$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.cer File: FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.cer (raw, json) Hash identifier: OICLcjfCZ+ylW+LhariTeYKN/wW9zmNt6xbg4mjbGpw= Subject key identifier: FC:04:C1:BC:CF:AA:0B:B2:1D:67:E6:CC:B1:CC:81:84:EF:56:E2:F8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 686B3DA7AE771B7E736445A15B36B95552DF60C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:30:25 +0000 Certificate not after: Sun 02 May 2027 01:35:25 +0000 Subordinate resources: IP: 103.107.206.0/24 IP: 103.158.130.0/24 IP: 2001:df5:5080::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:6b:3d:a7:ae:77:1b:7e:73:64:45:a1:5b:36:b9:55:52:df:60:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:30:25 2026 GMT Not After : May 2 01:35:25 2027 GMT Subject: CN=FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1c:6e:7f:5f:d0:6e:ea:96:b9:0b:fa:82:c2: f5:26:87:92:52:c3:14:7c:43:88:fe:64:93:e3:5a: 04:2c:e9:45:df:c1:d8:46:56:a2:20:7f:fd:9f:01: 8c:07:63:82:48:75:dd:9d:9b:8c:95:fc:62:ff:f5: 3b:7d:8b:65:d8:11:66:c1:b0:0d:14:22:04:86:c4: e1:a4:85:ed:77:4a:39:65:c3:30:59:9d:71:4a:bb: 41:2c:f8:00:42:d3:7f:28:40:b9:ef:07:15:55:fa: 88:9a:83:76:ce:ad:79:ef:b8:dc:e5:6e:97:67:7f: c3:8c:ea:7e:7b:c5:39:f5:64:43:e2:bb:12:59:cf: 68:5e:7b:0e:5d:41:48:2d:1a:6d:f6:5d:7c:e5:f9: 3c:02:b3:16:ff:73:7f:b7:49:07:17:45:33:0c:48: 70:24:24:52:bc:54:aa:30:5f:59:d6:4e:a8:d7:1a: c4:d7:c0:0b:31:d8:81:f3:44:72:d2:2d:24:8c:23: 39:52:b7:1b:8c:fb:9a:44:40:ae:1d:eb:b9:55:28: 23:02:e8:3c:91:ae:3b:80:5a:b2:44:54:72:25:d2: 6a:42:a5:43:dd:09:27:a3:17:5e:0e:ca:81:af:3a: dc:8c:1c:fe:05:ef:44:bc:68:c6:bf:60:4c:1d:5a: bc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FC:04:C1:BC:CF:AA:0B:B2:1D:67:E6:CC:B1:CC:81:84:EF:56:E2:F8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/FC04C1BCCFAA0BB21D67E6CCB1CC8184EF56E2F8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.107.206.0/24 103.158.130.0/24 IPv6: 2001:df5:5080::/48 Signature Algorithm: sha256WithRSAEncryption 9d:3c:e7:81:c1:e8:3c:fc:b3:40:87:93:27:f4:97:ec:fb:06: dc:57:04:db:3c:65:0b:38:90:86:25:6f:fd:14:db:2e:97:bb: fc:3c:28:27:32:ff:f8:bd:cd:51:97:b1:51:44:6f:9a:b7:49: d5:a4:e6:19:e8:cb:b0:49:ec:8f:f4:13:71:aa:8f:50:89:f3: 46:15:fa:cc:79:20:72:91:7f:3f:2a:53:a0:54:24:c2:32:5f: 2b:72:d2:53:41:d0:90:89:9d:1a:8b:14:23:20:71:e0:ba:48: 97:0e:91:d3:c7:aa:1e:e1:67:cb:f5:f8:89:ef:6d:84:04:7c: d9:41:71:76:e1:84:f8:d4:eb:58:fc:fb:18:a1:e9:5d:34:1e: ae:51:eb:29:70:4f:4b:5e:eb:8d:0b:57:a9:75:c5:ed:b1:13: 33:09:28:34:11:b0:ba:6c:4e:4b:c6:1b:8f:b8:e5:74:1c:81: e2:5a:e9:78:80:9f:ad:e3:44:34:93:aa:08:86:c3:60:e4:bb: d5:19:bc:47:47:54:c4:8d:21:ff:00:f9:66:af:fa:bd:a1:b8: a9:4c:87:70:40:47:3f:bc:d6:95:c7:6d:bd:7f:fe:17:e0:9e: 3e:29:5c:24:4d:99:44:6d:a3:e6:f0:dc:ad:d9:95:ab:95:13: fe:11:f0:25 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUaGs9p653G35zZEWhWza5VVLfYMcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzAyNVoX DTI3MDUwMjAxMzUyNVowMzExMC8GA1UEAxMoRkMwNEMxQkNDRkFBMEJCMjFENjdF NkNDQjFDQzgxODRFRjU2RTJGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANocbn9f0G7qlrkL+oLC9SaHklLDFHxDiP5kk+NaBCzpRd/B2EZWoiB//Z8B jAdjgkh13Z2bjJX8Yv/1O32LZdgRZsGwDRQiBIbE4aSF7XdKOWXDMFmdcUq7QSz4 AELTfyhAue8HFVX6iJqDds6tee+43OVul2d/w4zqfnvFOfVkQ+K7ElnPaF57Dl1B SC0abfZdfOX5PAKzFv9zf7dJBxdFMwxIcCQkUrxUqjBfWdZOqNcaxNfACzHYgfNE ctItJIwjOVK3G4z7mkRArh3ruVUoIwLoPJGuO4BaskRUciXSakKlQ90JJ6MXXg7K ga863Iwc/gXvRLxoxr9gTB1avKMCAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPwEwbzPqguyHWfmzLHMgYTvVuL4MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E1ZGVjYTgyLTg5YWItNDU4Mi04ZTgyLThlYzhhNTFmZWM0Mi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hNWRlY2E4 Mi04OWFiLTQ1ODItOGU4Mi04ZWM4YTUxZmVjNDIvMC9GQzA0QzFCQ0NGQUEwQkIy MUQ2N0U2Q0NCMUNDODE4NEVGNTZFMkY4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQAZ2vOAwQAZ56CMA8EAgACMAkDBwAgAQ31UIAwDQYJKoZIhvcNAQELBQADggEB AJ0854HB6Dz8s0CHkyf0l+z7BtxXBNs8ZQs4kIYlb/0U2y6Xu/w8KCcy//i9zVGX sVFEb5q3SdWk5hnoy7BJ7I/0E3Gqj1CJ80YV+sx5IHKRfz8qU6BUJMIyXyty0lNB 0JCJnRqLFCMgceC6SJcOkdPHqh7hZ8v1+InvbYQEfNlBcXbhhPjU61j8+xih6V00 Hq5R6ylwT0te640LV6l1xe2xEzMJKDQRsLpsTkvGG4+45XQcgeJa6XiAn63jRDST qgiGw2Dku9UZvEdHVMSNIf8A+Wav+r2huKlMh3BARz+81pXHbb1//hfgnj4pXCRN mURto+bw3K3ZlauVE/4R8CU= -----END CERTIFICATE-----Generated at Tue May 12 22:16:57 2026 by rpki-client