$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.cer File: 0E7F1C3A411897498E19CE64C5C26A03C60AECD3.cer (raw, json) Hash identifier: ulIWMsQbA6IXuHMqr+2Deab2fn91R3avHtR/ohdiAwQ= Subject key identifier: 0E:7F:1C:3A:41:18:97:49:8E:19:CE:64:C5:C2:6A:03:C6:0A:EC:D3 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 42C277CF871B1CE6B7D22B91CEBF0A5EAB08F26E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:27:37 +0000 Certificate not after: Sun 02 May 2027 01:32:37 +0000 Subordinate resources: IP: 139.0.0.0/16 IP: 139.192.0.0/14 IP: 139.228.0.0/16 IP: 139.255.0.0 -- 140.0.255.255 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:c2:77:cf:87:1b:1c:e6:b7:d2:2b:91:ce:bf:0a:5e:ab:08:f2:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:27:37 2026 GMT Not After : May 2 01:32:37 2027 GMT Subject: CN=0E7F1C3A411897498E19CE64C5C26A03C60AECD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:87:cb:65:41:93:3f:2c:03:71:48:ea:ea:79: a4:24:fa:ee:46:33:8a:63:1b:12:c6:27:18:4d:ff: 9e:2c:d8:72:32:bb:cc:e3:db:65:b0:b2:dc:76:8c: 97:78:8b:e4:83:5a:c9:6f:b4:96:04:4e:28:bc:ba: 02:74:c0:88:7a:34:6f:48:77:03:71:e2:57:b2:99: 77:52:93:b4:54:97:6e:61:8f:e3:04:b0:a4:91:94: f2:8e:92:5c:5b:05:06:2e:4c:fe:9f:ac:df:b8:10: 0c:5e:fe:ca:6b:5e:0d:87:08:62:b0:a2:53:a1:23: 11:36:c0:5a:e1:d3:70:2b:0c:cc:44:1c:fe:52:2f: da:77:87:6c:ea:5c:14:69:1e:d0:59:79:75:44:14: df:cb:78:5b:e1:75:c2:90:83:06:32:d0:34:4a:16: 11:19:01:28:9c:54:2c:5f:ad:50:4d:ec:35:1a:c7: 17:a6:ba:e5:3d:6c:af:9b:fb:49:a2:c4:90:9e:04: 04:e1:37:08:0c:b1:db:a4:ac:28:f1:b0:49:ed:b1: d6:aa:c7:b9:5f:3a:75:a1:23:55:ca:dc:bb:29:98: 3b:65:bb:89:d5:35:ab:61:71:08:54:92:f1:ae:ae: 9d:bd:97:67:41:ae:3c:7f:1f:84:c3:bc:46:37:ce: c4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0E:7F:1C:3A:41:18:97:49:8E:19:CE:64:C5:C2:6A:03:C6:0A:EC:D3 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.0.0.0/16 139.192.0.0/14 139.228.0.0/16 139.255.0.0-140.0.255.255 Signature Algorithm: sha256WithRSAEncryption 6f:e5:00:90:80:e2:92:6d:e7:d1:05:27:1c:bc:10:13:31:c4: b5:b7:c6:fe:c9:2c:26:81:f4:e4:8f:a7:bd:15:dd:ad:1b:f5: f1:70:12:1e:e5:e9:78:31:da:99:df:04:a5:80:c4:72:dc:ae: c0:81:fc:30:8e:ac:cc:99:38:7b:40:95:c1:d1:69:a1:83:40: f3:38:db:be:49:b2:12:42:4b:e5:38:4e:53:54:c6:43:e2:84: 6c:44:04:ec:62:8f:dd:85:69:ed:42:23:f7:f3:b4:b4:d9:41: 9d:22:4f:e2:4c:e3:ba:29:08:52:6e:f4:d7:a6:ec:d1:34:89: 36:f4:ab:79:c6:30:d1:0e:a4:f9:fc:0a:7f:d1:89:5a:bc:29: 27:e6:40:d1:71:7d:c6:12:2d:6a:f4:6d:27:79:7e:e4:04:cd: 21:18:24:4b:6a:8f:00:22:a5:1a:d4:cd:5a:be:f0:d2:82:81: f9:5a:d9:e3:be:82:ae:d0:19:51:ad:87:d6:c8:dd:6a:26:75: 92:dc:90:f7:86:31:2a:0a:a9:45:90:bc:49:2a:e5:74:a2:5c: 37:c7:9b:00:52:08:74:64:10:35:bc:91:0e:a3:6d:ce:9d:38: 90:78:95:7c:0f:d5:f9:98:ed:31:3b:43:92:86:c0:c3:83:12: 76:6a:b9:fa -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUQsJ3z4cbHOa30iuRzr8KXqsI8m4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMjczN1oX DTI3MDUwMjAxMzIzN1owMzExMC8GA1UEAxMoMEU3RjFDM0E0MTE4OTc0OThFMTlD RTY0QzVDMjZBMDNDNjBBRUNEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIiHy2VBkz8sA3FI6up5pCT67kYzimMbEsYnGE3/nizYcjK7zOPbZbCy3HaM l3iL5INayW+0lgROKLy6AnTAiHo0b0h3A3HiV7KZd1KTtFSXbmGP4wSwpJGU8o6S XFsFBi5M/p+s37gQDF7+ymteDYcIYrCiU6EjETbAWuHTcCsMzEQc/lIv2neHbOpc FGke0Fl5dUQU38t4W+F1wpCDBjLQNEoWERkBKJxULF+tUE3sNRrHF6a65T1sr5v7 SaLEkJ4EBOE3CAyx26SsKPGwSe2x1qrHuV86daEjVcrcuymYO2W7idU1q2FxCFSS 8a6unb2XZ0GuPH8fhMO8RjfOxNcCAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFA5/HDpBGJdJjhnOZMXCagPGCuzTMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ExM2RlM2VjLTRkM2MtNDQwMi1hN2I4LThhMWI5NjIyNmU3NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hMTNkZTNl Yy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMC8wRTdGMUMzQTQxMTg5NzQ5 OEUxOUNFNjRDNUMyNkEwM0M2MEFFQ0QzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAATAb AwMAiwADAwKLwAMDAIvkMAoDAwCL/wMDAIwAMA0GCSqGSIb3DQEBCwUAA4IBAQBv 5QCQgOKSbefRBSccvBATMcS1t8b+ySwmgfTkj6e9Fd2tG/XxcBIe5el4MdqZ3wSl gMRy3K7AgfwwjqzMmTh7QJXB0Wmhg0DzONu+SbISQkvlOE5TVMZD4oRsRATsYo/d hWntQiP387S02UGdIk/iTOO6KQhSbvTXpuzRNIk29Kt5xjDRDqT5/Ap/0YlavCkn 5kDRcX3GEi1q9G0neX7kBM0hGCRLao8AIqUa1M1avvDSgoH5WtnjvoKu0BlRrYfW yN1qJnWS3JD3hjEqCqlFkLxJKuV0olw3x5sAUgh0ZBA1vJEOo23OnTiQeJV8D9X5 mO0xO0OShsDDgxJ2arn6 -----END CERTIFICATE-----Generated at Tue May 12 22:03:23 2026 by rpki-client