$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer File: FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer (raw, json) Hash identifier: oQGjBtQ6pnfxNApuRITa3ZkesNjrKztXuMnkXLbtRpU= Subject key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 420655AE33112DCBB5B4278885B31165CC748A8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:37:54 +0000 Certificate not after: Sun 02 May 2027 01:42:54 +0000 Subordinate resources: IP: 103.244.36.0/22 IP: 116.68.248.0/21 IP: 137.59.12.0/22 IP: 2403:2700::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:06:55:ae:33:11:2d:cb:b5:b4:27:88:85:b3:11:65:cc:74:8a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:37:54 2026 GMT Not After : May 2 01:42:54 2027 GMT Subject: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f6:76:95:89:36:84:90:c0:2b:c9:27:98:8f: 78:d2:4c:c7:fb:d6:6b:43:8d:54:27:cc:2a:3f:26: 3e:0f:53:80:98:cb:74:5e:a1:fd:3e:c4:08:a3:7c: c7:bf:e5:9e:4b:76:c6:b4:82:6a:a0:28:85:5e:f9: 05:ad:c9:b8:a6:ca:7e:f2:28:2b:d4:c8:4e:36:e9: df:67:7a:00:78:a9:cf:e9:09:23:24:d4:f5:59:2a: 3e:5e:9e:77:a5:3c:9e:7c:02:c3:43:08:4b:1c:cf: 81:9b:47:33:73:68:18:a4:38:1c:cb:91:97:1e:df: 9f:40:5d:48:f9:8a:fc:6c:ba:6b:f1:6f:9e:f4:12: 25:57:d1:be:0c:5d:45:2e:6d:12:3d:e6:1c:ab:4f: 75:94:01:31:eb:ad:7a:3c:ec:d7:7c:7b:6b:9d:59: d8:a2:e0:8c:44:79:1f:10:83:0a:21:4a:5b:98:15: 65:41:03:81:f8:ee:5b:c3:d5:d7:4b:0d:20:7d:9e: 0d:66:9b:ed:14:0b:76:26:de:c9:e6:21:51:f5:2b: 6e:fc:1c:3f:c3:dd:f2:67:bb:64:98:96:99:77:08: 18:fc:37:58:e7:a8:78:50:20:af:9c:81:b0:cf:78: 26:86:5d:b0:04:ac:11:fb:50:1c:19:01:2b:68:bf: ab:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.244.36.0/22 116.68.248.0/21 137.59.12.0/22 IPv6: 2403:2700::/32 Signature Algorithm: sha256WithRSAEncryption 15:8c:dc:25:2a:ac:22:aa:3b:45:d2:47:3e:16:d8:9a:11:62: 94:c5:cc:0c:f7:a4:dc:cc:1c:a4:33:0f:84:7c:15:f7:6a:7c: f6:c5:ba:97:57:80:30:11:c7:04:2b:6a:b5:a7:46:77:0c:67: 0c:1c:ec:3d:64:47:09:6a:a5:7a:c6:cc:60:40:86:43:15:80: 72:dd:0f:4a:29:98:36:6d:af:4f:06:c8:21:08:54:c4:cc:4f: fb:26:f7:15:45:59:8e:12:49:56:d4:7b:e2:c9:53:99:ab:15: 17:5a:76:6b:93:73:d0:74:6c:f6:c6:86:b8:3a:ca:0b:1d:5e: f0:f1:42:fa:5f:35:36:b2:93:f3:f5:a8:3c:d5:3a:8b:47:41: 69:f3:23:3b:d0:a2:de:6e:ee:b1:05:fa:28:94:06:a9:c3:70: d9:b4:7f:4b:6c:c9:23:ad:51:7b:8f:66:6a:39:0d:09:30:b5: 24:1d:1b:46:a9:96:70:86:e5:8b:51:d4:98:c5:25:3f:cb:14: 99:a2:67:3a:74:05:52:d9:24:ae:d8:b9:88:5a:4a:d7:0b:89: 47:29:ba:34:e4:d9:62:49:de:45:30:56:5b:c7:e5:cd:6c:50: a3:f4:57:9a:43:11:d9:d5:cc:a0:33:c4:15:25:69:08:90:e5: 6e:20:4f:f0 -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIUQgZVrjMRLcu1tCeIhbMRZcx0iowwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzc1NFoX DTI3MDUwMjAxNDI1NFowMzExMC8GA1UEAxMoRkIwODFDNEI5MDlDREY1NjE4NEQw NDU1QjJBQTFGNTJFQkZDOTI5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK72dpWJNoSQwCvJJ5iPeNJMx/vWa0ONVCfMKj8mPg9TgJjLdF6h/T7ECKN8 x7/lnkt2xrSCaqAohV75Ba3JuKbKfvIoK9TITjbp32d6AHipz+kJIyTU9VkqPl6e d6U8nnwCw0MISxzPgZtHM3NoGKQ4HMuRlx7fn0BdSPmK/Gy6a/FvnvQSJVfRvgxd RS5tEj3mHKtPdZQBMeutejzs13x7a51Z2KLgjER5HxCDCiFKW5gVZUEDgfjuW8PV 10sNIH2eDWab7RQLdibeyeYhUfUrbvwcP8Pd8me7ZJiWmXcIGPw3WOeoeFAgr5yB sM94JoZdsASsEftQHBkBK2i/qxkCAwEAAaOCAtQwggLQMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPsIHEuQnN9WGE0EVbKqH1Lr/JKTMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2IwNDA2OGYzLWE3NWItNDc2NC05ZTgwLTFmYTU3MjkyMDdmYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iMDQwNjhm My1hNzViLTQ3NjQtOWU4MC0xZmE1NzI5MjA3ZmMvMC9GQjA4MUM0QjkwOUNERjU2 MTg0RDA0NTVCMkFBMUY1MkVCRkM5MjkzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATAS AwQCZ/QkAwQDdET4AwQCiTsMMA0EAgACMAcDBQAkAycAMA0GCSqGSIb3DQEBCwUA A4IBAQAVjNwlKqwiqjtF0kc+FtiaEWKUxcwM96TczBykMw+EfBX3anz2xbqXV4Aw EccEK2q1p0Z3DGcMHOw9ZEcJaqV6xsxgQIZDFYBy3Q9KKZg2ba9PBsghCFTEzE/7 JvcVRVmOEklW1HviyVOZqxUXWnZrk3PQdGz2xoa4OsoLHV7w8UL6XzU2spPz9ag8 1TqLR0Fp8yM70KLebu6xBfoolAapw3DZtH9LbMkjrVF7j2ZqOQ0JMLUkHRtGqZZw huWLUdSYxSU/yxSZomc6dAVS2SSu2LmIWkrXC4lHKbo05NliSd5FMFZbx+XNbFCj 9FeaQxHZ1cygM8QVJWkIkOVuIE/w -----END CERTIFICATE-----Generated at Tue May 12 22:47:20 2026 by rpki-client