$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7.cer File: 7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7.cer (raw, json) Hash identifier: Lqghep9BcZrWKFuSrtj9iWj5vzjJa9A/Q63LZ94K8oA= Subject key identifier: 7A:73:56:E7:74:97:6E:4B:4E:FC:8A:24:49:E6:8E:6D:6C:AC:D8:E7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2F2C2EAC6BF0F9F5A4E63D4566C88D09758FA0FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7.mft caRepository: rsync://rpki-rsync.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:18:27 +0000 Certificate not after: Sun 02 May 2027 01:23:27 +0000 Subordinate resources: IP: 103.161.228.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:2c:2e:ac:6b:f0:f9:f5:a4:e6:3d:45:66:c8:8d:09:75:8f:a0:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:18:27 2026 GMT Not After : May 2 01:23:27 2027 GMT Subject: CN=7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4a:3f:13:d3:32:61:04:db:f8:9f:1b:07:6d: 8f:cc:cb:9e:0a:a6:16:7f:38:94:92:64:f3:3c:66: ef:eb:3c:1b:1b:fc:7f:df:46:b8:fc:c5:77:20:0a: d9:62:c4:8e:19:1a:ed:cf:bc:7b:74:12:38:67:fb: d4:4d:8a:b1:c8:72:82:0c:49:8d:a6:e0:34:bb:0a: 03:51:86:b2:a4:42:50:56:0f:c7:a0:86:a2:30:54: 60:17:0d:87:41:e1:19:60:ad:ac:0a:42:4e:1b:e9: 5b:bd:a2:97:06:47:83:f0:0f:14:ce:73:20:a0:b8: af:db:ef:75:29:5c:b0:e1:0f:aa:f7:59:23:04:22: f3:df:04:9f:32:1f:29:bb:38:cb:9c:ac:39:c9:ff: 39:dd:cf:58:5b:6f:33:f3:dc:67:c5:8e:ae:98:de: ae:f5:8f:36:da:70:1b:55:96:0a:d2:04:8f:1f:2a: 09:c8:29:ca:9f:40:45:ba:31:e6:ed:7f:8b:b6:08: f5:de:b7:f4:7a:0b:8d:da:d9:96:aa:7c:aa:fc:6e: 9e:48:9c:c3:2d:ec:84:3d:5d:33:13:9a:dd:97:fb: 78:0e:d4:ea:73:c2:93:0f:25:50:9e:72:57:a7:e7: d2:f8:a1:32:36:bb:62:32:2c:5c:a1:72:ea:3d:4f: 81:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7A:73:56:E7:74:97:6E:4B:4E:FC:8A:24:49:E6:8E:6D:6C:AC:D8:E7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/7A7356E774976E4B4EFC8A2449E68E6D6CACD8E7.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.228.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:1b:b1:f4:1e:0c:a8:83:84:84:6e:f9:0f:c5:4a:c7:4a:90: ab:5c:6d:ff:b3:77:9c:c1:bf:75:de:c4:70:6c:98:e9:03:56: 85:25:da:23:cc:ba:11:b4:44:a9:4d:49:b2:2d:44:d2:3b:d6: af:cd:82:1f:20:74:90:e6:29:8b:18:19:76:da:d6:70:d5:7e: f8:44:f8:50:6d:31:94:30:f9:e1:3f:2a:b5:84:96:35:01:96: 0a:e5:70:8b:80:71:2a:ab:ac:6e:16:35:ef:51:11:35:d4:ca: 28:4b:b6:fc:44:3f:18:8e:94:b1:78:b5:23:3a:3c:ff:18:4f: 02:99:9a:e0:6d:28:40:1b:4d:a5:c6:06:fc:ba:87:9e:eb:1a: 87:d7:c8:11:6c:6b:74:de:a3:46:79:81:76:26:4f:d6:58:ef: 02:43:ed:7f:41:91:03:79:06:7c:8c:bf:94:4c:d1:dc:08:55: 56:8a:2f:39:47:6a:3c:b5:55:48:f7:d8:fe:d4:c8:a2:6f:09: ca:27:f1:d6:6b:4a:e4:df:1c:b3:5d:c7:06:d5:fb:e6:e5:03: 61:35:ae:eb:b8:95:8d:5a:90:2b:2d:6b:c1:f1:7f:92:3e:75: f0:a9:6e:a3:74:e3:df:71:a6:0c:59:53:a6:ab:aa:e8:98:3d: 5c:07:0a:54 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIULywurGvw+fWk5j1FZsiNCXWPoPowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTgyN1oX DTI3MDUwMjAxMjMyN1owMzExMC8GA1UEAxMoN0E3MzU2RTc3NDk3NkU0QjRFRkM4 QTI0NDlFNjhFNkQ2Q0FDRDhFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJxKPxPTMmEE2/ifGwdtj8zLngqmFn84lJJk8zxm7+s8Gxv8f99GuPzFdyAK 2WLEjhka7c+8e3QSOGf71E2KschyggxJjabgNLsKA1GGsqRCUFYPx6CGojBUYBcN h0HhGWCtrApCThvpW72ilwZHg/APFM5zIKC4r9vvdSlcsOEPqvdZIwQi898EnzIf Kbs4y5ysOcn/Od3PWFtvM/PcZ8WOrpjervWPNtpwG1WWCtIEjx8qCcgpyp9ARbox 5u1/i7YI9d639HoLjdrZlqp8qvxunkicwy3shD1dMxOa3Zf7eA7U6nPCkw8lUJ5y V6fn0vihMja7YjIsXKFy6j1PgUcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHpzVud0l25LTvyKJEnmjm1srNjnMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzkyZTk1NDkzLWFlNzYtNGNlZi1hMDhjLWEyMGRmYzlkMjYxOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85MmU5NTQ5 My1hZTc2LTRjZWYtYTA4Yy1hMjBkZmM5ZDI2MTkvMC83QTczNTZFNzc0OTc2RTRC NEVGQzhBMjQ0OUU2OEU2RDZDQUNEOEU3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6HkMA0GCSqGSIb3DQEBCwUAA4IBAQAtG7H0Hgyog4SEbvkPxUrHSpCrXG3/ s3ecwb913sRwbJjpA1aFJdojzLoRtESpTUmyLUTSO9avzYIfIHSQ5imLGBl22tZw 1X74RPhQbTGUMPnhPyq1hJY1AZYK5XCLgHEqq6xuFjXvURE11MooS7b8RD8YjpSx eLUjOjz/GE8CmZrgbShAG02lxgb8uoee6xqH18gRbGt03qNGeYF2Jk/WWO8CQ+1/ QZEDeQZ8jL+UTNHcCFVWii85R2o8tVVI99j+1MiibwnKJ/HWa0rk3xyzXccG1fvm 5QNhNa7ruJWNWpArLWvB8X+SPnXwqW6jdOPfcaYMWVOmq6romD1cBwpU -----END CERTIFICATE-----Generated at Tue May 12 22:16:13 2026 by rpki-client