$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.cer File: FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.cer (raw, json) Hash identifier: +2KNzC3/NrE3qmXtDt2gb3F25vcd2PmkCjr9yrf1spQ= Subject key identifier: FF:DA:C7:75:CB:B5:F1:B2:C7:B9:51:BF:15:23:EF:6C:30:FF:EC:F6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 51C21123B7E73A1119AA8D145AA96723182CF23E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:21:01 +0000 Certificate not after: Sun 02 May 2027 01:26:01 +0000 Subordinate resources: IP: 103.164.22.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 05:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:c2:11:23:b7:e7:3a:11:19:aa:8d:14:5a:a9:67:23:18:2c:f2:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:21:01 2026 GMT Not After : May 2 01:26:01 2027 GMT Subject: CN=FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b3:9e:00:8a:00:ed:62:24:63:90:34:50:c8: c2:e1:80:b4:2a:83:d1:68:10:9f:52:e3:19:fa:11: 4f:39:cf:9e:21:9c:c1:b0:be:18:47:9a:9e:50:b6: de:cd:ba:f1:a9:e8:bb:c4:30:bf:24:27:5c:bf:7e: 48:2a:96:71:a7:11:9b:8c:3c:3a:8f:74:a1:dd:22: 5d:55:e9:90:bf:d7:69:9e:37:52:ff:e0:5a:ad:7c: 13:6e:a8:46:ae:83:29:bc:54:55:aa:f0:11:c7:17: 1d:88:73:66:f6:fe:41:f8:1f:d2:c5:9c:8b:f1:8b: 0a:60:0d:21:e8:7b:5b:0b:fd:4e:a0:e3:03:ae:2e: 36:e0:93:ba:5d:67:77:e1:b0:bb:ff:35:91:e0:62: e9:fc:b4:3a:5a:4b:38:64:ce:29:17:0e:d2:c9:f1: 68:cd:c2:2d:fb:82:13:e8:63:fa:16:6e:ea:74:30: e0:f4:80:f3:44:a7:92:44:71:ff:25:91:3d:39:a2: 1c:35:3c:fd:e2:ce:7a:fe:8e:b8:d4:39:a8:47:a7: 00:32:49:ae:bf:d3:d8:31:fe:26:a5:56:32:76:36: 0d:da:d2:20:32:2a:31:b8:82:89:9a:95:a0:2e:cf: 61:f1:e4:0b:66:2b:00:e3:d6:fc:fb:89:10:ec:0d: a2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:DA:C7:75:CB:B5:F1:B2:C7:B9:51:BF:15:23:EF:6C:30:FF:EC:F6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/FFDAC775CBB5F1B2C7B951BF1523EF6C30FFECF6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.22.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:a6:bf:b9:76:22:2c:51:ef:50:6f:65:18:78:1a:3e:94:aa: 81:33:19:4a:b7:a1:c0:11:dc:95:ae:1a:21:4d:ac:cc:f2:b3: 54:90:30:69:e5:ae:22:34:bc:7d:88:60:fc:b8:fe:e9:69:e4: b3:66:c1:1e:ab:8a:2d:6e:7a:11:ba:83:3e:e5:be:96:4b:7e: 61:44:4e:c4:34:28:01:62:ee:f6:5b:a5:34:33:06:fd:40:6d: 4f:1b:dd:eb:2d:1d:a6:7b:a0:9a:51:64:50:1a:60:d3:ea:95: b8:37:2d:42:5c:48:dc:ca:24:80:26:0f:91:3d:d1:c1:7c:dc: 08:db:18:25:08:59:2d:08:27:fc:ce:eb:d2:2c:e5:b4:e7:04: 63:3f:2b:9a:c2:a7:b6:fd:da:5b:f3:cf:99:6f:4e:bc:98:b7: 1d:8b:01:59:31:1f:eb:90:ae:ca:ff:03:98:42:51:8e:33:cc: 0a:48:f1:b8:a9:24:97:23:31:2a:12:f6:0f:2c:14:8b:a0:ba: 5a:00:0a:ef:4a:ed:19:be:63:8e:4b:88:8a:27:41:35:09:d5: 49:a0:7b:ee:e2:ef:da:41:de:9c:49:78:1b:ee:78:e3:4d:24: 78:48:44:8d:1d:3b:68:0e:c1:73:12:2b:5f:35:98:87:48:a6: 33:33:f4:92 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUUcIRI7fnOhEZqo0UWqlnIxgs8j4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjEwMVoX DTI3MDUwMjAxMjYwMVowMzExMC8GA1UEAxMoRkZEQUM3NzVDQkI1RjFCMkM3Qjk1 MUJGMTUyM0VGNkMzMEZGRUNGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALyzngCKAO1iJGOQNFDIwuGAtCqD0WgQn1LjGfoRTznPniGcwbC+GEeanlC2 3s268anou8QwvyQnXL9+SCqWcacRm4w8Oo90od0iXVXpkL/XaZ43Uv/gWq18E26o Rq6DKbxUVarwEccXHYhzZvb+Qfgf0sWci/GLCmANIeh7Wwv9TqDjA64uNuCTul1n d+Gwu/81keBi6fy0OlpLOGTOKRcO0snxaM3CLfuCE+hj+hZu6nQw4PSA80SnkkRx /yWRPTmiHDU8/eLOev6OuNQ5qEenADJJrr/T2DH+JqVWMnY2DdrSIDIqMbiCiZqV oC7PYfHkC2YrAOPW/PuJEOwNoi0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP/ax3XLtfGyx7lRvxUj72ww/+z2MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzk3ZGM3ZWU1LWNlNjctNDVjZC05ODgxLTQzNDg5YWIyYjFhNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85N2RjN2Vl NS1jZTY3LTQ1Y2QtOTg4MS00MzQ4OWFiMmIxYTUvMC9GRkRBQzc3NUNCQjVGMUIy QzdCOTUxQkYxNTIzRUY2QzMwRkZFQ0Y2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6QWMA0GCSqGSIb3DQEBCwUAA4IBAQA/pr+5diIsUe9Qb2UYeBo+lKqBMxlK t6HAEdyVrhohTazM8rNUkDBp5a4iNLx9iGD8uP7paeSzZsEeq4otbnoRuoM+5b6W S35hRE7ENCgBYu72W6U0Mwb9QG1PG93rLR2me6CaUWRQGmDT6pW4Ny1CXEjcyiSA Jg+RPdHBfNwI2xglCFktCCf8zuvSLOW05wRjPyuawqe2/dpb88+Zb068mLcdiwFZ MR/rkK7K/wOYQlGOM8wKSPG4qSSXIzEqEvYPLBSLoLpaAArvSu0ZvmOOS4iKJ0E1 CdVJoHvu4u/aQd6cSXgb7njjTSR4SESNHTtoDsFzEitfNZiHSKYzM/SS -----END CERTIFICATE-----Generated at Fri May 8 07:29:50 2026 by rpki-client