$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.cer File: FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.cer (raw, json) Hash identifier: Ljidpbw6hzZ6rLMDXixXY1XW94IXs30sPPloYgvu8Xw= Subject key identifier: FC:5B:0E:A1:31:FF:60:60:1F:9A:15:E0:3A:CC:27:8C:C7:A2:B8:31 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 37936209312031014D1BB8E74C45C404B250AE37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:22:28 +0000 Certificate not after: Sun 02 May 2027 00:27:28 +0000 Subordinate resources: IP: 103.245.226.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:93:62:09:31:20:31:01:4d:1b:b8:e7:4c:45:c4:04:b2:50:ae:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:22:28 2026 GMT Not After : May 2 00:27:28 2027 GMT Subject: CN=FC5B0EA131FF60601F9A15E03ACC278CC7A2B831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:80:80:a2:24:7d:b1:df:12:a2:fa:7c:35:e7: 98:f5:72:97:3a:7d:41:5e:89:64:1e:b2:75:fd:f0: 63:7e:e5:65:5f:c5:84:75:18:2f:1a:69:76:e9:33: b1:be:b2:be:d5:c3:25:0a:d6:8b:45:0f:07:e4:21: 7f:31:d1:0d:b9:d8:a1:72:2f:c0:90:15:34:3e:9f: 50:cd:87:b9:1b:70:65:05:25:a9:f9:69:54:c3:f1: 04:f2:85:98:b7:58:42:6b:52:26:bf:25:d7:b1:84: 02:ca:3a:18:8b:6f:36:24:fc:20:0c:7e:e4:86:9f: 2b:88:2a:1a:c8:ff:d0:53:26:5f:68:1c:34:46:30: c8:dc:20:bf:0a:11:18:e5:e0:db:2f:86:3a:f4:26: 4a:40:11:7d:30:43:20:96:5e:fe:a6:6a:27:09:84: 6e:75:2c:b8:8f:7c:eb:60:2b:97:f5:f5:f1:c4:e7: 58:ea:8f:34:84:8f:6d:d4:7d:71:e4:9a:df:21:eb: f0:39:03:f4:af:de:1f:52:0d:46:0e:16:ad:86:53: 8a:87:d7:7c:98:db:9c:e8:ff:55:63:1f:6a:6d:e6: fe:4a:e7:62:8d:5d:24:0c:70:af:78:dd:8e:1d:2a: c5:ee:27:f8:4c:61:df:12:7c:11:0e:24:c1:6d:6b: 36:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FC:5B:0E:A1:31:FF:60:60:1F:9A:15:E0:3A:CC:27:8C:C7:A2:B8:31 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/FC5B0EA131FF60601F9A15E03ACC278CC7A2B831.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.245.226.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:91:73:3f:01:17:c5:4c:a0:64:dd:e8:8d:3f:04:26:ce:0b: 80:d4:81:08:ff:bd:f8:30:4b:0b:4a:c1:3d:ef:75:44:49:0f: 8d:4e:a3:70:24:98:b9:8d:d4:41:46:81:6b:5f:2b:5a:17:74: 8a:24:12:1a:00:a8:c9:ef:c8:88:7a:fb:d6:2c:64:ae:24:30: 13:68:cb:60:0b:3c:28:7a:f0:ec:b5:b8:67:12:74:94:0c:21: 2c:02:66:82:09:d8:f3:5f:b2:5a:77:16:f1:4e:46:94:ca:43: 05:9f:38:9d:7b:a7:99:17:ac:3b:e3:08:20:07:7a:b9:10:79: 96:72:38:24:b6:9c:6b:78:c8:54:5d:90:c9:8b:71:07:2c:99: d3:94:f7:47:be:8e:08:c6:36:d4:a9:49:b3:0e:f7:05:15:56: 41:48:39:5b:01:b0:16:8b:5b:e0:df:a9:9a:b2:f3:6e:10:23: cd:04:cc:27:31:ea:c9:2b:10:e1:23:f6:5c:e9:84:2d:18:bd: 99:c8:18:06:f4:79:c8:70:19:73:80:0e:ed:d2:af:1e:1d:a6: 4b:6a:11:9c:8b:7b:87:f4:c7:8b:ea:3c:b0:9f:c9:18:fc:78: 85:95:e6:7b:52:5f:4e:70:9e:ef:bd:8d:f7:b1:46:b4:68:e1: 09:3d:a9:49 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUN5NiCTEgMQFNG7jnTEXEBLJQrjcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjIyOFoX DTI3MDUwMjAwMjcyOFowMzExMC8GA1UEAxMoRkM1QjBFQTEzMUZGNjA2MDFGOUEx NUUwM0FDQzI3OENDN0EyQjgzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOGAgKIkfbHfEqL6fDXnmPVylzp9QV6JZB6ydf3wY37lZV/FhHUYLxppdukz sb6yvtXDJQrWi0UPB+QhfzHRDbnYoXIvwJAVND6fUM2HuRtwZQUlqflpVMPxBPKF mLdYQmtSJr8l17GEAso6GItvNiT8IAx+5IafK4gqGsj/0FMmX2gcNEYwyNwgvwoR GOXg2y+GOvQmSkARfTBDIJZe/qZqJwmEbnUsuI9862Arl/X18cTnWOqPNISPbdR9 ceSa3yHr8DkD9K/eH1INRg4WrYZTiofXfJjbnOj/VWMfam3m/krnYo1dJAxwr3jd jh0qxe4n+Exh3xJ8EQ4kwW1rNtECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPxbDqEx/2BgH5oV4DrMJ4zHorgxMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzNmY2QyYTQyLTkyYjktNDBhNC1hMGJmLTA5YjY1YTMxOGI1ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zZmNkMmE0 Mi05MmI5LTQwYTQtYTBiZi0wOWI2NWEzMThiNWUvMC9GQzVCMEVBMTMxRkY2MDYw MUY5QTE1RTAzQUNDMjc4Q0M3QTJCODMxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ/XiMA0GCSqGSIb3DQEBCwUAA4IBAQB6kXM/ARfFTKBk3eiNPwQmzguA1IEI /734MEsLSsE973VESQ+NTqNwJJi5jdRBRoFrXytaF3SKJBIaAKjJ78iIevvWLGSu JDATaMtgCzwoevDstbhnEnSUDCEsAmaCCdjzX7JadxbxTkaUykMFnzide6eZF6w7 4wggB3q5EHmWcjgktpxreMhUXZDJi3EHLJnTlPdHvo4IxjbUqUmzDvcFFVZBSDlb AbAWi1vg36masvNuECPNBMwnMerJKxDhI/Zc6YQtGL2ZyBgG9HnIcBlzgA7t0q8e HaZLahGci3uH9MeL6jywn8kY/HiFleZ7Ul9OcJ7vvY33sUa0aOEJPalJ -----END CERTIFICATE-----Generated at Tue May 12 22:16:53 2026 by rpki-client