$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.cer File: FD82EB0CDF26FC9F52BB482D255A26374FB297F2.cer (raw, json) Hash identifier: JImNrMZ+nm0N0XmbR53H9qz3o1lvZVCBOkGD/uTyeHw= Subject key identifier: FD:82:EB:0C:DF:26:FC:9F:52:BB:48:2D:25:5A:26:37:4F:B2:97:F2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 02382739EB8E34D3D992B4FF3CFD77968874BF93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft caRepository: rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:56:05 +0000 Certificate not after: Sun 02 May 2027 02:01:05 +0000 Subordinate resources: IP: 103.186.94.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:38:27:39:eb:8e:34:d3:d9:92:b4:ff:3c:fd:77:96:88:74:bf:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:56:05 2026 GMT Not After : May 2 02:01:05 2027 GMT Subject: CN=FD82EB0CDF26FC9F52BB482D255A26374FB297F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:da:00:0f:3a:58:46:b0:73:83:82:61:db:f0: 6d:aa:92:fd:98:27:6a:c8:3c:5a:a9:55:56:b2:14: 7c:21:50:8f:8f:a8:f1:67:3c:74:5c:53:e0:52:8c: 18:d1:ac:1c:c5:86:56:3a:39:f1:15:13:1b:d4:95: 29:0f:e6:a4:7d:0e:6c:9c:84:72:2b:47:70:a0:8e: 38:31:d2:10:b2:43:d1:ad:6b:d5:62:69:1f:73:a2: 0f:b5:b8:5f:3d:a9:d9:ec:d5:89:34:f5:b0:97:b7: f3:2b:61:ea:a8:91:2d:93:bd:50:ea:69:0a:0e:bc: 29:28:d2:d9:9d:ce:dd:d7:61:f8:e9:f2:a7:70:96: 24:e0:d4:8f:e5:fd:e5:65:3b:c2:51:41:c0:84:2f: 96:1b:f1:d0:01:1e:ea:a5:85:75:5b:c2:f6:5e:64: 06:56:36:eb:4c:07:2d:8d:ab:2e:30:61:f5:15:be: d5:b0:8f:d6:19:e5:2e:37:9e:c6:c9:37:7e:04:5e: c7:47:06:f1:04:39:ef:d2:90:08:67:b4:7c:8a:33: c3:3b:37:02:dd:26:26:6d:01:19:54:c8:60:01:01: 90:09:67:15:57:bd:6e:73:a3:0d:ce:9e:f0:b2:b7: 2f:e2:e7:66:09:db:9d:21:1c:7d:73:24:56:e6:16: 0a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FD:82:EB:0C:DF:26:FC:9F:52:BB:48:2D:25:5A:26:37:4F:B2:97:F2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.94.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:76:c8:c1:89:67:58:a5:90:d8:ac:c4:62:64:bc:34:f6:bc: f5:39:2a:8a:cd:d7:2d:e9:70:11:b6:ee:20:c9:ba:ac:3a:a8: 15:8c:84:7d:88:b1:09:fd:3b:b7:0e:ce:59:b4:7d:78:7c:eb: aa:3e:da:f2:6d:1c:36:66:36:3a:41:ea:ba:82:18:76:4f:f5: a1:20:67:17:20:10:4d:4e:a3:1c:91:4b:84:58:6e:61:e6:2e: 6f:55:39:e2:bc:01:be:70:eb:fa:b7:23:68:63:bb:2c:de:1f: ef:f1:0e:20:e5:b9:15:6e:f5:38:8c:9b:3d:d2:8f:09:d5:14: 1e:de:fc:97:1a:64:90:cf:27:e4:66:ad:bd:8a:16:8a:3d:f8: fc:9b:78:39:ae:c4:49:10:80:c8:14:73:d5:eb:a8:77:74:00: 91:f8:da:8a:07:ad:85:2d:f7:e5:95:ad:94:94:c4:89:25:c4: 7f:a6:74:4f:1f:c9:e0:8e:1e:ab:2f:ea:a8:2b:da:63:c1:55: e4:70:22:6b:d2:48:05:33:f9:8c:cc:4c:6c:a4:59:1e:ad:30: 63:58:6e:94:fb:ce:44:ee:f6:b2:7e:14:44:12:ee:ed:ba:b0: c9:fc:e9:a1:ca:62:cc:d9:7b:9e:f3:9a:91:bc:f2:f9:c4:06: ab:3f:a2:fb -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUAjgnOeuONNPZkrT/PP13loh0v5MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTYwNVoX DTI3MDUwMjAyMDEwNVowMzExMC8GA1UEAxMoRkQ4MkVCMENERjI2RkM5RjUyQkI0 ODJEMjU1QTI2Mzc0RkIyOTdGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOzaAA86WEawc4OCYdvwbaqS/Zgnasg8WqlVVrIUfCFQj4+o8Wc8dFxT4FKM GNGsHMWGVjo58RUTG9SVKQ/mpH0ObJyEcitHcKCOODHSELJD0a1r1WJpH3OiD7W4 Xz2p2ezViTT1sJe38yth6qiRLZO9UOppCg68KSjS2Z3O3ddh+Onyp3CWJODUj+X9 5WU7wlFBwIQvlhvx0AEe6qWFdVvC9l5kBlY260wHLY2rLjBh9RW+1bCP1hnlLjee xsk3fgRex0cG8QQ579KQCGe0fIozwzs3At0mJm0BGVTIYAEBkAlnFVe9bnOjDc6e 8LK3L+LnZgnbnSEcfXMkVuYWCscCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP2C6wzfJvyfUrtILSVaJjdPspfyMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NmN2I3Njc3LTYyMDQtNDA1Zi04YmEyLWU3MTQzMjRjMTVkNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jZjdiNzY3 Ny02MjA0LTQwNWYtOGJhMi1lNzE0MzI0YzE1ZDcvMC9GRDgyRUIwQ0RGMjZGQzlG NTJCQjQ4MkQyNTVBMjYzNzRGQjI5N0YyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7peMA0GCSqGSIb3DQEBCwUAA4IBAQAddsjBiWdYpZDYrMRiZLw09rz1OSqK zdct6XARtu4gybqsOqgVjIR9iLEJ/Tu3Ds5ZtH14fOuqPtrybRw2ZjY6Qeq6ghh2 T/WhIGcXIBBNTqMckUuEWG5h5i5vVTnivAG+cOv6tyNoY7ss3h/v8Q4g5bkVbvU4 jJs90o8J1RQe3vyXGmSQzyfkZq29ihaKPfj8m3g5rsRJEIDIFHPV66h3dACR+NqK B62FLfflla2UlMSJJcR/pnRPH8ngjh6rL+qoK9pjwVXkcCJr0kgFM/mMzExspFke rTBjWG6U+85E7vayfhREEu7turDJ/OmhymLM2Xue85qRvPL5xAarP6L7 -----END CERTIFICATE-----Generated at Tue May 12 22:10:20 2026 by rpki-client