$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.cer File: FD6BC01026034705BA5D14EB31CD23B6C3F86B46.cer (raw, json) Hash identifier: A7/G+FGqOzPVsKzyYtYWHqdulgScKCGTcRtaSS92Ivo= Subject key identifier: FD:6B:C0:10:26:03:47:05:BA:5D:14:EB:31:CD:23:B6:C3:F8:6B:46 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 71D46B1D3013C194D93305B78E95E3503B6E71F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:51:43 +0000 Certificate not after: Sun 02 May 2027 01:56:43 +0000 Subordinate resources: IP: 103.140.104.0/23 IP: 2404:fcc0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:d4:6b:1d:30:13:c1:94:d9:33:05:b7:8e:95:e3:50:3b:6e:71:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:51:43 2026 GMT Not After : May 2 01:56:43 2027 GMT Subject: CN=FD6BC01026034705BA5D14EB31CD23B6C3F86B46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:56:44:94:5b:5f:55:20:3f:25:a2:0c:86:f7: 0c:e6:b6:4e:fb:48:43:66:d9:59:8e:b1:d8:53:3f: 1d:32:24:2c:b5:ad:07:fb:8f:d0:b3:bd:85:c0:0b: 57:bc:4c:ba:45:76:b5:fd:76:d5:e2:52:44:8a:90: 00:89:69:65:b1:f5:95:7f:a9:f0:81:46:48:9d:57: 88:28:b2:80:07:fa:4b:e2:0d:d2:a0:c2:a3:45:14: 34:51:fe:a7:3b:ac:f0:3f:52:1f:7c:4f:3f:52:29: 1f:f9:87:86:e5:77:51:b8:79:3f:97:ac:71:ec:fa: 9a:11:e0:57:5b:65:43:0b:88:f9:f9:db:07:3e:a6: 5c:75:d8:7c:f7:3c:15:61:71:1f:73:20:e5:53:9b: e6:25:ea:f0:f4:47:50:ac:a0:ce:be:8c:6d:9c:52: ad:9d:3f:27:01:94:96:75:6b:1a:2b:0a:30:77:0d: 0b:bb:0a:f2:0f:96:6f:d2:25:d0:26:d4:7e:aa:dc: 30:ad:44:3a:51:8c:2d:e8:f0:b0:2e:79:24:8c:55: 1b:48:42:2d:27:9c:1e:8b:8f:e1:17:8b:b8:68:ed: 00:43:e3:80:26:c5:9c:1e:2a:25:cf:05:8a:2f:d7: 4f:a2:df:3d:6a:11:ab:97:4a:61:5a:29:2e:45:1e: dc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FD:6B:C0:10:26:03:47:05:BA:5D:14:EB:31:CD:23:B6:C3:F8:6B:46 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/FD6BC01026034705BA5D14EB31CD23B6C3F86B46.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.104.0/23 IPv6: 2404:fcc0::/32 Signature Algorithm: sha256WithRSAEncryption 91:d8:82:0b:9e:87:29:53:4b:f7:3c:6e:62:ab:fc:e1:46:65: c4:3c:f3:52:9b:3d:94:d8:fc:f5:26:ea:b4:3e:8e:3e:a4:cc: 23:7b:f3:67:5e:14:7f:4f:5d:4e:e3:7e:b8:89:3a:e8:86:a1: 83:cd:39:38:c4:0d:b7:2d:fc:29:0f:4e:d7:4a:79:0f:7b:0b: 5e:0d:68:5c:b8:42:c2:f4:55:0d:6f:66:3f:ba:bb:57:a7:af: 03:f1:85:c8:fc:6a:fc:1c:0c:2d:c3:e0:e7:d4:47:ff:1d:a5: 16:84:c9:d8:e5:3a:a5:ba:55:f8:89:41:a8:29:a2:f0:b8:12: 50:ff:cc:2b:e3:e1:14:a0:ab:4f:e0:47:ec:4f:ae:04:48:4d: 01:78:d5:d0:75:1c:16:14:ff:bb:ee:cf:e6:49:a0:1d:63:c3: f1:f1:b6:6e:96:ce:d1:94:6f:a7:29:f6:8a:69:09:e3:05:2d: b0:03:24:77:1f:0f:f9:72:cd:21:71:ee:42:3e:e3:9e:16:6e: a1:9c:a5:fe:af:be:52:5d:46:98:f9:b4:ff:e9:d3:80:28:45: be:08:ea:0e:76:df:b6:e8:e5:2b:f3:7d:ca:03:48:de:61:7f: 05:bc:27:48:6e:c2:6d:da:cb:ef:0a:e5:bb:21:a0:9f:79:94: aa:34:68:84 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUcdRrHTATwZTZMwW3jpXjUDtucfYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTE0M1oX DTI3MDUwMjAxNTY0M1owMzExMC8GA1UEAxMoRkQ2QkMwMTAyNjAzNDcwNUJBNUQx NEVCMzFDRDIzQjZDM0Y4NkI0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdWRJRbX1UgPyWiDIb3DOa2TvtIQ2bZWY6x2FM/HTIkLLWtB/uP0LO9hcAL V7xMukV2tf121eJSRIqQAIlpZbH1lX+p8IFGSJ1XiCiygAf6S+IN0qDCo0UUNFH+ pzus8D9SH3xPP1IpH/mHhuV3Ubh5P5escez6mhHgV1tlQwuI+fnbBz6mXHXYfPc8 FWFxH3Mg5VOb5iXq8PRHUKygzr6MbZxSrZ0/JwGUlnVrGisKMHcNC7sK8g+Wb9Il 0CbUfqrcMK1EOlGMLejwsC55JIxVG0hCLSecHouP4ReLuGjtAEPjgCbFnB4qJc8F ii/XT6LfPWoRq5dKYVopLkUe3HMCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP1rwBAmA0cFul0U6zHNI7bD+GtGMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2M3NGJjY2Q1LTI1MmMtNDk0Ny04NzFiLTE1NmRmZmZlNzcxNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jNzRiY2Nk NS0yNTJjLTQ5NDctODcxYi0xNTZkZmZmZTc3MTcvMC9GRDZCQzAxMDI2MDM0NzA1 QkE1RDE0RUIzMUNEMjNCNkMzRjg2QjQ2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ4xoMA0EAgACMAcDBQAkBPzAMA0GCSqGSIb3DQEBCwUAA4IBAQCR2IILnocp U0v3PG5iq/zhRmXEPPNSmz2U2Pz1Juq0Po4+pMwje/NnXhR/T11O4364iTrohqGD zTk4xA23LfwpD07XSnkPewteDWhcuELC9FUNb2Y/urtXp68D8YXI/Gr8HAwtw+Dn 1Ef/HaUWhMnY5TqlulX4iUGoKaLwuBJQ/8wr4+EUoKtP4EfsT64ESE0BeNXQdRwW FP+77s/mSaAdY8Px8bZuls7RlG+nKfaKaQnjBS2wAyR3Hw/5cs0hce5CPuOeFm6h nKX+r75SXUaY+bT/6dOAKEW+COoOdt+26OUr833KA0jeYX8FvCdIbsJt2svvCuW7 IaCfeZSqNGiE -----END CERTIFICATE-----Generated at Tue May 12 22:10:29 2026 by rpki-client