$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.cer File: FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.cer (raw, json) Hash identifier: bUVwQK6Ii4JovcIWQLzY6hpmS0POL5yi/ju5+1pI9Qo= Subject key identifier: FB:1F:38:9B:C4:F5:C6:DF:B0:F0:AC:51:C1:6E:6A:CA:47:F9:C0:2A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 29C858BC20436D57A46C7F549E775C37A151D790 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:41:26 +0000 Certificate not after: Sat 01 May 2027 23:46:26 +0000 Subordinate resources: IP: 103.159.202.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c8:58:bc:20:43:6d:57:a4:6c:7f:54:9e:77:5c:37:a1:51:d7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:41:26 2026 GMT Not After : May 1 23:46:26 2027 GMT Subject: CN=FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2e:b2:f3:6f:74:5d:82:46:b9:f8:3e:3b:6f: d0:1f:bf:13:cf:58:3a:ad:c1:51:75:e8:a5:a2:ac: 73:87:e2:a7:06:a5:b8:6d:e1:b7:45:76:3f:ed:a0: 3e:c4:26:50:29:5c:94:a2:f9:3b:91:5a:1d:f8:d7: 3d:40:a2:b1:3e:2a:e4:4a:2d:6b:4d:66:0d:1c:af: 8a:1e:1a:94:ac:80:fc:b8:3d:d2:41:78:f6:79:47: 5c:91:17:51:9e:74:57:92:68:08:02:43:f4:7d:7f: d5:8a:d5:d2:3c:dc:37:3b:3b:0e:1c:9e:4f:61:e7: e8:e4:15:d0:c4:88:d1:7d:23:a6:a5:8e:51:66:50: 9b:b3:3b:f9:24:b4:97:8d:24:cf:30:a1:2d:69:34: d7:15:eb:7d:6e:6a:16:d9:bf:07:cd:fa:81:e1:ad: fb:17:03:24:69:47:39:0a:81:f5:1d:18:f7:ef:1f: 87:00:b5:11:af:ee:79:ca:3d:4d:66:ba:dc:00:ef: 08:b5:c1:ba:94:33:e3:81:03:31:9b:10:04:44:05: 87:12:4d:4d:bc:f7:6d:96:97:83:a0:b1:bb:96:87: 7a:c3:f6:6b:57:dc:cb:31:e6:a4:55:27:39:b1:0e: 46:fa:e6:ff:9b:f9:4c:87:70:c1:2d:4c:22:85:71: 77:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:1F:38:9B:C4:F5:C6:DF:B0:F0:AC:51:C1:6E:6A:CA:47:F9:C0:2A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/FB1F389BC4F5C6DFB0F0AC51C16E6ACA47F9C02A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.202.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:14:68:49:f3:99:48:0b:33:54:51:b9:74:8d:50:91:29:e3: 2c:d3:d0:90:85:ff:a4:d5:ee:7e:bb:57:c7:2b:51:0e:23:a8: 95:33:ec:0d:6b:9c:e9:ba:43:7e:e8:b7:5a:44:26:5f:85:83: 6d:17:13:bf:9b:5a:95:2d:2b:46:ca:2c:9d:44:26:c2:8b:00: 31:fa:95:17:13:82:18:29:40:26:f9:c4:a5:77:37:48:c8:ef: c8:9b:e1:fe:19:c1:f3:d9:85:0f:f7:51:9e:f3:70:6c:40:79: e4:cb:1e:0c:c5:22:7d:4e:90:2f:52:0e:68:9e:91:fa:b4:62: 7b:3c:a6:61:6b:fe:34:12:f5:24:c3:c6:3e:80:35:f2:09:af: 91:15:0b:72:34:fd:0c:b6:97:35:1a:78:25:86:43:0f:8e:bc: 26:21:3b:1c:85:bd:5e:48:f5:c5:4b:98:e0:7d:28:8f:96:4c: 45:6a:d8:94:85:e9:18:55:2e:4e:85:a0:d6:fa:ce:16:fd:e5: 8a:10:45:9b:00:68:dc:b4:12:7d:35:01:bd:19:86:f2:84:e8: 48:53:b1:91:74:a1:20:71:c7:87:3d:b6:94:81:e7:71:6c:95: ee:9c:80:cb:18:dd:d9:2a:0e:37:8e:bb:12:fd:ed:67:cc:1d: 6a:3a:30:5c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUKchYvCBDbVekbH9UnndcN6FR15AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDEyNloX DTI3MDUwMTIzNDYyNlowMzExMC8GA1UEAxMoRkIxRjM4OUJDNEY1QzZERkIwRjBB QzUxQzE2RTZBQ0E0N0Y5QzAyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIsusvNvdF2CRrn4Pjtv0B+/E89YOq3BUXXopaKsc4fipwaluG3ht0V2P+2g PsQmUClclKL5O5FaHfjXPUCisT4q5Eota01mDRyvih4alKyA/Lg90kF49nlHXJEX UZ50V5JoCAJD9H1/1YrV0jzcNzs7DhyeT2Hn6OQV0MSI0X0jpqWOUWZQm7M7+SS0 l40kzzChLWk01xXrfW5qFtm/B836geGt+xcDJGlHOQqB9R0Y9+8fhwC1Ea/ueco9 TWa63ADvCLXBupQz44EDMZsQBEQFhxJNTbz3bZaXg6Cxu5aHesP2a1fcyzHmpFUn ObEORvrm/5v5TIdwwS1MIoVxd7MCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPsfOJvE9cbfsPCsUcFuaspH+cAqMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzAyOTEzZmExLTMzYWUtNGUzMy1iYmUyLTgxYmQ5ZjAzYzg0Yi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wMjkxM2Zh MS0zM2FlLTRlMzMtYmJlMi04MWJkOWYwM2M4NGIvMC9GQjFGMzg5QkM0RjVDNkRG QjBGMEFDNTFDMTZFNkFDQTQ3RjlDMDJBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ5/KMA0GCSqGSIb3DQEBCwUAA4IBAQAeFGhJ85lICzNUUbl0jVCRKeMs09CQ hf+k1e5+u1fHK1EOI6iVM+wNa5zpukN+6LdaRCZfhYNtFxO/m1qVLStGyiydRCbC iwAx+pUXE4IYKUAm+cSldzdIyO/Im+H+GcHz2YUP91Ge83BsQHnkyx4MxSJ9TpAv Ug5onpH6tGJ7PKZha/40EvUkw8Y+gDXyCa+RFQtyNP0Mtpc1GnglhkMPjrwmITsc hb1eSPXFS5jgfSiPlkxFatiUhekYVS5OhaDW+s4W/eWKEEWbAGjctBJ9NQG9GYby hOhIU7GRdKEgcceHPbaUgedxbJXunIDLGN3ZKg43jrsS/e1nzB1qOjBc -----END CERTIFICATE-----Generated at Tue May 12 22:10:11 2026 by rpki-client