$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FBA3638DA562505698B924E173281E46359B1617.cer File: FBA3638DA562505698B924E173281E46359B1617.cer (raw, json) Hash identifier: XbthdZ0r3ABg347QGnmzVI5ekWZTYhw9rJNehx1b4Tw= Subject key identifier: FB:A3:63:8D:A5:62:50:56:98:B9:24:E1:73:28:1E:46:35:9B:16:17 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6079DBB7B8FAE3561E8220446AC1AE4084E385AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:59:35 +0000 Certificate not after: Sun 02 May 2027 02:04:35 +0000 Subordinate resources: IP: 103.164.58.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:79:db:b7:b8:fa:e3:56:1e:82:20:44:6a:c1:ae:40:84:e3:85:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:59:35 2026 GMT Not After : May 2 02:04:35 2027 GMT Subject: CN=FBA3638DA562505698B924E173281E46359B1617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9b:b9:f9:32:d4:77:0f:2f:91:38:8e:ca:0e: e9:f3:60:73:34:b0:d3:9b:33:54:dd:8f:e2:5f:c6: a0:2a:12:65:f7:5a:aa:e6:ab:25:b0:02:13:f6:46: ac:98:4a:ad:80:5a:1a:84:cd:4e:63:c8:3a:b8:3c: 48:62:ea:35:f7:90:7b:0e:e2:30:a4:4d:16:bc:da: 9d:72:08:2e:4f:43:50:ad:6c:92:f3:35:75:2c:71: 4c:92:c1:33:da:36:62:13:2f:a1:54:38:96:7c:cc: f9:bb:38:1e:54:e8:71:e4:74:94:60:40:a0:0c:72: 3a:d1:32:11:fd:fa:7a:cd:d7:fb:9b:82:05:2e:80: c0:54:0f:f3:aa:7d:e5:50:96:7e:81:8a:3a:64:4c: 7a:9a:10:73:2b:be:2d:33:dc:00:bd:83:d2:23:d2: 54:b1:2b:69:eb:b8:a2:19:3c:9c:e6:65:4c:2e:7d: af:64:6c:ff:47:3b:9c:92:52:d6:51:46:f0:41:bd: d0:26:ef:02:68:c1:21:bd:60:f2:02:66:46:71:5d: c5:d0:44:f7:93:73:14:fd:ea:e0:c3:36:18:f7:e9: d9:a1:0d:61:19:85:c8:dd:1f:10:9b:88:97:25:6f: 09:8e:65:9c:55:2b:dc:be:ca:51:6a:06:5e:4b:81: ca:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:A3:63:8D:A5:62:50:56:98:B9:24:E1:73:28:1E:46:35:9B:16:17 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/FBA3638DA562505698B924E173281E46359B1617.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.58.0/23 Signature Algorithm: sha256WithRSAEncryption 92:73:f9:e6:3b:d1:11:58:ff:a5:f3:16:e2:7b:3d:dd:ea:86: e7:a4:c2:74:81:42:1a:f7:3b:bd:bd:f9:3a:de:ae:3d:46:fc: b1:c6:44:8f:34:b9:20:72:fa:6d:a0:ba:14:c3:b3:06:8d:42: 6e:1e:13:a2:15:7c:2f:0c:f3:e7:54:38:cc:ac:35:af:e4:33: 5c:fc:a4:c9:4a:7f:e7:76:81:c7:1b:79:3d:54:b3:06:4d:d0: 73:15:ad:f1:43:08:7e:ff:d9:00:12:55:66:9d:a1:dd:a8:06: a8:1f:75:51:64:c3:5d:27:2c:bf:35:16:2c:50:92:09:ab:00: 56:c8:fa:b9:85:38:39:95:52:bd:04:1c:d9:58:6d:6a:9f:fb: fe:9c:fb:d6:fa:e9:06:aa:2f:c5:56:9f:be:a3:5c:49:d9:da: ec:ae:de:43:9a:b1:e8:8a:29:6f:fd:ed:50:1a:c0:b8:25:7d: 1b:0c:63:e1:62:cf:53:e6:38:77:b5:c1:24:83:0a:f3:53:58: 7e:e7:0f:91:2c:53:fa:22:59:a8:95:ba:8e:fd:3f:ca:52:1b: 93:e7:83:91:12:f0:b2:fd:30:99:25:96:88:ac:82:54:f9:fc: 77:80:c0:00:c9:42:67:80:c0:ef:98:87:d8:51:02:cf:88:97: d9:77:98:2a -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUYHnbt7j641YegiBEasGuQITjhaowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTkzNVoX DTI3MDUwMjAyMDQzNVowMzExMC8GA1UEAxMoRkJBMzYzOERBNTYyNTA1Njk4Qjky NEUxNzMyODFFNDYzNTlCMTYxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMibufky1HcPL5E4jsoO6fNgczSw05szVN2P4l/GoCoSZfdaquarJbACE/ZG rJhKrYBaGoTNTmPIOrg8SGLqNfeQew7iMKRNFrzanXIILk9DUK1skvM1dSxxTJLB M9o2YhMvoVQ4lnzM+bs4HlToceR0lGBAoAxyOtEyEf36es3X+5uCBS6AwFQP86p9 5VCWfoGKOmRMepoQcyu+LTPcAL2D0iPSVLEraeu4ohk8nOZlTC59r2Rs/0c7nJJS 1lFG8EG90CbvAmjBIb1g8gJmRnFdxdBE95NzFP3q4MM2GPfp2aENYRmFyN0fEJuI lyVvCY5lnFUr3L7KUWoGXkuBylECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPujY42lYlBWmLkk4XMoHkY1mxYXMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q1MDFjZGY5LTUyZTEtNGM5OC05YWIzLWFmYjcwZmFjMzc3Yy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kNTAxY2Rm OS01MmUxLTRjOTgtOWFiMy1hZmI3MGZhYzM3N2MvMC9GQkEzNjM4REE1NjI1MDU2 OThCOTI0RTE3MzI4MUU0NjM1OUIxNjE3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6Q6MA0GCSqGSIb3DQEBCwUAA4IBAQCSc/nmO9ERWP+l8xbiez3d6obnpMJ0 gUIa9zu9vfk63q49RvyxxkSPNLkgcvptoLoUw7MGjUJuHhOiFXwvDPPnVDjMrDWv 5DNc/KTJSn/ndoHHG3k9VLMGTdBzFa3xQwh+/9kAElVmnaHdqAaoH3VRZMNdJyy/ NRYsUJIJqwBWyPq5hTg5lVK9BBzZWG1qn/v+nPvW+ukGqi/FVp++o1xJ2drsrt5D mrHoiilv/e1QGsC4JX0bDGPhYs9T5jh3tcEkgwrzU1h+5w+RLFP6IlmolbqO/T/K UhuT54OREvCy/TCZJZaIrIJU+fx3gMAAyUJngMDvmIfYUQLPiJfZd5gq -----END CERTIFICATE-----Generated at Tue May 12 22:16:05 2026 by rpki-client