ge Hqhsh9beKzIkL92mNqttQr6QfNMPF4tdfY0Ih/ThRhO/Xi6uICFp8T4A4aHoTpJ7 EsXIUUAh2dLQrCOU57VZZxUbfIsEpULW3+Q0bL9AnclxCMinrmb0Qu+0BxUnmJLf oIEFgz1vMOVxHCRCZFoLDU5yEhriq6QzS77kfLbwl3ry5a4KypJQ4xjC -----END CERTIFICATE-----Generated at Tue May 12 22:16:43 2026 by rpki-client