$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FF5E59BD445AE731E58ED471848043C324931D05.cer File: FF5E59BD445AE731E58ED471848043C324931D05.cer (raw, json) Hash identifier: Nr2kd62mrjum06Xfs6JXsWznNKcFfzyPtmxkZ5jZQYw= Subject key identifier: FF:5E:59:BD:44:5A:E7:31:E5:8E:D4:71:84:80:43:C3:24:93:1D:05 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 635E94C2309AEF941D38B72ED91E5DD321D3FF72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:59:24 +0000 Certificate not after: Sun 02 May 2027 01:04:24 +0000 Subordinate resources: IP: 103.143.224.0/23 IP: 2405:5c40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:5e:94:c2:30:9a:ef:94:1d:38:b7:2e:d9:1e:5d:d3:21:d3:ff:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:59:24 2026 GMT Not After : May 2 01:04:24 2027 GMT Subject: CN=FF5E59BD445AE731E58ED471848043C324931D05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:08:14:d7:3f:10:66:cd:e7:bd:82:a6:82:f0: c1:06:4c:a7:e9:c1:99:50:bc:21:fd:4c:68:b2:7d: 52:bc:2e:62:c6:0e:26:54:b7:05:dc:f7:25:59:0d: 96:2e:c6:17:1b:c6:86:87:d8:6d:ab:a5:26:65:e9: cd:8a:e8:02:32:21:f2:25:a9:b4:3e:51:6b:55:a1: 93:df:15:2d:00:2d:a1:71:d4:6f:12:a1:7d:9c:6c: 1f:05:8f:45:b6:19:91:bf:8a:21:3b:03:b9:85:a6: 49:95:2e:80:a4:8f:28:37:e2:5f:44:82:56:97:94: 3b:20:98:dd:e9:4a:78:d7:f5:4c:cf:6d:15:52:86: ae:82:ba:90:63:6d:df:55:00:e2:70:91:fe:4e:4f: c1:74:2e:42:b8:7b:be:e4:8b:67:cc:dc:da:e0:a5: 21:50:b7:18:a4:b4:2e:c1:c9:9c:f7:cd:9b:4d:86: 99:2b:12:6b:fd:0f:e5:ad:1b:ea:f8:ea:a9:9f:cb: 56:a3:72:c2:7a:8c:d4:c6:e6:a4:8b:28:66:8d:6b: ab:9e:a9:40:f6:3e:eb:12:e0:13:ab:96:32:06:c2: 42:b1:9b:3c:b5:e6:5d:a0:c1:65:fc:c4:0e:a5:e1: 62:7b:12:d9:3e:67:84:2e:4e:e0:c5:ca:7b:d7:d5: 12:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:5E:59:BD:44:5A:E7:31:E5:8E:D4:71:84:80:43:C3:24:93:1D:05 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/FF5E59BD445AE731E58ED471848043C324931D05.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.224.0/23 IPv6: 2405:5c40::/32 Signature Algorithm: sha256WithRSAEncryption 73:e9:93:d6:db:ee:41:1e:29:0a:a9:de:22:83:e0:7f:53:6d: 4f:b6:a8:b7:4c:e7:31:ad:15:ce:50:30:28:3c:ac:48:00:84: 44:66:22:23:b0:21:c5:83:bf:ca:86:6c:af:56:77:19:7c:97: 2c:b6:b5:30:67:9c:29:0b:54:d2:d6:2d:b5:93:6f:b8:69:4a: 96:09:75:44:2c:06:a6:63:1c:bf:04:3e:4f:dd:90:b3:34:ca: db:8a:09:8c:ad:04:ed:a8:bb:0e:a3:a1:a8:ed:09:a3:90:1a: 8e:cc:25:33:a9:90:d4:f8:cc:72:a5:3f:e2:f2:ea:6b:34:36: 5b:f0:65:34:17:3d:e3:8e:a6:65:e9:9b:c5:57:d0:a2:2a:4d: b8:aa:4a:82:55:74:9f:70:69:fd:bd:82:1c:ef:24:a5:88:a3: f6:31:ca:09:02:13:13:8c:f2:cf:77:85:d9:7b:b9:57:09:9e: 41:11:04:f8:d7:71:33:39:57:d1:6d:ae:b1:d0:a7:dd:5f:5f: 3a:77:f7:be:16:91:4b:37:ae:b2:26:2b:b2:7a:8d:cc:55:36: 08:d9:70:20:3b:7a:ec:6d:bd:82:fd:2f:11:c8:7b:5b:20:d3: 40:c4:ca:ba:53:9f:80:35:15:07:6a:a1:e1:1e:c9:d5:aa:fc: 7b:a8:23:31 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUY16UwjCa75QdOLcu2R5d0yHT/3IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTkyNFoX DTI3MDUwMjAxMDQyNFowMzExMC8GA1UEAxMoRkY1RTU5QkQ0NDVBRTczMUU1OEVE NDcxODQ4MDQzQzMyNDkzMUQwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALsIFNc/EGbN572CpoLwwQZMp+nBmVC8If1MaLJ9UrwuYsYOJlS3Bdz3JVkN li7GFxvGhofYbaulJmXpzYroAjIh8iWptD5Ra1Whk98VLQAtoXHUbxKhfZxsHwWP RbYZkb+KITsDuYWmSZUugKSPKDfiX0SCVpeUOyCY3elKeNf1TM9tFVKGroK6kGNt 31UA4nCR/k5PwXQuQrh7vuSLZ8zc2uClIVC3GKS0LsHJnPfNm02GmSsSa/0P5a0b 6vjqqZ/LVqNywnqM1MbmpIsoZo1rq56pQPY+6xLgE6uWMgbCQrGbPLXmXaDBZfzE DqXhYnsS2T5nhC5O4MXKe9fVElECAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP9eWb1EWucx5Y7UcYSAQ8Mkkx0FMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc3NzBmZWViLTJjYWEtNDc2YS1hYjQzLWY2NTJhMTFmZDA4Yy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83NzcwZmVl Yi0yY2FhLTQ3NmEtYWI0My1mNjUyYTExZmQwOGMvMC9GRjVFNTlCRDQ0NUFFNzMx RTU4RUQ0NzE4NDgwNDNDMzI0OTMxRDA1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ4/gMA0EAgACMAcDBQAkBVxAMA0GCSqGSIb3DQEBCwUAA4IBAQBz6ZPW2+5B HikKqd4ig+B/U21Ptqi3TOcxrRXOUDAoPKxIAIREZiIjsCHFg7/KhmyvVncZfJcs trUwZ5wpC1TS1i21k2+4aUqWCXVELAamYxy/BD5P3ZCzNMrbigmMrQTtqLsOo6Go 7QmjkBqOzCUzqZDU+MxypT/i8uprNDZb8GU0Fz3jjqZl6ZvFV9CiKk24qkqCVXSf cGn9vYIc7ySliKP2McoJAhMTjPLPd4XZe7lXCZ5BEQT413EzOVfRba6x0KfdX186 d/e+FpFLN66yJiuyeo3MVTYI2XAgO3rsbb2C/S8RyHtbINNAxMq6U5+ANRUHaqHh HsnVqvx7qCMx -----END CERTIFICATE-----Generated at Wed May 13 02:36:36 2026 by rpki-client