$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer File: 07DE2856EE772937B8A7AD863D63341E1041C169.cer (raw, json) Hash identifier: 8bInwMGoJls+MvgCPVglNbmnx8NITDKiKEJyrQqczlM= Subject key identifier: 07:DE:28:56:EE:77:29:37:B8:A7:AD:86:3D:63:34:1E:10:41:C1:69 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 62489F5B8984E062B9D0F5454F2B13149649E1D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:29:55 +0000 Certificate not after: Sun 02 May 2027 01:34:55 +0000 Subordinate resources: IP: 157.15.144.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:48:9f:5b:89:84:e0:62:b9:d0:f5:45:4f:2b:13:14:96:49:e1:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:29:55 2026 GMT Not After : May 2 01:34:55 2027 GMT Subject: CN=07DE2856EE772937B8A7AD863D63341E1041C169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c5:f5:af:e0:9c:a4:e7:76:ef:d5:3c:dc:84: 19:39:67:24:96:63:96:8b:05:10:ee:c8:77:4f:24: fe:b3:4c:16:d5:76:4b:ef:e0:ef:77:a5:16:ad:47: d7:be:ea:c1:c4:79:fa:15:a1:27:6d:e8:a0:a1:5d: ec:3c:b1:4b:db:5e:7e:37:bc:bf:cd:b6:d3:df:b9: e8:ae:12:1b:9f:ba:b4:ea:68:ff:f8:aa:78:e3:36: f6:1a:a1:97:a8:47:70:f3:73:98:7e:e9:8d:3f:26: 87:e4:a9:b6:30:c7:32:a3:30:3a:cc:e3:49:a8:95: e5:97:57:fd:0e:aa:52:08:98:6b:35:a2:22:4f:b9: af:1b:69:d6:db:65:5e:38:dc:ce:29:7e:d4:f2:de: 99:32:e0:c7:58:b4:6f:ea:c5:89:4a:74:d9:7a:e3: 5b:7e:b5:17:de:9a:f5:28:e3:c6:d0:dc:d3:c6:b7: 56:b2:45:a5:3e:ba:2a:26:ce:3d:fe:af:f4:db:df: 73:79:37:93:62:b7:cf:bc:f4:6f:4b:09:39:2c:a6: cf:de:2f:72:2d:1c:11:88:4e:67:bb:1d:c6:1d:65: fa:8e:ae:75:7f:e1:59:cb:af:23:a4:c1:dd:fc:6f: 19:38:3f:5e:ed:11:06:2b:f5:2d:b8:87:b2:04:93: c4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 07:DE:28:56:EE:77:29:37:B8:A7:AD:86:3D:63:34:1E:10:41:C1:69 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.144.0/23 Signature Algorithm: sha256WithRSAEncryption 37:dd:dc:b6:46:67:a5:ae:37:81:88:a3:ec:53:6d:02:13:30: cc:11:1a:67:61:ed:3e:2a:1f:56:f0:ea:a8:67:00:ff:31:00: 8c:15:7f:26:ef:35:53:ef:bf:56:89:37:01:0c:65:d5:be:45: 76:a9:fc:10:7e:a7:80:bc:ef:2d:1d:7b:17:8f:34:b1:fa:a4: 6d:0b:08:3c:8b:d8:5b:6e:2e:75:53:76:f9:2f:ae:6a:25:62: ae:c7:86:d4:68:e5:d7:9a:b8:13:7e:7f:b5:0c:d5:77:0d:4c: 3a:79:a7:e5:c5:a9:19:8b:95:b8:6f:f9:ff:70:e5:a7:be:74: 47:40:0f:92:5d:81:c1:59:69:2f:b2:4f:58:5f:86:82:08:91: 56:9b:a1:d0:2c:20:cf:8e:ec:de:1b:03:b4:64:ad:4f:9a:0f: b9:e8:87:64:03:e7:4b:0b:f0:36:e6:72:73:ca:20:65:e9:21: d3:78:c9:cd:c4:50:09:09:ee:13:5f:d2:f3:fb:18:b3:ee:13: b8:67:60:df:34:0d:ac:53:9d:c8:b0:f0:aa:13:5a:9c:af:03: 05:99:a3:df:a6:82:69:11:f2:61:54:2a:a5:2d:02:a4:89:13: f5:5c:9d:d3:01:12:c0:b5:d4:3a:3b:88:20:7c:8e:c6:f0:ca: 23:a0:6b:de -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUYkifW4mE4GK50PVFTysTFJZJ4dgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMjk1NVoX DTI3MDUwMjAxMzQ1NVowMzExMC8GA1UEAxMoMDdERTI4NTZFRTc3MjkzN0I4QTdB RDg2M0Q2MzM0MUUxMDQxQzE2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALTF9a/gnKTndu/VPNyEGTlnJJZjlosFEO7Id08k/rNMFtV2S+/g73elFq1H 177qwcR5+hWhJ23ooKFd7DyxS9tefje8v82209+56K4SG5+6tOpo//iqeOM29hqh l6hHcPNzmH7pjT8mh+SptjDHMqMwOszjSaiV5ZdX/Q6qUgiYazWiIk+5rxtp1ttl Xjjczil+1PLemTLgx1i0b+rFiUp02XrjW361F96a9SjjxtDc08a3VrJFpT66KibO Pf6v9Nvfc3k3k2K3z7z0b0sJOSymz94vci0cEYhOZ7sdxh1l+o6udX/hWcuvI6TB 3fxvGTg/Xu0RBiv1LbiHsgSTxPcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAfeKFbudyk3uKethj1jNB4QQcFpMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E1NmVjY2I3LWU5MTctNDBmNS1hY2VlLTAzZDY4YmU1ZmQ5Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hNTZlY2Ni Ny1lOTE3LTQwZjUtYWNlZS0wM2Q2OGJlNWZkOTcvMC8wN0RFMjg1NkVFNzcyOTM3 QjhBN0FEODYzRDYzMzQxRTEwNDFDMTY5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBnQ+QMA0GCSqGSIb3DQEBCwUAA4IBAQA33dy2RmelrjeBiKPsU20CEzDMERpn Ye0+Kh9W8OqoZwD/MQCMFX8m7zVT779WiTcBDGXVvkV2qfwQfqeAvO8tHXsXjzSx +qRtCwg8i9hbbi51U3b5L65qJWKux4bUaOXXmrgTfn+1DNV3DUw6eaflxakZi5W4 b/n/cOWnvnRHQA+SXYHBWWkvsk9YX4aCCJFWm6HQLCDPjuzeGwO0ZK1Pmg+56Idk A+dLC/A25nJzyiBl6SHTeMnNxFAJCe4TX9Lz+xiz7hO4Z2DfNA2sU53IsPCqE1qc rwMFmaPfpoJpEfJhVCqlLQKkiRP1XJ3TARLAtdQ6O4ggfI7G8MojoGve -----END CERTIFICATE-----Generated at Tue May 12 22:16:57 2026 by rpki-client