$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer File: FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer (raw, json) Hash identifier: v3ncuud3vP34CYrXD04CYHc7YO7LY2wzkIQl6imT7x8= Subject key identifier: FC:7B:C0:6A:FF:64:0D:4C:BB:0F:95:A3:77:1E:C6:23:4F:CF:3E:D0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 27446EB72A319F4C0778D4DC412CCC8651FCCA10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:16:16 +0000 Certificate not after: Sun 02 May 2027 02:21:16 +0000 Subordinate resources: IP: 103.94.8.0/22 IP: 180.178.92.0/22 IP: 2401:3340::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:44:6e:b7:2a:31:9f:4c:07:78:d4:dc:41:2c:cc:86:51:fc:ca:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:16:16 2026 GMT Not After : May 2 02:21:16 2027 GMT Subject: CN=FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:69:9c:09:83:17:24:3b:3a:40:67:96:98:b1: df:9f:e0:f1:5b:85:55:05:1c:38:de:19:52:0b:fd: 8b:4f:64:7b:83:5b:52:cc:0c:79:30:3d:be:b9:54: ee:0e:72:11:04:2e:69:82:76:a3:ef:20:b7:d5:25: 9c:93:0f:7f:09:65:7e:47:08:23:29:7b:5e:17:44: bd:08:f9:ec:8d:81:59:58:8a:dc:04:7a:f9:83:68: 46:04:4f:eb:4c:38:97:6d:ad:6e:75:ee:d7:6d:ca: 23:ad:76:9b:d8:4d:03:21:41:89:a5:0e:06:82:44: 37:30:47:60:c2:d2:07:d7:0f:7d:21:67:e1:a2:06: 75:37:b9:90:6a:71:92:9b:77:e9:0c:a6:c5:41:af: 17:d8:bd:42:8e:03:d8:05:92:b7:39:5c:bf:51:cf: 2c:7f:43:15:3d:95:9b:1d:3e:bd:0f:ba:7c:cd:c1: 1a:87:47:39:7a:0f:21:ba:61:6f:59:3c:39:63:1a: 6c:92:0a:8e:03:54:27:57:ee:fa:66:2a:35:40:04: 3e:88:33:c3:85:e9:33:2c:93:53:e6:ed:c0:9c:58: e1:45:9e:90:51:cf:e2:ce:f4:72:3c:53:4d:5f:34: f0:76:e2:6d:9d:9c:91:9b:ab:b9:2c:b2:22:ca:41: 00:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FC:7B:C0:6A:FF:64:0D:4C:BB:0F:95:A3:77:1E:C6:23:4F:CF:3E:D0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.94.8.0/22 180.178.92.0/22 IPv6: 2401:3340::/32 Signature Algorithm: sha256WithRSAEncryption 89:07:52:82:73:32:6d:27:f8:78:9e:e9:61:21:bd:b9:83:bc: 46:98:a2:7f:97:1d:fc:54:eb:80:95:21:49:98:66:2f:87:21: bf:a1:93:f7:cc:e3:49:ef:c6:f4:25:51:51:00:c2:5c:f7:a5: 0c:50:e2:9e:52:e5:a4:40:36:c6:63:1e:b1:39:9b:f3:36:b7: 8f:5d:3a:97:b5:fd:66:de:bd:19:f3:5a:45:b0:6b:91:67:df: 01:8a:65:7b:cc:5a:7a:e8:e8:91:a4:b0:cc:49:c7:d8:e9:32: 52:b1:09:e2:7e:57:d3:c5:3f:3c:9c:5f:6a:9f:06:fe:b3:2a: a3:e5:18:0f:ff:67:e6:dd:db:88:53:40:fc:bf:8f:a5:7b:30: 19:7f:be:ed:03:10:ce:d6:6e:4e:f9:b9:7d:ba:2d:a4:0e:d8: 40:3b:46:a4:55:59:77:44:c3:1f:cd:f4:93:e9:33:49:ef:2d: 31:46:7d:05:1e:da:38:5c:e2:df:10:4c:d1:4d:20:20:5d:64: 4b:48:af:9d:de:cc:d4:d4:1e:10:54:21:da:97:da:09:8d:a8: 41:20:94:b3:2f:12:c0:f5:d2:48:7b:79:50:e2:ce:87:6c:32: 9e:e9:ea:9c:09:7d:c5:07:80:58:40:5c:6d:1b:1d:d0:09:a1: 35:82:81:e9 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUJ0Rutyoxn0wHeNTcQSzMhlH8yhAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTYxNloX DTI3MDUwMjAyMjExNlowMzExMC8GA1UEAxMoRkM3QkMwNkFGRjY0MEQ0Q0JCMEY5 NUEzNzcxRUM2MjM0RkNGM0VEMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN9pnAmDFyQ7OkBnlpix35/g8VuFVQUcON4ZUgv9i09ke4NbUswMeTA9vrlU 7g5yEQQuaYJ2o+8gt9UlnJMPfwllfkcIIyl7XhdEvQj57I2BWViK3AR6+YNoRgRP 60w4l22tbnXu123KI612m9hNAyFBiaUOBoJENzBHYMLSB9cPfSFn4aIGdTe5kGpx kpt36QymxUGvF9i9Qo4D2AWStzlcv1HPLH9DFT2Vmx0+vQ+6fM3BGodHOXoPIbph b1k8OWMabJIKjgNUJ1fu+mYqNUAEPogzw4XpMyyTU+btwJxY4UWekFHP4s70cjxT TV808HbibZ2ckZuruSyyIspBACUCAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPx7wGr/ZA1Muw+Vo3cexiNPzz7QMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2U2MDdkOTI5LTRjYTgtNGY1My1hMjk4LTVlMzNiZTFmODYwNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lNjA3ZDky OS00Y2E4LTRmNTMtYTI5OC01ZTMzYmUxZjg2MDQvMC9GQzdCQzA2QUZGNjQwRDRD QkIwRjk1QTM3NzFFQzYyMzRGQ0YzRUQwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQCZ14IAwQCtLJcMA0EAgACMAcDBQAkATNAMA0GCSqGSIb3DQEBCwUAA4IBAQCJ B1KCczJtJ/h4nulhIb25g7xGmKJ/lx38VOuAlSFJmGYvhyG/oZP3zONJ78b0JVFR AMJc96UMUOKeUuWkQDbGYx6xOZvzNrePXTqXtf1m3r0Z81pFsGuRZ98BimV7zFp6 6OiRpLDMScfY6TJSsQniflfTxT88nF9qnwb+syqj5RgP/2fm3duIU0D8v4+lezAZ f77tAxDO1m5O+bl9ui2kDthAO0akVVl3RMMfzfST6TNJ7y0xRn0FHto4XOLfEEzR TSAgXWRLSK+d3szU1B4QVCHal9oJjahBIJSzLxLA9dJIe3lQ4s6HbDKe6eqcCX3F B4BYQFxtGx3QCaE1goHp -----END CERTIFICATE-----Generated at Tue May 12 22:45:43 2026 by rpki-client