$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7091DC8336BC57D39C24D1C393F2B14780B192CD.cer File: 7091DC8336BC57D39C24D1C393F2B14780B192CD.cer (raw, json) Hash identifier: l1kb+Rj42jM+JLhiBvdmcag5/n5xNYXdL3T6yzRX+kQ= Subject key identifier: 70:91:DC:83:36:BC:57:D3:9C:24:D1:C3:93:F2:B1:47:80:B1:92:CD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 64CF40F4392A23ABA70FAFA9EE2545C7ED769C2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/7091DC8336BC57D39C24D1C393F2B14780B192CD.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:48:47 +0000 Certificate not after: Sat 01 May 2027 23:53:47 +0000 Subordinate resources: IP: 103.120.138.0/24 IP: 2001:df6:1d00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:cf:40:f4:39:2a:23:ab:a7:0f:af:a9:ee:25:45:c7:ed:76:9c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:48:47 2026 GMT Not After : May 1 23:53:47 2027 GMT Subject: CN=7091DC8336BC57D39C24D1C393F2B14780B192CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:20:a5:a8:7c:e9:e3:12:88:90:00:a8:91:ee: 50:3b:1b:de:05:1e:3c:15:f2:57:ac:2f:f2:4d:f2: 97:5e:a2:66:32:72:74:7c:85:55:d4:a3:b0:e4:01: 1a:8b:0f:a3:91:29:5a:d1:c5:cb:af:d5:88:e0:b0: 08:23:e4:e7:86:02:42:8e:30:c4:c4:7a:9a:18:b6: 61:09:d2:e1:38:7c:57:1f:07:28:85:2a:3a:fe:bf: 88:a7:2e:d4:d3:a6:99:bd:43:56:69:d3:88:b7:3f: 4b:af:19:2b:95:a5:d1:45:4e:c0:21:a0:80:5f:cd: aa:a8:e1:42:93:8c:9c:90:98:c9:bb:58:be:7c:35: 8c:5f:ea:32:a8:18:42:1f:07:aa:e2:ff:8c:a4:2d: 97:ce:9b:bd:6c:03:78:c0:c8:38:17:eb:b5:36:d0: 0a:c7:b6:2c:47:a6:4a:08:86:47:67:9e:3e:2a:59: 9c:46:a1:3c:ae:e6:47:af:4f:9a:c2:6e:e1:e1:01: 9e:12:1b:8f:04:69:ff:ca:3a:54:70:28:33:13:c3: 7a:c2:f2:0a:9d:86:6e:cf:b8:75:cd:f5:76:10:18: 67:20:38:a4:21:67:a9:89:58:da:31:d9:2a:63:c8: 07:0d:96:c0:25:6c:33:58:81:01:f1:df:d5:18:77: 9a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 70:91:DC:83:36:BC:57:D3:9C:24:D1:C3:93:F2:B1:47:80:B1:92:CD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/7091DC8336BC57D39C24D1C393F2B14780B192CD.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.138.0/24 IPv6: 2001:df6:1d00::/48 Signature Algorithm: sha256WithRSAEncryption 60:88:7b:26:fa:a5:c4:b7:bc:3d:64:e7:61:56:82:ac:69:48: 85:8b:92:67:c9:85:d6:1a:d7:f1:13:53:e3:d7:21:ff:a3:0c: 9f:f9:59:37:63:00:95:e8:93:4b:8f:d3:b0:66:ce:7a:7f:8c: 89:ef:2e:4f:af:bf:76:14:25:de:b3:a7:7a:42:22:81:73:65: 94:3e:a6:27:44:6c:dc:dc:38:8f:f1:2e:9d:35:64:ca:42:35: f3:80:48:c2:35:f1:53:ef:ca:78:4c:f9:4f:c8:0c:ba:1a:3c: 8e:f8:23:9d:5d:f4:35:81:1b:76:e1:dd:f8:cb:16:e4:07:b3: 6c:3f:7f:a5:79:bd:e9:67:d1:a1:a1:79:03:77:f8:31:eb:2e: 62:63:03:38:b1:54:82:68:af:52:ea:92:3e:8c:2e:0d:44:d8: 7e:7d:64:50:40:ca:04:4c:bb:b5:b7:20:9e:4b:94:2c:fa:4e: f5:bd:df:97:67:96:1d:9a:2c:cd:d9:a7:ce:79:5b:8b:15:e0: 20:23:08:db:6b:da:e3:b8:2f:16:02:1b:b8:75:ca:b5:33:7e: d3:f8:21:0a:c6:82:79:be:4d:cf:c7:73:a9:81:d1:75:a0:0e: 23:81:84:93:70:b2:06:0d:f9:53:91:3e:74:37:1e:f9:d4:ab: 61:35:78:0c -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUZM9A9DkqI6unD6+p7iVFx+12nCowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDg0N1oX DTI3MDUwMTIzNTM0N1owMzExMC8GA1UEAxMoNzA5MURDODMzNkJDNTdEMzlDMjRE MUMzOTNGMkIxNDc4MEIxOTJDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKIgpah86eMSiJAAqJHuUDsb3gUePBXyV6wv8k3yl16iZjJydHyFVdSjsOQB GosPo5EpWtHFy6/ViOCwCCPk54YCQo4wxMR6mhi2YQnS4Th8Vx8HKIUqOv6/iKcu 1NOmmb1DVmnTiLc/S68ZK5Wl0UVOwCGggF/NqqjhQpOMnJCYybtYvnw1jF/qMqgY Qh8HquL/jKQtl86bvWwDeMDIOBfrtTbQCse2LEemSgiGR2eePipZnEahPK7mR69P msJu4eEBnhIbjwRp/8o6VHAoMxPDesLyCp2Gbs+4dc31dhAYZyA4pCFnqYlY2jHZ KmPIBw2WwCVsM1iBAfHf1Rh3mrkCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHCR3IM2vFfTnCTRw5PysUeAsZLNMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzBlYjk2MDA1LTgzYTktNDFlNC1hZjViLWYzZWFhOGYyMzY1MS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wZWI5NjAw NS04M2E5LTQxZTQtYWY1Yi1mM2VhYThmMjM2NTEvMC83MDkxREM4MzM2QkM1N0Qz OUMyNEQxQzM5M0YyQjE0NzgwQjE5MkNELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ3iKMA8EAgACMAkDBwAgAQ32HQAwDQYJKoZIhvcNAQELBQADggEBAGCIeyb6 pcS3vD1k52FWgqxpSIWLkmfJhdYa1/ETU+PXIf+jDJ/5WTdjAJXok0uP07Bmznp/ jInvLk+vv3YUJd6zp3pCIoFzZZQ+pidEbNzcOI/xLp01ZMpCNfOASMI18VPvynhM +U/IDLoaPI74I51d9DWBG3bh3fjLFuQHs2w/f6V5veln0aGheQN3+DHrLmJjAzix VIJor1Lqkj6MLg1E2H59ZFBAygRMu7W3IJ5LlCz6TvW935dnlh2aLM3Zp855W4sV 4CAjCNtr2uO4LxYCG7h1yrUzftP4IQrGgnm+Tc/Hc6mB0XWgDiOBhJNwsgYN+VOR PnQ3HvnUq2E1eAw= -----END CERTIFICATE-----Generated at Tue May 12 22:02:56 2026 by rpki-client