$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer File: 7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer (raw, json) Hash identifier: ObZ5Fu6p17SZnQ5M2H6fG7+ETUYzNzhjRqpHYitwKMg= Subject key identifier: 72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 18F9A6E313CAD1199C14D4A7386C75B9BBDF507F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft caRepository: rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:06:37 +0000 Certificate not after: Sun 02 May 2027 00:11:37 +0000 Subordinate resources: IP: 119.15.128.0/21 IP: 202.91.24.0/21 IP: 2403:bb00::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:f9:a6:e3:13:ca:d1:19:9c:14:d4:a7:38:6c:75:b9:bb:df:50:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:06:37 2026 GMT Not After : May 2 00:11:37 2027 GMT Subject: CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5b:28:1c:67:b8:e1:8b:e0:e5:8e:75:ab:8a: fc:60:b7:02:5a:bf:54:44:7e:91:c3:17:de:35:ea: ee:96:58:4b:65:0e:a5:25:73:b8:ed:91:63:18:41: 41:1a:28:d7:e4:af:14:1e:3f:9e:df:d0:80:d4:31: 7c:83:bc:44:22:c4:9a:e8:5e:51:77:39:d3:4c:e9: 39:bc:19:65:b0:be:45:13:dc:39:09:94:93:d8:44: ef:1d:2b:37:66:0d:d3:90:5d:0d:a8:76:cd:97:c5: 89:d0:4b:fd:10:f5:f6:d1:56:99:f1:5e:af:dd:af: 10:fc:d2:47:9e:bd:45:a8:98:42:05:5a:9d:b9:f8: 89:55:6c:94:06:fd:f2:56:d6:02:5f:a7:aa:2f:a9: 4e:47:06:f2:fe:de:3b:de:78:d9:83:ce:2e:d1:34: 7b:73:2f:d4:82:9a:cb:91:81:ca:1f:06:ee:5b:74: e0:b1:dd:39:d5:b8:9c:e5:22:8d:72:47:d3:90:a0: d0:47:5e:e4:58:6f:40:65:4d:d4:1c:2f:9d:67:0f: 97:9a:aa:3c:11:18:37:9a:82:27:b7:5f:2c:4b:20: e6:f9:c2:d7:87:f5:d4:b8:dc:79:a8:4d:73:6d:54: c5:ec:34:0f:30:0a:9a:2c:fc:52:c2:51:0d:df:77: cd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.15.128.0/21 202.91.24.0/21 IPv6: 2403:bb00::/32 Signature Algorithm: sha256WithRSAEncryption 9b:db:21:3d:c7:1c:e9:e2:c2:0a:a8:8f:37:88:06:cb:5d:b1: fa:9f:66:57:bf:d8:d6:d3:6a:1e:43:e4:7e:8e:4a:8d:83:ce: e1:5e:74:89:62:c4:6d:07:9e:d0:e1:77:b5:9b:06:f0:dc:db: 10:68:21:1b:3e:25:fc:37:4e:24:b5:35:40:4b:85:86:e2:b6: bb:3d:7c:42:5c:6b:e8:cd:b2:8e:e9:ae:6a:49:1e:c7:62:47: 3b:8c:79:41:54:74:dc:df:88:f1:1e:38:0f:24:4c:84:1c:8b: df:5e:99:5d:b4:7c:9e:18:21:3e:b0:eb:20:85:64:47:53:b1: c2:bc:e1:fd:2c:ff:1a:c0:1e:e3:e4:54:fe:a0:a3:7d:25:4f: 4f:24:f1:66:fd:5f:38:14:5d:6a:48:2d:8d:62:7f:9e:8b:61: 73:f6:6a:6e:9a:99:3d:c6:40:8f:fe:28:b8:2e:61:46:b3:50: dd:dd:d5:15:f7:e3:e8:cf:86:df:58:78:1d:e9:20:1f:76:db: 95:31:df:4f:bb:6b:58:d2:05:36:94:a3:90:05:00:95:8b:a9: cc:a2:97:ed:36:c1:d9:7f:dc:93:97:98:bc:6d:53:0f:84:6d: 03:86:a5:66:fb:74:6b:7a:35:47:c7:b6:da:45:36:a9:dc:d8: cf:00:b7:1f -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUGPmm4xPK0RmcFNSnOGx1ubvfUH8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDYzN1oX DTI3MDUwMjAwMTEzN1owMzExMC8GA1UEAxMoNzIyOURGRTJFMEEzQTU3MEE5MzUy MTYwMUVCMUE2MUZDMENFQUUwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI9bKBxnuOGL4OWOdauK/GC3Alq/VER+kcMX3jXq7pZYS2UOpSVzuO2RYxhB QRoo1+SvFB4/nt/QgNQxfIO8RCLEmuheUXc500zpObwZZbC+RRPcOQmUk9hE7x0r N2YN05BdDah2zZfFidBL/RD19tFWmfFer92vEPzSR569RaiYQgVanbn4iVVslAb9 8lbWAl+nqi+pTkcG8v7eO9542YPOLtE0e3Mv1IKay5GByh8G7lt04LHdOdW4nOUi jXJH05Cg0Ede5FhvQGVN1BwvnWcPl5qqPBEYN5qCJ7dfLEsg5vnC14f11LjceahN c21Uxew0DzAKmiz8UsJRDd93zZsCAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHIp3+Lgo6VwqTUhYB6xph/Azq4HMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzI5YWI2MGIxLWEyNDQtNGE3OC1iMzFiLWZlY2EzZDE0ZWQ5Zi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yOWFiNjBi MS1hMjQ0LTRhNzgtYjMxYi1mZWNhM2QxNGVkOWYvMC83MjI5REZFMkUwQTNBNTcw QTkzNTIxNjAxRUIxQTYxRkMwQ0VBRTA3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQDdw+AAwQDylsYMA0EAgACMAcDBQAkA7sAMA0GCSqGSIb3DQEBCwUAA4IBAQCb 2yE9xxzp4sIKqI83iAbLXbH6n2ZXv9jW02oeQ+R+jkqNg87hXnSJYsRtB57Q4Xe1 mwbw3NsQaCEbPiX8N04ktTVAS4WG4ra7PXxCXGvozbKO6a5qSR7HYkc7jHlBVHTc 34jxHjgPJEyEHIvfXpldtHyeGCE+sOsghWRHU7HCvOH9LP8awB7j5FT+oKN9JU9P JPFm/V84FF1qSC2NYn+ei2Fz9mpumpk9xkCP/ii4LmFGs1Dd3dUV9+Poz4bfWHgd 6SAfdtuVMd9Pu2tY0gU2lKOQBQCVi6nMopftNsHZf9yTl5i8bVMPhG0DhqVm+3Rr ejVHx7baRTap3NjPALcf -----END CERTIFICATE-----Generated at Tue May 12 22:03:38 2026 by rpki-client