$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7A8D4233922872A894E30E54D6874BEB416AD1DF.cer File: 7A8D4233922872A894E30E54D6874BEB416AD1DF.cer (raw, json) Hash identifier: ZlCxIEONUEF0y2Lg/D5HjrERaA5l47dAGUjYcuOO6go= Subject key identifier: 7A:8D:42:33:92:28:72:A8:94:E3:0E:54:D6:87:4B:EB:41:6A:D1:DF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2C98CCEE5C057B9F8E45168926DCAF4F7BCD5FA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:08:10 +0000 Certificate not after: Sun 02 May 2027 00:13:10 +0000 Subordinate resources: IP: 175.45.184.0/21 IP: 2405:8740::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:98:cc:ee:5c:05:7b:9f:8e:45:16:89:26:dc:af:4f:7b:cd:5f:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:08:10 2026 GMT Not After : May 2 00:13:10 2027 GMT Subject: CN=7A8D4233922872A894E30E54D6874BEB416AD1DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2c:e6:0b:35:78:19:93:50:e9:a5:d0:35:b6: fc:fa:b4:46:98:8a:0c:2d:36:de:9a:31:15:8a:5d: a4:d6:f3:05:6d:06:6d:6c:99:b2:9a:2c:93:32:9c: 0e:a6:bb:88:6f:e1:b0:06:f0:0f:a3:07:2e:ce:e2: a1:71:4b:48:13:7c:48:5d:59:39:f7:58:a5:f6:37: fd:03:49:ef:ed:87:ec:1b:4d:5d:fe:45:46:0e:b3: ad:ad:c8:cc:29:cc:bd:6c:c8:40:7d:ea:ba:20:c3: 5a:d8:d7:e8:af:67:31:ae:c3:7d:9a:e1:b2:bc:69: 2c:ea:1b:3c:2c:4a:d7:09:6a:e1:ca:b8:5a:77:1d: 57:fb:e2:68:8e:54:5d:0d:dc:cf:99:e1:29:24:0c: c9:2c:1c:dd:8a:4a:5b:a9:b6:b8:1e:b6:4e:12:74: 65:2f:01:69:1a:95:f6:ce:ff:1e:fe:2b:66:cf:13: 96:28:80:49:ae:ec:e9:db:93:be:ee:c9:ac:67:c8: f8:0a:33:0d:6e:5a:ec:bc:67:82:a4:60:00:83:6a: a3:e3:79:e9:3f:9d:14:9c:78:b2:18:8d:7f:8e:49: 55:1c:31:5c:6d:fd:8e:e8:62:b6:35:3f:73:a7:05: 42:76:cf:32:80:56:2f:35:bc:d2:bf:84:a8:58:c4: 4a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7A:8D:42:33:92:28:72:A8:94:E3:0E:54:D6:87:4B:EB:41:6A:D1:DF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/7A8D4233922872A894E30E54D6874BEB416AD1DF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.45.184.0/21 IPv6: 2405:8740::/32 Signature Algorithm: sha256WithRSAEncryption 54:41:ac:11:10:bc:51:fd:0c:25:00:2d:0c:cf:1e:56:9f:19: a3:05:dc:cc:48:1b:08:87:32:2c:ca:75:44:28:f5:b4:57:bd: 6a:6b:5c:57:a3:44:d4:a4:0a:62:d4:4f:e5:d1:9d:61:24:d8: 53:28:4e:a6:f2:dc:5c:e6:d5:0e:f0:2c:7d:bc:49:e9:46:5a: 8c:77:28:80:d1:55:58:0f:8e:f4:a3:40:0b:fe:19:01:76:39: c6:60:66:71:19:1c:ff:c0:9b:dc:f9:f3:df:90:1d:04:61:7f: 2a:9e:ac:50:91:0d:b6:b3:72:0c:b9:79:d1:1c:fd:72:3b:a5: 19:06:fc:f8:8d:2a:19:28:48:78:bb:de:e5:ea:ea:51:ba:79: cf:ce:38:5a:c3:72:8a:f2:9c:45:1c:8f:c2:01:5e:8d:cf:42: 81:2e:8f:f3:6c:cd:09:03:b9:f5:a4:47:26:5a:e2:67:3c:5f: 9b:a8:72:74:62:8a:9f:94:ad:49:14:d8:a1:f8:86:c6:0d:c6: 74:68:50:a1:cb:51:89:cd:1b:58:31:3b:d0:5c:db:d8:4e:3b: eb:41:9d:63:bf:5e:83:0a:50:b1:9c:57:7c:fe:d4:1e:e4:28: 88:51:10:e6:06:bb:a4:24:fb:f5:54:ae:b5:47:de:11:1b:ca: 5e:53:d6:05 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIULJjM7lwFe5+ORRaJJtyvT3vNX6IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDgxMFoX DTI3MDUwMjAwMTMxMFowMzExMC8GA1UEAxMoN0E4RDQyMzM5MjI4NzJBODk0RTMw RTU0RDY4NzRCRUI0MTZBRDFERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJcs5gs1eBmTUOml0DW2/Pq0RpiKDC023poxFYpdpNbzBW0GbWyZsposkzKc Dqa7iG/hsAbwD6MHLs7ioXFLSBN8SF1ZOfdYpfY3/QNJ7+2H7BtNXf5FRg6zra3I zCnMvWzIQH3quiDDWtjX6K9nMa7DfZrhsrxpLOobPCxK1wlq4cq4WncdV/viaI5U XQ3cz5nhKSQMySwc3YpKW6m2uB62ThJ0ZS8BaRqV9s7/Hv4rZs8TliiASa7s6duT vu7JrGfI+AozDW5a7LxngqRgAINqo+N56T+dFJx4shiNf45JVRwxXG39juhitjU/ c6cFQnbPMoBWLzW80r+EqFjESsECAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHqNQjOSKHKolOMOVNaHS+tBatHfMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJiZjcxYzkxLTE2MjQtNGZjMC04YzYzLTJlZmFmZDQ2ZmJjMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yYmY3MWM5 MS0xNjI0LTRmYzAtOGM2My0yZWZhZmQ0NmZiYzEvMC83QThENDIzMzkyMjg3MkE4 OTRFMzBFNTRENjg3NEJFQjQxNkFEMURGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQDry24MA0EAgACMAcDBQAkBYdAMA0GCSqGSIb3DQEBCwUAA4IBAQBUQawRELxR /QwlAC0Mzx5WnxmjBdzMSBsIhzIsynVEKPW0V71qa1xXo0TUpApi1E/l0Z1hJNhT KE6m8txc5tUO8Cx9vEnpRlqMdyiA0VVYD470o0AL/hkBdjnGYGZxGRz/wJvc+fPf kB0EYX8qnqxQkQ22s3IMuXnRHP1yO6UZBvz4jSoZKEh4u97l6upRunnPzjhaw3KK 8pxFHI/CAV6Nz0KBLo/zbM0JA7n1pEcmWuJnPF+bqHJ0YoqflK1JFNih+IbGDcZ0 aFChy1GJzRtYMTvQXNvYTjvrQZ1jv16DClCxnFd8/tQe5CiIURDmBrukJPv1VK61 R94RG8peU9YF -----END CERTIFICATE-----Generated at Tue May 12 22:02:33 2026 by rpki-client