$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/777E6650C707BC53014C9FB0600EB998ECDCCEC8.cer File: 777E6650C707BC53014C9FB0600EB998ECDCCEC8.cer (raw, json) Hash identifier: aP3UJaf0vV9EiU0XemjSqg22jxGSguArunkf3XkPBVI= Subject key identifier: 77:7E:66:50:C7:07:BC:53:01:4C:9F:B0:60:0E:B9:98:EC:DC:CE:C8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4C286EF83AD397CF820E8F9F5AACD558E3586F45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/777E6650C707BC53014C9FB0600EB998ECDCCEC8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:03:22 +0000 Certificate not after: Sun 02 May 2027 01:08:22 +0000 Subordinate resources: IP: 49.236.216.0/21 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:28:6e:f8:3a:d3:97:cf:82:0e:8f:9f:5a:ac:d5:58:e3:58:6f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:03:22 2026 GMT Not After : May 2 01:08:22 2027 GMT Subject: CN=777E6650C707BC53014C9FB0600EB998ECDCCEC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:81:26:80:41:05:50:05:21:a7:78:85:b1:70: d4:65:18:6f:f4:e2:2c:49:9b:4f:5f:dd:7e:20:4c: 58:22:c6:76:0f:74:bf:d9:84:db:d4:ad:c3:f1:7e: 78:8f:04:d1:7a:18:a7:e9:5c:4a:0d:ed:43:a4:a9: 9e:70:c8:95:31:19:3e:38:12:d5:28:a3:29:e4:34: 56:bf:da:9c:67:b5:33:9a:8c:cd:e5:60:50:1a:65: bd:08:01:d3:99:00:4c:81:15:d8:01:c0:fd:e6:89: e2:5f:80:82:1f:64:6d:22:fc:0b:c1:63:48:14:e5: 30:2d:9d:44:b0:f6:10:09:34:80:fd:c0:ee:4e:47: 3c:b2:b4:59:5b:79:30:47:76:d3:75:02:c2:8f:39: 38:dc:7c:db:d3:15:33:db:60:ae:42:eb:b2:42:37: f9:d8:33:97:cc:d4:ba:1b:03:12:53:c0:ec:c6:12: 29:4e:47:08:bc:ac:ce:dd:db:3e:1f:36:28:ba:3e: c3:25:68:a4:be:a9:50:34:17:f9:48:3d:60:fe:bd: 51:d6:c8:65:70:56:44:3e:bb:f9:61:13:96:e7:8c: 1f:fc:29:40:7a:4f:ce:5b:14:91:e2:f1:31:aa:f6: 67:df:82:43:73:1b:ab:31:ba:84:6a:86:4d:07:8f: ce:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 77:7E:66:50:C7:07:BC:53:01:4C:9F:B0:60:0E:B9:98:EC:DC:CE:C8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/777E6650C707BC53014C9FB0600EB998ECDCCEC8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.236.216.0/21 Signature Algorithm: sha256WithRSAEncryption 7f:7a:07:f6:f4:59:7d:a8:7d:0f:24:53:fd:8f:e4:88:a5:c5: f3:3f:c0:9f:ec:99:52:96:ea:c5:ac:0d:65:30:01:af:8f:14: 5e:a3:d2:d8:ca:b0:0f:1a:a6:f8:19:63:e0:70:00:af:36:98: 3d:c0:bc:a5:25:16:f8:c8:26:a5:e8:23:70:f9:7a:6d:69:35: 89:e7:01:a9:78:04:bc:70:e3:d6:00:91:45:aa:56:bf:cc:24: d9:09:6e:e6:69:78:52:48:c7:d7:c4:1f:b3:1f:ab:16:91:67: 43:46:cb:33:f0:e3:1a:4f:05:8e:c1:44:8f:df:85:60:b9:8c: 71:fb:bf:ed:1b:5d:59:3e:27:82:1d:38:b9:ec:c0:17:cf:3d: f3:eb:a0:89:c3:17:38:a0:d1:a9:44:b5:7f:fb:2d:b8:46:8d: ec:50:1a:cf:82:83:52:11:47:83:7d:09:59:38:48:bc:b8:0f: 6a:c7:e2:b2:a3:88:96:61:16:4b:5e:c2:17:94:26:ae:ad:29: fd:4f:b2:6e:2e:21:a7:7e:99:71:d5:d1:6b:f1:36:b0:0a:57: db:c7:8f:62:cc:38:9d:94:fc:5c:9d:5b:ed:a2:a4:28:c8:80: 1d:6e:17:86:9e:0a:e0:ce:98:7e:25:04:77:25:0f:b8:bf:32: cc:e2:a8:ce -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUTChu+DrTl8+CDo+fWqzVWONYb0UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDMyMloX DTI3MDUwMjAxMDgyMlowMzExMC8GA1UEAxMoNzc3RTY2NTBDNzA3QkM1MzAxNEM5 RkIwNjAwRUI5OThFQ0RDQ0VDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKaBJoBBBVAFIad4hbFw1GUYb/TiLEmbT1/dfiBMWCLGdg90v9mE29Stw/F+ eI8E0XoYp+lcSg3tQ6SpnnDIlTEZPjgS1SijKeQ0Vr/anGe1M5qMzeVgUBplvQgB 05kATIEV2AHA/eaJ4l+Agh9kbSL8C8FjSBTlMC2dRLD2EAk0gP3A7k5HPLK0WVt5 MEd203UCwo85ONx829MVM9tgrkLrskI3+dgzl8zUuhsDElPA7MYSKU5HCLyszt3b Ph82KLo+wyVopL6pUDQX+Ug9YP69UdbIZXBWRD67+WETlueMH/wpQHpPzlsUkeLx Mar2Z9+CQ3MbqzG6hGqGTQePzvECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHd+ZlDHB7xTAUyfsGAOuZjs3M7IMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdkMGY5OWMzLWU1NjctNDFhZS1hYTAwLTI2Y2I5NzgxZmJlOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83ZDBmOTlj My1lNTY3LTQxYWUtYWEwMC0yNmNiOTc4MWZiZTkvMC83NzdFNjY1MEM3MDdCQzUz MDE0QzlGQjA2MDBFQjk5OEVDRENDRUM4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQDMezYMA0GCSqGSIb3DQEBCwUAA4IBAQB/egf29Fl9qH0PJFP9j+SIpcXzP8Cf 7JlSlurFrA1lMAGvjxReo9LYyrAPGqb4GWPgcACvNpg9wLylJRb4yCal6CNw+Xpt aTWJ5wGpeAS8cOPWAJFFqla/zCTZCW7maXhSSMfXxB+zH6sWkWdDRssz8OMaTwWO wUSP34VguYxx+7/tG11ZPieCHTi57MAXzz3z66CJwxc4oNGpRLV/+y24Ro3sUBrP goNSEUeDfQlZOEi8uA9qx+Kyo4iWYRZLXsIXlCaurSn9T7JuLiGnfplx1dFr8Taw Clfbx49izDidlPxcnVvtoqQoyIAdbheGngrgzph+JQR3JQ+4vzLM4qjO -----END CERTIFICATE-----Generated at Tue May 12 22:03:52 2026 by rpki-client