$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer File: 5A7D374096A73D4472AE1FFEEEE24473C1EC709C.cer (raw, json) Hash identifier: UtQ809MWEFWe0OGBML/+7i15uIiFuNb+SkE3p4VRiy0= Subject key identifier: 5A:7D:37:40:96:A7:3D:44:72:AE:1F:FE:EE:E2:44:73:C1:EC:70:9C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2BD68576D6457CEFBDFECD1B6A871F3B5627EA75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:48:22 +0000 Certificate not after: Sun 02 May 2027 02:53:22 +0000 Subordinate resources: IP: 103.127.168.0/23 IP: 2001:df7:6f00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:d6:85:76:d6:45:7c:ef:bd:fe:cd:1b:6a:87:1f:3b:56:27:ea:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:48:22 2026 GMT Not After : May 2 02:53:22 2027 GMT Subject: CN=5A7D374096A73D4472AE1FFEEEE24473C1EC709C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ef:17:cb:05:71:b7:16:8c:bb:68:43:34:9c: 50:8c:e5:2c:ce:16:0d:03:21:92:df:70:ec:20:f8: 63:2b:ff:f7:df:e1:92:a9:cd:64:58:30:e6:90:0d: d8:bc:0a:c2:2f:93:f7:a3:8a:95:74:af:4b:cd:0d: 19:ae:11:fd:b6:15:bf:d1:9e:d0:78:b2:0a:71:33: 27:24:d9:e3:f4:87:5b:a8:07:1c:96:38:10:8e:b5: 8e:76:96:e6:4b:41:18:39:a4:92:7e:5d:f7:2c:75: f5:39:a9:58:e9:b6:de:2c:85:a8:03:57:66:6b:0f: d5:f0:99:0d:1f:d0:b6:3e:df:45:52:ff:80:fb:64: 5f:2a:50:b3:9a:cd:3a:bc:bc:92:dc:e5:80:94:c1: 9f:e8:4d:5a:26:ea:ef:8e:9e:2b:03:0b:b1:bb:a3: 38:a7:5a:48:8a:58:65:42:fd:a2:9e:ac:4b:71:b3: fd:ce:be:98:db:dd:a7:59:1e:6b:95:c4:33:3f:b6: 94:9f:ac:4f:3f:3f:32:fb:7e:d6:cf:62:49:6c:8b: af:ff:85:3e:17:4c:6e:c5:1c:63:0a:05:63:cb:8e: c9:81:b8:8c:9c:15:17:32:dc:dc:88:4f:23:41:48: 30:2c:cc:96:98:aa:40:ac:9b:4d:cf:a6:7d:51:c6: 73:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:7D:37:40:96:A7:3D:44:72:AE:1F:FE:EE:E2:44:73:C1:EC:70:9C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/fe7cc976-69f6-4db8-a7ab-856a2bb8eafe/0/5A7D374096A73D4472AE1FFEEEE24473C1EC709C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.127.168.0/23 IPv6: 2001:df7:6f00::/48 Signature Algorithm: sha256WithRSAEncryption 56:dc:75:bb:de:9d:ff:85:e5:ee:21:dd:32:55:bf:2f:35:23: f6:83:2c:87:b1:1d:40:c2:94:7a:35:d3:f9:c4:16:83:4b:50: 70:76:b4:39:d6:40:6a:33:e9:e1:e7:de:db:6b:79:95:68:88: d4:48:6d:bd:44:24:58:98:91:1a:8f:4b:21:e5:77:50:7b:15: 78:4f:03:eb:a0:0c:49:42:c5:7d:e4:12:48:7b:10:37:a4:6b: ff:00:52:89:44:5b:c8:c9:13:0f:09:b3:23:ce:a9:6d:ed:56: 69:7f:5a:d4:02:89:0b:3c:53:0a:81:82:45:4e:78:3c:91:88: 75:6d:42:76:93:c7:ad:b5:c1:58:87:c6:9e:36:39:15:3d:13: 7c:5d:e9:9a:bb:6b:a1:56:57:23:08:66:0e:e1:7a:0f:74:44: eb:e8:eb:19:a2:69:80:c0:58:ba:57:39:9f:d2:55:3b:aa:77: fb:87:95:9d:6e:1f:a4:a9:9b:94:c3:a5:0a:05:b1:17:06:55: cb:4e:5a:ac:e9:9d:e5:83:53:6e:41:c1:7e:38:a8:d7:30:34: 75:dd:36:85:b2:e4:36:7d:4e:10:ad:86:b6:14:f4:53:2d:49: 14:5d:1f:42:dd:b2:af:f4:99:74:37:89:0f:dc:2d:ee:e4:5f: 76:48:87:3d -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUK9aFdtZFfO+9/s0baocfO1Yn6nUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyNDgyMloX DTI3MDUwMjAyNTMyMlowMzExMC8GA1UEAxMoNUE3RDM3NDA5NkE3M0Q0NDcyQUUx RkZFRUVFMjQ0NzNDMUVDNzA5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJjvF8sFcbcWjLtoQzScUIzlLM4WDQMhkt9w7CD4Yyv/99/hkqnNZFgw5pAN 2LwKwi+T96OKlXSvS80NGa4R/bYVv9Ge0HiyCnEzJyTZ4/SHW6gHHJY4EI61jnaW 5ktBGDmkkn5d9yx19TmpWOm23iyFqANXZmsP1fCZDR/Qtj7fRVL/gPtkXypQs5rN Ory8ktzlgJTBn+hNWibq746eKwMLsbujOKdaSIpYZUL9op6sS3Gz/c6+mNvdp1ke a5XEMz+2lJ+sTz8/Mvt+1s9iSWyLr/+FPhdMbsUcYwoFY8uOyYG4jJwVFzLc3IhP I0FIMCzMlpiqQKybTc+mfVHGc5kCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFp9N0CWpz1Ecq4f/u7iRHPB7HCcMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ZlN2NjOTc2LTY5ZjYtNGRiOC1hN2FiLTg1NmEyYmI4ZWFmZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mZTdjYzk3 Ni02OWY2LTRkYjgtYTdhYi04NTZhMmJiOGVhZmUvMC81QTdEMzc0MDk2QTczRDQ0 NzJBRTFGRkVFRUUyNDQ3M0MxRUM3MDlDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ3+oMA8EAgACMAkDBwAgAQ33bwAwDQYJKoZIhvcNAQELBQADggEBAFbcdbve nf+F5e4h3TJVvy81I/aDLIexHUDClHo10/nEFoNLUHB2tDnWQGoz6eHn3ttreZVo iNRIbb1EJFiYkRqPSyHld1B7FXhPA+ugDElCxX3kEkh7EDeka/8AUolEW8jJEw8J syPOqW3tVml/WtQCiQs8UwqBgkVOeDyRiHVtQnaTx621wViHxp42ORU9E3xd6Zq7 a6FWVyMIZg7heg90ROvo6xmiaYDAWLpXOZ/SVTuqd/uHlZ1uH6Spm5TDpQoFsRcG VctOWqzpneWDU25BwX44qNcwNHXdNoWy5DZ9ThCthrYU9FMtSRRdH0Ldsq/0mXQ3 iQ/cLe7kX3ZIhz0= -----END CERTIFICATE-----Generated at Tue May 12 22:04:02 2026 by rpki-client