$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.cer File: F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.cer (raw, json) Hash identifier: aSTjqV0NwaRSGtleTW9YH2dJ1GffeqsQ07n0PhI/Zlc= Subject key identifier: F9:9F:BC:C0:D7:C1:AA:47:94:D9:5D:70:64:1B:90:11:AB:A2:97:9A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 30C1D158EA983425B27B95D7903BF7F2E733C1F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:35:36 +0000 Certificate not after: Sun 02 May 2027 01:40:36 +0000 Subordinate resources: IP: 103.135.24.0/22 IP: 2001:df7:df00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:c1:d1:58:ea:98:34:25:b2:7b:95:d7:90:3b:f7:f2:e7:33:c1:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:35:36 2026 GMT Not After : May 2 01:40:36 2027 GMT Subject: CN=F99FBCC0D7C1AA4794D95D70641B9011ABA2979A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:54:0e:e2:c6:db:98:7f:7b:7d:ae:5c:44:b5: b7:b2:ee:5a:46:52:4a:8d:8a:61:f4:c0:e6:87:9d: 7d:eb:fe:48:34:e6:86:78:6c:e3:0d:1a:0e:3d:50: 9e:c7:61:7f:6c:dd:fc:93:b4:9a:c6:d6:93:4b:c9: 87:b6:5f:e7:50:37:0e:c5:c1:29:bc:92:17:3b:7d: be:13:93:a7:4b:5c:9c:07:fa:3a:4e:ed:07:ab:d7: 54:5d:94:01:b8:99:1c:08:92:bd:89:f0:bb:e4:ff: b4:b3:87:06:19:7e:51:91:3e:53:bd:08:e7:1f:fc: 48:2b:77:d9:c7:72:c8:e5:fa:65:2e:3c:4b:15:ac: 41:8f:7f:47:46:2a:ce:a9:66:94:b6:41:c1:7d:cf: 3e:73:a7:4b:e2:27:c0:7e:b0:c7:36:0e:fa:7b:b7: c5:30:48:22:bb:6c:d1:3b:07:da:68:36:35:a9:62: 92:79:36:f7:df:72:e5:d6:93:4f:a0:dc:64:eb:47: af:20:47:b0:4d:99:01:cb:96:70:89:1b:27:c4:99: ff:b2:8c:d4:b7:a9:65:ae:4a:55:e5:d1:00:88:67: bc:66:22:d1:a6:b6:3e:25:1d:ee:a3:95:6d:4a:40: 69:14:a8:4b:a9:c5:86:65:63:8e:20:51:a5:ca:5f: 57:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:9F:BC:C0:D7:C1:AA:47:94:D9:5D:70:64:1B:90:11:AB:A2:97:9A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.135.24.0/22 IPv6: 2001:df7:df00::/48 Signature Algorithm: sha256WithRSAEncryption 31:e5:b5:b5:35:86:46:ec:61:1f:df:35:f0:d7:41:39:19:71: cb:29:4e:c2:05:9a:29:eb:7c:f3:e4:01:a4:be:cf:fb:da:f2: 42:43:7b:ff:0a:73:86:2c:28:ee:bc:3d:15:ee:dd:ab:9c:5f: e4:f1:85:33:63:93:e0:e3:da:8c:b1:ac:0d:d9:d2:5f:d2:36: 15:d5:8d:85:80:a5:78:8a:8d:e7:8d:77:f0:e2:ae:66:a9:6a: 68:7a:ff:07:c0:f2:3a:f0:ef:fd:c5:ad:eb:be:89:6c:33:1d: eb:50:d1:c7:4c:3e:db:e1:4f:7a:3c:17:33:d0:ed:75:bd:c6: c1:90:09:3f:f9:fd:e7:f0:cb:c9:30:3a:f8:a2:e3:58:88:15: dd:16:51:7d:85:30:30:3e:3f:7f:6b:e2:4b:5b:06:cf:42:3d: 22:11:b0:91:ac:0e:f8:4c:fe:2e:23:c0:dd:f0:84:fb:e1:10: c4:6e:29:f3:e6:6a:c1:9e:37:29:1b:c0:f4:00:a2:a8:b5:72: 57:09:43:95:69:55:b1:ad:10:ee:93:02:7d:b9:ad:38:f9:84: 6b:35:2b:7b:ff:36:8e:54:8b:dc:06:f7:55:c4:ca:d8:e3:db: 19:d3:6a:26:6e:b1:92:8a:41:cc:e8:bf:d2:12:43:9e:9b:02: df:c2:a3:c0 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUMMHRWOqYNCWye5XXkDv38uczwfUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzUzNloX DTI3MDUwMjAxNDAzNlowMzExMC8GA1UEAxMoRjk5RkJDQzBEN0MxQUE0Nzk0RDk1 RDcwNjQxQjkwMTFBQkEyOTc5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALtUDuLG25h/e32uXES1t7LuWkZSSo2KYfTA5oedfev+SDTmhnhs4w0aDj1Q nsdhf2zd/JO0msbWk0vJh7Zf51A3DsXBKbySFzt9vhOTp0tcnAf6Ok7tB6vXVF2U AbiZHAiSvYnwu+T/tLOHBhl+UZE+U70I5x/8SCt32cdyyOX6ZS48SxWsQY9/R0Yq zqlmlLZBwX3PPnOnS+InwH6wxzYO+nu3xTBIIrts0TsH2mg2Naliknk2999y5daT T6DcZOtHryBHsE2ZAcuWcIkbJ8SZ/7KM1LepZa5KVeXRAIhnvGYi0aa2PiUd7qOV bUpAaRSoS6nFhmVjjiBRpcpfVy0CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPmfvMDXwapHlNldcGQbkBGropeaMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2FjOTQxZmJkLWFkNDAtNDMyNy05M2Q2LThlNzk3MjNmZGI0NC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hYzk0MWZi ZC1hZDQwLTQzMjctOTNkNi04ZTc5NzIzZmRiNDQvMC9GOTlGQkNDMEQ3QzFBQTQ3 OTREOTVENzA2NDFCOTAxMUFCQTI5NzlBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZ4cYMA8EAgACMAkDBwAgAQ333wAwDQYJKoZIhvcNAQELBQADggEBADHltbU1 hkbsYR/fNfDXQTkZccspTsIFminrfPPkAaS+z/va8kJDe/8Kc4YsKO68PRXu3auc X+TxhTNjk+Dj2oyxrA3Z0l/SNhXVjYWApXiKjeeNd/Dirmapamh6/wfA8jrw7/3F reu+iWwzHetQ0cdMPtvhT3o8FzPQ7XW9xsGQCT/5/efwy8kwOvii41iIFd0WUX2F MDA+P39r4ktbBs9CPSIRsJGsDvhM/i4jwN3whPvhEMRuKfPmasGeNykbwPQAoqi1 clcJQ5VpVbGtEO6TAn25rTj5hGs1K3v/No5Ui9wG91XEytjj2xnTaiZusZKKQczo v9ISQ56bAt/Co8A= -----END CERTIFICATE-----Generated at Tue May 12 22:03:10 2026 by rpki-client