$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer File: 793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer (raw, json) Hash identifier: HJ7ywVXjfuHB7A9k02ohZPnUWyhQQWYxQD5+R2rz6o8= Subject key identifier: 79:32:90:E7:EC:15:5F:F7:1C:44:DB:64:68:CE:D7:98:5C:BF:2D:F5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7CDFF6ED318A82A136F912D16CAC199D99CA584B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:31:11 +0000 Certificate not after: Sun 02 May 2027 00:36:11 +0000 Subordinate resources: IP: 103.83.116.0/22 IP: 2001:df7:e600::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:df:f6:ed:31:8a:82:a1:36:f9:12:d1:6c:ac:19:9d:99:ca:58:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:31:11 2026 GMT Not After : May 2 00:36:11 2027 GMT Subject: CN=793290E7EC155FF71C44DB6468CED7985CBF2DF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f4:1c:aa:f6:16:bc:51:d1:71:f8:13:e0:81: 9c:2f:e6:af:cb:ab:b7:2d:e4:ad:b3:02:e9:31:42: 34:87:70:8c:5c:18:31:39:52:84:77:71:aa:fb:ce: 9e:93:99:bd:88:13:95:9c:89:61:0a:26:d5:dd:d4: 1d:2c:9a:d6:99:06:de:c7:67:55:27:86:c3:ae:b3: 4a:85:1f:4c:c9:39:60:14:94:2e:6f:8d:ce:3b:00: d8:b5:9f:7c:e0:d0:3a:ff:e0:36:cb:0c:7d:8c:5e: af:3a:91:b1:b8:57:19:b0:85:60:ee:07:1a:ea:9d: c8:82:87:f3:88:32:40:90:c1:29:02:37:73:3e:82: 3f:0b:aa:16:a4:5f:55:46:df:d8:fa:08:48:8b:52: 23:a4:41:bc:6e:b4:ef:fd:06:8a:21:6e:80:23:99: 2e:e2:bd:47:99:8d:ed:72:aa:76:bf:35:6b:41:04: c5:48:01:84:59:d2:f9:bf:9c:2c:62:40:49:26:19: 67:b6:74:db:36:85:5c:a0:ed:5c:af:ce:16:aa:81: e0:1e:ce:4a:f6:40:0a:4d:42:a9:dc:cd:3c:32:21: b1:8b:17:ea:8e:ef:ee:7a:e8:ff:2f:f6:5a:94:e6: b8:b9:36:c6:3a:60:5f:ee:98:f2:95:1b:da:0c:f4: af:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 79:32:90:E7:EC:15:5F:F7:1C:44:DB:64:68:CE:D7:98:5C:BF:2D:F5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.83.116.0/22 IPv6: 2001:df7:e600::/48 Signature Algorithm: sha256WithRSAEncryption 96:0a:61:1a:72:f6:a2:61:1d:ff:f7:14:7f:c7:aa:08:78:48: 6b:c9:23:10:ac:ee:bf:e7:fe:a1:e6:22:ef:3b:7f:08:f0:04: 82:57:40:79:70:70:7e:0b:2f:c6:a1:4e:7a:4f:d7:92:cd:44: 03:0a:66:23:50:2b:42:d4:08:45:8e:39:c6:be:1b:c5:f1:ca: 6a:61:5f:e6:5d:67:d9:6b:21:31:55:12:b3:73:9a:cb:68:6b: c4:22:07:fe:6b:82:d7:5a:33:67:e3:2c:a7:dc:6d:2c:b5:20: 50:ab:b5:a3:8e:74:c4:d0:43:b5:62:83:61:7e:94:70:f2:8f: d3:84:9c:0a:8b:3d:d7:57:94:8e:f4:6b:b1:5f:73:4f:95:a3: e3:b3:32:16:67:a2:22:82:90:11:9b:b5:2e:53:06:c8:10:cd: a7:df:98:1e:91:39:8b:83:73:b8:de:11:ec:7a:6d:35:04:89: d7:9e:4e:4d:8b:6f:7d:3c:a0:68:8d:50:37:3f:a4:79:24:48: f7:20:dd:87:88:10:38:2c:4f:84:40:3f:9b:0f:31:fe:a8:c5: b7:64:79:b5:a8:44:4d:98:3f:ad:6d:d2:88:0d:d7:b3:aa:ed: ca:c8:9f:22:ba:65:1f:e3:40:13:dd:4f:41:b7:a9:eb:f2:49: 95:db:d8:3e -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUfN/27TGKgqE2+RLRbKwZnZnKWEswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzExMVoX DTI3MDUwMjAwMzYxMVowMzExMC8GA1UEAxMoNzkzMjkwRTdFQzE1NUZGNzFDNDRE QjY0NjhDRUQ3OTg1Q0JGMkRGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALf0HKr2FrxR0XH4E+CBnC/mr8urty3krbMC6TFCNIdwjFwYMTlShHdxqvvO npOZvYgTlZyJYQom1d3UHSya1pkG3sdnVSeGw66zSoUfTMk5YBSULm+NzjsA2LWf fODQOv/gNssMfYxerzqRsbhXGbCFYO4HGuqdyIKH84gyQJDBKQI3cz6CPwuqFqRf VUbf2PoISItSI6RBvG607/0GiiFugCOZLuK9R5mN7XKqdr81a0EExUgBhFnS+b+c LGJASSYZZ7Z02zaFXKDtXK/OFqqB4B7OSvZACk1CqdzNPDIhsYsX6o7v7nro/y/2 WpTmuLk2xjpgX+6Y8pUb2gz0r0sCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHkykOfsFV/3HETbZGjO15hcvy31MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzRlOThiM2JkLTI4NGQtNGE3ZC05ZjI3LWNiNTg3ZTlkZDg0MS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80ZTk4YjNi ZC0yODRkLTRhN2QtOWYyNy1jYjU4N2U5ZGQ4NDEvMC83OTMyOTBFN0VDMTU1RkY3 MUM0NERCNjQ2OENFRDc5ODVDQkYyREY1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZ1N0MA8EAgACMAkDBwAgAQ335gAwDQYJKoZIhvcNAQELBQADggEBAJYKYRpy 9qJhHf/3FH/Hqgh4SGvJIxCs7r/n/qHmIu87fwjwBIJXQHlwcH4LL8ahTnpP15LN RAMKZiNQK0LUCEWOOca+G8XxymphX+ZdZ9lrITFVErNzmstoa8QiB/5rgtdaM2fj LKfcbSy1IFCrtaOOdMTQQ7Vig2F+lHDyj9OEnAqLPddXlI70a7Ffc0+Vo+OzMhZn oiKCkBGbtS5TBsgQzaffmB6ROYuDc7jeEex6bTUEideeTk2Lb308oGiNUDc/pHkk SPcg3YeIEDgsT4RAP5sPMf6oxbdkebWoRE2YP61t0ogN17Oq7crInyK6ZR/jQBPd T0G3qevySZXb2D4= -----END CERTIFICATE-----Generated at Tue May 12 22:10:38 2026 by rpki-client