$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer File: F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer (raw, json) Hash identifier: yUn3140wcmNgOPZUSfxymMER53lPBhZ5zyvwXjumUL8= Subject key identifier: F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 641007CC27292E129B49C1FE7DD8DC631F9AA664 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft caRepository: rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:40:46 +0000 Certificate not after: Sat 01 May 2027 23:45:46 +0000 Subordinate resources: IP: 103.190.46.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:10:07:cc:27:29:2e:12:9b:49:c1:fe:7d:d8:dc:63:1f:9a:a6:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:40:46 2026 GMT Not After : May 1 23:45:46 2027 GMT Subject: CN=F988F4A9D0008C4D84C92B0FF19A0073768163F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ad:c5:ee:7d:de:b6:ca:fd:95:26:1e:19:6f: 6e:68:bb:80:d7:ee:02:7a:aa:e6:73:86:6a:8f:e2: 53:2c:e0:ec:e7:84:60:6a:bd:1e:e8:ef:35:48:cc: 99:be:02:d4:35:8e:b2:38:4a:fc:67:9b:e3:56:89: 6f:76:0a:77:3c:72:30:dd:be:38:00:87:08:27:12: 3b:12:b5:2c:88:94:11:1c:44:94:56:d6:f6:1c:05: 15:5b:f5:22:e5:29:18:27:14:8e:b9:0d:04:f3:b6: 3e:16:c1:f5:e3:27:44:51:09:f9:89:b7:51:25:65: fd:da:b7:c5:d3:34:ad:f9:51:ac:d7:13:f7:7e:03: 2a:6a:60:f6:e2:78:66:dd:66:cd:27:68:14:47:60: b8:7e:a2:4e:48:11:5f:3e:59:3b:c1:2e:7f:bc:ea: 4b:57:46:03:a5:16:5f:5b:51:49:32:71:b0:7b:4b: 74:0d:82:63:5d:5a:f1:3d:41:82:d2:7c:5a:50:88: 41:4d:93:d6:97:8f:7c:17:fb:da:5e:be:80:f7:e2: 4d:ed:59:d8:86:4a:c5:57:e2:a5:bd:f4:e2:c1:d3: f5:61:01:07:fe:19:9b:17:1e:b2:5b:a6:b9:58:cc: 58:9b:f2:e3:d8:ae:0a:ed:08:e1:74:94:6d:ab:ea: 70:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.46.0/23 Signature Algorithm: sha256WithRSAEncryption 05:9c:29:b5:bb:78:8e:50:84:df:d7:21:8b:2f:09:7b:d6:a6: 71:09:26:b8:35:36:63:80:5d:26:ab:2e:bd:5d:ed:b8:01:0e: 5e:88:8a:31:e7:8e:f4:7a:24:a0:d4:a8:42:d5:95:e4:49:a4: 40:29:42:52:e8:dc:4a:9e:74:27:75:b3:1d:c4:e0:63:bf:80: e8:1f:89:65:a6:f9:4e:e1:33:b8:32:94:4b:4d:4c:b8:d1:0a: 1e:19:3b:6e:cb:21:6f:a8:05:c9:de:06:ae:1b:19:2f:66:28: ab:70:99:fa:2f:16:da:7b:b0:b3:05:a5:67:d1:cf:88:0a:fd: 2b:d1:b8:80:3e:91:ab:a5:94:a8:37:dd:c5:1b:c7:66:26:7d: b7:1a:90:f0:4f:a4:31:c6:1a:75:75:98:44:82:0c:fa:9c:f2: 8a:8b:d3:97:dd:f1:09:07:c1:f1:8e:56:43:74:40:5a:75:a0: 95:be:d2:a0:99:b4:ed:ad:b9:33:76:44:16:8f:bb:ea:76:5b: 9d:91:44:e2:a9:02:31:7f:2f:53:9a:17:ce:67:53:60:ff:25: ac:eb:fe:2b:c0:1e:ac:fb:6e:61:bd:c2:82:3a:5d:4c:74:34: 24:9c:03:6a:8c:43:29:3a:47:a8:2e:f4:7e:3f:bd:7b:da:d8: 26:36:f8:1a -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUZBAHzCcpLhKbScH+fdjcYx+apmQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDA0NloX DTI3MDUwMTIzNDU0NlowMzExMC8GA1UEAxMoRjk4OEY0QTlEMDAwOEM0RDg0Qzky QjBGRjE5QTAwNzM3NjgxNjNGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANmtxe593rbK/ZUmHhlvbmi7gNfuAnqq5nOGao/iUyzg7OeEYGq9HujvNUjM mb4C1DWOsjhK/Geb41aJb3YKdzxyMN2+OACHCCcSOxK1LIiUERxElFbW9hwFFVv1 IuUpGCcUjrkNBPO2PhbB9eMnRFEJ+Ym3USVl/dq3xdM0rflRrNcT934DKmpg9uJ4 Zt1mzSdoFEdguH6iTkgRXz5ZO8Euf7zqS1dGA6UWX1tRSTJxsHtLdA2CY11a8T1B gtJ8WlCIQU2T1pePfBf72l6+gPfiTe1Z2IZKxVfipb304sHT9WEBB/4Zmxceslum uVjMWJvy49iuCu0I4XSUbavqcK8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPmI9KnQAIxNhMkrD/GaAHN2gWP3MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzAyMWY5OTliLWFiY2UtNGZhOS04ZTc5LTkzYjljNWU0NTRlMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wMjFmOTk5 Yi1hYmNlLTRmYTktOGU3OS05M2I5YzVlNDU0ZTEvMC9GOTg4RjRBOUQwMDA4QzRE ODRDOTJCMEZGMTlBMDA3Mzc2ODE2M0Y3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ74uMA0GCSqGSIb3DQEBCwUAA4IBAQAFnCm1u3iOUITf1yGLLwl71qZxCSa4 NTZjgF0mqy69Xe24AQ5eiIox5470eiSg1KhC1ZXkSaRAKUJS6NxKnnQndbMdxOBj v4DoH4llpvlO4TO4MpRLTUy40QoeGTtuyyFvqAXJ3gauGxkvZiircJn6Lxbae7Cz BaVn0c+ICv0r0biAPpGrpZSoN93FG8dmJn23GpDwT6Qxxhp1dZhEggz6nPKKi9OX 3fEJB8HxjlZDdEBadaCVvtKgmbTtrbkzdkQWj7vqdludkUTiqQIxfy9TmhfOZ1Ng /yWs6/4rwB6s+25hvcKCOl1MdDQknANqjEMpOkeoLvR+P7172tgmNvga -----END CERTIFICATE-----Generated at Tue May 5 14:17:12 2026 by rpki-client