$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer File: 207EA811568CF1DB9A757936B650F6F68EBB08B5.cer (raw, json) Hash identifier: BAUwj97a2ERWe6y9O2fW7VQWLZbeLGTdWhlJOnYPC2o= Subject key identifier: 20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 592FB311897242531B15884B8B5E39AEBD7629E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:20:33 +0000 Certificate not after: Sun 02 May 2027 01:25:33 +0000 Subordinate resources: IP: 49.128.184.0/22 IP: 210.247.240.0/20 IP: 2406:7e00::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:2f:b3:11:89:72:42:53:1b:15:88:4b:8b:5e:39:ae:bd:76:29:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:20:33 2026 GMT Not After : May 2 01:25:33 2027 GMT Subject: CN=207EA811568CF1DB9A757936B650F6F68EBB08B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ed:b9:a0:24:41:2b:ea:67:47:a5:9d:57:7a: bd:5e:e7:e9:b5:35:d3:cb:36:8a:90:51:bb:af:ee: 0e:86:54:07:56:60:c0:66:21:29:27:9c:05:aa:fd: b6:0e:c7:d9:cf:c7:b1:56:ab:7b:49:fc:58:b2:4b: c3:21:ec:2e:c8:60:c4:c4:98:22:e0:45:af:40:34: 1e:9b:cf:e4:c1:7e:74:1e:de:ce:25:b8:8a:b4:d8: 21:ef:7d:f4:e1:83:62:d5:54:0d:03:31:91:aa:de: 05:f8:00:77:ac:ca:12:8a:a8:4d:94:74:38:1e:d5: 45:1f:7a:8c:a7:16:07:b3:12:78:bb:ac:8a:c6:98: 2c:7f:92:f9:d0:74:88:2e:1d:78:ad:d3:5a:78:35: c9:31:ca:fd:47:f0:f1:50:79:ef:a7:0b:15:f5:bd: 9a:18:81:5a:ae:e7:40:e6:22:09:18:b0:f1:b4:df: 59:ff:7f:3a:eb:a9:66:cc:94:3c:e0:c6:04:37:4f: d5:72:fd:7f:ca:f6:1c:eb:35:4a:4c:13:44:1b:ed: e9:d0:0c:45:90:22:03:c7:fa:40:01:e2:e2:57:18: 36:9a:cf:5f:21:1b:a2:b9:11:9e:97:09:7c:b2:13: 1e:43:62:96:47:b8:40:30:72:36:83:6e:6e:fb:cc: 37:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.128.184.0/22 210.247.240.0/20 IPv6: 2406:7e00::/32 Signature Algorithm: sha256WithRSAEncryption 3d:72:68:b3:71:9c:9d:1f:23:cd:23:e2:fc:f2:c3:d8:67:46: e5:f9:dc:b6:32:98:0f:c7:5f:26:75:4a:f4:75:dc:33:73:3f: 0d:c7:b7:dc:51:56:f3:ea:0c:85:ad:04:dd:36:c8:68:c8:3a: 5a:1e:ae:7c:b8:f4:92:bf:37:1a:c1:00:17:80:4f:f2:7a:b8: 52:44:aa:ef:0b:67:f3:5c:c7:93:6e:65:8b:79:ba:2a:71:4b: 31:8d:ed:12:e2:2f:7a:64:a0:cf:fa:f6:ac:87:d8:ed:d1:f7: 28:b9:95:45:2d:1c:9b:75:59:6b:e0:f6:01:c4:37:f4:c0:45: 9b:64:a0:3c:df:10:f2:f5:f9:48:0c:24:eb:e7:d5:6b:ed:a5: e6:05:53:51:29:45:32:09:d5:5d:15:3c:53:9d:37:46:25:ad: c3:95:ca:71:c8:e8:2e:fd:a6:fd:37:50:46:75:68:00:e0:fc: aa:18:2d:a0:cd:6c:b2:73:9d:62:c4:87:81:69:ea:70:44:16: 03:90:27:87:d9:95:95:f0:90:0c:1f:35:5d:0f:13:6f:b4:21: ec:3c:00:9c:f2:8b:54:66:23:be:82:c7:93:e2:d3:9c:9a:63: e1:34:10:e3:83:d4:9c:a3:4e:bf:90:ea:df:bd:57:af:44:47: 01:dd:fe:3c -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUWS+zEYlyQlMbFYhLi145rr12KecwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjAzM1oX DTI3MDUwMjAxMjUzM1owMzExMC8GA1UEAxMoMjA3RUE4MTE1NjhDRjFEQjlBNzU3 OTM2QjY1MEY2RjY4RUJCMDhCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANrtuaAkQSvqZ0elnVd6vV7n6bU108s2ipBRu6/uDoZUB1ZgwGYhKSecBar9 tg7H2c/HsVare0n8WLJLwyHsLshgxMSYIuBFr0A0HpvP5MF+dB7eziW4irTYIe99 9OGDYtVUDQMxkareBfgAd6zKEoqoTZR0OB7VRR96jKcWB7MSeLusisaYLH+S+dB0 iC4deK3TWng1yTHK/Ufw8VB576cLFfW9mhiBWq7nQOYiCRiw8bTfWf9/OuupZsyU PODGBDdP1XL9f8r2HOs1SkwTRBvt6dAMRZAiA8f6QAHi4lcYNprPXyEborkRnpcJ fLITHkNilke4QDByNoNubvvMN5sCAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCB+qBFWjPHbmnV5NrZQ9vaOuwi1MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzk2MTI0MzI5LWVjMjAtNDQ2MC1hYzMxLTljMzZjZjk0ZjNmYi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85NjEyNDMy OS1lYzIwLTQ0NjAtYWMzMS05YzM2Y2Y5NGYzZmIvMC8yMDdFQTgxMTU2OENGMURC OUE3NTc5MzZCNjUwRjZGNjhFQkIwOEI1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQCMYC4AwQE0vfwMA0EAgACMAcDBQAkBn4AMA0GCSqGSIb3DQEBCwUAA4IBAQA9 cmizcZydHyPNI+L88sPYZ0bl+dy2MpgPx18mdUr0ddwzcz8Nx7fcUVbz6gyFrQTd NshoyDpaHq58uPSSvzcawQAXgE/yerhSRKrvC2fzXMeTbmWLeboqcUsxje0S4i96 ZKDP+vash9jt0fcouZVFLRybdVlr4PYBxDf0wEWbZKA83xDy9flIDCTr59Vr7aXm BVNRKUUyCdVdFTxTnTdGJa3DlcpxyOgu/ab9N1BGdWgA4PyqGC2gzWyyc51ixIeB aepwRBYDkCeH2ZWV8JAMHzVdDxNvtCHsPACc8otUZiO+gseT4tOcmmPhNBDjg9Sc o06/kOrfvVevREcB3f48 -----END CERTIFICATE-----Generated at Tue May 12 22:02:36 2026 by rpki-client