$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FB9B3B1791631B716B38A928B32D781C38B7E74C.cer File: FB9B3B1791631B716B38A928B32D781C38B7E74C.cer (raw, json) Hash identifier: HXYvdbUx69mznIxl/WwugLlaSelRvl2x8mt8UHWZzDM= Subject key identifier: FB:9B:3B:17:91:63:1B:71:6B:38:A9:28:B3:2D:78:1C:38:B7:E7:4C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 65E6DC77C8407CA27E54806F1976AFD0FE7F76BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:22:41 +0000 Certificate not after: Sun 02 May 2027 00:27:41 +0000 Subordinate resources: IP: 103.244.104.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:e6:dc:77:c8:40:7c:a2:7e:54:80:6f:19:76:af:d0:fe:7f:76:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:22:41 2026 GMT Not After : May 2 00:27:41 2027 GMT Subject: CN=FB9B3B1791631B716B38A928B32D781C38B7E74C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0e:a8:9c:85:ad:8d:e7:aa:5d:e9:d8:67:62: a2:06:f7:82:8e:34:76:3e:91:bf:8e:ce:52:c9:c8: c0:15:05:35:e8:fa:fe:be:6b:30:3c:b9:9e:65:5f: da:58:d0:f3:9a:21:e8:3a:42:4a:b5:1d:d1:06:0b: bc:ed:54:fa:ad:ba:c0:bf:c0:04:e1:7d:30:b5:2c: c8:68:23:55:9f:06:37:42:17:e3:f2:29:d6:36:33: 69:93:48:7c:de:b4:93:39:89:96:4a:a0:fa:e6:9c: f4:7e:80:45:67:f8:0e:a8:8c:82:a5:1f:cb:08:60: 68:fd:25:3c:e3:95:33:4b:f2:f2:f7:53:df:00:07: 26:64:36:7e:b2:e9:dd:73:2d:f5:06:04:94:c6:94: 53:b2:d5:a8:c6:78:35:d7:d3:f2:18:79:3a:cf:cc: c6:3f:e8:83:c5:c5:ef:65:39:2d:9c:fc:22:d6:50: ad:82:a9:86:20:93:0b:ac:f9:13:2c:66:a3:da:6c: a4:68:f1:f7:f1:46:7f:b4:1b:4d:3c:48:b4:20:06: ee:76:20:a9:e9:04:76:6f:58:68:c8:fe:c8:fd:21: 59:31:23:de:e3:fc:d7:85:41:b2:db:19:89:9a:8d: 91:14:e5:14:16:ae:a7:76:e2:b2:27:78:3d:84:3a: 1e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:9B:3B:17:91:63:1B:71:6B:38:A9:28:B3:2D:78:1C:38:B7:E7:4C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/FB9B3B1791631B716B38A928B32D781C38B7E74C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.244.104.0/23 Signature Algorithm: sha256WithRSAEncryption 47:91:90:1f:53:23:a1:f6:db:eb:0c:65:c0:16:f1:63:19:54: 4e:97:7d:c5:3b:42:35:60:65:c7:17:d3:78:47:f3:a2:10:c7: da:1d:a5:00:95:8c:3b:0e:74:eb:1a:f9:e1:13:c2:1a:98:d4: bf:82:03:84:a6:af:6e:08:d5:ea:9c:06:29:86:64:68:f6:8f: 61:21:f6:e3:7c:42:ea:55:33:78:06:a1:8b:a5:3c:77:04:1d: 60:5a:44:83:63:dd:bd:c5:a3:3f:79:e6:0d:41:35:bf:09:36: 3f:bd:03:40:8f:67:9f:0b:41:75:6a:87:13:0b:70:54:e2:a1: c1:33:91:31:ee:dc:4a:0f:ba:88:51:49:f8:54:0e:69:d9:3e: c9:07:d5:2d:d9:c2:77:97:08:8b:1d:5e:ac:5f:5a:ed:a7:a6: aa:0f:db:f7:e0:a3:9d:f5:fa:c6:b5:d2:cf:d8:c7:48:9b:c7: 6c:8e:9e:15:d9:98:14:9e:34:49:ca:55:0f:a5:3d:13:c7:24: e2:6a:fb:8f:2b:b4:00:83:cd:ab:03:fe:f6:b9:6c:37:7b:e6: 86:54:5d:37:6f:e5:fd:f3:fa:13:5f:87:f6:c1:5e:28:09:06: 93:ef:ab:9f:a3:ea:38:4c:09:7a:85:ae:ca:5b:75:49:3e:d8: 5b:a3:c3:d6 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUZebcd8hAfKJ+VIBvGXav0P5/dr4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjI0MVoX DTI3MDUwMjAwMjc0MVowMzExMC8GA1UEAxMoRkI5QjNCMTc5MTYzMUI3MTZCMzhB OTI4QjMyRDc4MUMzOEI3RTc0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANUOqJyFrY3nql3p2Gdiogb3go40dj6Rv47OUsnIwBUFNej6/r5rMDy5nmVf 2ljQ85oh6DpCSrUd0QYLvO1U+q26wL/ABOF9MLUsyGgjVZ8GN0IX4/Ip1jYzaZNI fN60kzmJlkqg+uac9H6ARWf4DqiMgqUfywhgaP0lPOOVM0vy8vdT3wAHJmQ2frLp 3XMt9QYElMaUU7LVqMZ4NdfT8hh5Os/Mxj/og8XF72U5LZz8ItZQrYKphiCTC6z5 Eyxmo9pspGjx9/FGf7QbTTxItCAG7nYgqekEdm9YaMj+yP0hWTEj3uP814VBstsZ iZqNkRTlFBaup3bisid4PYQ6Ht8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPubOxeRYxtxazipKLMteBw4t+dMMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQwMjdmYTAyLWU0OWYtNDIxNS04NjJiLTdmYWFlZmQ4YWIzZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80MDI3ZmEw Mi1lNDlmLTQyMTUtODYyYi03ZmFhZWZkOGFiM2UvMC9GQjlCM0IxNzkxNjMxQjcx NkIzOEE5MjhCMzJENzgxQzM4QjdFNzRDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ/RoMA0GCSqGSIb3DQEBCwUAA4IBAQBHkZAfUyOh9tvrDGXAFvFjGVROl33F O0I1YGXHF9N4R/OiEMfaHaUAlYw7DnTrGvnhE8IamNS/ggOEpq9uCNXqnAYphmRo 9o9hIfbjfELqVTN4BqGLpTx3BB1gWkSDY929xaM/eeYNQTW/CTY/vQNAj2efC0F1 aocTC3BU4qHBM5Ex7txKD7qIUUn4VA5p2T7JB9Ut2cJ3lwiLHV6sX1rtp6aqD9v3 4KOd9frGtdLP2MdIm8dsjp4V2ZgUnjRJylUPpT0TxyTiavuPK7QAg82rA/72uWw3 e+aGVF03b+X98/oTX4f2wV4oCQaT76ufo+o4TAl6ha7KW3VJPthbo8PW -----END CERTIFICATE-----Generated at Wed May 13 02:12:19 2026 by rpki-client