$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.cer File: FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.cer (raw, json) Hash identifier: yHYD57AEfJkdDf+XmGUN6kVQdWD8ncotAVJTGnUY6Bc= Subject key identifier: FB:3D:49:EC:18:2C:4A:99:CC:23:28:BF:1C:D3:AB:DA:B7:E2:7A:74 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 245C17A37EDC4E8A56F7ADBB42163EF86957203E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:13:46 +0000 Certificate not after: Sun 02 May 2027 00:18:46 +0000 Subordinate resources: IP: 103.150.158.0/24 IP: 2001:df3:7d80::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:5c:17:a3:7e:dc:4e:8a:56:f7:ad:bb:42:16:3e:f8:69:57:20:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:13:46 2026 GMT Not After : May 2 00:18:46 2027 GMT Subject: CN=FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a9:d0:39:a3:e6:c9:41:e6:45:15:f0:cb:b0: 38:28:77:a6:7f:3d:bf:4b:45:79:69:0d:82:d1:cc: 0e:3f:35:a6:fb:12:d3:db:70:73:ef:53:f2:7a:ed: e8:9c:4b:1e:e5:ec:84:d9:2d:65:d4:6f:c3:4c:d8: 83:89:a4:9d:4e:92:c0:f6:1d:f2:50:4c:49:28:58: c3:b7:cb:48:a4:ae:e9:cd:f0:cb:93:30:07:03:1b: 81:76:d7:a9:40:62:cd:00:dd:1b:3b:d0:63:bf:a1: ae:4b:3e:a9:0e:ac:7a:b6:5f:36:22:99:f7:a8:a3: 4a:a0:21:34:31:1e:f3:a8:ec:7f:fd:4a:9a:f1:02: 43:a4:c2:bc:3a:14:fd:80:f4:e7:2f:d4:1d:00:6e: 46:e4:73:d3:ff:20:08:04:31:06:98:19:66:66:3b: b7:bf:8b:f7:35:d6:7b:06:84:0f:f9:20:e6:3c:bb: 8a:37:8b:cf:42:21:7c:ea:dc:97:68:62:56:92:5d: 61:8d:8c:8d:68:dc:1e:65:db:f3:a5:a5:3c:15:05: 97:09:10:ee:58:03:ce:23:c8:3b:56:32:69:67:6d: a1:23:43:29:8f:5e:80:37:45:59:d0:1d:15:60:d9: 9e:e7:8c:9d:f7:fb:94:e6:83:af:76:ec:41:d0:f3: 3b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:3D:49:EC:18:2C:4A:99:CC:23:28:BF:1C:D3:AB:DA:B7:E2:7A:74 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/FB3D49EC182C4A99CC2328BF1CD3ABDAB7E27A74.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.158.0/24 IPv6: 2001:df3:7d80::/48 Signature Algorithm: sha256WithRSAEncryption 32:39:80:93:b2:cc:c9:31:88:08:76:67:b3:74:6f:6a:92:11: dd:49:2e:2b:9b:c5:2f:5f:2e:91:d2:c2:c6:a3:60:db:fb:9a: 80:2f:10:8c:ad:24:b4:53:3e:3a:78:ef:33:03:38:d0:db:33: e6:a4:17:e7:35:57:1c:0e:1a:6a:a2:b3:6e:f7:c9:45:bb:07: 25:38:a7:93:76:e6:33:90:5b:26:16:69:b5:2a:ed:ac:ff:0f: 0f:b6:3f:aa:33:4f:9e:1a:2a:6e:55:bd:e1:b1:de:1f:dd:ae: 86:6b:04:1c:1c:f8:b7:33:58:2f:0c:c3:22:24:9a:68:f5:4c: 67:e5:02:56:8a:e9:87:e2:27:92:b3:12:dc:3c:db:ef:54:69: 3f:61:f2:3d:b7:28:54:96:a3:d6:b5:3d:24:72:38:0f:24:75: 79:a8:90:bd:6a:58:03:36:c4:a5:a0:da:7e:23:78:82:e8:3f: 66:df:be:bd:b7:94:38:64:92:93:fe:c0:f8:2d:d4:d3:9b:d6: 33:30:a1:9f:b6:71:ae:d9:d6:ae:20:f6:8f:8d:fd:20:63:0c: af:35:8a:ca:ef:d4:91:7a:5d:31:50:ff:39:fd:f8:5d:57:c6: 70:2f:e3:e5:97:b3:68:08:7a:01:1e:58:b9:49:d3:5f:07:40: 56:d6:4b:7f -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUJFwXo37cTopW9627QhY++GlXID4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTM0NloX DTI3MDUwMjAwMTg0NlowMzExMC8GA1UEAxMoRkIzRDQ5RUMxODJDNEE5OUNDMjMy OEJGMUNEM0FCREFCN0UyN0E3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMmp0Dmj5slB5kUV8MuwOCh3pn89v0tFeWkNgtHMDj81pvsS09twc+9T8nrt 6JxLHuXshNktZdRvw0zYg4mknU6SwPYd8lBMSShYw7fLSKSu6c3wy5MwBwMbgXbX qUBizQDdGzvQY7+hrks+qQ6serZfNiKZ96ijSqAhNDEe86jsf/1KmvECQ6TCvDoU /YD05y/UHQBuRuRz0/8gCAQxBpgZZmY7t7+L9zXWewaED/kg5jy7ijeLz0IhfOrc l2hiVpJdYY2MjWjcHmXb86WlPBUFlwkQ7lgDziPIO1YyaWdtoSNDKY9egDdFWdAd FWDZnueMnff7lOaDr3bsQdDzO80CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPs9SewYLEqZzCMovxzTq9q34np0MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzMzNjBmMDc4LThhMjAtNDhkMS04MmI4LWUxZjUwYTE1NTIwMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zMzYwZjA3 OC04YTIwLTQ4ZDEtODJiOC1lMWY1MGExNTUyMDEvMC9GQjNENDlFQzE4MkM0QTk5 Q0MyMzI4QkYxQ0QzQUJEQUI3RTI3QTc0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ5aeMA8EAgACMAkDBwAgAQ3zfYAwDQYJKoZIhvcNAQELBQADggEBADI5gJOy zMkxiAh2Z7N0b2qSEd1JLiubxS9fLpHSwsajYNv7moAvEIytJLRTPjp47zMDONDb M+akF+c1VxwOGmqis273yUW7ByU4p5N25jOQWyYWabUq7az/Dw+2P6ozT54aKm5V veGx3h/droZrBBwc+LczWC8MwyIkmmj1TGflAlaK6YfiJ5KzEtw82+9UaT9h8j23 KFSWo9a1PSRyOA8kdXmokL1qWAM2xKWg2n4jeILoP2bfvr23lDhkkpP+wPgt1NOb 1jMwoZ+2ca7Z1q4g9o+N/SBjDK81isrv1JF6XTFQ/zn9+F1XxnAv4+WXs2gIegEe WLlJ018HQFbWS38= -----END CERTIFICATE-----Generated at Tue May 12 22:10:47 2026 by rpki-client