$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.cer File: 7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.cer (raw, json) Hash identifier: PO6945n2Io20+XBxwu5/IPmC7Ei+GwuRAUSuiXuzARo= Subject key identifier: 70:45:26:2D:5E:CB:D0:80:FD:7E:90:BD:57:C5:CA:C1:47:67:D7:D9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 45FC91CB4AC51DDF1F1E018D5B7726A628EFC645 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft caRepository: rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:05:44 +0000 Certificate not after: Sun 02 May 2027 01:10:44 +0000 Subordinate resources: IP: 103.157.25.0/24 IP: 2001:df5:c80::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:fc:91:cb:4a:c5:1d:df:1f:1e:01:8d:5b:77:26:a6:28:ef:c6:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:05:44 2026 GMT Not After : May 2 01:10:44 2027 GMT Subject: CN=7045262D5ECBD080FD7E90BD57C5CAC14767D7D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6b:2c:ca:54:1c:0e:d0:7e:09:9c:66:56:74: 4f:57:82:32:db:9d:17:ea:dd:48:5c:67:3d:09:a5: 27:ad:af:02:09:62:f0:fa:78:38:68:fa:f2:42:a2: 86:4e:46:99:27:43:fc:bf:35:24:85:cf:b5:88:e1: 80:81:96:51:1a:68:d1:85:ea:35:85:de:73:d4:37: 35:e2:92:27:fe:ff:b1:40:1e:cd:ba:f2:ba:4a:0e: f2:4d:a9:4f:0a:f8:47:88:7b:5c:bf:db:b6:88:f0: 6e:c4:1b:03:83:cd:6a:99:6e:a5:85:ed:14:82:93: 0a:6b:8e:46:de:95:3d:d5:00:bf:d4:c9:75:6c:ad: 3b:bd:b5:76:66:31:bf:8f:dd:cb:82:5c:57:41:9e: de:c0:6b:47:7e:4c:47:58:3e:65:3d:f4:c9:e4:33: c6:05:20:d9:be:88:eb:cb:6a:a6:a8:2e:88:1a:9b: 64:9e:39:25:6a:1c:4b:6a:62:d5:e7:77:7d:d6:11: 9b:7e:6d:1b:9b:8c:21:7a:e2:ac:30:8d:c0:7c:d9: fb:d5:f3:06:57:fa:8c:e0:a2:95:fa:1c:ab:70:01: 3c:59:d2:cb:47:99:72:27:b7:76:9b:f2:84:67:21: e2:b3:45:c5:ac:9a:f5:d6:5e:48:91:ae:cf:cf:69: 21:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 70:45:26:2D:5E:CB:D0:80:FD:7E:90:BD:57:C5:CA:C1:47:67:D7:D9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.25.0/24 IPv6: 2001:df5:c80::/48 Signature Algorithm: sha256WithRSAEncryption 88:27:22:02:53:fa:20:ac:8d:de:cc:0b:c3:c1:03:56:eb:11: 6a:96:8d:45:bb:12:fb:7c:49:d4:c2:e3:d0:25:59:19:ec:f5: c4:d7:a2:52:9b:6c:44:78:e6:29:05:b8:a1:0a:7e:0d:4f:b5: 19:78:ed:49:db:cd:95:35:65:3a:94:4c:0c:a4:6b:a6:ac:b4: e6:e5:1f:19:c7:d3:5e:fb:d8:4e:2f:54:79:39:ce:c4:05:9d: 11:7b:ba:c8:66:81:78:44:0c:74:78:d3:08:30:4b:31:da:11: 5c:d2:ab:8d:9c:81:f1:1b:59:df:ab:60:f4:b3:81:a0:3a:68: 6d:45:0c:69:fb:be:22:a4:f7:05:78:0e:f1:a8:78:ce:8d:83: a6:a3:9e:4b:1f:c9:24:e4:ff:49:fa:13:54:05:98:b9:ab:35: 0e:00:82:3c:2a:0d:48:50:71:a9:59:e7:d3:a1:11:ad:4f:9e: 40:e8:60:5e:9c:52:35:67:69:02:41:12:57:20:1b:32:54:50: ab:16:d4:bf:bc:62:10:05:7a:08:07:50:9c:9e:51:cc:de:60: 8e:21:af:9e:2d:00:7c:d0:92:db:3b:9b:ca:58:5f:7a:7f:38: b5:3c:15:05:d3:e3:30:89:2b:cf:2b:0e:af:2a:a2:08:5e:f3: d9:a4:89:84 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIURfyRy0rFHd8fHgGNW3cmpijvxkUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDU0NFoX DTI3MDUwMjAxMTA0NFowMzExMC8GA1UEAxMoNzA0NTI2MkQ1RUNCRDA4MEZEN0U5 MEJENTdDNUNBQzE0NzY3RDdEOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJrLMpUHA7QfgmcZlZ0T1eCMtudF+rdSFxnPQmlJ62vAgli8Pp4OGj68kKi hk5GmSdD/L81JIXPtYjhgIGWURpo0YXqNYXec9Q3NeKSJ/7/sUAezbryukoO8k2p Twr4R4h7XL/btojwbsQbA4PNaplupYXtFIKTCmuORt6VPdUAv9TJdWytO721dmYx v4/dy4JcV0Ge3sBrR35MR1g+ZT30yeQzxgUg2b6I68tqpqguiBqbZJ45JWocS2pi 1ed3fdYRm35tG5uMIXrirDCNwHzZ+9XzBlf6jOCilfocq3ABPFnSy0eZcie3dpvy hGch4rNFxaya9dZeSJGuz89pIccCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHBFJi1ey9CA/X6QvVfFysFHZ9fZMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzgwMWI3OWFjLTMzNTEtNDcwNS04YzNkLTYwMmFkY2Q3OWJiNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84MDFiNzlh Yy0zMzUxLTQ3MDUtOGMzZC02MDJhZGNkNzliYjcvMC83MDQ1MjYyRDVFQ0JEMDgw RkQ3RTkwQkQ1N0M1Q0FDMTQ3NjdEN0Q5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ50ZMA8EAgACMAkDBwAgAQ31DIAwDQYJKoZIhvcNAQELBQADggEBAIgnIgJT +iCsjd7MC8PBA1brEWqWjUW7Evt8SdTC49AlWRns9cTXolKbbER45ikFuKEKfg1P tRl47UnbzZU1ZTqUTAyka6astOblHxnH01772E4vVHk5zsQFnRF7ushmgXhEDHR4 0wgwSzHaEVzSq42cgfEbWd+rYPSzgaA6aG1FDGn7viKk9wV4DvGoeM6Ng6ajnksf ySTk/0n6E1QFmLmrNQ4AgjwqDUhQcalZ59OhEa1PnkDoYF6cUjVnaQJBElcgGzJU UKsW1L+8YhAFeggHUJyeUczeYI4hr54tAHzQkts7m8pYX3p/OLU8FQXT4zCJK88r Dq8qoghe89mkiYQ= -----END CERTIFICATE-----Generated at Tue May 12 22:38:46 2026 by rpki-client