$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer File: 7AF108B3E0EBB79F6C3ABBECA3437429494C9296.cer (raw, json) Hash identifier: OL1Qqr5S/+TAnpeSfu12DfeiyEkKlE6szZWZ6ObS7IY= Subject key identifier: 7A:F1:08:B3:E0:EB:B7:9F:6C:3A:BB:EC:A3:43:74:29:49:4C:92:96 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7640AF362E527236B1BB10874AE7A72358DC1A74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft caRepository: rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:47:25 +0000 Certificate not after: Sun 02 May 2027 02:52:25 +0000 Subordinate resources: IP: 103.67.82.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:40:af:36:2e:52:72:36:b1:bb:10:87:4a:e7:a7:23:58:dc:1a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:47:25 2026 GMT Not After : May 2 02:52:25 2027 GMT Subject: CN=7AF108B3E0EBB79F6C3ABBECA3437429494C9296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:83:89:8d:fa:8c:fa:2e:7a:1d:59:e6:d8:7d: 95:fb:1b:0d:ce:aa:95:cf:82:90:6c:1f:ea:e3:6d: 37:c9:66:1a:88:5a:a8:9a:a9:68:a7:46:67:e6:47: 05:13:3b:1e:2b:db:8b:f2:33:92:0e:61:ee:be:a5: cb:1e:5a:66:b5:c0:ea:ae:66:00:f1:81:0f:62:7a: cd:74:ae:c3:3f:33:cb:95:a3:7d:a5:d5:60:3f:8d: a1:51:4e:12:6e:e3:1b:2a:17:22:38:d2:0b:0f:ba: 3b:db:a9:38:0f:d6:33:40:2c:4d:59:53:1c:e6:82: f5:f3:13:34:88:07:b5:ce:ac:cb:2a:d1:9c:4e:a6: 9a:3c:12:1e:43:d5:84:bf:3e:2f:10:a9:54:a0:3e: fb:5a:bf:d6:97:0a:36:34:5c:1a:d8:b3:6f:c3:ea: 5d:d5:5d:b5:de:da:dc:e5:30:c9:79:a9:f2:06:2a: 98:e7:ed:ad:f8:b5:08:6c:91:0c:e2:86:48:d5:4c: 39:82:38:12:4b:5c:59:d2:41:ce:d7:8a:83:18:6d: d9:b9:9b:70:9e:04:ee:ae:45:80:83:10:15:40:51: 8e:f9:f1:7c:76:93:12:20:8b:54:09:2e:ca:bd:dd: fd:f2:f3:59:bd:5c:37:d7:d4:69:41:5b:f3:a4:1a: 44:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7A:F1:08:B3:E0:EB:B7:9F:6C:3A:BB:EC:A3:43:74:29:49:4C:92:96 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/7AF108B3E0EBB79F6C3ABBECA3437429494C9296.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.67.82.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:de:49:3d:69:16:b4:87:a4:30:cb:93:61:9c:69:d0:13:22: 3e:19:49:c1:60:4d:76:a9:79:5c:14:1d:da:fa:71:f0:27:52: bf:6a:f0:e9:bb:20:99:44:d5:c3:e7:28:7e:09:5e:dd:ff:59: ea:14:ba:4f:a2:3d:4a:8b:e7:b5:b0:69:bb:5b:c0:e5:d2:76: eb:d5:af:eb:ad:bf:5d:97:fa:e2:2e:5d:35:19:30:87:d0:e7: f9:b7:73:13:92:8c:6b:07:9e:47:aa:fb:15:83:34:d4:ff:e0: d3:a9:ac:e5:96:fb:f9:e0:6a:c8:2e:b8:99:84:24:ad:1d:c9: 03:88:e1:7e:6d:7b:67:71:8a:5a:e3:7c:4e:b1:b0:45:c4:85: 39:18:75:52:c5:1a:30:e4:aa:a7:f4:78:68:06:a8:a6:b1:5f: d8:3f:ff:b6:4a:01:f9:df:e5:1f:c9:3d:fd:52:08:fe:03:55: 9b:99:8b:16:88:0b:03:dd:b1:d9:1a:c8:77:a9:2c:fc:31:d4: 0a:4c:f6:8e:41:00:26:4e:f7:67:42:d9:4e:14:f4:ef:02:18: ad:e7:e5:16:99:5c:80:16:8f:e0:f1:37:0e:1a:af:28:4a:59: 56:77:4d:d3:5d:68:63:19:b2:48:5a:47:99:b3:ad:d9:23:9b: 40:9a:c0:08 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUdkCvNi5ScjaxuxCHSuenI1jcGnQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyNDcyNVoX DTI3MDUwMjAyNTIyNVowMzExMC8GA1UEAxMoN0FGMTA4QjNFMEVCQjc5RjZDM0FC QkVDQTM0Mzc0Mjk0OTRDOTI5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMuDiY36jPoueh1Z5th9lfsbDc6qlc+CkGwf6uNtN8lmGohaqJqpaKdGZ+ZH BRM7Hivbi/Izkg5h7r6lyx5aZrXA6q5mAPGBD2J6zXSuwz8zy5WjfaXVYD+NoVFO Em7jGyoXIjjSCw+6O9upOA/WM0AsTVlTHOaC9fMTNIgHtc6syyrRnE6mmjwSHkPV hL8+LxCpVKA++1q/1pcKNjRcGtizb8PqXdVdtd7a3OUwyXmp8gYqmOftrfi1CGyR DOKGSNVMOYI4EktcWdJBzteKgxht2bmbcJ4E7q5FgIMQFUBRjvnxfHaTEiCLVAku yr3d/fLzWb1cN9fUaUFb86QaRKECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHrxCLPg67efbDq77KNDdClJTJKWMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ZkNmUxNDdmLTEzMDQtNGU2OS05NTFjLTg5MzEwZGZlODU5ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mZDZlMTQ3 Zi0xMzA0LTRlNjktOTUxYy04OTMxMGRmZTg1OWUvMC83QUYxMDhCM0UwRUJCNzlG NkMzQUJCRUNBMzQzNzQyOTQ5NEM5Mjk2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ0NSMA0GCSqGSIb3DQEBCwUAA4IBAQBb3kk9aRa0h6Qwy5NhnGnQEyI+GUnB YE12qXlcFB3a+nHwJ1K/avDpuyCZRNXD5yh+CV7d/1nqFLpPoj1Ki+e1sGm7W8Dl 0nbr1a/rrb9dl/riLl01GTCH0Of5t3MTkoxrB55HqvsVgzTU/+DTqazllvv54GrI LriZhCStHckDiOF+bXtncYpa43xOsbBFxIU5GHVSxRow5Kqn9HhoBqimsV/YP/+2 SgH53+UfyT39Ugj+A1WbmYsWiAsD3bHZGsh3qSz8MdQKTPaOQQAmTvdnQtlOFPTv Ahit5+UWmVyAFo/g8TcOGq8oSllWd03TXWhjGbJIWkeZs63ZI5tAmsAI -----END CERTIFICATE-----Generated at Tue May 12 22:33:21 2026 by rpki-client