$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7A5669C255B31F7829A430EF62917FD62B166DD2.cer File: 7A5669C255B31F7829A430EF62917FD62B166DD2.cer (raw, json) Hash identifier: AbP+4Zfp0IOd7h5IIk6lO6XNAnkobBLywHY7sB5u9qI= Subject key identifier: 7A:56:69:C2:55:B3:1F:78:29:A4:30:EF:62:91:7F:D6:2B:16:6D:D2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5E6CF320707C90BA2B018B2BB02A50BD4FFE5DCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/7A5669C255B31F7829A430EF62917FD62B166DD2.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:56:14 +0000 Certificate not after: Sun 02 May 2027 00:01:14 +0000 Subordinate resources: IP: 103.30.170.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:6c:f3:20:70:7c:90:ba:2b:01:8b:2b:b0:2a:50:bd:4f:fe:5d:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:56:14 2026 GMT Not After : May 2 00:01:14 2027 GMT Subject: CN=7A5669C255B31F7829A430EF62917FD62B166DD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:13:36:dd:3e:2e:d3:e7:4c:22:cb:bf:69:04: 3a:c9:e5:c7:0c:ce:da:5f:17:6e:dd:9e:a4:1b:4e: e7:12:aa:02:89:11:0c:4e:48:cd:75:51:40:a9:60: 43:56:6d:e9:9a:35:2c:4c:f6:15:9f:1c:da:ca:dd: 70:23:d6:f9:6b:57:22:9a:f2:0e:86:69:f2:00:fc: 03:53:68:8f:c4:2a:e0:40:75:80:86:a6:89:ad:58: fb:68:2b:2b:48:ff:ee:61:07:00:c3:8e:d9:c2:5a: 85:9d:16:46:4d:66:aa:cb:c3:9d:c8:00:25:f3:4a: db:3a:8c:27:46:db:1a:26:c8:a2:88:ed:cb:82:5a: cd:7f:f4:b8:db:cc:d2:00:3e:1c:46:43:07:46:ae: bd:ee:32:2e:1e:59:4e:7a:93:98:83:1a:8a:4b:12: 7b:94:a0:ef:46:3c:2d:bb:8b:60:cb:6d:3d:88:74: 6f:a6:8f:9a:54:e1:3a:96:41:57:9a:db:42:82:dd: 67:ed:25:06:5a:cc:0e:70:28:9a:0c:72:7f:77:5e: b4:86:04:61:14:d8:0d:01:01:2c:9c:46:33:e1:9c: 33:82:69:55:e1:c5:25:3b:82:8e:a4:86:59:e9:f1: 56:1a:5d:42:f2:b8:3a:26:ac:fb:d0:a5:3c:30:8c: 62:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7A:56:69:C2:55:B3:1F:78:29:A4:30:EF:62:91:7F:D6:2B:16:6D:D2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/7A5669C255B31F7829A430EF62917FD62B166DD2.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.30.170.0/23 Signature Algorithm: sha256WithRSAEncryption 57:21:55:09:95:c2:ae:f6:f3:48:73:04:e9:c1:3d:e8:b8:5e: 58:85:e2:c2:f8:79:d2:d6:4a:56:02:b8:48:2d:47:c4:a8:58: 0b:71:c2:75:42:b2:15:11:a2:0d:a8:31:3e:63:c6:07:a1:13: 05:e1:27:f7:bc:52:26:d5:ac:9e:00:32:00:50:55:b5:8a:a6: cb:62:37:7f:e4:bf:1e:ee:ba:d3:d7:2d:88:11:78:11:87:bc: fa:8e:0e:64:77:9c:07:a3:93:14:18:3b:61:bd:9f:36:33:0a: 4f:c0:bb:10:15:2b:e5:32:2d:1c:a0:63:d5:54:20:47:df:63: 7e:28:f5:27:86:d0:a9:6c:99:a4:9a:b2:7b:51:b3:81:3e:9e: 20:79:82:db:c8:b5:0d:25:a2:cb:37:66:7a:38:f5:1d:91:5f: b3:f0:1a:20:85:02:64:c3:e4:70:f8:ce:2f:f2:a8:76:d8:6a: 30:cf:16:cc:2b:17:2b:cc:0f:dd:37:c3:19:fd:d2:e5:ee:48: 64:2f:52:5e:6d:dd:2a:18:65:59:04:04:28:ae:d1:d0:91:14: 21:85:a2:ed:21:04:03:87:c7:2b:9b:d5:e9:7d:e8:71:c2:f8: ce:61:45:bc:c0:47:99:8e:8f:3f:03:73:4e:8c:0d:3e:eb:b7: 62:24:f4:08 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUXmzzIHB8kLorAYsrsCpQvU/+Xc8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTYxNFoX DTI3MDUwMjAwMDExNFowMzExMC8GA1UEAxMoN0E1NjY5QzI1NUIzMUY3ODI5QTQz MEVGNjI5MTdGRDYyQjE2NkREMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO0TNt0+LtPnTCLLv2kEOsnlxwzO2l8Xbt2epBtO5xKqAokRDE5IzXVRQKlg Q1Zt6Zo1LEz2FZ8c2srdcCPW+WtXIpryDoZp8gD8A1Noj8Qq4EB1gIamia1Y+2gr K0j/7mEHAMOO2cJahZ0WRk1mqsvDncgAJfNK2zqMJ0bbGibIoojty4JazX/0uNvM 0gA+HEZDB0auve4yLh5ZTnqTmIMaiksSe5Sg70Y8LbuLYMttPYh0b6aPmlThOpZB V5rbQoLdZ+0lBlrMDnAomgxyf3detIYEYRTYDQEBLJxGM+GcM4JpVeHFJTuCjqSG WenxVhpdQvK4Oias+9ClPDCMYp0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHpWacJVsx94KaQw72KRf9YrFm3SMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE5NjJhYThhLTA2ZTQtNDYzNC1iNTAwLWE1MjdjZThlMDQ4OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xOTYyYWE4 YS0wNmU0LTQ2MzQtYjUwMC1hNTI3Y2U4ZTA0ODkvMC83QTU2NjlDMjU1QjMxRjc4 MjlBNDMwRUY2MjkxN0ZENjJCMTY2REQyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZx6qMA0GCSqGSIb3DQEBCwUAA4IBAQBXIVUJlcKu9vNIcwTpwT3ouF5YheLC +HnS1kpWArhILUfEqFgLccJ1QrIVEaINqDE+Y8YHoRMF4Sf3vFIm1ayeADIAUFW1 iqbLYjd/5L8e7rrT1y2IEXgRh7z6jg5kd5wHo5MUGDthvZ82MwpPwLsQFSvlMi0c oGPVVCBH32N+KPUnhtCpbJmkmrJ7UbOBPp4geYLbyLUNJaLLN2Z6OPUdkV+z8Bog hQJkw+Rw+M4v8qh22GowzxbMKxcrzA/dN8MZ/dLl7khkL1Jebd0qGGVZBAQortHQ kRQhhaLtIQQDh8crm9XpfehxwvjOYUW8wEeZjo8/A3NOjA0+67diJPQI -----END CERTIFICATE-----Generated at Tue May 12 22:03:25 2026 by rpki-client