$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer File: F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer (raw, json) Hash identifier: u3mem+gwd3DvHWhzaY9yxeC6Pc7HJXIm+NnUJQ0BkfY= Subject key identifier: F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 40C654E994191C8D3F7C70631FE61C0A89D922F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft caRepository: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:11:26 +0000 Certificate not after: Sun 02 May 2027 00:16:26 +0000 Subordinate resources: IP: 103.31.132.0/22 IP: 2402:be80::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 05:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:c6:54:e9:94:19:1c:8d:3f:7c:70:63:1f:e6:1c:0a:89:d9:22:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:11:26 2026 GMT Not After : May 2 00:16:26 2027 GMT Subject: CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:55:70:62:e3:23:60:6c:77:81:f4:5c:4f:6f: 89:d2:26:8f:8b:1d:4a:7f:b0:dc:06:d1:80:2c:af: 14:b0:fe:03:30:1a:6c:42:02:7d:c6:a4:77:5b:0a: 65:d6:ee:31:ff:0c:65:d2:71:fb:f6:76:7d:05:68: 2b:0b:08:be:db:c0:c9:4d:e7:f4:2a:c5:19:66:e3: f5:be:1d:c0:94:53:0b:bd:f2:13:7e:75:13:08:7e: c5:1b:f2:72:07:2a:d0:43:4f:fc:87:af:0d:f6:cc: ab:4f:ef:3d:f3:56:ae:8d:a2:90:9d:82:19:a1:b2: 16:4b:7d:05:c8:86:42:c6:5f:d8:a7:4e:ff:85:70: 49:e1:26:9f:32:52:93:23:f4:c2:ac:97:78:55:21: 5b:02:f8:a0:74:9f:0c:d8:52:3b:ea:95:f2:08:cd: 28:6e:2c:8a:1e:08:33:66:b0:f6:5c:e6:84:5a:52: ee:58:c3:18:6e:e7:52:90:f6:da:28:a9:c4:f7:72: 58:eb:2a:b3:2a:28:92:4a:2f:df:f4:21:01:87:7e: e2:c9:64:01:e7:b2:cd:8b:df:54:c6:38:c0:e2:e7: 5f:68:78:43:6c:f1:2b:49:b3:8d:80:8b:0c:af:7b: e0:b2:44:df:e5:8c:a4:54:39:7c:4a:5c:dc:72:de: c4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.132.0/22 IPv6: 2402:be80::/32 Signature Algorithm: sha256WithRSAEncryption 0a:f9:95:3f:ee:66:6d:1c:42:62:df:a3:1b:3b:35:98:f8:ba: b5:4e:7e:a7:8b:88:97:28:04:96:ec:38:06:8b:11:07:0d:49: 9c:aa:47:04:69:4a:75:26:2f:2c:13:f0:af:6c:a8:63:c7:65: c9:94:76:f8:98:6f:f0:d0:df:a0:f8:23:28:aa:f4:17:3b:74: aa:6b:6c:e6:3b:3b:bb:d2:4b:3d:13:26:88:83:df:e5:92:64: 9c:20:9b:3e:e2:8d:2c:21:3b:94:d1:e8:96:c4:e3:23:57:ea: d2:87:7b:56:16:55:7e:4c:1c:62:51:57:b5:58:83:56:35:71: 3e:e6:68:46:e7:55:87:51:ec:f0:43:c9:dd:97:ad:51:5c:ef: 09:88:cc:61:09:56:f4:55:2c:01:94:e7:bb:46:9b:0c:24:79: 73:83:b2:f9:f2:cf:eb:d1:be:f8:a0:c6:09:46:84:f1:c1:08: 4b:09:63:5b:2e:69:f4:fe:9d:87:4a:8b:6f:9e:3e:fc:e5:35: 2c:ed:55:53:d6:75:c4:8b:1e:2b:8e:e1:81:a9:60:9e:d7:15: 12:59:0b:ba:04:31:03:cb:ad:ae:fe:aa:8d:54:e9:cf:d7:64: 57:eb:11:9f:bc:56:21:31:82:cf:db:53:f3:13:9a:1b:1f:aa: d6:3f:cc:55 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUQMZU6ZQZHI0/fHBjH+YcConZIvAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTEyNloX DTI3MDUwMjAwMTYyNlowMzExMC8GA1UEAxMoRjhFQjZGNEU5MURERDQ3RkE4RTA0 ODFCNjBENEMxODA4NkE4MzJDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALxVcGLjI2Bsd4H0XE9vidImj4sdSn+w3AbRgCyvFLD+AzAabEICfcakd1sK ZdbuMf8MZdJx+/Z2fQVoKwsIvtvAyU3n9CrFGWbj9b4dwJRTC73yE351Ewh+xRvy cgcq0ENP/IevDfbMq0/vPfNWro2ikJ2CGaGyFkt9BciGQsZf2KdO/4VwSeEmnzJS kyP0wqyXeFUhWwL4oHSfDNhSO+qV8gjNKG4sih4IM2aw9lzmhFpS7ljDGG7nUpD2 2iipxPdyWOsqsyookkov3/QhAYd+4slkAeeyzYvfVMY4wOLnX2h4Q2zxK0mzjYCL DK974LJE3+WMpFQ5fEpc3HLexLECAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPjrb06R3dR/qOBIG2DUwYCGqDLJMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzMwMGY0ZjM3LWM3ZmItNDdkMC04YTg1LWVjZmQxMmI5MTVmNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zMDBmNGYz Ny1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC9GOEVCNkY0RTkxRERENDdG QThFMDQ4MUI2MEQ0QzE4MDg2QTgzMkM5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZx+EMA0EAgACMAcDBQAkAr6AMA0GCSqGSIb3DQEBCwUAA4IBAQAK+ZU/7mZt HEJi36MbOzWY+Lq1Tn6ni4iXKASW7DgGixEHDUmcqkcEaUp1Ji8sE/CvbKhjx2XJ lHb4mG/w0N+g+CMoqvQXO3Sqa2zmOzu70ks9EyaIg9/lkmScIJs+4o0sITuU0eiW xOMjV+rSh3tWFlV+TBxiUVe1WINWNXE+5mhG51WHUezwQ8ndl61RXO8JiMxhCVb0 VSwBlOe7RpsMJHlzg7L58s/r0b74oMYJRoTxwQhLCWNbLmn0/p2HSotvnj785TUs 7VVT1nXEix4rjuGBqWCe1xUSWQu6BDEDy62u/qqNVOnP12RX6xGfvFYhMYLP21Pz E5obH6rWP8xV -----END CERTIFICATE-----Generated at Fri May 8 07:52:46 2026 by rpki-client