$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer File: 07036C5527255D59345E40A173983EEEA0C09FD0.cer (raw, json) Hash identifier: TtXyvr83v41Ja+uSOnWT20O1k6Qc8XyS9yj1wyg23Ck= Subject key identifier: 07:03:6C:55:27:25:5D:59:34:5E:40:A1:73:98:3E:EE:A0:C0:9F:D0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 144D1219B97DE03EDA2B3773C99C76EA6C9520C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:02:00 +0000 Certificate not after: Sun 02 May 2027 00:07:00 +0000 Subordinate resources: IP: 103.172.170.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:4d:12:19:b9:7d:e0:3e:da:2b:37:73:c9:9c:76:ea:6c:95:20:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:02:00 2026 GMT Not After : May 2 00:07:00 2027 GMT Subject: CN=07036C5527255D59345E40A173983EEEA0C09FD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9f:7b:f7:65:99:cc:02:b4:2b:8c:f1:c0:31: d7:a4:28:a0:f1:8d:c0:02:26:bc:e5:56:c8:dc:4d: 33:eb:ce:32:4b:c9:a6:db:31:22:b7:e1:dc:5a:d3: 70:0f:71:0f:3e:8f:1b:df:6e:3f:36:f1:e4:eb:cc: e3:84:3f:84:67:0e:02:73:5f:61:19:93:37:20:c5: 0e:99:70:29:43:09:85:fe:d7:71:c5:2e:44:33:70: a8:fd:9f:e8:e1:c8:c2:c6:c9:d6:43:ae:dd:8b:d8: 30:8f:16:13:13:e8:3a:c0:5f:f0:14:57:50:d7:20: de:b2:da:67:e1:79:d5:e4:11:ca:45:2a:96:25:43: fa:4e:d8:9f:c1:15:de:52:28:7f:0d:93:38:0d:9d: a9:93:c0:4b:a5:46:d4:24:4a:91:bc:74:80:88:04: d8:25:a5:72:67:5b:be:9a:10:ff:ec:02:7d:7e:09: 75:c8:a2:19:d6:87:87:dc:76:76:3b:bc:67:69:ca: 15:f9:4b:1a:b0:5a:a2:54:cb:30:72:5b:f4:d6:9d: bf:c8:39:2f:5f:e0:c9:f0:ff:08:02:d7:8b:10:9a: a5:13:70:1e:8e:31:57:ad:89:54:97:6b:1a:1c:39: c3:98:d9:3c:c6:41:e4:5f:67:99:72:a8:45:28:39: 11:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 07:03:6C:55:27:25:5D:59:34:5E:40:A1:73:98:3E:EE:A0:C0:9F:D0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.170.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:1c:df:c5:3b:2d:cd:6c:2a:64:be:7f:1e:8e:33:3d:2c:2d: 16:31:6f:c6:8e:60:40:f1:e9:2e:ea:95:e9:a5:94:6b:5e:9a: cf:59:c9:f5:63:50:95:83:04:0b:e9:6f:e8:f4:77:48:40:0b: 9a:cf:f5:73:1d:91:dd:73:e9:80:96:a2:ba:4c:f1:1c:b3:61: 97:93:30:cc:eb:90:42:3f:35:10:58:92:9a:a6:9e:c5:3f:b5: a5:b6:16:17:78:80:55:a6:47:b4:ac:81:70:99:61:25:15:aa: 28:e0:2a:32:c7:89:4e:27:19:51:eb:c2:43:b7:e9:5e:a6:26: 3e:e9:9a:b8:3f:4c:2f:2d:b5:1a:a8:59:d8:c7:4f:94:13:fc: a9:7f:e7:fc:e0:7b:3d:e2:09:9c:3c:ab:cd:2e:83:0b:e5:d8: da:d4:f1:37:f8:e9:29:5a:fd:96:18:fa:12:f5:e5:f8:9a:70: d6:88:73:97:ec:c5:41:10:7e:58:09:c5:40:e9:92:d0:6b:2b: 2b:15:02:6a:85:b2:68:9e:77:37:96:9e:f7:40:d8:c3:f9:cc: 87:17:48:cb:c3:eb:29:73:4c:14:c7:ce:a8:1c:51:dc:1b:b5: 91:44:cf:b7:18:f1:c2:13:a1:ae:a3:d8:0f:f0:9e:d9:77:68: a8:60:1e:7c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUFE0SGbl94D7aKzdzyZx26myVIMUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDIwMFoX DTI3MDUwMjAwMDcwMFowMzExMC8GA1UEAxMoMDcwMzZDNTUyNzI1NUQ1OTM0NUU0 MEExNzM5ODNFRUVBMEMwOUZEMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMefe/dlmcwCtCuM8cAx16QooPGNwAImvOVWyNxNM+vOMkvJptsxIrfh3FrT cA9xDz6PG99uPzbx5OvM44Q/hGcOAnNfYRmTNyDFDplwKUMJhf7XccUuRDNwqP2f 6OHIwsbJ1kOu3YvYMI8WExPoOsBf8BRXUNcg3rLaZ+F51eQRykUqliVD+k7Yn8EV 3lIofw2TOA2dqZPAS6VG1CRKkbx0gIgE2CWlcmdbvpoQ/+wCfX4JdciiGdaHh9x2 dju8Z2nKFflLGrBaolTLMHJb9Nadv8g5L1/gyfD/CALXixCapRNwHo4xV62JVJdr Ghw5w5jZPMZB5F9nmXKoRSg5EZECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAcDbFUnJV1ZNF5AoXOYPu6gwJ/QMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzIxZGI2YzliLWQ4ZmMtNGQ4Yy04MGNiLWZkMjI0MTIwOGRkZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yMWRiNmM5 Yi1kOGZjLTRkOGMtODBjYi1mZDIyNDEyMDhkZGUvMC8wNzAzNkM1NTI3MjU1RDU5 MzQ1RTQwQTE3Mzk4M0VFRUEwQzA5RkQwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6yqMA0GCSqGSIb3DQEBCwUAA4IBAQBeHN/FOy3NbCpkvn8ejjM9LC0WMW/G jmBA8eku6pXppZRrXprPWcn1Y1CVgwQL6W/o9HdIQAuaz/VzHZHdc+mAlqK6TPEc s2GXkzDM65BCPzUQWJKapp7FP7WlthYXeIBVpke0rIFwmWElFaoo4Coyx4lOJxlR 68JDt+lepiY+6Zq4P0wvLbUaqFnYx0+UE/ypf+f84Hs94gmcPKvNLoML5dja1PE3 +OkpWv2WGPoS9eX4mnDWiHOX7MVBEH5YCcVA6ZLQaysrFQJqhbJonnc3lp73QNjD +cyHF0jLw+spc0wUx86oHFHcG7WRRM+3GPHCE6Guo9gP8J7Zd2ioYB58 -----END CERTIFICATE-----Generated at Tue May 12 22:02:45 2026 by rpki-client