$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.cer File: 7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.cer (raw, json) Hash identifier: M2/g7lKJQ0fDTzH0411KBdbdHURQVrgU1jcxkFSdiVQ= Subject key identifier: 7B:5F:82:07:B2:1C:D1:9F:71:53:D2:BB:A1:9E:6A:77:6B:80:BF:32 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0281F77912B81F4AFC0626AC65F9B44DF8BD788D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:53:22 +0000 Certificate not after: Sun 02 May 2027 00:58:22 +0000 Subordinate resources: IP: 2001:df3:f680::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:81:f7:79:12:b8:1f:4a:fc:06:26:ac:65:f9:b4:4d:f8:bd:78:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:53:22 2026 GMT Not After : May 2 00:58:22 2027 GMT Subject: CN=7B5F8207B21CD19F7153D2BBA19E6A776B80BF32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:0a:24:f6:23:c6:d3:c8:76:fa:a3:e2:15: db:43:e0:37:dc:ba:29:0f:9e:3a:71:4a:75:61:5d: ab:9f:e0:95:75:8a:5b:dd:9c:69:fa:c2:c9:2e:e6: be:01:66:a0:09:8e:70:38:21:38:9d:b6:31:a5:23: 93:cd:9a:57:89:51:4d:34:a1:ab:7c:cc:fd:ef:c6: 06:a1:23:02:52:13:df:7d:89:c6:4f:33:4a:61:b0: 9e:4e:f9:5e:a8:5d:f8:af:0e:f0:11:ab:9a:44:56: 87:61:88:1c:56:71:40:45:70:04:b2:ff:b5:c9:e5: 6f:ba:c3:8f:04:a6:e0:86:17:98:99:19:8b:63:32: 9a:0c:98:03:f3:24:68:62:01:51:7d:6c:1f:06:56: 43:e7:9c:07:17:09:ce:29:27:0d:f3:06:4e:e8:b3: b1:f5:e6:b7:5c:4e:05:4b:c5:a2:87:b5:0d:79:f5: 87:a3:92:e0:84:35:d3:09:9c:4c:26:d7:69:2a:f1: ef:bb:f9:df:17:be:1b:65:6b:57:a0:27:1b:6b:01: 3a:36:91:f8:d8:59:0c:16:3c:fd:22:b5:c8:c6:c9: 29:16:94:7a:e5:59:43:c5:08:16:4d:29:99:bd:50: e3:f6:47:a4:07:d8:50:cb:ca:0e:b4:a4:32:e9:71: 40:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7B:5F:82:07:B2:1C:D1:9F:71:53:D2:BB:A1:9E:6A:77:6B:80:BF:32 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/7B5F8207B21CD19F7153D2BBA19E6A776B80BF32.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:f680::/48 Signature Algorithm: sha256WithRSAEncryption 62:5f:03:d9:9f:55:1e:d6:2d:94:4d:ba:ef:37:62:e3:6e:91: a6:57:7e:35:84:2a:d7:8f:6e:2e:d7:02:59:1c:1c:19:ab:ab: a0:ac:e4:43:b1:71:af:e6:a2:52:be:d4:e0:08:97:23:41:c8: 40:67:3f:f8:2b:93:0e:41:68:37:f0:b1:3a:6e:12:81:75:d1: 52:69:8a:03:6b:1f:3a:4b:9e:7b:67:2f:83:36:0b:78:01:26: c3:d5:67:b9:84:a4:f0:ff:7b:21:8e:0a:53:f0:a5:eb:9c:3d: 6a:fe:11:2d:1e:4f:07:d3:1a:80:8f:10:bd:7e:42:e1:74:3c: f2:50:fa:46:e4:ca:9e:cc:e3:7a:ca:c9:c9:c0:c1:a7:64:3d: 29:e1:f9:ef:d4:df:14:25:cb:5f:4a:25:fb:01:22:1b:8d:41: 35:fd:89:72:b4:ef:6c:fe:b6:f2:57:6d:7f:21:2f:55:47:53: 03:40:53:b8:5c:38:81:51:07:f3:66:39:95:a7:39:51:44:34: 3a:0d:03:f7:d8:41:11:2d:0e:11:0c:3d:34:57:f9:0d:e7:1d: ed:da:61:55:2f:34:3d:b5:95:c0:a2:b1:1d:af:6a:9a:4a:9e: f7:4c:42:76:f5:83:78:53:7b:71:81:36:a0:fa:35:53:37:9d: 8f:95:83:f2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUAoH3eRK4H0r8BiasZfm0Tfi9eI0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTMyMloX DTI3MDUwMjAwNTgyMlowMzExMC8GA1UEAxMoN0I1RjgyMDdCMjFDRDE5RjcxNTNE MkJCQTE5RTZBNzc2QjgwQkYzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALnOCiT2I8bTyHb6o+IV20PgN9y6KQ+eOnFKdWFdq5/glXWKW92cafrCyS7m vgFmoAmOcDghOJ22MaUjk82aV4lRTTShq3zM/e/GBqEjAlIT332Jxk8zSmGwnk75 Xqhd+K8O8BGrmkRWh2GIHFZxQEVwBLL/tcnlb7rDjwSm4IYXmJkZi2MymgyYA/Mk aGIBUX1sHwZWQ+ecBxcJziknDfMGTuizsfXmt1xOBUvFooe1DXn1h6OS4IQ10wmc TCbXaSrx77v53xe+G2VrV6AnG2sBOjaR+NhZDBY8/SK1yMbJKRaUeuVZQ8UIFk0p mb1Q4/ZHpAfYUMvKDrSkMulxQAcCAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHtfggeyHNGfcVPSu6GeandrgL8yMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZlZmI5MGIxLWI2OGYtNDQ2My1hMWJkLWU5MDhjOGExZWQxYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82ZWZiOTBi MS1iNjhmLTQ0NjMtYTFiZC1lOTA4YzhhMWVkMWEvMC83QjVGODIwN0IyMUNEMTlG NzE1M0QyQkJBMTlFNkE3NzZCODBCRjMyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN8/aAMA0GCSqGSIb3DQEBCwUAA4IBAQBiXwPZn1Ue1i2UTbrvN2LjbpGm V341hCrXj24u1wJZHBwZq6ugrORDsXGv5qJSvtTgCJcjQchAZz/4K5MOQWg38LE6 bhKBddFSaYoDax86S557Zy+DNgt4ASbD1We5hKTw/3shjgpT8KXrnD1q/hEtHk8H 0xqAjxC9fkLhdDzyUPpG5MqezON6ysnJwMGnZD0p4fnv1N8UJctfSiX7ASIbjUE1 /YlytO9s/rbyV21/IS9VR1MDQFO4XDiBUQfzZjmVpzlRRDQ6DQP32EERLQ4RDD00 V/kN5x3t2mFVLzQ9tZXAorEdr2qaSp73TEJ29YN4U3txgTag+jVTN52PlYPy -----END CERTIFICATE-----Generated at Tue May 12 22:04:09 2026 by rpki-client