$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer File: 7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer (raw, json) Hash identifier: 3qKZ+GGIeEF8zNxEIG6OgV6FesAalBFd64hSbWOJJDE= Subject key identifier: 7E:8C:E7:F4:E7:EF:A3:68:18:11:ED:C2:5E:EF:D1:FD:3F:C4:1F:FB Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 29FF4C46C6E4829592C379A2BB3FCD065ACFB3A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:26:45 +0000 Certificate not after: Sun 02 May 2027 02:31:45 +0000 Subordinate resources: IP: 157.15.27.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ff:4c:46:c6:e4:82:95:92:c3:79:a2:bb:3f:cd:06:5a:cf:b3:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 02:26:45 2026 GMT Not After : May 2 02:31:45 2027 GMT Subject: CN=7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0a:b7:e6:73:ae:03:23:ba:06:0a:17:81:33: 8e:67:1b:3c:cc:da:0b:7c:ef:74:c6:a1:eb:0c:82: 49:58:3e:1d:d6:0a:34:a3:42:5a:8a:48:aa:ae:da: 98:0e:2e:63:d1:8b:27:4a:17:2d:6c:a5:dc:82:a8: bb:71:af:c8:53:f7:e7:ac:26:1b:99:ed:52:24:3b: 1d:c8:d3:24:3b:fd:80:f1:81:7b:38:fb:5d:51:d6: 88:ca:8b:e5:f6:49:eb:df:dc:74:45:bc:f6:a2:aa: ff:e7:7d:fb:23:c9:9d:bc:14:fc:e9:ae:bf:7c:b1: 37:37:9e:7a:5f:76:2f:5b:ee:a7:64:64:b4:69:17: 9e:8a:2d:8e:44:ab:f4:2d:00:b2:7c:a6:55:3b:59: 2b:c6:75:94:d7:78:50:c7:f9:23:a5:c4:06:c5:5e: 69:f2:c1:f1:14:48:7c:90:21:b1:cf:01:b6:8b:b8: 3d:eb:41:8b:76:c6:53:08:c1:6e:07:1b:db:be:07: 7b:da:29:07:07:df:03:aa:46:ba:f6:93:b6:3c:25: 07:24:0c:69:52:f5:90:75:4e:7b:e0:e5:37:91:03: ba:a2:d6:92:2d:90:13:bf:bd:2e:4b:fa:67:14:1e: 30:17:99:8b:6d:d0:9b:4a:52:5a:08:fd:e0:b4:96: 7d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7E:8C:E7:F4:E7:EF:A3:68:18:11:ED:C2:5E:EF:D1:FD:3F:C4:1F:FB X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.27.0/24 Signature Algorithm: sha256WithRSAEncryption 03:ac:42:ea:d7:3a:e4:99:fc:db:c4:5a:c9:38:2b:cd:2e:fc: 02:47:74:d0:dc:c6:e9:0a:56:eb:39:c2:1a:47:02:d3:7a:57: 7c:ce:13:0b:88:ff:16:43:04:33:9f:7d:0e:05:6a:6d:a5:8f: ae:de:2c:98:b5:4c:8a:fa:26:05:b3:03:75:df:6a:ec:93:4e: b4:ef:43:48:54:6c:c3:ad:50:be:13:68:23:d6:6c:9f:9d:31: 94:5a:90:36:62:00:48:89:1c:08:23:cd:85:70:41:95:fb:51: c0:b4:5e:16:91:69:32:99:60:98:08:00:e9:f6:01:4f:a4:79: a7:2e:36:9f:36:ba:e1:e0:0a:29:ab:03:3d:06:98:2f:97:5d: 6c:ef:e4:d2:75:b0:fd:a8:ea:ba:3e:ab:b5:e8:78:c3:03:54: 53:40:04:ee:8b:ed:0c:e5:12:9b:1f:29:3f:c6:46:c5:10:df: 67:42:94:8b:78:cb:2a:9d:73:1f:23:36:07:c6:90:9a:94:d6: 0e:c1:11:e0:d0:ce:aa:39:ae:a0:20:e8:e6:65:e9:7e:b3:f0: 14:78:1d:b7:b0:52:09:5f:63:e2:95:5a:78:29:79:15:b6:8e: 52:06:e3:3a:3e:be:69:f6:a3:e5:81:3e:dd:71:9a:0a:76:a8: 1d:6b:ee:d6 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUKf9MRsbkgpWSw3miuz/NBlrPs6QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAyMjY0NVoX DTI3MDUwMjAyMzE0NVowMzExMC8GA1UEAxMoN0U4Q0U3RjRFN0VGQTM2ODE4MTFF REMyNUVFRkQxRkQzRkM0MUZGQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALgKt+ZzrgMjugYKF4EzjmcbPMzaC3zvdMah6wyCSVg+HdYKNKNCWopIqq7a mA4uY9GLJ0oXLWyl3IKou3GvyFP356wmG5ntUiQ7HcjTJDv9gPGBezj7XVHWiMqL 5fZJ69/cdEW89qKq/+d9+yPJnbwU/Omuv3yxNzeeel92L1vup2RktGkXnootjkSr 9C0AsnymVTtZK8Z1lNd4UMf5I6XEBsVeafLB8RRIfJAhsc8Btou4PetBi3bGUwjB bgcb274He9opBwffA6pGuvaTtjwlByQMaVL1kHVOe+DlN5EDuqLWki2QE7+9Lkv6 ZxQeMBeZi23Qm0pSWgj94LSWfScCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH6M5/Tn76NoGBHtwl7v0f0/xB/7MB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2VlNzI1N2JiLTIxOTUtNGZkNy1iY2M1LTkwMTlhYjQ5ZGJhNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lZTcyNTdi Yi0yMTk1LTRmZDctYmNjNS05MDE5YWI0OWRiYTUvMC83RThDRTdGNEU3RUZBMzY4 MTgxMUVEQzI1RUVGRDFGRDNGQzQxRkZCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAnQ8bMA0GCSqGSIb3DQEBCwUAA4IBAQADrELq1zrkmfzbxFrJOCvNLvwCR3TQ 3MbpClbrOcIaRwLTeld8zhMLiP8WQwQzn30OBWptpY+u3iyYtUyK+iYFswN132rs k06070NIVGzDrVC+E2gj1myfnTGUWpA2YgBIiRwII82FcEGV+1HAtF4WkWkymWCY CADp9gFPpHmnLjafNrrh4AopqwM9Bpgvl11s7+TSdbD9qOq6Pqu16HjDA1RTQATu i+0M5RKbHyk/xkbFEN9nQpSLeMsqnXMfIzYHxpCalNYOwRHg0M6qOa6gIOjmZel+ s/AUeB23sFIJX2PilVp4KXkVto5SBuM6Pr5p9qPlgT7dcZoKdqgda+7W -----END CERTIFICATE-----Generated at Tue May 12 22:10:22 2026 by rpki-client