$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.cer File: FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.cer (raw, json) Hash identifier: LPGBbMz5tCiHnneWmsb5v7jeSMxz3icA26S+1BZITIQ= Subject key identifier: FE:D5:7B:6A:0C:A0:BB:25:22:DC:00:EC:0D:79:B4:7B:10:D2:D6:AB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3F18DDAC7437C45D8449659062DA506981321211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:40:48 +0000 Certificate not after: Sun 02 May 2027 00:45:48 +0000 Subordinate resources: IP: 103.39.52.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:18:dd:ac:74:37:c4:5d:84:49:65:90:62:da:50:69:81:32:12:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:40:48 2026 GMT Not After : May 2 00:45:48 2027 GMT Subject: CN=FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b1:e1:b8:89:6c:b3:64:1f:0a:7e:4a:69:11: f1:0a:57:16:c8:7f:2f:dd:f5:54:3a:60:bb:62:17: 4d:ba:71:74:01:13:72:ac:bc:c6:d3:14:fd:6f:02: 72:4f:58:2f:e9:8e:e1:15:7a:3d:88:32:53:9c:08: 99:8a:16:ec:1a:f8:25:69:54:cc:b3:94:14:ed:93: ea:2d:cc:78:c0:b5:bb:b0:b3:43:1d:d9:a3:76:3d: 80:9e:85:eb:4d:e5:e3:eb:64:e4:4a:00:90:e9:b3: ae:60:a7:be:16:06:09:4a:80:ee:72:6f:4c:06:66: a4:ca:8b:5d:31:89:aa:0a:9f:10:ef:5a:ff:ae:cb: e6:95:c5:97:3c:6f:75:70:96:0e:42:b3:5f:6f:ab: c0:44:5c:da:9c:c3:d6:04:e8:1e:e7:01:01:6b:75: d1:cf:02:30:8d:fa:54:e1:c6:64:0a:9d:84:64:94: 6e:21:75:53:04:3f:4c:b9:f1:b9:36:41:01:7b:f2: 85:97:c1:cb:b2:05:58:f5:e5:1b:c1:26:49:46:b9: 13:5e:08:72:1e:50:84:6b:68:a0:c0:de:ca:fa:25: 9a:28:bd:55:24:7a:3a:64:19:5a:66:c1:e9:fe:10: 1f:5b:8f:d4:ca:a9:28:fe:38:57:af:67:47:e5:67: 34:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FE:D5:7B:6A:0C:A0:BB:25:22:DC:00:EC:0D:79:B4:7B:10:D2:D6:AB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.39.52.0/24 Signature Algorithm: sha256WithRSAEncryption 88:71:88:b5:32:20:f6:6c:5c:ab:f1:c1:b4:ea:f4:e8:8c:19: 85:20:3f:59:60:66:3c:5f:37:d1:bf:42:48:4a:9b:bf:bf:74: 0f:f9:67:2b:e2:f6:cb:d1:fc:47:23:00:a6:09:2f:44:2d:d1: 33:0b:44:56:9b:73:0e:19:1b:69:d6:c7:b1:2c:cd:d9:4e:f4: 26:7a:18:43:29:f4:b0:16:72:ee:c8:06:95:45:27:01:3c:57: 74:f0:e5:ce:ed:c5:09:55:13:0b:b8:16:84:8c:57:8a:aa:b5: 73:7d:e7:ad:08:80:87:32:39:2d:17:22:3b:e0:cd:fb:2e:c2: 54:96:f2:3f:dd:be:9a:04:55:7c:10:97:12:84:b7:44:13:4c: 9b:e2:4b:37:44:52:82:e8:36:19:d7:56:09:0c:86:ce:69:21: 60:55:25:43:1f:9a:c3:cd:a6:59:40:bd:c7:0e:3e:5c:ac:0f: 81:2e:c6:f2:09:e8:0a:ac:20:ae:bf:12:8b:d5:17:42:bf:df: 39:f9:a9:f5:9d:76:e3:8d:d9:92:91:3d:6d:41:ed:33:f9:f6: 4e:07:8e:96:c3:4c:ef:fc:f3:5f:b8:33:ed:6f:c4:ea:c3:f3: 75:d3:a4:c7:c8:e7:dc:32:22:e6:46:dc:1e:bd:b1:4b:7d:54: ae:fb:ce:96 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUPxjdrHQ3xF2ESWWQYtpQaYEyEhEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDA0OFoX DTI3MDUwMjAwNDU0OFowMzExMC8GA1UEAxMoRkVENTdCNkEwQ0EwQkIyNTIyREMw MEVDMEQ3OUI0N0IxMEQyRDZBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOex4biJbLNkHwp+SmkR8QpXFsh/L931VDpgu2IXTbpxdAETcqy8xtMU/W8C ck9YL+mO4RV6PYgyU5wImYoW7Br4JWlUzLOUFO2T6i3MeMC1u7CzQx3Zo3Y9gJ6F 603l4+tk5EoAkOmzrmCnvhYGCUqA7nJvTAZmpMqLXTGJqgqfEO9a/67L5pXFlzxv dXCWDkKzX2+rwERc2pzD1gToHucBAWt10c8CMI36VOHGZAqdhGSUbiF1UwQ/TLnx uTZBAXvyhZfBy7IFWPXlG8EmSUa5E14Ich5QhGtooMDeyvolmii9VSR6OmQZWmbB 6f4QH1uP1MqpKP44V69nR+VnNH0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP7Ve2oMoLslItwA7A15tHsQ0tarMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzViOTc1MmY2LTYwNjYtNGIzOC04N2NjLTliYTYzZDE5ZTIyYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81Yjk3NTJm Ni02MDY2LTRiMzgtODdjYy05YmE2M2QxOWUyMmMvMC9GRUQ1N0I2QTBDQTBCQjI1 MjJEQzAwRUMwRDc5QjQ3QjEwRDJENkFCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZyc0MA0GCSqGSIb3DQEBCwUAA4IBAQCIcYi1MiD2bFyr8cG06vTojBmFID9Z YGY8XzfRv0JISpu/v3QP+Wcr4vbL0fxHIwCmCS9ELdEzC0RWm3MOGRtp1sexLM3Z TvQmehhDKfSwFnLuyAaVRScBPFd08OXO7cUJVRMLuBaEjFeKqrVzfeetCICHMjkt FyI74M37LsJUlvI/3b6aBFV8EJcShLdEE0yb4ks3RFKC6DYZ11YJDIbOaSFgVSVD H5rDzaZZQL3HDj5crA+BLsbyCegKrCCuvxKL1RdCv985+an1nXbjjdmSkT1tQe0z +fZOB46Ww0zv/PNfuDPtb8Tqw/N106THyOfcMiLmRtwevbFLfVSu+86W -----END CERTIFICATE-----Generated at Tue May 12 22:15:50 2026 by rpki-client