$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer File: FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer (raw, json) Hash identifier: T91V3O8w4+ddomCKdUlWTq1slkF0+H4wrmBgkDHxavI= Subject key identifier: FD:35:31:87:FB:0D:36:4F:A7:08:6A:17:28:B9:89:4B:9F:43:AF:A7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5EB7C9C7B08538A3F3C8977B74864B59A530BFDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft caRepository: rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:16:48 +0000 Certificate not after: Sun 02 May 2027 01:21:48 +0000 Subordinate resources: IP: 103.22.204.0/22 IP: 2001:df0:a00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:b7:c9:c7:b0:85:38:a3:f3:c8:97:7b:74:86:4b:59:a5:30:bf:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:16:48 2026 GMT Not After : May 2 01:21:48 2027 GMT Subject: CN=FD353187FB0D364FA7086A1728B9894B9F43AFA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c3:d9:b7:4a:7b:cd:0a:88:94:35:1f:a7:10: 69:3a:32:36:79:43:fd:e9:75:97:68:d3:cd:bc:7b: ec:f3:f3:24:b0:4e:57:cd:93:c5:55:8b:db:dc:3a: b6:e2:e1:87:d2:0d:bf:8a:59:7a:9f:e8:fb:85:6b: 7e:da:30:58:0f:71:de:b2:d6:6b:07:16:b9:21:b5: 50:f9:12:88:c5:32:03:71:7c:07:aa:cd:d7:d1:49: b6:e0:55:64:f5:9d:24:e7:7b:c7:00:1c:1b:9a:3e: 93:84:66:ae:11:e3:13:fb:58:18:be:57:77:dd:e5: 4c:e8:42:2f:8f:c7:b8:7b:8f:9f:bd:35:5d:2e:36: 66:66:5a:68:0f:64:cb:ce:03:34:a1:b4:2a:eb:88: 62:27:83:bd:75:36:c1:12:ce:68:be:22:63:02:e5: 4b:67:ca:3a:51:2d:03:46:b7:d9:8d:a5:3a:4f:c7: 1d:51:23:7c:f5:40:4d:06:bc:3c:8e:93:ed:5e:7b: 8d:e0:26:08:fc:b2:d4:76:e3:be:35:1f:eb:37:6c: a0:7f:8a:d1:0b:1c:38:04:c7:6d:b3:9b:c6:23:d2: 31:a0:8e:34:28:e9:07:1e:4d:17:a2:aa:fd:de:ca: ad:6a:55:d3:36:1b:16:e0:f9:fc:9f:ff:42:1d:e8: 7e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FD:35:31:87:FB:0D:36:4F:A7:08:6A:17:28:B9:89:4B:9F:43:AF:A7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.22.204.0/22 IPv6: 2001:df0:a00::/48 Signature Algorithm: sha256WithRSAEncryption 5f:3c:89:c8:8c:42:c0:f7:08:4b:02:e7:b6:f1:2b:90:82:05: 7e:95:3f:94:00:1e:13:28:bc:d0:6e:79:29:6d:5e:e0:f0:0e: 59:8a:2c:40:20:8a:83:15:53:0f:d9:4f:ea:83:ad:ab:1d:ea: 82:3e:07:07:b5:81:82:59:33:64:e7:91:4d:4e:2a:a3:61:ae: af:75:9d:be:9e:ce:e3:5b:f9:3b:e2:aa:34:47:49:ea:5e:4d: 3b:e2:79:4e:3b:5d:42:9e:51:f3:1a:d3:af:ea:f4:57:07:2b: 6c:81:36:11:82:ad:a1:2c:10:14:a8:94:2b:86:23:0e:c1:ce: 1f:26:40:0d:3a:7b:ba:1e:60:58:5f:4f:a8:b7:a2:79:1f:c7: c7:df:75:ce:f5:b7:c9:77:a4:f5:68:7d:c7:37:59:07:f7:ee: 68:0a:21:2d:cd:5c:da:7f:dc:26:6e:36:18:ba:df:cd:30:8a: 9a:7d:27:0e:31:ef:90:32:1d:d6:9b:11:77:13:f5:16:da:74: ab:57:4e:05:18:5c:a4:c9:59:7c:c1:81:33:da:30:9d:a4:0c: f3:07:2f:3d:17:5d:99:fe:0e:ba:28:77:7e:5c:3c:41:0b:56: 09:ef:da:7f:71:d9:46:ac:87:2e:b2:5f:f8:44:a2:54:c3:29: 6f:6b:23:4b -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUXrfJx7CFOKPzyJd7dIZLWaUwv94wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTY0OFoX DTI3MDUwMjAxMjE0OFowMzExMC8GA1UEAxMoRkQzNTMxODdGQjBEMzY0RkE3MDg2 QTE3MjhCOTg5NEI5RjQzQUZBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKTD2bdKe80KiJQ1H6cQaToyNnlD/el1l2jTzbx77PPzJLBOV82TxVWL29w6 tuLhh9INv4pZep/o+4VrftowWA9x3rLWawcWuSG1UPkSiMUyA3F8B6rN19FJtuBV ZPWdJOd7xwAcG5o+k4RmrhHjE/tYGL5Xd93lTOhCL4/HuHuPn701XS42ZmZaaA9k y84DNKG0KuuIYieDvXU2wRLOaL4iYwLlS2fKOlEtA0a32Y2lOk/HHVEjfPVATQa8 PI6T7V57jeAmCPyy1HbjvjUf6zdsoH+K0QscOATHbbObxiPSMaCONCjpBx5NF6Kq /d7KrWpV0zYbFuD5/J//Qh3ofsUCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP01MYf7DTZPpwhqFyi5iUufQ6+nMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzkwNGQwMzk3LWZmYTAtNDkwMy04MDVmLTA4NDUyN2JjNDMwYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85MDRkMDM5 Ny1mZmEwLTQ5MDMtODA1Zi0wODQ1MjdiYzQzMGMvMC9GRDM1MzE4N0ZCMEQzNjRG QTcwODZBMTcyOEI5ODk0QjlGNDNBRkE3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZxbMMA8EAgACMAkDBwAgAQ3wCgAwDQYJKoZIhvcNAQELBQADggEBAF88iciM QsD3CEsC57bxK5CCBX6VP5QAHhMovNBueSltXuDwDlmKLEAgioMVUw/ZT+qDrasd 6oI+Bwe1gYJZM2TnkU1OKqNhrq91nb6ezuNb+TviqjRHSepeTTvieU47XUKeUfMa 06/q9FcHK2yBNhGCraEsEBSolCuGIw7Bzh8mQA06e7oeYFhfT6i3onkfx8ffdc71 t8l3pPVofcc3WQf37mgKIS3NXNp/3CZuNhi6380wipp9Jw4x75AyHdabEXcT9Rba dKtXTgUYXKTJWXzBgTPaMJ2kDPMHLz0XXZn+Drood35cPEELVgnv2n9x2Uashy6y X/hEolTDKW9rI0s= -----END CERTIFICATE-----Generated at Tue May 12 22:16:46 2026 by rpki-client