$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FDC83C8199C76D091E2AD9BFB460926573605DAC.cer File: FDC83C8199C76D091E2AD9BFB460926573605DAC.cer (raw, json) Hash identifier: 1oNBi5Q+cc3IeC10dFMfr4uJYUZf8dkjiINuNkgpSZA= Subject key identifier: FD:C8:3C:81:99:C7:6D:09:1E:2A:D9:BF:B4:60:92:65:73:60:5D:AC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2F350BF89AC980B5DBBEE171B50F7E5990BC6EE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:26:58 +0000 Certificate not after: Sun 02 May 2027 01:31:58 +0000 Subordinate resources: IP: 103.4.174.0/23 IP: 103.23.234.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:35:0b:f8:9a:c9:80:b5:db:be:e1:71:b5:0f:7e:59:90:bc:6e:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:26:58 2026 GMT Not After : May 2 01:31:58 2027 GMT Subject: CN=FDC83C8199C76D091E2AD9BFB460926573605DAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:84:ee:84:53:9f:eb:d6:3e:36:96:46:dd:e9: e2:18:56:5b:ab:19:87:c6:99:d4:ef:e4:1a:33:44: a9:2f:b0:8b:44:16:c6:91:60:f5:c5:0c:8c:fa:98: 8c:ed:aa:0c:a5:9b:30:a2:b7:97:7c:ca:e8:ce:00: 97:1e:47:7b:a7:07:5d:a1:b0:2c:d7:68:e5:5c:ef: d4:70:3d:ab:2b:4b:ba:89:d5:14:91:ee:f5:6d:70: 6d:c4:d3:5c:b4:70:10:ea:b0:2f:8f:4a:df:00:70: 63:81:22:f8:3f:02:0c:2f:02:8a:f7:ce:12:b9:01: 23:0b:d0:6d:49:d6:2e:05:b5:16:5f:fa:2d:a3:62: 65:28:d1:cb:6d:7a:44:e0:06:2f:15:a1:93:20:32: 36:83:d0:9a:e8:0b:b4:69:0e:f8:db:7d:da:6e:76: c0:44:46:c7:a4:f4:0a:85:08:82:00:86:12:ef:d7: 39:be:2f:1e:f0:ac:c4:11:93:1c:e2:c4:ed:9a:f5: 4e:90:98:93:d6:8d:24:e4:47:ab:3b:0a:91:0e:06: 0a:4b:99:da:fd:73:a2:45:06:c2:4a:ef:93:27:48: 0d:d2:cd:9e:27:1b:df:da:6f:40:ee:9c:98:82:51: da:20:4a:ea:f8:81:6c:03:d0:50:db:d5:b6:f0:10: 5a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FD:C8:3C:81:99:C7:6D:09:1E:2A:D9:BF:B4:60:92:65:73:60:5D:AC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/FDC83C8199C76D091E2AD9BFB460926573605DAC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.174.0/23 103.23.234.0/23 Signature Algorithm: sha256WithRSAEncryption 32:7c:cd:5c:a0:e3:cd:27:1e:aa:a8:dd:fb:6b:01:a5:3b:e3: e5:b9:9f:ad:97:9e:69:91:90:e3:3f:51:8d:9f:da:8f:39:67: e1:bd:c5:9a:5b:96:24:91:3a:6d:9a:0a:a0:62:30:08:e1:16: 9c:0b:45:c6:d6:8c:5d:bb:28:52:35:e4:90:bd:67:17:f9:e4: ac:8d:c8:f5:c5:47:d5:b3:da:4c:ea:24:2c:11:95:55:5d:95: 52:13:73:ce:71:ad:73:a0:82:e9:df:e7:1e:d3:b3:67:b7:5a: 8c:87:03:e2:88:33:d7:57:b6:73:93:6e:40:3d:77:21:40:36: 4c:4c:7c:31:58:8b:c5:31:4d:77:9c:c8:4f:8f:e5:d3:84:25: c7:d2:8e:03:52:8c:20:be:e5:55:91:4b:00:e7:f0:d1:63:b9: be:1b:b6:e1:21:1a:4c:25:2a:70:29:33:fd:06:c1:eb:13:be: bd:ea:00:fc:ff:21:e3:16:3e:ac:ea:34:8f:02:01:cf:54:9a: 21:aa:84:2e:86:65:be:6a:67:77:ef:65:4a:fb:73:7b:46:e5: f3:4b:c4:11:d5:28:18:db:95:12:b1:b6:28:e5:5d:6d:ba:1d: 73:4b:a0:5f:bf:15:c3:03:31:bb:4a:62:42:c5:5d:5c:7a:91: 7e:b1:47:75 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIULzUL+JrJgLXbvuFxtQ9+WZC8bucwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjY1OFoX DTI3MDUwMjAxMzE1OFowMzExMC8GA1UEAxMoRkRDODNDODE5OUM3NkQwOTFFMkFE OUJGQjQ2MDkyNjU3MzYwNURBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2E7oRTn+vWPjaWRt3p4hhWW6sZh8aZ1O/kGjNEqS+wi0QWxpFg9cUMjPqY jO2qDKWbMKK3l3zK6M4Alx5He6cHXaGwLNdo5Vzv1HA9qytLuonVFJHu9W1wbcTT XLRwEOqwL49K3wBwY4Ei+D8CDC8CivfOErkBIwvQbUnWLgW1Fl/6LaNiZSjRy216 ROAGLxWhkyAyNoPQmugLtGkO+Nt92m52wERGx6T0CoUIggCGEu/XOb4vHvCsxBGT HOLE7Zr1TpCYk9aNJORHqzsKkQ4GCkuZ2v1zokUGwkrvkydIDdLNnicb39pvQO6c mIJR2iBK6viBbAPQUNvVtvAQWjcCAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP3IPIGZx20JHirZv7RgkmVzYF2sMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2EwNWY3NjhiLTQyMTgtNGM1ZC04OTNhLTBmZjY5NjUyNjYzOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hMDVmNzY4 Yi00MjE4LTRjNWQtODkzYS0wZmY2OTY1MjY2MzkvMC9GREM4M0M4MTk5Qzc2RDA5 MUUyQUQ5QkZCNDYwOTI2NTczNjA1REFDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQBZwSuAwQBZxfqMA0GCSqGSIb3DQEBCwUAA4IBAQAyfM1coOPNJx6qqN37awGl O+PluZ+tl55pkZDjP1GNn9qPOWfhvcWaW5YkkTptmgqgYjAI4RacC0XG1oxduyhS NeSQvWcX+eSsjcj1xUfVs9pM6iQsEZVVXZVSE3POca1zoILp3+ce07Nnt1qMhwPi iDPXV7Zzk25APXchQDZMTHwxWIvFMU13nMhPj+XThCXH0o4DUowgvuVVkUsA5/DR Y7m+G7bhIRpMJSpwKTP9BsHrE7696gD8/yHjFj6s6jSPAgHPVJohqoQuhmW+amd3 72VK+3N7RuXzS8QR1SgY25USsbYo5V1tuh1zS6BfvxXDAzG7SmJCxV1cepF+sUd1 -----END CERTIFICATE-----Generated at Tue May 12 22:10:00 2026 by rpki-client