$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/107CC3B5D832F9C49566A53614D4CD97DCCF422C.cer File: 107CC3B5D832F9C49566A53614D4CD97DCCF422C.cer (raw, json) Hash identifier: I9NtZkuVPV9rlKv0yKCzcMubSxiicwpyHid2Hr68klQ= Subject key identifier: 10:7C:C3:B5:D8:32:F9:C4:95:66:A5:36:14:D4:CD:97:DC:CF:42:2C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7D374B7D205FD78F51A57F078F6DA75DADAD8907 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:53:12 +0000 Certificate not after: Sat 01 May 2027 23:58:12 +0000 Subordinate resources: IP: 103.220.114.0/23 IP: 2001:df2:6e00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:37:4b:7d:20:5f:d7:8f:51:a5:7f:07:8f:6d:a7:5d:ad:ad:89:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:53:12 2026 GMT Not After : May 1 23:58:12 2027 GMT Subject: CN=107CC3B5D832F9C49566A53614D4CD97DCCF422C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4f:3a:5c:53:ba:39:87:3d:68:6d:5d:a2:7a: ec:ce:62:f3:ff:d5:60:83:2b:0f:05:78:38:0f:84: 49:5a:f7:bd:2c:47:e4:4e:25:ff:2d:a0:69:74:f9: 4e:f9:f6:1e:fd:55:b2:98:39:4a:41:5a:30:d7:b1: fc:6d:c6:be:bf:eb:6b:0b:3f:85:59:74:b2:46:d4: 7e:21:86:49:86:e8:63:4a:17:a4:11:f7:b2:dd:3a: 8b:2b:24:a7:f2:3d:d0:7c:bb:d1:16:2f:ad:62:17: 15:2f:46:d6:c2:d2:57:3c:57:2f:1c:d1:fa:f4:df: 10:fe:01:7b:a1:2a:6a:b4:1d:09:3a:12:1b:d8:dc: 56:70:49:c9:91:52:a5:1e:e3:9a:97:b3:52:b9:9a: b8:e7:9c:2a:37:ac:7f:62:2d:76:ec:f8:38:2f:d3: 6d:6e:28:41:46:30:ba:83:3e:20:43:d8:6d:1a:d7: c4:44:f6:fe:29:19:da:fd:81:1f:e1:ee:5f:10:38: 88:09:a9:37:76:73:c8:e3:6f:70:64:5b:68:42:e8: 59:83:fa:1e:2f:93:74:32:ad:51:72:b6:5f:d3:aa: 22:01:67:82:fd:f5:5a:e6:06:64:c3:64:88:41:ee: 65:ea:a1:9c:88:80:b9:1a:d9:01:e2:32:05:ec:9c: df:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 10:7C:C3:B5:D8:32:F9:C4:95:66:A5:36:14:D4:CD:97:DC:CF:42:2C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/107CC3B5D832F9C49566A53614D4CD97DCCF422C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.220.114.0/23 IPv6: 2001:df2:6e00::/48 Signature Algorithm: sha256WithRSAEncryption 5d:e9:dd:13:7b:e3:e2:79:87:f4:09:8b:e2:25:02:91:7f:b2: 93:65:49:6a:de:86:dd:b9:5a:96:5c:5a:c4:ed:8f:e8:54:1b: 22:45:71:a9:33:ea:1a:6e:0d:b4:c3:51:39:9f:7d:80:77:f4: a7:d3:67:09:d7:68:80:94:26:b0:da:49:3a:4c:4c:03:6c:5e: e4:09:c5:08:a2:bc:48:ad:85:03:8a:55:b9:0a:40:fe:de:07: d4:ce:9b:b0:e5:98:28:23:e6:6f:00:e1:aa:ea:cd:97:2c:f1: cd:e8:f5:70:fc:50:80:b3:3b:ca:8a:42:75:b9:af:a8:3a:d6: 67:57:7b:47:ae:0e:40:83:a3:ef:36:58:44:dc:f1:3b:3d:7c: be:ad:94:bf:fe:99:a4:06:20:e9:25:bd:33:7e:f3:93:a9:2e: 88:bd:16:53:d1:f8:1c:30:25:c5:0a:af:a4:88:1f:76:40:7c: 8d:67:34:7c:a6:10:42:55:53:d9:bf:34:ca:d1:f2:47:8c:eb: f9:32:c1:cb:56:4e:e6:21:ab:e0:04:05:1c:84:3b:3d:f5:2d: 63:50:7b:a2:47:0e:e1:7a:01:c0:25:01:e7:98:32:7d:48:b5: 18:7b:9c:43:b6:78:25:12:7e:49:76:c3:5d:f1:09:76:f3:91: 73:02:cc:b8 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUfTdLfSBf149RpX8Hj22nXa2tiQcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTMxMloX DTI3MDUwMTIzNTgxMlowMzExMC8GA1UEAxMoMTA3Q0MzQjVEODMyRjlDNDk1NjZB NTM2MTRENENEOTdEQ0NGNDIyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN9POlxTujmHPWhtXaJ67M5i8//VYIMrDwV4OA+ESVr3vSxH5E4l/y2gaXT5 Tvn2Hv1Vspg5SkFaMNex/G3Gvr/raws/hVl0skbUfiGGSYboY0oXpBH3st06iysk p/I90Hy70RYvrWIXFS9G1sLSVzxXLxzR+vTfEP4Be6EqarQdCToSG9jcVnBJyZFS pR7jmpezUrmauOecKjesf2Itduz4OC/TbW4oQUYwuoM+IEPYbRrXxET2/ikZ2v2B H+HuXxA4iAmpN3ZzyONvcGRbaELoWYP6Hi+TdDKtUXK2X9OqIgFngv31WuYGZMNk iEHuZeqhnIiAuRrZAeIyBeyc39MCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBB8w7XYMvnElWalNhTUzZfcz0IsMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE1NGI5ZDMyLTNjNWEtNDBlMi1iNzg4LTA2OWRlMGMzZDJkZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xNTRiOWQz Mi0zYzVhLTQwZTItYjc4OC0wNjlkZTBjM2QyZGUvMC8xMDdDQzNCNUQ4MzJGOUM0 OTU2NkE1MzYxNEQ0Q0Q5N0RDQ0Y0MjJDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ9xyMA8EAgACMAkDBwAgAQ3ybgAwDQYJKoZIhvcNAQELBQADggEBAF3p3RN7 4+J5h/QJi+IlApF/spNlSWreht25WpZcWsTtj+hUGyJFcakz6hpuDbTDUTmffYB3 9KfTZwnXaICUJrDaSTpMTANsXuQJxQiivEithQOKVbkKQP7eB9TOm7DlmCgj5m8A 4arqzZcs8c3o9XD8UICzO8qKQnW5r6g61mdXe0euDkCDo+82WETc8Ts9fL6tlL/+ maQGIOklvTN+85OpLoi9FlPR+BwwJcUKr6SIH3ZAfI1nNHymEEJVU9m/NMrR8keM 6/kywctWTuYhq+AEBRyEOz31LWNQe6JHDuF6AcAlAeeYMn1ItRh7nEO2eCUSfkl2 w13xCXbzkXMCzLg= -----END CERTIFICATE-----Generated at Tue May 12 22:45:58 2026 by rpki-client