$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer File: FC1A394AF4972652D1A91AA14711525172E42585.cer (raw, json) Hash identifier: /gyobqqWQ/vBw+t0XC8I8vVkYgYm0dySt08iZsYcb+8= Subject key identifier: FC:1A:39:4A:F4:97:26:52:D1:A9:1A:A1:47:11:52:51:72:E4:25:85 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 62545956DDD56AA0AB91EBBADDD3869049EADA9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:51:44 +0000 Certificate not after: Sun 02 May 2027 00:56:44 +0000 Subordinate resources: IP: 103.174.232.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:54:59:56:dd:d5:6a:a0:ab:91:eb:ba:dd:d3:86:90:49:ea:da:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:51:44 2026 GMT Not After : May 2 00:56:44 2027 GMT Subject: CN=FC1A394AF4972652D1A91AA14711525172E42585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:17:b5:6a:c6:f7:a6:33:44:f2:2b:93:b6:0a: 12:8c:d4:25:31:6a:57:bb:87:2f:f4:ea:f2:ff:81: 9b:48:9d:34:ac:f4:51:78:b5:5d:0d:9c:a6:4d:ba: 9a:e6:f3:2a:f7:10:d8:71:4a:ac:78:2b:f3:16:53: dc:4f:31:68:ca:1a:db:8f:cc:71:7a:4a:81:56:74: 0b:67:96:d9:bf:87:7b:18:45:ff:65:09:4c:a9:98: f8:04:46:ae:94:b0:18:f1:94:52:09:a7:32:12:07: 0b:03:ab:48:cf:69:9a:aa:01:0b:58:1e:c4:f1:4b: e5:6a:76:bc:7a:e5:eb:72:a5:5b:dc:23:2c:f2:7c: 0a:66:f9:84:e6:51:f4:7e:bc:d4:ca:27:d0:f6:dd: 94:b5:5f:9d:31:ad:5a:47:2a:42:d0:ec:9a:a6:57: a9:6d:db:90:8f:1c:55:c5:e8:33:d6:de:7b:be:e5: 95:8b:a8:62:52:8e:18:5a:c2:7c:56:74:9c:7f:d4: 08:83:fa:39:e3:e6:b1:c9:88:55:88:99:5f:e1:f5: aa:15:d0:7b:ad:b0:b9:ea:1c:9c:9d:64:6a:79:a3: a6:93:a8:24:e0:d2:ff:2f:73:f0:31:81:a8:de:3a: 17:60:7c:c3:e4:e9:64:4b:94:48:e3:93:6a:34:8f: fb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FC:1A:39:4A:F4:97:26:52:D1:A9:1A:A1:47:11:52:51:72:E4:25:85 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.232.0/23 Signature Algorithm: sha256WithRSAEncryption 28:4c:a9:82:55:bd:be:74:57:19:ed:45:65:bc:f3:36:bd:b5: ee:bc:fa:24:7e:7f:c0:60:00:a9:53:33:76:94:5b:57:bf:73: 5b:54:a2:e3:56:11:31:c2:76:5b:5a:5f:a0:a0:e4:52:f8:f6: a4:f9:88:02:3c:d2:c1:f3:0d:6d:3a:32:a7:95:93:40:08:42: 4c:b9:07:01:e9:cc:87:01:7e:fc:e3:04:c8:a9:0f:2a:ed:ad: 9a:56:e9:2e:b5:71:b8:98:8f:fe:4e:0f:c0:4b:f1:1b:2a:c6: db:1d:a8:17:b3:1e:b7:db:0a:4d:22:80:8b:b4:89:3e:d7:b6: ab:91:68:5b:1a:4c:ba:85:98:06:27:d0:7a:1f:9e:fd:10:47: 98:ff:bd:a0:39:2b:b6:45:d0:f1:bd:1b:cf:cb:28:2c:ab:4c: 92:88:5b:c4:be:07:68:66:60:b2:0a:4e:26:70:f2:b5:28:06: 81:f0:a0:43:3b:84:dd:30:c0:36:d0:93:1a:ed:f9:cc:b2:25: 69:18:9a:9f:97:2e:03:f5:0c:0a:e3:a2:59:ff:10:04:22:c7: 91:39:ba:ea:1b:94:47:c3:7f:5c:15:ce:9f:1f:e6:2a:19:77: b0:14:fd:ae:2b:07:8f:43:96:dc:a1:7c:4e:9c:91:0e:23:94: 3e:e7:8f:40 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUYlRZVt3VaqCrkeu63dOGkEnq2p4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTE0NFoX DTI3MDUwMjAwNTY0NFowMzExMC8GA1UEAxMoRkMxQTM5NEFGNDk3MjY1MkQxQTkx QUExNDcxMTUyNTE3MkU0MjU4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYXtWrG96YzRPIrk7YKEozUJTFqV7uHL/Tq8v+Bm0idNKz0UXi1XQ2cpk26 mubzKvcQ2HFKrHgr8xZT3E8xaMoa24/McXpKgVZ0C2eW2b+HexhF/2UJTKmY+ARG rpSwGPGUUgmnMhIHCwOrSM9pmqoBC1gexPFL5Wp2vHrl63KlW9wjLPJ8Cmb5hOZR 9H681Mon0PbdlLVfnTGtWkcqQtDsmqZXqW3bkI8cVcXoM9bee77llYuoYlKOGFrC fFZ0nH/UCIP6OePmscmIVYiZX+H1qhXQe62wueocnJ1kanmjppOoJODS/y9z8DGB qN46F2B8w+TpZEuUSOOTajSP+1UCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPwaOUr0lyZS0akaoUcRUlFy5CWFMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZjYmVhODFkLTg1YWMtNDBhNS1hN2Y1LTNmYTM2MmIxN2JjYi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82Y2JlYTgx ZC04NWFjLTQwYTUtYTdmNS0zZmEzNjJiMTdiY2IvMC9GQzFBMzk0QUY0OTcyNjUy RDFBOTFBQTE0NzExNTI1MTcyRTQyNTg1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ67oMA0GCSqGSIb3DQEBCwUAA4IBAQAoTKmCVb2+dFcZ7UVlvPM2vbXuvPok fn/AYACpUzN2lFtXv3NbVKLjVhExwnZbWl+goORS+Pak+YgCPNLB8w1tOjKnlZNA CEJMuQcB6cyHAX784wTIqQ8q7a2aVukutXG4mI/+Tg/AS/EbKsbbHagXsx632wpN IoCLtIk+17arkWhbGky6hZgGJ9B6H579EEeY/72gOSu2RdDxvRvPyygsq0ySiFvE vgdoZmCyCk4mcPK1KAaB8KBDO4TdMMA20JMa7fnMsiVpGJqfly4D9QwK46JZ/xAE IseRObrqG5RHw39cFc6fH+YqGXewFP2uKwePQ5bcoXxOnJEOI5Q+549A -----END CERTIFICATE-----Generated at Tue May 12 22:33:03 2026 by rpki-client