$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer File: FA42FC8A1B17265914F1521A1079D35F1FD46A36.cer (raw, json) Hash identifier: b8Um3okZtcFPi+zsBMNEOjXibtuaTW7XwOGxnptiQO8= Subject key identifier: FA:42:FC:8A:1B:17:26:59:14:F1:52:1A:10:79:D3:5F:1F:D4:6A:36 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 47E9A5D9B178518180D4775DDC3D82A20A5DE677 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:23:42 +0000 Certificate not after: Sun 02 May 2027 01:28:42 +0000 Subordinate resources: IP: 103.188.252.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:e9:a5:d9:b1:78:51:81:80:d4:77:5d:dc:3d:82:a2:0a:5d:e6:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:23:42 2026 GMT Not After : May 2 01:28:42 2027 GMT Subject: CN=FA42FC8A1B17265914F1521A1079D35F1FD46A36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ee:70:f1:b0:7f:0c:27:13:b1:1d:c5:bf:b2: 9c:55:eb:32:14:34:43:9e:92:28:e4:30:46:08:50: 42:08:6f:ea:40:ab:49:0f:75:b1:3d:d3:6c:ca:de: 60:82:d4:4a:4c:da:17:2f:44:ee:85:1f:7c:73:ef: fc:6f:e3:fb:cf:79:7b:41:af:1e:9c:0e:c9:2a:d0: 31:7c:60:67:5d:ff:9d:ba:71:3e:fd:2d:24:30:79: 4f:39:cb:bc:6c:0b:18:62:ed:af:9b:18:27:d3:56: 0c:4d:38:d0:20:98:eb:ba:b7:e1:c1:53:f3:ff:25: a2:d3:96:3a:2c:46:41:39:b0:b8:52:a6:00:bc:c9: e4:c2:7d:c3:49:bf:11:16:1a:9c:fb:74:4d:a0:64: 54:c4:f5:a9:76:21:08:bf:29:ad:9e:f2:37:54:61: 22:d3:6f:8d:07:e0:90:d3:e8:54:4a:bf:fa:b6:dd: 00:2e:24:19:d0:d4:36:c1:33:84:e6:46:86:2f:04: 1f:8d:13:8a:83:cc:48:4b:4d:b2:a2:e5:d7:eb:0d: 1a:e4:a8:8f:29:f9:51:ea:e7:5e:c4:22:15:68:21: 00:2c:98:36:44:37:35:b7:b4:8e:6c:ca:f4:b9:55: ab:be:cb:e5:06:9d:e1:58:f6:88:04:f2:d6:11:94: bc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FA:42:FC:8A:1B:17:26:59:14:F1:52:1A:10:79:D3:5F:1F:D4:6A:36 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/FA42FC8A1B17265914F1521A1079D35F1FD46A36.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.188.252.0/23 Signature Algorithm: sha256WithRSAEncryption 76:a9:4f:66:bd:ce:62:91:dc:0b:c3:b3:c5:cd:84:7c:3c:21: fc:d9:63:28:41:c3:89:b4:dc:4e:50:1f:72:59:ef:d6:ac:9f: 52:26:35:40:9b:4f:c8:0c:52:68:76:23:bd:c5:3c:90:14:36: 65:8b:66:b9:a4:fb:cd:72:fb:24:93:02:79:f9:f2:5a:01:1e: b4:c1:f0:d7:6c:36:62:dd:1c:a6:e8:47:e8:a9:54:36:c2:5b: b2:91:38:73:93:c8:f6:96:b0:72:6a:ea:9c:ba:15:fa:3d:a9: 84:bc:1f:0a:f5:7c:9f:c4:b1:d9:ac:df:e5:70:15:64:53:b5: 84:5d:39:5e:39:a4:09:0b:6a:c6:af:e1:07:22:9f:91:9f:02: 01:35:1b:69:56:4e:20:26:06:07:3d:e6:e2:15:32:8d:17:d5: d9:cd:05:f7:73:35:f8:3a:6e:9f:ca:4c:68:86:ce:37:d4:4c: 31:46:f3:cc:4c:82:dd:3f:48:f1:e9:0d:1d:12:a9:1b:8f:e6: 73:ff:89:2d:6c:7f:03:21:5d:a5:bf:8e:61:25:78:e7:c1:18: 69:b0:57:7b:4a:6c:d1:a3:e8:60:f4:f5:6a:22:4e:85:ee:5a: e6:e3:ff:a2:a6:5d:e5:3f:ca:b1:f7:ba:3d:43:67:e4:bb:ce: b3:7c:5e:5b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUR+ml2bF4UYGA1Hdd3D2Cogpd5ncwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjM0MloX DTI3MDUwMjAxMjg0MlowMzExMC8GA1UEAxMoRkE0MkZDOEExQjE3MjY1OTE0RjE1 MjFBMTA3OUQzNUYxRkQ0NkEzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL7ucPGwfwwnE7Edxb+ynFXrMhQ0Q56SKOQwRghQQghv6kCrSQ91sT3TbMre YILUSkzaFy9E7oUffHPv/G/j+895e0GvHpwOySrQMXxgZ13/nbpxPv0tJDB5TznL vGwLGGLtr5sYJ9NWDE040CCY67q34cFT8/8lotOWOixGQTmwuFKmALzJ5MJ9w0m/ ERYanPt0TaBkVMT1qXYhCL8prZ7yN1RhItNvjQfgkNPoVEq/+rbdAC4kGdDUNsEz hOZGhi8EH40TioPMSEtNsqLl1+sNGuSojyn5UernXsQiFWghACyYNkQ3Nbe0jmzK 9LlVq77L5Qad4Vj2iATy1hGUvM8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPpC/IobFyZZFPFSGhB5018f1Go2MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzlhZWQwOThiLTQ5YjEtNGY1My1iNzVhLTI3M2UxMWMyNTE0OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85YWVkMDk4 Yi00OWIxLTRmNTMtYjc1YS0yNzNlMTFjMjUxNDkvMC9GQTQyRkM4QTFCMTcyNjU5 MTRGMTUyMUExMDc5RDM1RjFGRDQ2QTM2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7z8MA0GCSqGSIb3DQEBCwUAA4IBAQB2qU9mvc5ikdwLw7PFzYR8PCH82WMo QcOJtNxOUB9yWe/WrJ9SJjVAm0/IDFJodiO9xTyQFDZli2a5pPvNcvskkwJ5+fJa AR60wfDXbDZi3Rym6EfoqVQ2wluykThzk8j2lrByauqcuhX6PamEvB8K9XyfxLHZ rN/lcBVkU7WEXTleOaQJC2rGr+EHIp+RnwIBNRtpVk4gJgYHPebiFTKNF9XZzQX3 czX4Om6fykxohs431EwxRvPMTILdP0jx6Q0dEqkbj+Zz/4ktbH8DIV2lv45hJXjn wRhpsFd7SmzRo+hg9PVqIk6F7lrm4/+ipl3lP8qx97o9Q2fku86zfF5b -----END CERTIFICATE-----Generated at Tue May 12 22:02:41 2026 by rpki-client