$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FF5F881DC07CC4A9A985D594360658D202A551B7.cer File: FF5F881DC07CC4A9A985D594360658D202A551B7.cer (raw, json) Hash identifier: ZcuOXGlHN9JunbAl5bU+KdRAaTfPIA4xAFCQCzrdUhM= Subject key identifier: FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 572883E2B61AD5197F575B2761C43844F876581D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:02:38 +0000 Certificate not after: Sun 02 May 2027 01:07:38 +0000 Subordinate resources: IP: 103.209.248.0/22 IP: 2405:6380::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:28:83:e2:b6:1a:d5:19:7f:57:5b:27:61:c4:38:44:f8:76:58:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:02:38 2026 GMT Not After : May 2 01:07:38 2027 GMT Subject: CN=FF5F881DC07CC4A9A985D594360658D202A551B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0a:7a:a5:b4:2b:ca:d5:18:d4:c1:65:bd:b4: a3:02:54:56:46:b8:17:60:d0:11:b1:1e:07:b2:d5: 13:12:a0:8a:c4:d1:f9:99:d2:cd:47:6d:0a:1c:e3: db:d1:ac:4c:eb:c6:ae:61:1a:4f:5a:9c:3d:3c:56: 4d:98:9e:e7:33:7e:ac:02:d0:55:72:28:94:79:64: 5d:2b:51:62:c5:1b:c5:8a:f4:7a:01:23:1e:0a:00: 64:ee:9d:31:c8:26:10:ba:db:ef:a6:01:9d:53:c3: 24:1d:84:9e:2a:b6:01:2b:8b:78:77:d3:f6:14:78: b2:16:27:01:54:58:95:4f:8e:46:00:55:d3:e5:fd: 26:bc:e5:3f:d6:fd:2f:01:d0:bf:e3:05:52:63:12: 5e:60:6a:79:7d:67:e8:8f:ad:45:a9:f2:38:66:f4: 87:f9:8e:a5:2e:9e:5a:e8:d8:ba:04:e3:59:c4:c1: cb:37:f0:0f:a8:a7:71:88:8d:b2:d3:d6:90:50:e8: 53:02:ef:91:4e:65:8b:ed:a2:9a:da:81:eb:1b:2a: e7:32:ad:60:60:ea:ac:dd:84:e9:53:53:d1:da:88: 9f:6d:fe:73:7d:1a:dd:ce:26:ea:7c:16:f6:06:66: f4:32:e4:d7:49:2e:db:7b:26:e3:ca:5f:ff:c6:bf: 9b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:5F:88:1D:C0:7C:C4:A9:A9:85:D5:94:36:06:58:D2:02:A5:51:B7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/FF5F881DC07CC4A9A985D594360658D202A551B7.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.209.248.0/22 IPv6: 2405:6380::/32 Signature Algorithm: sha256WithRSAEncryption 31:83:d6:d9:57:7d:f5:ad:d9:07:1c:a2:9c:13:fa:8b:bb:cc: 5a:30:eb:2c:33:f2:e2:da:01:f8:7c:7f:6c:e9:cb:0c:71:0f: a9:b3:a2:32:0b:9e:27:50:59:5e:96:8e:9d:75:b4:b2:65:e7: 31:65:d5:7d:9b:4f:4c:8a:f2:e1:ea:55:cc:12:7d:c0:c4:22: b2:2a:83:e9:5e:8c:b9:b0:fe:fa:27:cc:2b:b6:80:6e:b6:63: 15:89:a6:a2:76:70:f1:ac:3e:05:a3:b0:88:30:5f:33:35:52: 51:7c:29:86:51:c3:5d:be:bc:84:55:36:b8:b0:a2:69:49:cd: f2:f1:60:0f:40:5c:33:c5:e5:1e:bc:30:73:10:4d:36:c1:ef: 4e:27:3e:8e:ed:41:f6:37:44:37:04:d4:e8:a2:26:be:ac:07: 18:57:7e:ef:c2:25:8b:ef:71:ae:a8:99:db:0c:8f:e8:1d:ae: 66:80:95:e8:b6:0f:27:97:95:ec:44:5e:c6:7c:43:09:91:aa: 4e:04:a9:1a:d3:8c:99:8b:a7:cc:7c:53:d5:7f:a7:f6:e0:86: e3:93:df:32:79:64:05:ed:ed:71:91:a2:4c:2f:99:35:0b:1d: d2:fd:57:33:7d:8c:a3:76:93:a8:29:f4:28:af:7d:64:5e:ec: a3:c7:a7:43 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUVyiD4rYa1Rl/V1snYcQ4RPh2WB0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDIzOFoX DTI3MDUwMjAxMDczOFowMzExMC8GA1UEAxMoRkY1Rjg4MURDMDdDQzRBOUE5ODVE NTk0MzYwNjU4RDIwMkE1NTFCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKoKeqW0K8rVGNTBZb20owJUVka4F2DQEbEeB7LVExKgisTR+ZnSzUdtChzj 29GsTOvGrmEaT1qcPTxWTZie5zN+rALQVXIolHlkXStRYsUbxYr0egEjHgoAZO6d McgmELrb76YBnVPDJB2Eniq2ASuLeHfT9hR4shYnAVRYlU+ORgBV0+X9JrzlP9b9 LwHQv+MFUmMSXmBqeX1n6I+tRanyOGb0h/mOpS6eWujYugTjWcTByzfwD6incYiN stPWkFDoUwLvkU5li+2imtqB6xsq5zKtYGDqrN2E6VNT0dqIn23+c30a3c4m6nwW 9gZm9DLk10ku23sm48pf/8a/m6sCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP9fiB3AfMSpqYXVlDYGWNICpVG3MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdjMDc0Y2Q4LTI4MzAtNGVhYi1iZGQ0LWE4MDdlYzUxMTVkYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83YzA3NGNk OC0yODMwLTRlYWItYmRkNC1hODA3ZWM1MTE1ZGEvMC9GRjVGODgxREMwN0NDNEE5 QTk4NUQ1OTQzNjA2NThEMjAyQTU1MUI3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ9H4MA0EAgACMAcDBQAkBWOAMA0GCSqGSIb3DQEBCwUAA4IBAQAxg9bZV331 rdkHHKKcE/qLu8xaMOssM/Li2gH4fH9s6csMcQ+ps6IyC54nUFlelo6ddbSyZecx ZdV9m09MivLh6lXMEn3AxCKyKoPpXoy5sP76J8wrtoButmMViaaidnDxrD4Fo7CI MF8zNVJRfCmGUcNdvryEVTa4sKJpSc3y8WAPQFwzxeUevDBzEE02we9OJz6O7UH2 N0Q3BNTooia+rAcYV37vwiWL73GuqJnbDI/oHa5mgJXotg8nl5XsRF7GfEMJkapO BKka04yZi6fMfFPVf6f24Ibjk98yeWQF7e1xkaJML5k1Cx3S/VczfYyjdpOoKfQo r31kXuyjx6dD -----END CERTIFICATE-----Generated at Tue May 12 22:03:02 2026 by rpki-client