$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer File: FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer (raw, json) Hash identifier: yXa42gxMzdl9uZN1k1i+XSpth6XMg5+aJPKNJkEPErM= Subject key identifier: FD:82:8C:69:84:46:CC:2A:BE:89:85:27:D2:B7:F3:E5:0A:2D:BD:B6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1734B934F35306E5237C825A34D2824C5D9FE540 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:12:58 +0000 Certificate not after: Sun 02 May 2027 02:17:58 +0000 Subordinate resources: IP: 103.160.118.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:34:b9:34:f3:53:06:e5:23:7c:82:5a:34:d2:82:4c:5d:9f:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:12:58 2026 GMT Not After : May 2 02:17:58 2027 GMT Subject: CN=FD828C698446CC2ABE898527D2B7F3E50A2DBDB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:28:2a:50:2b:78:13:7e:53:eb:61:5c:b2:b5: 15:5c:16:63:8c:00:f8:0d:6b:03:53:a1:e4:4e:58: 01:7d:17:70:44:e3:2c:87:8a:3f:80:a5:4c:ad:d9: 73:5e:fd:83:2a:d5:0e:b4:67:0f:51:ca:14:7f:cf: b4:f6:a9:4c:04:41:5c:0b:c9:e9:48:55:21:99:9d: 84:a9:c4:67:af:d6:89:09:a1:c0:23:b6:e8:60:7c: d1:c1:33:1d:48:60:a6:03:f7:13:ed:c3:de:09:a1: 4d:de:a9:e7:5f:13:01:f5:d7:87:81:4d:c1:ac:e7: e7:bc:b1:c5:1a:f5:7d:60:dc:81:ee:66:b9:71:c6: 09:34:0e:30:fe:01:44:9b:8c:5d:d3:20:53:63:14: 21:f4:d5:16:fd:41:68:f0:e1:55:66:b0:0d:0a:41: 62:36:ee:53:13:f5:ba:4f:ba:7b:14:52:fe:6d:23: a1:00:8a:c0:5c:b8:ee:25:50:d3:df:ec:77:20:ca: 6b:8f:9a:3b:ed:07:be:bb:9e:5d:f5:7f:ed:1a:0a: 14:17:b7:fe:32:ce:c8:6a:cd:eb:25:fd:6f:64:07: 53:3b:64:41:2e:3f:f5:57:13:4f:e9:8f:cd:f2:9a: df:19:93:0d:28:d9:58:df:77:3e:9b:ab:01:7d:7b: ef:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FD:82:8C:69:84:46:CC:2A:BE:89:85:27:D2:B7:F3:E5:0A:2D:BD:B6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.118.0/24 Signature Algorithm: sha256WithRSAEncryption 50:0a:c4:7c:cc:e1:8c:e5:a0:6b:40:45:a4:95:c7:bd:57:e3: df:19:45:4f:89:e8:8b:5a:f8:02:53:0e:74:28:ba:1b:e0:e1: 48:41:15:10:8d:5a:23:e8:0b:cd:74:2f:fb:85:44:66:d6:12: a7:80:bf:4d:91:53:3b:70:98:59:aa:94:d6:18:04:89:94:eb: 97:1f:cc:35:34:63:d9:f0:5c:eb:3c:92:a1:43:53:8b:3d:11: d5:dd:c4:8c:80:4a:04:24:a3:39:78:05:bf:d7:74:6e:33:79: 02:2f:90:95:46:9b:87:d9:a8:b1:e4:97:bd:1f:6a:ef:7e:4d: 11:0e:2d:fc:87:cf:b0:16:e6:ae:32:39:cb:36:dc:82:79:d4: d2:cb:ef:c2:67:2e:f2:41:79:28:a8:ea:56:83:ee:ae:f3:21: 65:20:af:9e:12:61:8b:c9:e0:8c:fb:46:24:6d:be:ab:6f:be: 35:83:79:0c:67:0c:c4:2e:91:6c:a2:cb:a8:a7:c0:f7:c8:51: 0f:5a:d9:e3:96:a9:5f:6a:7a:cf:74:17:a8:25:c1:77:97:4e: 5c:ad:fb:30:e4:99:53:37:e9:33:02:ee:f9:8b:1b:eb:9f:f1: b2:ae:b3:45:40:af:f5:66:de:fa:4f:6d:31:da:a5:37:5d:2e: c6:4e:e8:3f -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUFzS5NPNTBuUjfIJaNNKCTF2f5UAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTI1OFoX DTI3MDUwMjAyMTc1OFowMzExMC8GA1UEAxMoRkQ4MjhDNjk4NDQ2Q0MyQUJFODk4 NTI3RDJCN0YzRTUwQTJEQkRCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALIoKlAreBN+U+thXLK1FVwWY4wA+A1rA1Oh5E5YAX0XcETjLIeKP4ClTK3Z c179gyrVDrRnD1HKFH/PtPapTARBXAvJ6UhVIZmdhKnEZ6/WiQmhwCO26GB80cEz HUhgpgP3E+3D3gmhTd6p518TAfXXh4FNwazn57yxxRr1fWDcge5muXHGCTQOMP4B RJuMXdMgU2MUIfTVFv1BaPDhVWawDQpBYjbuUxP1uk+6exRS/m0joQCKwFy47iVQ 09/sdyDKa4+aO+0HvrueXfV/7RoKFBe3/jLOyGrN6yX9b2QHUztkQS4/9VcTT+mP zfKa3xmTDSjZWN93PpurAX1775cCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP2CjGmERswqvomFJ9K38+UKLb22MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2UzMWU2OTNjLTJmZDctNGY0Yy1hZjYzLWZlZTY5MDc2ZTBkMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lMzFlNjkz Yy0yZmQ3LTRmNGMtYWY2My1mZWU2OTA3NmUwZDEvMC9GRDgyOEM2OTg0NDZDQzJB QkU4OTg1MjdEMkI3RjNFNTBBMkRCREI2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6B2MA0GCSqGSIb3DQEBCwUAA4IBAQBQCsR8zOGM5aBrQEWklce9V+PfGUVP ieiLWvgCUw50KLob4OFIQRUQjVoj6AvNdC/7hURm1hKngL9NkVM7cJhZqpTWGASJ lOuXH8w1NGPZ8FzrPJKhQ1OLPRHV3cSMgEoEJKM5eAW/13RuM3kCL5CVRpuH2aix 5Je9H2rvfk0RDi38h8+wFuauMjnLNtyCedTSy+/CZy7yQXkoqOpWg+6u8yFlIK+e EmGLyeCM+0Ykbb6rb741g3kMZwzELpFsosuop8D3yFEPWtnjlqlfanrPdBeoJcF3 l05crfsw5JlTN+kzAu75ixvrn/GyrrNFQK/1Zt76T20x2qU3XS7GTug/ -----END CERTIFICATE-----Generated at Tue May 12 22:11:36 2026 by rpki-client