$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer File: 000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer (raw, json) Hash identifier: AXyjD8+D140zsBE8JNKf5txpqGJ9bMVKkm+DLXReVbE= Subject key identifier: 00:0E:7B:7E:BF:54:3F:37:AC:F1:13:75:D2:84:62:A8:D3:88:4A:2C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 555CEA9DC7485197B00DA5224C229A4A6D6EBFB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:33:19 +0000 Certificate not after: Sun 02 May 2027 02:38:19 +0000 Subordinate resources: IP: 103.182.78.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:5c:ea:9d:c7:48:51:97:b0:0d:a5:22:4c:22:9a:4a:6d:6e:bf:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:33:19 2026 GMT Not After : May 2 02:38:19 2027 GMT Subject: CN=000E7B7EBF543F37ACF11375D28462A8D3884A2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8b:ca:a1:10:69:89:54:17:83:0f:5d:f5:c3: 70:57:60:2d:14:62:ea:01:1d:6b:37:c6:73:7f:8d: 4f:4d:fb:e3:35:c0:ba:ba:32:c8:16:fb:02:7f:2e: aa:ab:01:10:9b:76:cf:f3:b8:e5:2b:c0:d0:7c:9d: 4d:ab:b6:0c:6d:5a:b1:5f:81:85:ce:18:4d:1d:75: a1:d1:f5:ce:fd:3e:12:20:0d:34:7b:73:74:7a:33: 4a:79:0c:ba:f9:7f:81:dd:78:6e:c2:4e:6b:ce:b5: 51:b3:13:7f:d8:22:9f:3c:8a:d0:1e:e5:bd:d0:e2: eb:f9:39:52:a9:aa:63:46:05:15:47:1b:23:c3:12: e3:76:0f:f0:7c:4c:66:f7:6c:df:81:69:99:ed:b4: 51:15:21:61:7d:0a:11:e3:1d:c7:4c:31:5e:c5:9b: 34:b4:42:e0:a8:22:6e:2e:f1:c1:16:22:01:fe:dd: 1a:f7:af:0e:96:e2:72:fc:1b:3e:d5:53:30:03:ca: 45:fe:41:a1:70:95:85:81:40:0a:b8:b0:ee:a7:9d: ea:22:cc:fa:d5:77:18:50:4c:bf:70:f2:df:db:97: 53:71:fe:1c:0b:fe:b2:db:39:ba:8a:12:be:59:7b: 87:0d:1f:e1:86:93:2f:8a:dc:79:c0:07:bb:42:ef: 08:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 00:0E:7B:7E:BF:54:3F:37:AC:F1:13:75:D2:84:62:A8:D3:88:4A:2C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.182.78.0/23 Signature Algorithm: sha256WithRSAEncryption 29:9a:89:aa:b7:f7:f9:7b:dc:9a:74:e8:f5:c9:32:31:5e:bb: b3:42:16:a7:86:24:e9:af:f3:c2:87:d7:93:62:76:ac:64:8a: 2c:65:0d:a2:11:41:13:94:00:57:a7:db:5d:26:70:35:29:c1: 39:06:b4:b5:43:1d:9a:5d:2f:93:cb:48:ac:e5:f0:34:91:c5: 64:85:7f:72:eb:3d:9b:4b:0a:c1:ea:1a:ae:d9:89:17:60:38: 6e:52:99:68:56:f4:f0:15:1d:b8:95:b7:0a:25:07:b4:d8:d9: c0:b6:1e:04:19:0e:99:ea:9d:9b:6b:f1:14:87:18:98:c2:3d: 61:22:57:f6:92:48:ec:62:57:d0:28:56:14:20:ea:98:14:54: 40:18:b5:35:4c:a8:6b:ea:68:53:93:e0:13:d7:7e:e1:e3:e9: 0e:e6:95:4e:cc:4f:5c:9d:90:f1:06:9f:be:5b:f6:93:9b:77: bc:cb:99:c4:3c:7b:d8:d7:4e:64:cf:f7:99:1c:4e:af:10:ab: 23:63:45:17:71:75:3f:06:f2:db:3b:f5:47:9e:02:29:da:ba: 1b:29:11:43:9c:b9:88:af:47:be:9a:e9:23:90:c8:1c:10:69: 79:3a:44:c0:7f:dd:d3:c3:7a:02:31:fc:2c:1b:82:13:50:77: c1:ea:af:f3 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUVVzqncdIUZewDaUiTCKaSm1uv7AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzMxOVoX DTI3MDUwMjAyMzgxOVowMzExMC8GA1UEAxMoMDAwRTdCN0VCRjU0M0YzN0FDRjEx Mzc1RDI4NDYyQThEMzg4NEEyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6LyqEQaYlUF4MPXfXDcFdgLRRi6gEdazfGc3+NT0374zXAuroyyBb7An8u qqsBEJt2z/O45SvA0HydTau2DG1asV+Bhc4YTR11odH1zv0+EiANNHtzdHozSnkM uvl/gd14bsJOa861UbMTf9ginzyK0B7lvdDi6/k5UqmqY0YFFUcbI8MS43YP8HxM Zvds34Fpme20URUhYX0KEeMdx0wxXsWbNLRC4Kgibi7xwRYiAf7dGvevDpbicvwb PtVTMAPKRf5BoXCVhYFACriw7qed6iLM+tV3GFBMv3Dy39uXU3H+HAv+sts5uooS vll7hw0f4YaTL4rcecAHu0LvCGMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAAOe36/VD83rPETddKEYqjTiEosMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2YzNGMzM2I4LTlkNDItNDIwOC04YWM0LWYxNzJhMTQ0ZDg2OC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mMzRjMzNi OC05ZDQyLTQyMDgtOGFjNC1mMTcyYTE0NGQ4NjgvMC8wMDBFN0I3RUJGNTQzRjM3 QUNGMTEzNzVEMjg0NjJBOEQzODg0QTJDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7ZOMA0GCSqGSIb3DQEBCwUAA4IBAQApmomqt/f5e9yadOj1yTIxXruzQhan hiTpr/PCh9eTYnasZIosZQ2iEUETlABXp9tdJnA1KcE5BrS1Qx2aXS+Ty0is5fA0 kcVkhX9y6z2bSwrB6hqu2YkXYDhuUploVvTwFR24lbcKJQe02NnAth4EGQ6Z6p2b a/EUhxiYwj1hIlf2kkjsYlfQKFYUIOqYFFRAGLU1TKhr6mhTk+AT137h4+kO5pVO zE9cnZDxBp++W/aTm3e8y5nEPHvY105kz/eZHE6vEKsjY0UXcXU/BvLbO/VHngIp 2robKRFDnLmIr0e+mukjkMgcEGl5OkTAf93Tw3oCMfwsG4ITUHfB6q/z -----END CERTIFICATE-----Generated at Tue May 12 22:03:33 2026 by rpki-client