$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.cer File: FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.cer (raw, json) Hash identifier: +5hdpOEqzFSQZJryK8bzMF2INUKbNXBmnLk++0+U974= Subject key identifier: FC:C1:AF:32:21:DC:C6:24:51:0A:37:AE:7E:0B:6A:CB:59:55:05:B9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 79481CC4995BF6657B0CFBD669204501C0A42E18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:50:31 +0000 Certificate not after: Sun 02 May 2027 01:55:31 +0000 Subordinate resources: IP: 103.144.146.0/23 IP: 2001:df1:c680::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:48:1c:c4:99:5b:f6:65:7b:0c:fb:d6:69:20:45:01:c0:a4:2e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:50:31 2026 GMT Not After : May 2 01:55:31 2027 GMT Subject: CN=FCC1AF3221DCC624510A37AE7E0B6ACB595505B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0d:33:1c:c0:47:22:12:59:f0:00:77:06:57: eb:e1:9d:12:33:2f:af:3f:f7:84:2a:6a:8e:0b:04: 3d:55:74:68:22:58:1f:e6:31:22:49:46:95:c9:6a: e5:15:cf:de:7f:34:a6:07:d3:01:58:08:c8:16:8a: c4:b9:1e:43:3f:46:c3:e4:1e:23:61:c3:68:85:bc: 5b:af:70:e0:67:72:1e:63:35:ab:e6:8d:ff:cb:11: 51:ed:b3:93:cd:aa:ed:46:c2:a8:fd:a3:45:a2:0d: 23:57:d5:f6:08:83:50:14:f9:ef:53:d5:3e:cd:56: 50:31:fc:4a:22:28:c2:6e:d1:37:44:f4:10:05:41: 80:94:45:f4:ae:34:a9:7b:5e:e5:60:88:5c:84:22: fe:5a:c9:10:f3:c0:7c:5b:3f:58:90:4d:7b:fe:08: 33:8d:69:50:b7:05:1b:94:40:85:07:e0:8c:09:3e: 9e:43:6b:94:11:52:80:8f:9b:6f:d5:67:45:de:dc: 92:79:cc:56:1f:2f:da:10:a4:09:fb:33:a2:06:f5: 51:af:96:aa:c3:66:dc:98:6f:68:56:7b:85:aa:02: 9b:27:b5:2f:1b:45:ac:8e:96:9f:50:d3:dc:f2:7d: 12:82:76:59:5a:78:53:ce:39:92:58:94:a9:41:5b: 22:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FC:C1:AF:32:21:DC:C6:24:51:0A:37:AE:7E:0B:6A:CB:59:55:05:B9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/FCC1AF3221DCC624510A37AE7E0B6ACB595505B9.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.146.0/23 IPv6: 2001:df1:c680::/48 Signature Algorithm: sha256WithRSAEncryption 1d:c1:a5:7f:56:3d:c3:7d:ae:e3:bf:5f:8a:00:62:8c:d2:b4: 98:73:f7:6e:a4:24:68:ad:4d:56:74:11:78:33:39:03:68:5d: e6:67:0b:c5:c2:a0:90:d6:c9:f1:14:81:7f:b8:c2:52:b3:5b: ad:ee:c1:a5:f5:37:c2:37:7a:47:91:da:0f:35:fa:29:d0:ac: c0:fb:fb:ba:45:20:ea:6f:ee:7c:8e:17:5a:06:f6:da:6d:17: 45:15:be:11:a6:a4:07:8f:58:1b:f7:00:6c:d2:f3:d6:92:fc: 25:b8:fa:21:13:29:16:25:bd:73:43:cf:ce:f2:0b:ce:ae:21: 3d:12:22:54:33:97:bb:a9:b3:0d:f7:48:04:e4:dc:5f:ed:c4: 13:70:e4:e5:8b:ea:80:98:fa:3d:36:9f:8f:90:82:22:8b:3e: 69:a8:ff:fa:63:74:d4:7a:2f:3b:fc:7f:e4:7b:7f:10:c7:a2: 73:48:1a:3e:9f:c8:79:c0:74:9d:00:cd:e3:ca:43:50:16:e3: dd:39:4d:21:70:b1:33:93:ae:69:7f:d5:00:42:14:e6:25:a0: fb:45:3f:0a:d2:c7:66:eb:7a:79:4e:15:3e:36:98:12:de:03: e9:64:d2:83:02:ea:14:fa:11:45:a8:5d:f7:53:fc:7a:3d:d2: 44:54:48:9a -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUeUgcxJlb9mV7DPvWaSBFAcCkLhgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTAzMVoX DTI3MDUwMjAxNTUzMVowMzExMC8GA1UEAxMoRkNDMUFGMzIyMURDQzYyNDUxMEEz N0FFN0UwQjZBQ0I1OTU1MDVCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMcNMxzARyISWfAAdwZX6+GdEjMvrz/3hCpqjgsEPVV0aCJYH+YxIklGlclq 5RXP3n80pgfTAVgIyBaKxLkeQz9Gw+QeI2HDaIW8W69w4GdyHmM1q+aN/8sRUe2z k82q7UbCqP2jRaINI1fV9giDUBT571PVPs1WUDH8SiIowm7RN0T0EAVBgJRF9K40 qXte5WCIXIQi/lrJEPPAfFs/WJBNe/4IM41pULcFG5RAhQfgjAk+nkNrlBFSgI+b b9VnRd7cknnMVh8v2hCkCfszogb1Ua+WqsNm3JhvaFZ7haoCmye1LxtFrI6Wn1DT 3PJ9EoJ2WVp4U845kliUqUFbIhkCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPzBrzIh3MYkUQo3rn4LastZVQW5MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2M1YmY4OWM3LTUwNzEtNGMxMi04YzNjLTkyYWViNmRjM2JiYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jNWJmODlj Ny01MDcxLTRjMTItOGMzYy05MmFlYjZkYzNiYmMvMC9GQ0MxQUYzMjIxRENDNjI0 NTEwQTM3QUU3RTBCNkFDQjU5NTUwNUI5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ5CSMA8EAgACMAkDBwAgAQ3xxoAwDQYJKoZIhvcNAQELBQADggEBAB3BpX9W PcN9ruO/X4oAYozStJhz926kJGitTVZ0EXgzOQNoXeZnC8XCoJDWyfEUgX+4wlKz W63uwaX1N8I3ekeR2g81+inQrMD7+7pFIOpv7nyOF1oG9tptF0UVvhGmpAePWBv3 AGzS89aS/CW4+iETKRYlvXNDz87yC86uIT0SIlQzl7upsw33SATk3F/txBNw5OWL 6oCY+j02n4+QgiKLPmmo//pjdNR6Lzv8f+R7fxDHonNIGj6fyHnAdJ0AzePKQ1AW 4905TSFwsTOTrml/1QBCFOYloPtFPwrSx2brenlOFT42mBLeA+lk0oMC6hT6EUWo XfdT/Ho90kRUSJo= -----END CERTIFICATE-----Generated at Tue May 12 22:16:45 2026 by rpki-client