$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer File: 0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer (raw, json) Hash identifier: M9z9HnrdFbP+UN6RgJxO/oURXlPJngrUfktg+xQ6FTE= Subject key identifier: 0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4B1CBEEA2382260B59B4E3FE2FF303C9E3FB5353 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:14:04 +0000 Certificate not after: Sun 02 May 2027 00:19:04 +0000 Subordinate resources: IP: 103.5.50.0/23 IP: 103.20.90.0/23 IP: 163.53.192.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:1c:be:ea:23:82:26:0b:59:b4:e3:fe:2f:f3:03:c9:e3:fb:53:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:14:04 2026 GMT Not After : May 2 00:19:04 2027 GMT Subject: CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:28:5f:bc:46:6e:11:5c:f1:ff:d3:88:34:5f: 10:dd:5f:2a:c9:fa:91:ad:9e:c3:1f:d8:e1:3c:4d: 8c:e1:0f:6c:50:f0:87:76:18:77:ea:06:89:6e:f4: cf:77:bf:2d:60:1f:cc:e7:5d:30:5e:b3:fa:ad:cc: 0a:b8:19:01:9a:8e:5f:a1:88:ce:40:d6:41:89:74: 7f:f7:e8:33:ef:6a:85:4c:9c:ae:98:a9:49:89:35: bb:6c:cd:28:d7:86:48:86:ed:0a:3a:01:7e:99:1f: a7:52:a1:24:4b:54:55:58:f2:d7:eb:1b:21:b3:1a: 23:6f:b4:db:37:24:d4:d7:f7:fe:40:9b:75:06:10: 60:42:73:5e:55:06:2d:71:a0:3a:6b:84:27:38:f4: 7a:0e:a1:bf:e5:7d:fc:ba:6d:9a:5d:3e:06:03:02: 20:b5:df:77:b4:ac:4c:79:9e:9b:3e:af:72:b1:c3: b2:be:1f:a6:7a:4c:7f:ec:14:73:c1:07:16:9d:27: 10:08:b3:81:3d:a4:16:b7:b0:b4:44:87:ae:a8:62: df:a3:55:f7:95:e6:88:5c:4a:4f:f9:42:d2:06:e2: 09:72:10:7f:63:61:05:a6:46:31:64:85:44:f0:05: b0:52:e2:82:73:40:b1:23:d9:90:59:bd:ad:24:a2: c3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.5.50.0/23 103.20.90.0/23 163.53.192.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:7a:27:a0:16:56:e2:dd:56:e9:9c:b3:5c:56:ec:4e:87:7f: fd:08:24:37:f2:c3:13:37:7c:f0:be:89:63:9d:39:64:6c:90: dd:6b:db:65:56:c7:e1:ab:70:e0:b9:21:a4:1b:98:8c:d8:12: 7e:8e:a5:d7:2d:c3:55:5f:52:f5:18:eb:21:ec:05:25:b1:84: fc:d5:d4:06:3d:b5:68:54:db:6c:89:12:78:f5:0b:65:10:eb: 3d:a8:fb:ea:9c:83:4c:21:7a:5c:45:9d:e8:d3:21:ea:eb:13: 03:fb:2a:b7:14:a6:ac:1b:5a:7d:0b:e8:90:1b:22:3b:bc:e6: d3:2d:62:3e:e3:d3:b0:1f:a3:d8:f6:27:46:b6:e1:c3:96:93: 89:f6:56:1d:da:88:d5:d9:32:e5:52:cf:9a:e1:87:ba:03:a2: c1:47:ff:95:6a:85:1c:be:96:3c:67:6d:c5:2c:d8:be:c4:00: dc:83:b7:e9:5b:ec:b1:77:41:f8:7e:cd:1d:03:2d:f3:45:5b: b6:49:a4:bd:1b:56:72:5a:f0:82:e0:9f:e0:15:81:34:cd:32: 2f:4d:45:b6:33:0f:7c:8c:ca:42:66:a1:f3:df:06:08:7e:3b: d1:bf:3f:b9:91:b7:42:1e:b2:69:53:72:c0:83:0a:e0:13:c5: 47:bd:5a:46 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUSxy+6iOCJgtZtOP+L/MDyeP7U1MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTQwNFoX DTI3MDUwMjAwMTkwNFowMzExMC8GA1UEAxMoMEZCNDI0QjIwRDZBNDU4MEU2RDMy MzNGQ0YyRUI5RjJCREE5OUNCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJwoX7xGbhFc8f/TiDRfEN1fKsn6ka2ewx/Y4TxNjOEPbFDwh3YYd+oGiW70 z3e/LWAfzOddMF6z+q3MCrgZAZqOX6GIzkDWQYl0f/foM+9qhUycrpipSYk1u2zN KNeGSIbtCjoBfpkfp1KhJEtUVVjy1+sbIbMaI2+02zck1Nf3/kCbdQYQYEJzXlUG LXGgOmuEJzj0eg6hv+V9/Lptml0+BgMCILXfd7SsTHmemz6vcrHDsr4fpnpMf+wU c8EHFp0nEAizgT2kFrewtESHrqhi36NV95XmiFxKT/lC0gbiCXIQf2NhBaZGMWSF RPAFsFLignNAsSPZkFm9rSSiw0kCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFA+0JLINakWA5tMjP88uufK9qZywMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzMzOGQyNzU1LTM4MGQtNDc3ZS1iZjI1LTBhZjI5MDI2YmQ3MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zMzhkMjc1 NS0zODBkLTQ3N2UtYmYyNS0wYWYyOTAyNmJkNzAvMC8wRkI0MjRCMjBENkE0NTgw RTZEMzIzM0ZDRjJFQjlGMkJEQTk5Q0IwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATAS AwQBZwUyAwQBZxRaAwQCozXAMA0GCSqGSIb3DQEBCwUAA4IBAQAeeiegFlbi3Vbp nLNcVuxOh3/9CCQ38sMTN3zwvoljnTlkbJDda9tlVsfhq3DguSGkG5iM2BJ+jqXX LcNVX1L1GOsh7AUlsYT81dQGPbVoVNtsiRJ49QtlEOs9qPvqnINMIXpcRZ3o0yHq 6xMD+yq3FKasG1p9C+iQGyI7vObTLWI+49OwH6PY9idGtuHDlpOJ9lYd2ojV2TLl Us+a4Ye6A6LBR/+VaoUcvpY8Z23FLNi+xADcg7fpW+yxd0H4fs0dAy3zRVu2SaS9 G1ZyWvCC4J/gFYE0zTIvTUW2Mw98jMpCZqHz3wYIfjvRvz+5kbdCHrJpU3LAgwrg E8VHvVpG -----END CERTIFICATE-----Generated at Wed May 6 02:45:50 2026 by rpki-client