$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer File: F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer (raw, json) Hash identifier: zf1pbaQdeEcyE1dluErfXfDbtZirrob00uZ1qmumTUI= Subject key identifier: F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 67D9985FDD5A3E7D7EB6848908A124FD858A6683 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:29:43 +0000 Certificate not after: Sun 02 May 2027 01:34:43 +0000 Subordinate resources: IP: 103.158.20.0/23 IP: 2001:df5:3d80::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d9:98:5f:dd:5a:3e:7d:7e:b6:84:89:08:a1:24:fd:85:8a:66:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:29:43 2026 GMT Not After : May 2 01:34:43 2027 GMT Subject: CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cd:28:5d:47:77:de:f9:e5:b2:f0:68:d8:75: bf:69:59:88:66:ee:d5:08:db:43:66:c6:62:6e:43: ab:36:b7:8e:7d:bd:28:d4:65:fe:94:b4:16:51:eb: 9e:be:05:3c:6c:fc:13:71:4c:ff:75:7c:0e:53:ca: 61:ad:37:30:56:1c:27:f0:86:1a:6d:20:24:22:74: 28:77:ce:d9:99:82:03:99:47:2c:04:e8:12:66:b2: 63:88:50:21:b3:16:1a:6b:61:e5:9c:f7:0d:1b:b8: 7f:8f:e8:5e:8e:1e:0b:ca:e6:5c:3d:c2:53:62:71: 0b:4c:a0:c3:e2:bb:35:9a:41:92:58:22:f1:43:96: 01:f2:64:08:aa:43:e8:1b:10:d2:ce:c3:4f:fd:9e: ae:28:09:93:c1:81:c4:5d:66:3c:64:a5:ca:fa:55: be:36:a3:33:f1:e7:3d:45:06:dc:80:fd:d3:48:d6: 02:e2:29:dd:8d:b6:86:a2:fa:44:e8:95:f5:36:9a: c3:c0:38:93:2a:78:d9:e3:ff:13:e0:9e:f6:6b:84: 20:b2:1e:42:4b:ec:72:d9:00:92:1f:60:7f:96:30: d2:e2:5e:2a:e5:2d:de:8b:1f:4e:63:0d:d5:3d:be: b8:1a:90:19:7f:b4:f0:87:c7:2f:a8:48:e4:29:68: de:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.20.0/23 IPv6: 2001:df5:3d80::/48 Signature Algorithm: sha256WithRSAEncryption 59:71:25:f6:41:73:cc:32:b0:f8:a1:f6:07:14:44:e2:37:57: f5:29:2b:55:39:8c:31:cc:47:b7:87:9c:60:1d:fa:a6:79:71: 3d:94:27:6d:d3:2c:6d:25:8d:44:fd:6f:c4:e3:c8:22:6d:89: 05:ff:00:d9:c7:6b:29:a0:42:3c:d5:21:16:61:d7:9d:24:73: c2:72:be:06:f5:d2:3c:03:8b:68:8f:16:b2:cb:4e:bb:59:e9: 45:f6:9d:d6:7c:d2:ed:18:87:be:e8:e0:50:ab:26:c5:bb:11: 71:b3:84:4f:5d:9f:f3:29:f4:3a:57:e9:f7:00:87:0a:31:f7: 69:4d:e4:9e:35:96:e6:d9:ec:c2:0b:a6:37:f9:fb:13:d0:f1: 52:4b:b3:f1:8f:e7:57:6e:66:35:48:11:be:3a:6b:0b:12:1d: 1d:c6:af:4c:ad:13:4e:82:c3:b6:8c:50:0f:ce:f6:e1:6e:61: ac:b3:ae:67:84:37:ad:62:61:7e:60:1a:c8:69:e1:21:41:bb: 0b:83:e9:1c:e5:ca:17:e4:39:ef:85:a0:25:70:e6:93:df:1c: 0c:d6:f7:b2:5c:0b:62:35:4d:7c:5e:fa:30:86:26:df:9e:46: e1:b4:89:39:18:e6:86:3b:aa:08:63:1e:0a:73:87:6e:36:7e: ac:ad:6e:f6 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUZ9mYX91aPn1+toSJCKEk/YWKZoMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjk0M1oX DTI3MDUwMjAxMzQ0M1owMzExMC8GA1UEAxMoRjA2Mzk1NTZDRDRENEJBRDY5RkVF MEQ3RjIyOUIzRjc0NUNGQTlFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI3NKF1Hd9755bLwaNh1v2lZiGbu1QjbQ2bGYm5Dqza3jn29KNRl/pS0FlHr nr4FPGz8E3FM/3V8DlPKYa03MFYcJ/CGGm0gJCJ0KHfO2ZmCA5lHLAToEmayY4hQ IbMWGmth5Zz3DRu4f4/oXo4eC8rmXD3CU2JxC0ygw+K7NZpBklgi8UOWAfJkCKpD 6BsQ0s7DT/2erigJk8GBxF1mPGSlyvpVvjajM/HnPUUG3ID900jWAuIp3Y22hqL6 ROiV9Taaw8A4kyp42eP/E+Ce9muEILIeQkvsctkAkh9gf5Yw0uJeKuUt3osfTmMN 1T2+uBqQGX+08IfHL6hI5Clo3i8CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPBjlVbNTUutaf7g1/Ips/dFz6ngMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E0ODFhYzAxLWYzMDItNDZlZC05ZTFiLTY1OTM0NTZmMmQ1OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hNDgxYWMw MS1mMzAyLTQ2ZWQtOWUxYi02NTkzNDU2ZjJkNTkvMC9GMDYzOTU1NkNENEQ0QkFE NjlGRUUwRDdGMjI5QjNGNzQ1Q0ZBOUUwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ54UMA8EAgACMAkDBwAgAQ31PYAwDQYJKoZIhvcNAQELBQADggEBAFlxJfZB c8wysPih9gcUROI3V/UpK1U5jDHMR7eHnGAd+qZ5cT2UJ23TLG0ljUT9b8TjyCJt iQX/ANnHaymgQjzVIRZh150kc8Jyvgb10jwDi2iPFrLLTrtZ6UX2ndZ80u0Yh77o 4FCrJsW7EXGzhE9dn/Mp9DpX6fcAhwox92lN5J41lubZ7MILpjf5+xPQ8VJLs/GP 51duZjVIEb46awsSHR3Gr0ytE06Cw7aMUA/O9uFuYayzrmeEN61iYX5gGshp4SFB uwuD6RzlyhfkOe+FoCVw5pPfHAzW97JcC2I1TXxe+jCGJt+eRuG0iTkY5oY7qghj Hgpzh242fqytbvY= -----END CERTIFICATE-----Generated at Tue May 5 17:51:10 2026 by rpki-client