$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.cer File: FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.cer (raw, json) Hash identifier: 0aOee3ZwoVt9/+6ZrE93KDKPfoqHX23ymBkxN/LwlgA= Subject key identifier: FD:BE:56:37:06:9F:D5:C4:F9:25:A5:FE:4E:09:49:77:2B:36:D7:CD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 54570736F31EA32C99D4388116D87942A6367CCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:04:10 +0000 Certificate not after: Sun 02 May 2027 01:09:10 +0000 Subordinate resources: IP: 103.167.2.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:57:07:36:f3:1e:a3:2c:99:d4:38:81:16:d8:79:42:a6:36:7c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:04:10 2026 GMT Not After : May 2 01:09:10 2027 GMT Subject: CN=FDBE5637069FD5C4F925A5FE4E0949772B36D7CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3f:10:a7:83:95:9d:f5:3f:c3:90:d0:0b:55: c3:3b:83:f0:5e:01:60:a6:46:d5:05:9d:29:82:05: 6b:5e:1d:d3:93:49:f8:a6:2d:41:bd:91:9f:10:c5: 24:fc:1f:58:a5:7c:9e:bf:a0:f1:78:55:c7:61:fb: 96:5e:0f:cd:44:bf:78:88:d7:ad:3f:fd:f3:11:8a: ad:1e:b3:99:2e:69:a2:4e:ec:4f:55:bd:ff:48:86: 3a:98:ab:09:5f:c9:6c:6a:b6:12:d5:c4:ec:12:ec: 2d:ec:cf:2c:79:ea:91:5e:85:25:15:5f:61:fc:65: 90:80:67:8a:89:3d:6b:2f:d6:de:23:a2:96:ab:bb: 6b:3f:2d:ac:43:77:c2:04:12:f2:a5:09:86:cb:c0: 6b:14:7c:18:9a:7b:50:b0:d2:41:ba:75:c5:09:36: 7e:19:ed:5f:4b:f4:a3:00:92:5f:5a:c4:2e:3f:29: ea:7a:b1:ed:46:64:c2:5a:11:5b:01:c2:4b:15:a1: b6:ea:bc:1a:10:ff:89:6e:41:54:c2:49:1a:b7:8c: a9:7d:12:50:d2:27:bb:b0:4c:15:18:4c:0f:3c:8e: 4e:ac:56:d0:3f:14:89:3f:de:79:c2:3e:4e:be:50: 02:3f:45:62:68:81:53:57:e9:81:4a:14:14:a5:1a: 7d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FD:BE:56:37:06:9F:D5:C4:F9:25:A5:FE:4E:09:49:77:2B:36:D7:CD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/FDBE5637069FD5C4F925A5FE4E0949772B36D7CD.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.2.0/24 Signature Algorithm: sha256WithRSAEncryption 60:0a:af:f8:41:64:b5:d9:63:6e:26:a8:70:72:ea:e6:bb:0a: af:8b:16:61:b7:e9:e5:68:67:9c:a4:57:00:df:61:46:81:4f: 19:db:99:97:b5:6a:f1:54:77:f8:f2:31:47:4c:6b:a4:05:21: 69:7a:f7:73:40:78:6c:b6:da:d0:29:3b:ea:f3:a8:96:86:43: fe:90:2f:17:63:e6:ec:04:15:96:3f:dd:17:cb:47:40:6b:9e: 0e:24:9d:56:d3:8a:6e:b7:56:0e:d9:b3:02:95:b0:5e:1f:e0: 15:75:6d:63:92:27:0e:6d:27:08:45:11:9d:c1:72:25:37:ef: f5:ba:92:40:82:95:a4:0d:8b:14:fa:d6:dd:77:fc:3a:b5:be: eb:88:20:21:f5:1b:6b:29:79:51:eb:86:2e:af:a6:4c:92:e0: 94:ef:fe:ba:af:1d:ec:d0:44:04:78:b7:50:62:2e:3f:2c:df: 3e:e1:47:c3:6a:d7:88:9b:e2:00:4d:50:a9:87:94:5f:79:10: 89:70:51:0a:8b:09:4e:e2:a9:ee:19:e5:57:71:3b:8f:6b:6d: 63:26:b2:bb:a5:68:f4:e8:19:d0:79:60:6d:df:6c:f3:ea:6c: 2f:dc:07:d6:5e:77:a1:05:a8:d4:f7:88:1a:2f:31:40:37:cb: 29:b0:22:ba -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUVFcHNvMeoyyZ1DiBFth5QqY2fMowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDQxMFoX DTI3MDUwMjAxMDkxMFowMzExMC8GA1UEAxMoRkRCRTU2MzcwNjlGRDVDNEY5MjVB NUZFNEUwOTQ5NzcyQjM2RDdDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKc/EKeDlZ31P8OQ0AtVwzuD8F4BYKZG1QWdKYIFa14d05NJ+KYtQb2RnxDF JPwfWKV8nr+g8XhVx2H7ll4PzUS/eIjXrT/98xGKrR6zmS5pok7sT1W9/0iGOpir CV/JbGq2EtXE7BLsLezPLHnqkV6FJRVfYfxlkIBniok9ay/W3iOilqu7az8trEN3 wgQS8qUJhsvAaxR8GJp7ULDSQbp1xQk2fhntX0v0owCSX1rELj8p6nqx7UZkwloR WwHCSxWhtuq8GhD/iW5BVMJJGreMqX0SUNInu7BMFRhMDzyOTqxW0D8UiT/eecI+ Tr5QAj9FYmiBU1fpgUoUFKUafbECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP2+VjcGn9XE+SWl/k4JSXcrNtfNMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdlMjdiM2UxLWY2MTEtNGFmZS05YTQ5LTVmYTRmZDU1NzY1My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83ZTI3YjNl MS1mNjExLTRhZmUtOWE0OS01ZmE0ZmQ1NTc2NTMvMC9GREJFNTYzNzA2OUZENUM0 RjkyNUE1RkU0RTA5NDk3NzJCMzZEN0NELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6cCMA0GCSqGSIb3DQEBCwUAA4IBAQBgCq/4QWS12WNuJqhwcurmuwqvixZh t+nlaGecpFcA32FGgU8Z25mXtWrxVHf48jFHTGukBSFpevdzQHhsttrQKTvq86iW hkP+kC8XY+bsBBWWP90Xy0dAa54OJJ1W04put1YO2bMClbBeH+AVdW1jkicObScI RRGdwXIlN+/1upJAgpWkDYsU+tbdd/w6tb7riCAh9RtrKXlR64Yur6ZMkuCU7/66 rx3s0EQEeLdQYi4/LN8+4UfDateIm+IATVCph5RfeRCJcFEKiwlO4qnuGeVXcTuP a21jJrK7pWj06BnQeWBt32zz6mwv3AfWXnehBajU94gaLzFAN8spsCK6 -----END CERTIFICATE-----Generated at Tue May 12 22:10:16 2026 by rpki-client