$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FB5CD1159991D5A0305975655EB49929B5029C8B.cer File: FB5CD1159991D5A0305975655EB49929B5029C8B.cer (raw, json) Hash identifier: GjxnzdM/BDjsIVyu/zb10B1DgbH+p25yComyOyS8XTg= Subject key identifier: FB:5C:D1:15:99:91:D5:A0:30:59:75:65:5E:B4:99:29:B5:02:9C:8B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0C1155F700E120100BA98D06BBF404642D478A7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:53:34 +0000 Certificate not after: Sun 02 May 2027 01:58:34 +0000 Subordinate resources: IP: 59.153.24.0/23 IP: 103.229.200.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:11:55:f7:00:e1:20:10:0b:a9:8d:06:bb:f4:04:64:2d:47:8a:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:53:34 2026 GMT Not After : May 2 01:58:34 2027 GMT Subject: CN=FB5CD1159991D5A0305975655EB49929B5029C8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0b:15:d3:6e:a6:06:2c:25:5c:91:eb:59:7c: 43:24:1e:a2:53:5d:73:9a:ae:4e:48:a6:61:1a:0a: 05:c2:29:27:90:4c:cc:ba:82:82:20:73:bb:31:9e: 3d:80:fd:b8:60:35:b0:ec:d1:f1:ce:f0:c1:3c:25: f4:92:2e:f7:21:fc:49:07:0c:b4:33:69:43:7b:a0: c5:54:9f:31:25:46:84:8e:cb:79:86:d2:fa:1e:20: 51:c9:c0:d5:70:df:ba:51:32:00:51:c5:72:ea:e8: e6:ec:aa:49:81:48:ce:f8:df:e5:3b:4d:5c:bc:8e: bf:3b:3e:70:02:d9:02:37:95:95:32:58:e7:d8:71: 76:36:48:47:4f:ab:d3:28:b0:ae:93:45:aa:ad:21: 83:08:17:a0:57:b1:f4:ec:13:e2:ef:8f:09:bd:9e: 1e:e9:be:2a:9c:58:c2:c5:ae:75:d0:b2:40:60:6f: 63:f9:99:9f:1d:3d:8f:f0:27:82:c8:e1:82:a1:46: f2:a4:1e:6d:22:aa:8b:da:66:82:c7:82:72:0c:9e: 5a:1e:03:ff:2d:58:8f:84:0c:80:57:fe:ac:6d:69: a1:39:7c:5d:4a:03:b1:73:ba:ea:36:4a:35:6a:82: 34:36:de:ca:34:0e:d9:c7:e2:9d:85:69:c8:18:cf: 6a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:5C:D1:15:99:91:D5:A0:30:59:75:65:5E:B4:99:29:B5:02:9C:8B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/FB5CD1159991D5A0305975655EB49929B5029C8B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.153.24.0/23 103.229.200.0/23 Signature Algorithm: sha256WithRSAEncryption 01:13:ce:55:65:35:3f:e9:9e:c9:1a:b8:19:64:5a:e7:17:92: 09:b8:cb:bd:a2:10:66:c4:55:9a:e4:3d:f1:de:b6:90:28:9f: da:c4:85:28:df:87:72:fd:ab:3e:84:23:61:01:15:fc:9f:12: 74:74:d6:79:ea:95:7a:36:f5:35:a9:ac:7f:a3:1a:9c:67:74: be:86:66:d6:4f:bb:bf:be:a8:3c:15:95:94:a4:ee:48:f0:0e: 98:fd:b3:a4:72:68:0b:47:9e:99:b9:9a:50:38:98:7c:37:0f: 5c:65:c0:e0:1f:e9:66:f7:50:57:41:61:44:d9:78:3d:62:47: 65:f8:55:b1:6c:0e:03:eb:6b:2d:1c:ad:ff:09:3c:c5:58:df: 4c:bc:c6:65:aa:2c:54:88:b3:5f:30:68:d9:83:ac:b5:8a:3c: 9b:95:ed:d2:ff:31:a7:36:a7:55:ce:ff:40:1a:3a:9f:93:51: e2:c7:56:65:10:c9:42:81:f2:32:bf:91:ea:3c:25:5f:27:30: 1f:c6:9f:9c:b4:67:63:b4:cc:ac:28:7e:f7:2f:29:9d:91:f8: db:4b:ba:2b:92:9e:f8:5e:96:11:4c:48:58:ce:e9:4c:f8:d8: d2:dd:48:10:8d:1b:9d:3f:76:86:b1:fc:47:94:be:a1:4d:ee: b1:66:65:c0 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUDBFV9wDhIBALqY0Gu/QEZC1Hin4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTMzNFoX DTI3MDUwMjAxNTgzNFowMzExMC8GA1UEAxMoRkI1Q0QxMTU5OTkxRDVBMDMwNTk3 NTY1NUVCNDk5MjlCNTAyOUM4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcLFdNupgYsJVyR61l8QyQeolNdc5quTkimYRoKBcIpJ5BMzLqCgiBzuzGe PYD9uGA1sOzR8c7wwTwl9JIu9yH8SQcMtDNpQ3ugxVSfMSVGhI7LeYbS+h4gUcnA 1XDfulEyAFHFcuro5uyqSYFIzvjf5TtNXLyOvzs+cALZAjeVlTJY59hxdjZIR0+r 0yiwrpNFqq0hgwgXoFex9OwT4u+PCb2eHum+KpxYwsWuddCyQGBvY/mZnx09j/An gsjhgqFG8qQebSKqi9pmgseCcgyeWh4D/y1Yj4QMgFf+rG1poTl8XUoDsXO66jZK NWqCNDbeyjQO2cfinYVpyBjPav0CAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPtc0RWZkdWgMFl1ZV60mSm1ApyLMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NhMWYzYjM3LWJkNTQtNDkxMS05MDViLTM2NTQ5NjY4N2M4ZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jYTFmM2Iz Ny1iZDU0LTQ5MTEtOTA1Yi0zNjU0OTY2ODdjOGQvMC9GQjVDRDExNTk5OTFENUEw MzA1OTc1NjU1RUI0OTkyOUI1MDI5QzhCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQBO5kYAwQBZ+XIMA0GCSqGSIb3DQEBCwUAA4IBAQABE85VZTU/6Z7JGrgZZFrn F5IJuMu9ohBmxFWa5D3x3raQKJ/axIUo34dy/as+hCNhARX8nxJ0dNZ56pV6NvU1 qax/oxqcZ3S+hmbWT7u/vqg8FZWUpO5I8A6Y/bOkcmgLR56ZuZpQOJh8Nw9cZcDg H+lm91BXQWFE2Xg9Ykdl+FWxbA4D62stHK3/CTzFWN9MvMZlqixUiLNfMGjZg6y1 ijyble3S/zGnNqdVzv9AGjqfk1Hix1ZlEMlCgfIyv5HqPCVfJzAfxp+ctGdjtMys KH73LymdkfjbS7orkp74XpYRTEhYzulM+NjS3UgQjRudP3aGsfxHlL6hTe6xZmXA -----END CERTIFICATE-----Generated at Tue May 12 22:03:28 2026 by rpki-client