$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer File: 207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer (raw, json) Hash identifier: +4wOpSVHP+fBO4N/K6UJdVPTKC42Bj29u+7AKWxjIZY= Subject key identifier: 20:7F:78:49:5B:91:DD:93:3A:3C:60:FB:6F:5F:3A:01:B3:AE:B2:44 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4919CDCA8A190B6C40265579DB1019B69D4918BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft caRepository: rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:10:51 +0000 Certificate not after: Sun 02 May 2027 01:15:51 +0000 Subordinate resources: IP: 103.21.229.0/24 IP: 103.227.141.0 -- 103.227.143.255 IP: 2400:bf80::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:19:cd:ca:8a:19:0b:6c:40:26:55:79:db:10:19:b6:9d:49:18:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:10:51 2026 GMT Not After : May 2 01:15:51 2027 GMT Subject: CN=207F78495B91DD933A3C60FB6F5F3A01B3AEB244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:da:70:72:f0:42:5a:19:d6:d8:fb:c8:3e:c0: 3b:6b:02:be:7a:07:a7:d1:2b:16:d3:8f:01:e9:3c: eb:66:fe:87:d2:44:3c:ba:15:47:4b:8a:04:a9:c2: 04:a2:41:61:bd:7d:b3:b2:49:76:d2:4c:7c:4b:ba: 20:6c:b9:23:e1:2e:6b:1d:7c:de:66:2e:80:73:82: 72:4d:ce:dd:c6:74:87:0a:d5:3c:b3:0b:2e:95:32: 49:55:93:ba:d4:6b:b6:b5:51:c6:60:ad:cd:95:ce: 72:a8:1d:68:f6:3a:85:c8:7c:fa:97:f8:1d:2b:43: 4c:76:b1:95:a0:9a:a1:b2:4f:75:ed:66:89:a9:46: 6c:90:b7:d5:f1:9e:e4:08:f7:d4:cb:b8:2d:7a:7a: f8:6b:62:75:6d:24:3d:1a:11:b8:96:a0:a1:d1:61: 90:5e:99:1f:ad:f9:f8:d2:41:71:26:1d:85:a4:f5: ad:b1:3a:35:98:1e:66:be:00:21:54:15:b5:d7:69: d0:66:49:9e:cf:48:8a:6d:c7:05:d7:44:97:ce:02: c0:b7:8b:6a:89:ec:be:d9:06:2d:aa:4d:91:a9:e7: 15:74:41:c5:ff:a1:58:30:6f:e8:87:e1:36:81:68: 25:0c:cd:a2:66:7c:00:d1:a9:80:e1:99:4c:c8:8f: ff:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:7F:78:49:5B:91:DD:93:3A:3C:60:FB:6F:5F:3A:01:B3:AE:B2:44 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.21.229.0/24 103.227.141.0-103.227.143.255 IPv6: 2400:bf80::/32 Signature Algorithm: sha256WithRSAEncryption 81:97:8b:af:88:13:a6:f1:19:e4:89:1f:c7:93:11:c0:60:a5: f7:b8:24:14:4b:37:f7:c6:b3:16:2a:37:2b:09:e2:d6:8c:14: ef:51:59:9a:ee:b2:52:e6:30:7d:b5:59:16:dc:4d:fc:d4:d6: af:b2:00:99:f7:07:77:b5:99:cd:9d:97:de:4c:60:44:cf:81: b3:03:d7:62:82:81:10:dd:c1:3f:cd:cb:de:5c:71:e1:70:80: 9e:4b:69:77:62:d5:20:d7:32:02:5f:e6:d9:a3:b9:96:81:95: 52:46:07:be:d6:7b:9f:33:9d:78:60:ce:c7:a5:71:9e:7e:12: ba:58:88:f6:7f:ee:73:e3:10:b2:2b:2d:bf:52:bc:8b:d2:e2: f4:5a:59:0c:7b:c1:65:68:3d:20:e5:19:28:c8:37:7e:58:e0: b6:d4:06:ee:d0:cd:12:85:9d:1d:f5:2b:81:55:ac:a5:fe:ba: b3:85:e7:3b:ad:b9:a0:4a:eb:bc:66:99:6f:50:1e:b3:88:e9: 53:c2:a0:d2:77:ef:d2:69:02:68:03:86:5a:b1:15:23:29:c7: 7b:10:a0:2a:61:60:b6:5b:f1:60:0e:e8:6e:b5:78:3d:d3:79: 5f:3d:9c:20:72:4f:ce:44:0d:7d:af:a1:11:96:d4:22:2a:e6: 59:e4:f1:db -----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgIUSRnNyooZC2xAJlV52xAZtp1JGL0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTA1MVoX DTI3MDUwMjAxMTU1MVowMzExMC8GA1UEAxMoMjA3Rjc4NDk1QjkxREQ5MzNBM0M2 MEZCNkY1RjNBMDFCM0FFQjI0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKHacHLwQloZ1tj7yD7AO2sCvnoHp9ErFtOPAek862b+h9JEPLoVR0uKBKnC BKJBYb19s7JJdtJMfEu6IGy5I+Euax183mYugHOCck3O3cZ0hwrVPLMLLpUySVWT utRrtrVRxmCtzZXOcqgdaPY6hch8+pf4HStDTHaxlaCaobJPde1mialGbJC31fGe 5Aj31Mu4LXp6+GtidW0kPRoRuJagodFhkF6ZH635+NJBcSYdhaT1rbE6NZgeZr4A IVQVtddp0GZJns9Iim3HBddEl84CwLeLaonsvtkGLapNkannFXRBxf+hWDBv6Ifh NoFoJQzNomZ8ANGpgOGZTMiP/38CAwEAAaOCAtYwggLSMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCB/eElbkd2TOjxg+29fOgGzrrJEMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg3NzQ4NTZmLTc0NTMtNGQwMi1iYzM1LTM0ODJlYjU2NDZhMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84Nzc0ODU2 Zi03NDUzLTRkMDItYmMzNS0zNDgyZWI1NjQ2YTIvMC8yMDdGNzg0OTVCOTFERDkz M0EzQzYwRkI2RjVGM0EwMUIzQUVCMjQ0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAU AwQAZxXlMAwDBABn440DBARn44AwDQQCAAIwBwMFACQAv4AwDQYJKoZIhvcNAQEL BQADggEBAIGXi6+IE6bxGeSJH8eTEcBgpfe4JBRLN/fGsxYqNysJ4taMFO9RWZru slLmMH21WRbcTfzU1q+yAJn3B3e1mc2dl95MYETPgbMD12KCgRDdwT/Ny95cceFw gJ5LaXdi1SDXMgJf5tmjuZaBlVJGB77We58znXhgzselcZ5+ErpYiPZ/7nPjELIr Lb9SvIvS4vRaWQx7wWVoPSDlGSjIN35Y4LbUBu7QzRKFnR31K4FVrKX+urOF5zut uaBK67xmmW9QHrOI6VPCoNJ379JpAmgDhlqxFSMpx3sQoCphYLZb8WAO6G61eD3T eV89nCByT85EDX2voRGW1CIq5lnk8ds= -----END CERTIFICATE-----Generated at Tue May 12 22:16:56 2026 by rpki-client