$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.cer File: FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.cer (raw, json) Hash identifier: tky36UpMBKyMNqTygmHUm7MVk4oxYAotKwlPvcsm6L4= Subject key identifier: FD:05:6B:EA:DF:6E:F8:5F:61:88:97:BD:17:A5:F2:7B:6A:18:B7:B7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0C3206EF63D2365B29278E71BE54EA48A36C9EE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.mft caRepository: rsync://rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:44:07 +0000 Certificate not after: Sun 02 May 2027 01:49:07 +0000 Subordinate resources: IP: 103.164.61.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:32:06:ef:63:d2:36:5b:29:27:8e:71:be:54:ea:48:a3:6c:9e:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:44:07 2026 GMT Not After : May 2 01:49:07 2027 GMT Subject: CN=FD056BEADF6EF85F618897BD17A5F27B6A18B7B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e7:68:fc:ae:b0:47:c9:27:d6:1c:61:47:59: ff:30:51:ac:c8:b2:c9:da:ba:5a:f4:37:88:74:94: a6:a6:24:a8:1e:aa:2b:f9:c4:a4:e4:43:0e:5c:2e: 31:2e:f9:f8:c0:b0:70:cd:dd:cd:9d:c7:b8:d9:b2: e0:50:b9:14:a6:fd:a2:d5:63:ad:a1:59:10:a6:d2: fe:2e:14:65:53:d0:01:7c:ab:69:8a:dc:f8:e1:d6: bf:88:94:17:a9:ce:01:88:a4:4e:a1:c4:9b:4a:36: dd:e1:98:9a:24:8b:82:8f:da:59:a4:a2:82:97:6b: ae:1e:81:22:57:6a:9f:b1:84:aa:a2:89:6d:60:01: d5:d1:c1:65:57:64:ce:97:df:4e:04:e4:1c:24:a0: 69:8e:26:01:05:bb:53:49:37:3a:5d:6d:0f:8e:29: 12:05:ce:0e:78:38:24:a1:68:b8:96:64:0c:e7:b0: b2:b8:d4:1a:6c:76:95:84:59:e5:d2:a0:92:ab:d7: b8:0a:62:88:17:f6:82:4c:ed:0b:b5:be:00:ec:29: d5:73:c7:ce:57:12:fc:d1:65:ff:f3:9e:7b:8a:04: 5a:ee:a8:81:cd:57:94:a4:11:34:86:f2:58:37:34: 28:53:7c:b8:35:16:38:f0:ce:c0:8a:76:ad:34:2e: 51:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FD:05:6B:EA:DF:6E:F8:5F:61:88:97:BD:17:A5:F2:7B:6A:18:B7:B7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/FD056BEADF6EF85F618897BD17A5F27B6A18B7B7.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.61.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:a3:e7:d8:fb:19:ab:31:62:26:4d:b1:24:52:7e:f9:a9:fa: 20:5c:c8:af:38:bd:4e:1c:29:25:27:31:39:b5:ac:0c:ca:c0: 65:60:39:58:57:b5:9e:e0:a5:cd:17:47:52:0f:4f:3f:a2:61: b7:cf:e0:af:51:fc:5c:41:55:88:86:ae:b1:1b:9a:c6:a2:f3: b7:ed:7e:3f:c8:1d:b4:55:fb:50:01:f3:a6:d5:04:b1:53:cd: 26:98:0c:04:1c:7e:fe:98:f8:6b:ac:16:1c:cf:9d:09:ef:a9: 45:32:92:58:2f:90:5a:89:b4:24:0d:b1:19:81:aa:af:5c:a8: a7:1a:ad:1f:bd:47:9a:c5:36:2e:77:07:9f:89:d4:13:7f:b4: eb:1f:f5:78:e2:f9:c6:c7:1d:de:9d:94:13:f2:91:6b:16:bc: e4:7f:d1:40:e4:f1:50:25:73:b1:b1:f3:75:f0:67:fb:9a:27: 16:be:14:07:9b:6f:79:97:e0:e2:0f:fc:75:81:85:72:77:2c: 8f:41:a0:b9:58:17:a1:1c:55:b8:2d:fe:b6:d6:d3:cf:2f:13: 0a:9d:59:96:6c:2c:a7:27:b8:a8:34:a3:12:a3:20:9b:92:52: 99:b1:80:44:35:ae:e8:0c:7e:a0:5c:c7:72:a2:c8:1d:fc:db: 1d:83:d5:79 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUDDIG72PSNlspJ45xvlTqSKNsnuMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDQwN1oX DTI3MDUwMjAxNDkwN1owMzExMC8GA1UEAxMoRkQwNTZCRUFERjZFRjg1RjYxODg5 N0JEMTdBNUYyN0I2QTE4QjdCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMjnaPyusEfJJ9YcYUdZ/zBRrMiyydq6WvQ3iHSUpqYkqB6qK/nEpORDDlwu MS75+MCwcM3dzZ3HuNmy4FC5FKb9otVjraFZEKbS/i4UZVPQAXyraYrc+OHWv4iU F6nOAYikTqHEm0o23eGYmiSLgo/aWaSigpdrrh6BIldqn7GEqqKJbWAB1dHBZVdk zpffTgTkHCSgaY4mAQW7U0k3Ol1tD44pEgXODng4JKFouJZkDOewsrjUGmx2lYRZ 5dKgkqvXuApiiBf2gkztC7W+AOwp1XPHzlcS/NFl//Oee4oEWu6ogc1XlKQRNIby WDc0KFN8uDUWOPDOwIp2rTQuUTsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP0Fa+rfbvhfYYiXvRel8ntqGLe3MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2JiMTdjMjA2LTliNjMtNGM1Ni05NDM2LTQ3NWQ4MjE0MWE2Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iYjE3YzIw Ni05YjYzLTRjNTYtOTQzNi00NzVkODIxNDFhNjYvMC9GRDA1NkJFQURGNkVGODVG NjE4ODk3QkQxN0E1RjI3QjZBMThCN0I3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6Q9MA0GCSqGSIb3DQEBCwUAA4IBAQANo+fY+xmrMWImTbEkUn75qfogXMiv OL1OHCklJzE5tawMysBlYDlYV7We4KXNF0dSD08/omG3z+CvUfxcQVWIhq6xG5rG ovO37X4/yB20VftQAfOm1QSxU80mmAwEHH7+mPhrrBYcz50J76lFMpJYL5BaibQk DbEZgaqvXKinGq0fvUeaxTYudwefidQTf7TrH/V44vnGxx3enZQT8pFrFrzkf9FA 5PFQJXOxsfN18Gf7micWvhQHm295l+DiD/x1gYVydyyPQaC5WBehHFW4Lf621tPP LxMKnVmWbCynJ7ioNKMSoyCbklKZsYBENa7oDH6gXMdyosgd/Nsdg9V5 -----END CERTIFICATE-----Generated at Tue May 12 22:03:49 2026 by rpki-client