$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/79F64EF693DF287E09CF3B0D0BEB9AC5569EEF6B.cer File: 79F64EF693DF287E09CF3B0D0BEB9AC5569EEF6B.cer (raw, json) Hash identifier: DA7SrgBDPvNML1LszKSUe9IqaislfV21vYZn/y18saM= Subject key identifier: 79:F6:4E:F6:93:DF:28:7E:09:CF:3B:0D:0B:EB:9A:C5:56:9E:EF:6B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 62D673D445FA2757DD746B3E25B86DE1D19115F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/79F64EF693DF287E09CF3B0D0BEB9AC5569EEF6B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:57:05 +0000 Certificate not after: Sun 02 May 2027 01:02:05 +0000 Subordinate resources: IP: 203.169.54.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:d6:73:d4:45:fa:27:57:dd:74:6b:3e:25:b8:6d:e1:d1:91:15:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:57:05 2026 GMT Not After : May 2 01:02:05 2027 GMT Subject: CN=79F64EF693DF287E09CF3B0D0BEB9AC5569EEF6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c7:64:14:d1:af:c5:21:f2:3e:cd:8e:1a:82: 2f:9d:c7:6b:e3:c0:8f:12:ac:21:cd:ae:19:2a:cb: 6d:55:8c:63:3e:2e:2c:b7:c6:86:ef:74:86:73:70: 67:6a:a5:2b:1a:0e:1e:0f:6d:6a:c6:5d:66:d6:38: f0:64:d0:89:da:ba:a4:78:2f:1b:c7:f8:31:bc:ad: ff:a8:8a:8d:68:0b:e2:47:bd:2f:16:d0:bd:c9:2b: 08:8e:f6:d5:af:db:3e:76:3c:79:74:d6:e0:60:d7: ee:d0:1c:a7:e0:a4:84:98:e6:e3:7d:b4:57:71:3f: 2f:9c:d4:34:2e:e1:e1:58:02:e7:31:9a:82:d0:ce: bc:2c:27:3b:0a:0f:8e:c5:26:d0:7d:36:71:b6:46: f3:56:2a:f2:9f:a5:c8:12:7d:af:1c:30:32:22:b7: e6:3a:fe:40:1a:7c:b9:be:7d:15:2e:2e:98:5c:eb: 5c:d8:54:fd:78:95:7a:94:f1:40:ed:92:f0:fb:46: 6c:56:d8:6f:42:eb:4b:a7:23:f7:c0:6c:a0:1c:65: 73:78:79:68:b6:a7:b8:19:7c:a7:29:71:76:bd:9e: 09:22:a2:cb:8c:ba:9b:59:27:9f:fc:56:86:d3:10: 3e:f5:5a:b9:95:48:76:38:11:aa:43:d1:45:2c:86: 59:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 79:F6:4E:F6:93:DF:28:7E:09:CF:3B:0D:0B:EB:9A:C5:56:9E:EF:6B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/79F64EF693DF287E09CF3B0D0BEB9AC5569EEF6B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.169.54.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:04:2d:f4:89:f1:2a:d8:90:6c:a9:b1:8b:b5:a6:a7:ed:a9: f5:36:39:4a:3d:50:c4:b7:03:d7:4a:36:90:a8:b0:27:7c:89: 20:d4:7f:95:64:b7:5a:fd:6c:71:96:3b:aa:18:06:18:59:d2: 4b:a6:75:7f:73:17:a1:59:c6:77:25:5d:6c:b1:fe:48:c0:f4: 7a:d6:01:03:90:ea:df:cc:63:5d:93:29:5e:30:bf:f8:a4:87: f0:db:12:22:0d:2a:aa:0f:7b:89:58:c6:39:27:41:8a:08:f9: bb:0e:54:d0:fe:d7:cb:6f:d3:8d:ac:b4:19:ab:74:eb:55:a6: f8:2b:df:47:a7:41:2d:5a:d6:23:4c:c9:9a:8a:72:eb:a4:37: dd:2a:bd:ad:ea:14:65:24:b6:42:9d:c6:91:cd:6d:04:08:1e: 7f:3f:42:17:86:00:92:80:f7:79:bf:16:6b:83:dd:dd:50:d1: f4:5c:5c:72:34:14:a3:ea:6c:f5:a5:d5:0f:40:bd:42:77:3a: cd:6b:58:38:29:4f:d6:f7:0c:fa:60:e1:12:26:33:1a:29:81: 46:20:1c:31:b9:82:c1:63:55:ae:60:5c:2b:9c:45:6e:1a:6d: f2:be:cc:22:3d:58:4f:bf:bf:82:e6:ba:b1:ca:ac:fc:e4:07: 83:8a:93:9e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUYtZz1EX6J1fddGs+Jbht4dGRFfEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTcwNVoX DTI3MDUwMjAxMDIwNVowMzExMC8GA1UEAxMoNzlGNjRFRjY5M0RGMjg3RTA5Q0Yz QjBEMEJFQjlBQzU1NjlFRUY2QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPLHZBTRr8Uh8j7NjhqCL53Ha+PAjxKsIc2uGSrLbVWMYz4uLLfGhu90hnNw Z2qlKxoOHg9tasZdZtY48GTQidq6pHgvG8f4Mbyt/6iKjWgL4ke9LxbQvckrCI72 1a/bPnY8eXTW4GDX7tAcp+CkhJjm4320V3E/L5zUNC7h4VgC5zGagtDOvCwnOwoP jsUm0H02cbZG81Yq8p+lyBJ9rxwwMiK35jr+QBp8ub59FS4umFzrXNhU/XiVepTx QO2S8PtGbFbYb0LrS6cj98BsoBxlc3h5aLanuBl8pylxdr2eCSKiy4y6m1knn/xW htMQPvVauZVIdjgRqkPRRSyGWdECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHn2TvaT3yh+Cc87DQvrmsVWnu9rMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc0ODZiMGRiLTMwNTAtNDc1MC04ZjY2LTU3MjZhNzkyYWRhYi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83NDg2YjBk Yi0zMDUwLTQ3NTAtOGY2Ni01NzI2YTc5MmFkYWIvMC83OUY2NEVGNjkzREYyODdF MDlDRjNCMEQwQkVCOUFDNTU2OUVFRjZCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBy6k2MA0GCSqGSIb3DQEBCwUAA4IBAQBOBC30ifEq2JBsqbGLtaan7an1NjlK PVDEtwPXSjaQqLAnfIkg1H+VZLda/WxxljuqGAYYWdJLpnV/cxehWcZ3JV1ssf5I wPR61gEDkOrfzGNdkyleML/4pIfw2xIiDSqqD3uJWMY5J0GKCPm7DlTQ/tfLb9ON rLQZq3TrVab4K99Hp0EtWtYjTMmainLrpDfdKr2t6hRlJLZCncaRzW0ECB5/P0IX hgCSgPd5vxZrg93dUNH0XFxyNBSj6mz1pdUPQL1CdzrNa1g4KU/W9wz6YOESJjMa KYFGIBwxuYLBY1WuYFwrnEVuGm3yvswiPVhPv7+C5rqxyqz85AeDipOe -----END CERTIFICATE-----Generated at Tue May 12 22:10:05 2026 by rpki-client