$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer File: FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.cer (raw, json) Hash identifier: IUerCQlboxwx+tZ3AJ/JAa7aiHN0nV5xAgsI2K2wy7w= Subject key identifier: FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 689771D3E8CA4FC4276F9243857EC29AA9A34685 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:45:20 +0000 Certificate not after: Sun 02 May 2027 01:50:20 +0000 Subordinate resources: IP: 103.213.234.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:97:71:d3:e8:ca:4f:c4:27:6f:92:43:85:7e:c2:9a:a9:a3:46:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:45:20 2026 GMT Not After : May 2 01:50:20 2027 GMT Subject: CN=FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:99:22:62:f6:02:fe:76:45:04:1b:4c:4b:4e: 07:71:1d:cb:bf:c9:e9:92:ed:ee:d8:30:38:20:11: ae:26:64:45:0a:79:1b:54:f3:86:61:59:bd:ae:ae: 56:25:ad:4b:c7:cf:b1:5b:59:97:ec:47:21:12:bd: ff:37:cb:27:c4:81:52:ff:ea:e7:9a:bc:af:ff:44: 5d:d5:f2:33:5a:92:77:b2:ae:41:e0:4d:76:92:26: ac:b3:61:5b:cb:f3:f6:48:e9:b7:82:84:66:05:9d: 32:a2:31:16:cd:25:a8:09:c1:b4:4d:88:ac:fb:df: 89:fa:ef:e7:30:de:4c:bd:01:88:68:39:4c:0a:27: 23:80:fb:ae:cf:e1:c3:04:0a:12:46:35:35:6d:58: f8:ce:fc:84:8c:51:1f:35:47:51:36:43:19:8c:41: 87:b0:46:63:fc:27:88:5e:13:a3:6f:ea:58:cc:71: 34:d7:4b:32:60:cd:9c:d9:b7:78:cd:b9:0f:41:17: e4:ea:31:0c:6b:62:8e:88:82:d5:f9:f2:37:59:7f: f3:cc:0c:96:7e:83:ca:01:25:21:8d:8a:61:d4:e6: d2:cf:3b:bb:02:76:97:c5:45:94:5a:cc:a6:08:f3: c7:6d:5a:78:3e:12:1b:46:18:43:74:6c:6b:40:f7: 5a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FD:3E:6D:D8:36:BC:4B:06:7F:4F:55:D0:72:DB:B1:EC:BA:F2:F3:8C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/FD3E6DD836BC4B067F4F55D072DBB1ECBAF2F38C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.213.234.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:73:61:85:eb:f3:ab:f4:46:af:50:64:e5:d1:65:40:50:f3: b7:08:53:82:8b:f0:6e:a8:52:7e:03:d5:af:e5:9b:98:da:8f: f8:4d:e4:35:9b:0e:ab:ef:fe:5b:98:d5:ca:7c:e8:5a:e2:9c: 5f:86:d6:b4:09:f1:6e:07:7f:3b:86:f3:3a:f0:6b:c2:c2:70: bd:eb:e8:04:21:99:de:ee:e2:80:ae:8d:2d:34:b2:98:34:5a: 9c:75:fc:be:67:a9:d6:3e:bd:bb:0b:d6:1f:09:bd:02:09:9c: 36:05:f4:ab:79:32:9e:8b:26:31:87:ce:3b:cc:b5:f8:12:b9: 0a:cf:e3:db:95:73:14:0e:6c:d8:58:bb:c0:c5:97:07:5a:7e: e7:fa:56:be:eb:de:84:26:fd:80:f8:2a:89:09:70:56:70:42: 78:24:f3:49:9e:ea:d9:ee:2f:74:39:2c:c5:24:06:3d:4f:6b: d0:c5:d3:51:02:34:7e:4b:bc:94:8c:f2:20:d0:7e:2a:38:73: ef:df:92:86:f1:11:85:9e:d0:66:c4:1b:72:ee:52:74:79:dc: e5:d2:d4:50:1a:48:c0:a1:75:00:52:fb:47:68:ca:ac:47:ef: 8b:03:08:bd:c7:e7:0e:a4:02:34:5d:3d:02:ef:4a:d4:e6:e7: 1f:34:1f:1a -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUaJdx0+jKT8Qnb5JDhX7CmqmjRoUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDUyMFoX DTI3MDUwMjAxNTAyMFowMzExMC8GA1UEAxMoRkQzRTZERDgzNkJDNEIwNjdGNEY1 NUQwNzJEQkIxRUNCQUYyRjM4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALeZImL2Av52RQQbTEtOB3Edy7/J6ZLt7tgwOCARriZkRQp5G1TzhmFZva6u ViWtS8fPsVtZl+xHIRK9/zfLJ8SBUv/q55q8r/9EXdXyM1qSd7KuQeBNdpImrLNh W8vz9kjpt4KEZgWdMqIxFs0lqAnBtE2IrPvfifrv5zDeTL0BiGg5TAonI4D7rs/h wwQKEkY1NW1Y+M78hIxRHzVHUTZDGYxBh7BGY/wniF4To2/qWMxxNNdLMmDNnNm3 eM25D0EX5OoxDGtijoiC1fnyN1l/88wMln6DygElIY2KYdTm0s87uwJ2l8VFlFrM pgjzx21aeD4SG0YYQ3Rsa0D3Wt0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP0+bdg2vEsGf09V0HLbsey68vOMMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2JkN2ZhMjEwLTVmMjUtNGYwYi04OWE1LTdkMDBhMzU0YTkwNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iZDdmYTIx MC01ZjI1LTRmMGItODlhNS03ZDAwYTM1NGE5MDcvMC9GRDNFNkREODM2QkM0QjA2 N0Y0RjU1RDA3MkRCQjFFQ0JBRjJGMzhDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ9XqMA0GCSqGSIb3DQEBCwUAA4IBAQANc2GF6/Or9EavUGTl0WVAUPO3CFOC i/BuqFJ+A9Wv5ZuY2o/4TeQ1mw6r7/5bmNXKfOha4pxfhta0CfFuB387hvM68GvC wnC96+gEIZne7uKAro0tNLKYNFqcdfy+Z6nWPr27C9YfCb0CCZw2BfSreTKeiyYx h847zLX4ErkKz+PblXMUDmzYWLvAxZcHWn7n+la+696EJv2A+CqJCXBWcEJ4JPNJ nurZ7i90OSzFJAY9T2vQxdNRAjR+S7yUjPIg0H4qOHPv35KG8RGFntBmxBty7lJ0 edzl0tRQGkjAoXUAUvtHaMqsR++LAwi9x+cOpAI0XT0C70rU5ucfNB8a -----END CERTIFICATE-----Generated at Tue May 5 14:06:02 2026 by rpki-client