$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.cer File: FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.cer (raw, json) Hash identifier: NZ+JQwkYqTbG8OQozdjVZ2jqULgktgmldajCfTc8ml0= Subject key identifier: FA:7D:3E:BB:17:35:1F:B6:3C:C8:16:78:19:D1:0E:D1:9C:C3:AF:5F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1FE4F2D863969B0521A153215487059AA13D31DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:55:32 +0000 Certificate not after: Sun 02 May 2027 02:00:32 +0000 Subordinate resources: IP: 103.183.100.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:e4:f2:d8:63:96:9b:05:21:a1:53:21:54:87:05:9a:a1:3d:31:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:55:32 2026 GMT Not After : May 2 02:00:32 2027 GMT Subject: CN=FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e5:03:88:01:53:9d:86:8f:63:14:17:6f:6b: f2:10:ce:59:f8:d3:5e:44:fc:a2:b0:b7:06:01:39: d1:f7:36:6b:2b:6c:23:9d:30:a2:5d:c3:3b:18:02: 12:c4:e8:53:be:4b:db:77:5b:0b:5d:7c:4d:3d:54: 28:55:22:87:44:bf:bc:85:22:79:72:d8:d5:e7:15: e2:65:fc:bc:7e:b5:50:ad:58:05:fb:2c:7e:4a:eb: 16:f8:ee:7f:3a:48:ab:cb:de:91:27:40:9a:73:9e: 12:6a:36:30:71:a0:85:f5:35:99:28:67:55:8a:2e: 62:1b:88:52:92:cb:79:14:47:e0:f3:8b:23:22:6a: b7:31:3c:6f:ef:8b:4c:11:a5:7b:bb:7a:1a:9e:9d: cc:4c:a3:de:17:3f:db:c3:9d:97:b2:da:47:95:91: ef:d7:ff:d3:1c:2f:2d:07:8e:72:2b:9d:32:6f:fe: f6:26:b1:4d:fc:e4:9c:89:96:fc:0b:f4:ff:0f:a8: fe:47:64:61:bc:85:96:59:da:e8:bd:2a:53:98:42: 66:fc:52:e4:3e:0e:3b:e1:bc:91:ae:ed:75:cd:5b: 35:75:8d:21:c0:98:12:b5:73:dc:81:45:b9:d1:80: c6:8d:63:6e:3d:85:30:4d:fb:c5:76:b9:ac:ee:ca: 46:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FA:7D:3E:BB:17:35:1F:B6:3C:C8:16:78:19:D1:0E:D1:9C:C3:AF:5F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/FA7D3EBB17351FB63CC8167819D10ED19CC3AF5F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.183.100.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:19:ed:68:01:b4:07:17:20:ea:c0:9d:11:44:b0:d8:1c:ec: 86:0f:21:11:4a:b8:67:a5:c3:98:68:12:08:c5:e6:c0:44:24: 05:b7:53:7c:d4:de:93:fa:21:c3:e8:d7:2e:25:b6:35:1c:15: c4:e4:fb:e4:70:fd:e3:9b:8c:0e:01:fd:35:15:40:d1:99:a5: b5:64:c0:e6:65:c6:91:3c:2d:51:5e:18:b4:dd:b3:81:37:92: 90:6e:3b:cd:25:b5:1f:ed:ef:d3:17:50:1b:4e:2f:1d:2c:99: 33:9e:84:92:e0:d1:83:70:57:b3:d7:3a:3b:cf:70:77:4c:d2: a5:ea:22:5a:6d:aa:51:3e:ac:e5:7b:28:2e:fd:5a:b5:7e:bf: 59:0c:3c:e2:03:07:73:fd:1e:36:23:18:46:9c:53:72:68:31: 97:90:21:2e:e8:7e:d6:ca:98:10:db:62:79:32:18:6f:1f:4a: a4:96:2e:ec:01:be:fa:7d:c9:82:7b:ef:e2:af:4a:9c:bb:cb: 2b:08:24:59:69:50:99:aa:b0:e8:49:cd:86:f8:aa:42:82:8f: 14:83:cd:d7:e4:7e:07:35:ae:34:37:d8:00:42:36:37:72:1a: 84:50:c5:ba:cf:ae:ce:da:8f:6d:fa:df:16:4a:80:8a:73:cf: 44:9b:8d:bb -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUH+Ty2GOWmwUhoVMhVIcFmqE9MdowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTUzMloX DTI3MDUwMjAyMDAzMlowMzExMC8GA1UEAxMoRkE3RDNFQkIxNzM1MUZCNjNDQzgx Njc4MTlEMTBFRDE5Q0MzQUY1RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOHlA4gBU52Gj2MUF29r8hDOWfjTXkT8orC3BgE50fc2aytsI50wol3DOxgC EsToU75L23dbC118TT1UKFUih0S/vIUieXLY1ecV4mX8vH61UK1YBfssfkrrFvju fzpIq8vekSdAmnOeEmo2MHGghfU1mShnVYouYhuIUpLLeRRH4POLIyJqtzE8b++L TBGle7t6Gp6dzEyj3hc/28Odl7LaR5WR79f/0xwvLQeOciudMm/+9iaxTfzknImW /Av0/w+o/kdkYbyFllna6L0qU5hCZvxS5D4OO+G8ka7tdc1bNXWNIcCYErVz3IFF udGAxo1jbj2FME37xXa5rO7KRjsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPp9PrsXNR+2PMgWeBnRDtGcw69fMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NlM2Q4YzAzLTE3YmItNGNhYi04NTI2LTExOGY1ODdkY2MwOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jZTNkOGMw My0xN2JiLTRjYWItODUyNi0xMThmNTg3ZGNjMDkvMC9GQTdEM0VCQjE3MzUxRkI2 M0NDODE2NzgxOUQxMEVEMTlDQzNBRjVGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7dkMA0GCSqGSIb3DQEBCwUAA4IBAQAKGe1oAbQHFyDqwJ0RRLDYHOyGDyER SrhnpcOYaBIIxebARCQFt1N81N6T+iHD6NcuJbY1HBXE5PvkcP3jm4wOAf01FUDR maW1ZMDmZcaRPC1RXhi03bOBN5KQbjvNJbUf7e/TF1AbTi8dLJkznoSS4NGDcFez 1zo7z3B3TNKl6iJabapRPqzleygu/Vq1fr9ZDDziAwdz/R42IxhGnFNyaDGXkCEu 6H7WypgQ22J5MhhvH0qkli7sAb76fcmCe+/ir0qcu8srCCRZaVCZqrDoSc2G+KpC go8Ug83X5H4HNa40N9gAQjY3chqEUMW6z67O2o9t+t8WSoCKc89Em427 -----END CERTIFICATE-----Generated at Tue May 12 22:47:28 2026 by rpki-client