$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer File: FC71D462316F303751AE0EE0172940EFF0E4B3E4.cer (raw, json) Hash identifier: P1sZGg6GuBnO1s/eHWAzaWfHaTY8YAoyohvkTZzT1G0= Subject key identifier: FC:71:D4:62:31:6F:30:37:51:AE:0E:E0:17:29:40:EF:F0:E4:B3:E4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 69979EA873E25FCFDE94179431FF8357D5BD0C92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:46:20 +0000 Certificate not after: Sun 02 May 2027 02:51:20 +0000 Subordinate resources: IP: 103.8.78.0/23 IP: 103.20.166.0/23 IP: 2001:df0:40e::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:97:9e:a8:73:e2:5f:cf:de:94:17:94:31:ff:83:57:d5:bd:0c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:46:20 2026 GMT Not After : May 2 02:51:20 2027 GMT Subject: CN=FC71D462316F303751AE0EE0172940EFF0E4B3E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:24:a7:9e:f6:df:a2:5e:1b:9a:a7:85:59:a6: ff:0b:1f:86:05:78:62:86:a7:21:2f:77:db:f0:fd: 42:1a:01:48:7a:9c:d3:ba:93:03:c1:ac:eb:95:c7: 0f:3f:b0:c1:3f:3b:f5:34:39:57:c6:68:cc:01:04: e2:ef:03:d0:de:76:3a:07:0e:a6:72:29:e4:f2:88: 5d:8b:65:bb:55:3e:19:1d:15:79:5b:aa:4d:f8:70: 6a:98:9b:60:d8:14:dd:c3:77:98:fa:b1:a7:8b:76: ef:d5:db:39:11:dc:e4:fc:12:6c:fe:d6:b9:42:1f: 23:10:69:7d:ae:a6:4b:0a:02:ec:91:17:8a:f3:21: 70:14:9a:4a:6b:91:be:5e:29:13:d3:dc:9e:b8:31: c8:9e:7a:f1:58:90:a6:2a:73:1e:a5:85:1e:59:9c: d0:82:50:17:33:0d:be:57:42:dc:42:b1:18:9a:e9: 3b:0a:f7:2c:3a:c0:a4:8d:08:17:10:4c:5d:16:da: e5:50:fc:ac:1d:30:b1:9a:ec:3a:c0:da:0e:a0:3e: 15:c6:fa:a8:2b:98:82:73:bc:c8:9e:34:36:37:2b: 99:d8:85:28:35:43:7c:6d:7c:49:a8:53:32:c6:24: 90:bc:47:32:f0:0f:81:70:cc:a9:3b:ea:2a:bb:5c: 41:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FC:71:D4:62:31:6F:30:37:51:AE:0E:E0:17:29:40:EF:F0:E4:B3:E4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/FC71D462316F303751AE0EE0172940EFF0E4B3E4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.8.78.0/23 103.20.166.0/23 IPv6: 2001:df0:40e::/48 Signature Algorithm: sha256WithRSAEncryption 0a:32:a9:5c:f7:6f:70:a5:ea:33:8e:3b:50:c1:9f:19:31:ad: bf:34:78:28:3a:d4:00:42:55:67:3f:4d:2c:4e:2c:47:99:ae: 84:30:0b:c0:d1:5a:37:8a:50:cb:97:ab:cd:bc:45:e6:e4:a5: 1e:22:4c:4d:9d:a0:da:5e:90:e0:76:ea:d6:64:05:eb:e1:50: 60:d3:60:f6:77:a5:70:0b:14:b2:6f:86:ef:49:b9:ab:71:b2: e0:77:49:63:de:35:2f:98:cb:0a:f4:df:e8:6c:d1:0e:e2:d6: 8d:9d:5b:43:eb:08:f1:92:07:c2:58:f8:b5:e5:5b:65:98:77: fd:84:08:e5:cf:d9:88:e9:56:b9:dd:8a:e3:3d:81:2d:dd:6e: 30:d5:73:40:54:78:08:9e:b3:8c:c0:84:f3:40:d9:3b:f2:48: 90:8d:d4:ab:9a:10:42:64:c5:0a:4b:ee:62:1b:80:e7:a1:aa: d7:84:34:ac:2a:50:01:70:95:30:e5:63:60:88:67:8a:31:ba: 8d:42:2a:d5:c8:d7:37:1d:36:65:d1:9b:fd:c2:d2:d8:47:aa: 98:fa:08:ce:74:b7:5b:f0:90:1b:53:37:d8:24:54:84:58:42: 35:0e:8e:cb:2f:d8:ed:18:82:60:96:7a:54:0e:20:89:e8:94: d4:5e:34:dc -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUaZeeqHPiX8/elBeUMf+DV9W9DJIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyNDYyMFoX DTI3MDUwMjAyNTEyMFowMzExMC8GA1UEAxMoRkM3MUQ0NjIzMTZGMzAzNzUxQUUw RUUwMTcyOTQwRUZGMEU0QjNFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMckp57236JeG5qnhVmm/wsfhgV4YoanIS932/D9QhoBSHqc07qTA8Gs65XH Dz+wwT879TQ5V8ZozAEE4u8D0N52OgcOpnIp5PKIXYtlu1U+GR0VeVuqTfhwapib YNgU3cN3mPqxp4t279XbORHc5PwSbP7WuUIfIxBpfa6mSwoC7JEXivMhcBSaSmuR vl4pE9PcnrgxyJ568ViQpipzHqWFHlmc0IJQFzMNvldC3EKxGJrpOwr3LDrApI0I FxBMXRba5VD8rB0wsZrsOsDaDqA+Fcb6qCuYgnO8yJ40NjcrmdiFKDVDfG18SahT MsYkkLxHMvAPgXDMqTvqKrtcQU8CAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPxx1GIxbzA3Ua4O4BcpQO/w5LPkMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ZkMGUwZGVhLTVmOWItNDI1Yy04MmNlLTMwYTg2NTAwN2MzNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mZDBlMGRl YS01ZjliLTQyNWMtODJjZS0zMGE4NjUwMDdjMzUvMC9GQzcxRDQ2MjMxNkYzMDM3 NTFBRTBFRTAxNzI5NDBFRkYwRTRCM0U0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQBZwhOAwQBZxSmMA8EAgACMAkDBwAgAQ3wBA4wDQYJKoZIhvcNAQELBQADggEB AAoyqVz3b3Cl6jOOO1DBnxkxrb80eCg61ABCVWc/TSxOLEeZroQwC8DRWjeKUMuX q828RebkpR4iTE2doNpekOB26tZkBevhUGDTYPZ3pXALFLJvhu9JuatxsuB3SWPe NS+Yywr03+hs0Q7i1o2dW0PrCPGSB8JY+LXlW2WYd/2ECOXP2YjpVrndiuM9gS3d bjDVc0BUeAies4zAhPNA2TvySJCN1KuaEEJkxQpL7mIbgOehqteENKwqUAFwlTDl Y2CIZ4oxuo1CKtXI1zcdNmXRm/3C0thHqpj6CM50t1vwkBtTN9gkVIRYQjUOjssv 2O0YgmCWelQOIInolNReNNw= -----END CERTIFICATE-----Generated at Tue May 12 22:03:36 2026 by rpki-client