$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.cer File: F94811DCC5101F1CC6264D691A7E2FEE8D88678A.cer (raw, json) Hash identifier: pUL/bSm33idBQqbD/L+NR8V6t5aSS/s6rVkoab7NsDI= Subject key identifier: F9:48:11:DC:C5:10:1F:1C:C6:26:4D:69:1A:7E:2F:EE:8D:88:67:8A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 04E63362D5F8FE5A4C9E5FC3F47C88A0DE33A087 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:00:57 +0000 Certificate not after: Sun 02 May 2027 02:05:57 +0000 Subordinate resources: IP: 103.145.242.0/23 IP: 2001:df2:3480::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e6:33:62:d5:f8:fe:5a:4c:9e:5f:c3:f4:7c:88:a0:de:33:a0:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:00:57 2026 GMT Not After : May 2 02:05:57 2027 GMT Subject: CN=F94811DCC5101F1CC6264D691A7E2FEE8D88678A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2c:fa:c8:69:99:1e:c4:07:2c:fb:fb:16:69: 06:ac:c1:b8:37:ce:24:bd:d8:4b:46:99:c6:89:1a: 9b:fc:e7:af:33:5e:bb:81:c4:b5:99:60:b0:98:dc: 8b:5e:74:0c:bb:a6:75:a7:d7:83:8a:c8:81:51:4c: f0:46:5a:7d:46:e7:5f:1b:e1:77:e0:3c:33:bf:a3: 6a:4d:9e:a7:66:ae:d5:3b:be:7c:14:21:8d:6e:09: 3a:ad:bf:b4:8a:fa:44:55:cb:77:ea:1d:c3:a4:ce: 43:1f:48:35:e3:91:5d:8a:85:ee:45:6e:da:58:88: 8e:b8:ab:a7:d6:85:d2:94:6c:60:d5:bb:06:3b:05: ab:71:11:d4:85:32:da:da:f5:dd:62:ed:5d:3d:fe: 1f:41:86:52:b4:ee:fb:73:a0:b8:06:88:f6:7d:8c: 78:13:01:47:f0:16:cb:59:a4:6a:8a:fc:99:a6:16: d2:e2:16:c7:32:ba:a8:dc:3e:32:7f:ad:9c:17:9e: f4:ef:29:6b:dd:8b:38:5c:b4:05:df:ce:0b:11:b6: 13:ed:36:0e:1e:75:45:a7:f6:53:28:8c:18:4c:7e: 5b:14:be:3b:bf:d4:80:7f:90:72:ae:d9:89:dd:1d: 81:7a:df:83:33:4b:5f:b3:e8:63:1c:7d:73:34:fc: 4e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:48:11:DC:C5:10:1F:1C:C6:26:4D:69:1A:7E:2F:EE:8D:88:67:8A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.242.0/23 IPv6: 2001:df2:3480::/48 Signature Algorithm: sha256WithRSAEncryption 11:69:00:ff:d7:ea:a3:48:f9:f0:56:04:26:e2:60:e4:f5:01: 08:24:9d:3d:98:e9:cc:20:37:c3:a4:6a:ef:57:12:9e:bf:31: 58:af:75:d5:0f:0a:ed:a9:1b:22:8a:e4:ec:82:a0:54:0a:14: 1b:67:b1:f6:a8:25:28:c7:a1:9f:ff:d8:a8:18:71:43:cc:bd: 81:d2:42:bd:74:01:f7:27:fa:4d:ba:4c:6c:3b:82:d1:92:bf: 78:29:ee:1e:c0:2f:07:96:09:8d:f3:8c:d1:e6:3c:f3:5d:1b: a5:e0:be:d9:d1:b9:1b:52:25:99:f6:10:b4:93:bf:ab:02:17: b7:c6:35:42:96:b0:d2:4e:d2:a6:79:6a:7d:41:b5:cd:28:47: f3:24:b4:95:69:12:2c:11:98:80:4d:85:b5:0c:78:9e:90:f4: 0e:65:c0:f3:5b:1f:79:31:36:7e:f9:86:43:c7:72:f4:dd:7d: 2e:39:00:9a:db:45:bd:84:26:8d:3b:6d:b5:53:67:50:88:2f: 6b:bf:d0:e1:44:47:51:19:fb:c3:20:33:9f:2f:f5:80:20:dd: ce:d7:df:31:a1:3e:28:b3:4c:ed:35:8a:5e:43:9d:b0:d4:35: aa:14:89:70:24:24:2e:88:7a:35:da:a5:f7:17:18:e6:fc:75: ec:04:07:50 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUBOYzYtX4/lpMnl/D9HyIoN4zoIcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDA1N1oX DTI3MDUwMjAyMDU1N1owMzExMC8GA1UEAxMoRjk0ODExRENDNTEwMUYxQ0M2MjY0 RDY5MUE3RTJGRUU4RDg4Njc4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK0s+shpmR7EByz7+xZpBqzBuDfOJL3YS0aZxokam/znrzNeu4HEtZlgsJjc i150DLumdafXg4rIgVFM8EZafUbnXxvhd+A8M7+jak2ep2au1Tu+fBQhjW4JOq2/ tIr6RFXLd+odw6TOQx9INeORXYqF7kVu2liIjrirp9aF0pRsYNW7BjsFq3ER1IUy 2tr13WLtXT3+H0GGUrTu+3OguAaI9n2MeBMBR/AWy1mkaor8maYW0uIWxzK6qNw+ Mn+tnBee9O8pa92LOFy0Bd/OCxG2E+02Dh51Raf2UyiMGEx+WxS+O7/UgH+Qcq7Z id0dgXrfgzNLX7PoYxx9czT8TrECAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPlIEdzFEB8cxiZNaRp+L+6NiGeKMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q3NTBhNjUxLTFhMWEtNDUwMS1hOGJjLTk1OTFlMTEwOWEyNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kNzUwYTY1 MS0xYTFhLTQ1MDEtYThiYy05NTkxZTExMDlhMjcvMC9GOTQ4MTFEQ0M1MTAxRjFD QzYyNjRENjkxQTdFMkZFRThEODg2NzhBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ5HyMA8EAgACMAkDBwAgAQ3yNIAwDQYJKoZIhvcNAQELBQADggEBABFpAP/X 6qNI+fBWBCbiYOT1AQgknT2Y6cwgN8Okau9XEp6/MVivddUPCu2pGyKK5OyCoFQK FBtnsfaoJSjHoZ//2KgYcUPMvYHSQr10Afcn+k26TGw7gtGSv3gp7h7ALweWCY3z jNHmPPNdG6XgvtnRuRtSJZn2ELSTv6sCF7fGNUKWsNJO0qZ5an1Btc0oR/MktJVp EiwRmIBNhbUMeJ6Q9A5lwPNbH3kxNn75hkPHcvTdfS45AJrbRb2EJo07bbVTZ1CI L2u/0OFER1EZ+8MgM58v9YAg3c7X3zGhPiizTO01il5DnbDUNaoUiXAkJC6IejXa pfcXGOb8dewEB1A= -----END CERTIFICATE-----Generated at Tue May 12 22:47:48 2026 by rpki-client