$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer File: FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer (raw, json) Hash identifier: VYciQwHvlR52YDZwwd0PKW2sMOMT3ZD0ADZVb1YP0PQ= Subject key identifier: FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 43A3DDD747055A85B6E6B65605F2F5705A8CFBA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:45:44 +0000 Certificate not after: Sun 02 May 2027 00:50:44 +0000 Subordinate resources: IP: 103.87.66.0/23 IP: 103.94.238.0/23 IP: 2001:df0:7b00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a3:dd:d7:47:05:5a:85:b6:e6:b6:56:05:f2:f5:70:5a:8c:fb:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:45:44 2026 GMT Not After : May 2 00:50:44 2027 GMT Subject: CN=FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:46:62:f9:77:9b:ca:db:bf:98:c9:9f:91:b1: 66:30:8b:4f:fe:f2:1f:ca:38:fd:b0:11:cb:be:70: 99:6a:61:6c:90:e9:9b:a4:0e:91:52:0f:9e:85:23: d8:77:95:fc:d1:4f:94:63:c4:5f:f6:2e:0b:db:77: 7c:47:34:d5:88:80:38:2c:9f:5e:87:1a:06:05:bf: 6d:43:85:90:c1:0d:c3:c1:cf:24:42:3d:28:35:b9: 53:38:5f:70:d9:11:52:65:67:af:ec:73:53:ac:c2: 23:e3:7a:74:62:bb:a1:1a:1e:34:5d:f1:92:5c:ba: 03:62:53:24:04:af:09:90:ba:48:a6:d0:2a:83:93: 6d:6a:2e:38:80:a6:f1:a7:9d:ce:2d:7a:95:de:71: 4a:c9:05:09:03:28:7a:f2:0d:d2:47:04:85:3d:be: 53:6c:23:f4:c7:a8:e7:d6:e1:9d:04:9c:59:cb:d9: 91:33:33:49:3e:94:b3:bb:29:f6:06:69:53:1c:b2: 00:3c:ae:e0:97:72:b8:a5:c8:e7:3a:9c:d7:74:e9: 2a:ed:8b:7a:d8:2f:6c:fc:22:77:72:23:c5:af:ea: 29:e7:54:ed:ab:5f:0c:cc:10:95:c1:3c:ed:50:32: e5:89:3a:3d:9f:64:ef:d8:a8:bf:cb:f0:17:4c:2e: 68:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.87.66.0/23 103.94.238.0/23 IPv6: 2001:df0:7b00::/48 Signature Algorithm: sha256WithRSAEncryption 0e:ff:f5:10:4b:5b:95:cf:ff:37:47:08:bb:76:35:27:3e:50: 42:f6:8c:08:85:91:b1:a3:42:e9:b8:4b:0f:3f:60:8c:d7:43: 40:0c:a8:e0:70:bb:e7:f6:7c:1e:86:bf:20:31:ff:05:a8:c6: 56:d8:38:0a:a9:af:5b:4e:66:e2:cf:9b:af:48:59:1e:3d:77: 0a:d4:de:e8:20:7c:bd:53:bf:7b:39:58:18:67:d4:df:ab:09: b4:29:51:f6:da:74:01:9d:22:ff:23:6c:bd:da:64:94:5a:df: 39:7b:dc:49:ee:43:35:00:89:70:2b:55:22:e4:14:cf:36:33: 86:71:8c:1c:f9:c0:d3:e5:16:f6:2c:3e:3e:e5:d0:e4:c3:9c: ed:e6:a6:e4:89:c2:04:89:0b:90:88:32:cd:ae:66:4e:4e:a6: 7b:70:32:45:f2:24:ab:5b:75:eb:c6:e5:4c:70:5d:12:06:ea: 5d:20:89:dc:30:a4:60:6b:2c:9a:2f:94:1e:1b:f3:5c:24:1d: 94:16:4f:e2:35:98:e4:f5:d0:2a:3a:15:62:7f:58:91:93:9d: 6e:47:19:b4:22:d2:81:40:59:58:d2:b0:ce:9b:3e:c5:57:93: fa:ca:57:0c:05:d5:26:d2:b4:f0:de:4f:71:8d:8c:38:63:0a: 15:15:f6:96 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUQ6Pd10cFWoW25rZWBfL1cFqM+6UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDU0NFoX DTI3MDUwMjAwNTA0NFowMzExMC8GA1UEAxMoRkVFNTcwQTNGQzc4RjFGMThFODU4 QUVEQTg1MzNEQTJEQkE4MTI1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFGYvl3m8rbv5jJn5GxZjCLT/7yH8o4/bARy75wmWphbJDpm6QOkVIPnoUj 2HeV/NFPlGPEX/YuC9t3fEc01YiAOCyfXocaBgW/bUOFkMENw8HPJEI9KDW5Uzhf cNkRUmVnr+xzU6zCI+N6dGK7oRoeNF3xkly6A2JTJASvCZC6SKbQKoOTbWouOICm 8aedzi16ld5xSskFCQMoevIN0kcEhT2+U2wj9Meo59bhnQScWcvZkTMzST6Us7sp 9gZpUxyyADyu4JdyuKXI5zqc13TpKu2LetgvbPwid3Ijxa/qKedU7atfDMwQlcE8 7VAy5Yk6PZ9k79iov8vwF0wuaI8CAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP7lcKP8ePHxjoWK7ahTPaLbqBJcMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzYyYWY4MzUyLWNkNjUtNGRiNy1iMGNiLTA0OGI0NWU3YTRiZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82MmFmODM1 Mi1jZDY1LTRkYjctYjBjYi0wNDhiNDVlN2E0YmYvMC9GRUU1NzBBM0ZDNzhGMUYx OEU4NThBRURBODUzM0RBMkRCQTgxMjVDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQBZ1dCAwQBZ17uMA8EAgACMAkDBwAgAQ3wewAwDQYJKoZIhvcNAQELBQADggEB AA7/9RBLW5XP/zdHCLt2NSc+UEL2jAiFkbGjQum4Sw8/YIzXQ0AMqOBwu+f2fB6G vyAx/wWoxlbYOAqpr1tOZuLPm69IWR49dwrU3uggfL1Tv3s5WBhn1N+rCbQpUfba dAGdIv8jbL3aZJRa3zl73EnuQzUAiXArVSLkFM82M4ZxjBz5wNPlFvYsPj7l0OTD nO3mpuSJwgSJC5CIMs2uZk5OpntwMkXyJKtbdevG5UxwXRIG6l0gidwwpGBrLJov lB4b81wkHZQWT+I1mOT10Co6FWJ/WJGTnW5HGbQi0oFAWVjSsM6bPsVXk/rKVwwF 1SbStPDeT3GNjDhjChUV9pY= -----END CERTIFICATE-----Generated at Tue May 12 22:10:03 2026 by rpki-client