$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.cer File: F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.cer (raw, json) Hash identifier: lOKnxlmsqgcjdcNwU2l7MYFNhAmLLn9jFwJPC+d43XE= Subject key identifier: F9:3D:8D:85:31:B3:FF:BA:EB:6D:F1:A9:06:96:10:EC:29:EC:2F:93 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 06D740C298AB253EDAE8161A90A65AB680FD93B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:12:29 +0000 Certificate not after: Sun 02 May 2027 02:17:29 +0000 Subordinate resources: IP: 103.143.128.0/23 IP: 2405:51c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:d7:40:c2:98:ab:25:3e:da:e8:16:1a:90:a6:5a:b6:80:fd:93:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:12:29 2026 GMT Not After : May 2 02:17:29 2027 GMT Subject: CN=F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:74:b8:1e:92:60:fb:c7:cd:55:fe:a8:7f: 73:38:0b:7f:2b:c1:03:48:c1:98:fc:7e:6e:b1:7f: cc:6f:b6:f8:ec:57:5b:a6:9c:aa:5c:c5:94:6e:72: a1:71:01:4b:7d:2d:d1:e2:da:a8:01:94:37:a0:3e: 65:ec:5d:54:52:e0:3c:35:62:15:0b:1b:04:20:e9: ad:44:7f:0f:05:ee:da:0a:9d:ad:8e:ea:00:66:fc: 32:5d:ec:99:9f:14:9e:01:21:8c:58:7e:8a:73:b3: d4:f8:18:61:37:05:31:01:6f:3c:eb:58:6d:c5:60: c1:c5:d3:23:c6:c5:cd:01:55:b4:b5:ed:a6:c8:81: d0:1e:f9:81:3c:dc:6a:d8:9d:20:6a:04:79:54:f9: 4b:2d:09:65:2f:da:4d:f8:f7:2c:58:10:8e:07:9b: bc:27:c8:46:02:86:50:72:40:57:5f:6a:96:99:37: ba:f4:da:5a:1e:02:63:54:a8:2e:fb:0a:d8:1d:07: 57:79:27:16:d2:ed:aa:58:5e:c3:aa:39:71:57:ee: 28:89:95:6b:ec:b9:9f:75:ad:eb:22:85:ac:04:02: b1:3a:58:bf:64:a5:64:52:53:7d:97:e6:e5:38:12: 8f:29:08:a7:fd:4b:c0:2f:73:a1:e2:da:ad:f6:05: 37:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:3D:8D:85:31:B3:FF:BA:EB:6D:F1:A9:06:96:10:EC:29:EC:2F:93 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/F93D8D8531B3FFBAEB6DF1A9069610EC29EC2F93.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.128.0/23 IPv6: 2405:51c0::/32 Signature Algorithm: sha256WithRSAEncryption 7b:b6:21:7d:5c:47:c1:88:7e:a8:a5:24:7a:ec:96:9a:2e:f4: ca:d6:65:94:ff:b1:d8:77:1a:d7:05:37:d6:82:79:46:a8:88: a4:57:7d:3b:26:e7:64:2d:b3:83:c3:1d:17:61:61:70:0f:85: f3:da:ab:4e:60:87:b8:b8:ee:1d:88:9a:52:f3:a0:1b:4e:c2: 0c:be:cd:7d:c5:cc:16:0a:90:dc:3d:54:e7:15:0a:b2:53:e8: c1:19:6e:f8:da:04:cb:7e:d1:b6:47:33:e5:f4:f9:9c:99:2c: 5d:21:ef:35:d1:c9:a3:6e:dc:03:c9:f4:a9:10:94:6e:b0:18: c2:68:46:1f:dd:27:fc:67:1b:b4:e0:b9:01:1e:0e:fd:4d:41: 2f:9c:ad:9a:8b:7b:9e:d9:4a:3d:f9:02:9c:69:5a:8f:e2:6f: ed:53:89:a4:1d:aa:04:1e:5a:e7:28:8f:96:70:14:de:cb:b5: 5a:89:d7:d4:3a:d7:63:c9:2f:81:77:e4:99:65:91:ea:bb:8b: 58:df:a2:69:0b:f0:23:9b:1c:83:e1:3e:41:45:14:f3:48:5c: 12:42:d7:5e:0e:f0:9a:9c:da:84:c5:2c:50:91:1b:a4:15:50: 15:84:66:88:63:1a:bd:54:cc:82:10:55:65:54:c9:b0:05:5c: 14:2a:b9:52 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUBtdAwpirJT7a6BYakKZatoD9k7IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTIyOVoX DTI3MDUwMjAyMTcyOVowMzExMC8GA1UEAxMoRjkzRDhEODUzMUIzRkZCQUVCNkRG MUE5MDY5NjEwRUMyOUVDMkY5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMAWdLgekmD7x81V/qh/czgLfyvBA0jBmPx+brF/zG+2+OxXW6acqlzFlG5y oXEBS30t0eLaqAGUN6A+ZexdVFLgPDViFQsbBCDprUR/DwXu2gqdrY7qAGb8Ml3s mZ8UngEhjFh+inOz1PgYYTcFMQFvPOtYbcVgwcXTI8bFzQFVtLXtpsiB0B75gTzc atidIGoEeVT5Sy0JZS/aTfj3LFgQjgebvCfIRgKGUHJAV19qlpk3uvTaWh4CY1So LvsK2B0HV3knFtLtqlhew6o5cVfuKImVa+y5n3Wt6yKFrAQCsTpYv2SlZFJTfZfm 5TgSjykIp/1LwC9zoeLarfYFN00CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPk9jYUxs/+6623xqQaWEOwp7C+TMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2UyZTk2YmYzLWQwMjEtNGQ4NC05MGQ1LWMyNDU1OGFhNDk1Zi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lMmU5NmJm My1kMDIxLTRkODQtOTBkNS1jMjQ1NThhYTQ5NWYvMC9GOTNEOEQ4NTMxQjNGRkJB RUI2REYxQTkwNjk2MTBFQzI5RUMyRjkzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ4+AMA0EAgACMAcDBQAkBVHAMA0GCSqGSIb3DQEBCwUAA4IBAQB7tiF9XEfB iH6opSR67JaaLvTK1mWU/7HYdxrXBTfWgnlGqIikV307JudkLbODwx0XYWFwD4Xz 2qtOYIe4uO4diJpS86AbTsIMvs19xcwWCpDcPVTnFQqyU+jBGW742gTLftG2RzPl 9PmcmSxdIe810cmjbtwDyfSpEJRusBjCaEYf3Sf8Zxu04LkBHg79TUEvnK2ai3ue 2Uo9+QKcaVqP4m/tU4mkHaoEHlrnKI+WcBTey7VaidfUOtdjyS+Bd+SZZZHqu4tY 36JpC/AjmxyD4T5BRRTzSFwSQtdeDvCanNqExSxQkRukFVAVhGaIYxq9VMyCEFVl VMmwBVwUKrlS -----END CERTIFICATE-----Generated at Tue May 12 22:10:36 2026 by rpki-client