$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/79531B7302CDDE4247548EAA419E5C880DD6043A.cer File: 79531B7302CDDE4247548EAA419E5C880DD6043A.cer (raw, json) Hash identifier: RipauQdRjgwcsZSfTYNDNtgbZkMVMnO1VwZfZX/9ygk= Subject key identifier: 79:53:1B:73:02:CD:DE:42:47:54:8E:AA:41:9E:5C:88:0D:D6:04:3A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7FD174885DAD66CC4319D63FA54A3CB0BA8F2256 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/79531B7302CDDE4247548EAA419E5C880DD6043A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:20:36 +0000 Certificate not after: Sun 02 May 2027 01:25:36 +0000 Subordinate resources: IP: 103.67.24.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:d1:74:88:5d:ad:66:cc:43:19:d6:3f:a5:4a:3c:b0:ba:8f:22:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:20:36 2026 GMT Not After : May 2 01:25:36 2027 GMT Subject: CN=79531B7302CDDE4247548EAA419E5C880DD6043A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3f:cb:c2:77:a9:2f:28:51:ef:13:8d:f7:69: 65:00:0c:99:00:04:03:73:bb:0c:9a:a1:27:ff:00: 21:80:30:1e:d9:c1:fd:33:c6:80:6a:20:71:d5:59: 8f:de:77:03:8e:c6:7d:63:b7:be:19:fa:6b:9d:7e: 79:81:28:08:9a:ea:36:7c:f8:39:cb:ea:61:e1:a1: f9:c4:4b:47:47:61:49:26:88:62:ea:42:f0:2c:1b: d5:fa:03:51:86:94:18:f3:9f:20:81:36:c2:79:6f: be:27:d0:7a:85:49:89:0e:d3:64:19:13:ed:1b:ad: a5:b7:0a:ae:c7:bc:78:e2:0e:17:72:64:06:89:ed: ff:68:c0:3a:46:6c:c0:a5:96:91:ee:9d:f8:1b:15: 90:ea:a1:7c:af:77:4c:ca:35:fb:be:0a:47:23:f4: ec:b3:14:66:a4:0f:a6:06:73:a9:6e:84:ac:6b:23: 83:a3:7b:6e:a2:64:9c:b5:25:c5:38:ce:3d:0b:44: af:86:c1:e8:f4:b7:74:25:57:d4:e3:a1:06:95:3c: d0:3e:70:48:28:40:f4:6f:69:9b:66:a8:96:e1:a8: bf:55:45:73:91:84:f6:04:f0:ee:00:29:8d:9b:a8: e4:22:88:42:88:c9:a0:35:61:8d:62:1a:c7:7e:b8: 8f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 79:53:1B:73:02:CD:DE:42:47:54:8E:AA:41:9E:5C:88:0D:D6:04:3A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/79531B7302CDDE4247548EAA419E5C880DD6043A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.67.24.0/23 Signature Algorithm: sha256WithRSAEncryption 06:11:81:64:c0:e8:ab:e6:c4:70:b3:95:15:3e:1e:00:35:d2: 46:1f:a2:ba:a7:5d:8e:7e:90:56:94:a7:89:91:78:f4:5e:81: 26:df:fa:ab:d9:90:fe:cd:a7:c4:9d:a9:8e:b8:5a:36:f7:28: 23:42:78:e8:76:5d:66:04:2e:39:c9:3f:42:55:47:78:ec:67: 6f:18:35:2e:8d:29:50:fb:0b:6f:c0:a4:47:98:16:6c:8a:c1: 29:98:fa:f3:4d:09:0a:6d:8b:f8:12:db:97:51:78:7c:0d:31: 23:6a:7a:7e:da:2c:dc:cf:14:5f:6c:b8:34:96:81:c2:c6:d8: 1d:d5:2f:f3:e7:77:76:fc:77:16:9a:ad:e4:ff:60:af:18:1a: b9:99:ef:71:f8:03:7e:f9:2d:6e:67:41:14:df:b4:07:3f:e6: 19:2b:d4:94:64:13:d0:69:82:27:e4:0e:06:78:3b:19:52:6b: ee:62:5c:97:be:99:09:02:d6:43:3a:7d:f7:cc:cd:a7:6b:b4: ba:30:0d:b5:a0:4f:28:4d:5d:64:0e:ec:53:a5:df:53:f7:8c: b5:61:df:80:88:bb:f0:c7:ad:11:bd:2b:f3:c3:63:1f:4a:2a: 74:2b:2b:17:59:87:0e:97:f8:bd:d2:d7:df:86:65:78:c4:de: c4:9a:39:e5 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUf9F0iF2tZsxDGdY/pUo8sLqPIlYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjAzNloX DTI3MDUwMjAxMjUzNlowMzExMC8GA1UEAxMoNzk1MzFCNzMwMkNEREU0MjQ3NTQ4 RUFBNDE5RTVDODgwREQ2MDQzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAME/y8J3qS8oUe8TjfdpZQAMmQAEA3O7DJqhJ/8AIYAwHtnB/TPGgGogcdVZ j953A47GfWO3vhn6a51+eYEoCJrqNnz4OcvqYeGh+cRLR0dhSSaIYupC8Cwb1foD UYaUGPOfIIE2wnlvvifQeoVJiQ7TZBkT7RutpbcKrse8eOIOF3JkBont/2jAOkZs wKWWke6d+BsVkOqhfK93TMo1+74KRyP07LMUZqQPpgZzqW6ErGsjg6N7bqJknLUl xTjOPQtEr4bB6PS3dCVX1OOhBpU80D5wSChA9G9pm2aoluGov1VFc5GE9gTw7gAp jZuo5CKIQojJoDVhjWIax364jx8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHlTG3MCzd5CR1SOqkGeXIgN1gQ6MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzk2NTE5OTdjLTlhN2MtNGUwNC1hZjE3LWRiYzYzYTRhOTJlZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85NjUxOTk3 Yy05YTdjLTRlMDQtYWYxNy1kYmM2M2E0YTkyZWUvMC83OTUzMUI3MzAyQ0RERTQy NDc1NDhFQUE0MTlFNUM4ODBERDYwNDNBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ0MYMA0GCSqGSIb3DQEBCwUAA4IBAQAGEYFkwOir5sRws5UVPh4ANdJGH6K6 p12OfpBWlKeJkXj0XoEm3/qr2ZD+zafEnamOuFo29ygjQnjodl1mBC45yT9CVUd4 7GdvGDUujSlQ+wtvwKRHmBZsisEpmPrzTQkKbYv4EtuXUXh8DTEjanp+2izczxRf bLg0loHCxtgd1S/z53d2/HcWmq3k/2CvGBq5me9x+AN++S1uZ0EU37QHP+YZK9SU ZBPQaYIn5A4GeDsZUmvuYlyXvpkJAtZDOn33zM2na7S6MA21oE8oTV1kDuxTpd9T 94y1Yd+AiLvwx60RvSvzw2MfSip0KysXWYcOl/i90tffhmV4xN7Emjnl -----END CERTIFICATE-----Generated at Tue May 12 22:32:39 2026 by rpki-client