$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.cer File: 7BFEC42C6684B396D7740A53DA5B2A392358F2EE.cer (raw, json) Hash identifier: ftahbRrGweQ7pP+OXEB73AGtQon5lTUPG4Gn+pGUz6Y= Subject key identifier: 7B:FE:C4:2C:66:84:B3:96:D7:74:0A:53:DA:5B:2A:39:23:58:F2:EE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 57BFE9605B755C5812D95E909DF662F637B8CB5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:57:04 +0000 Certificate not after: Sun 02 May 2027 02:02:04 +0000 Subordinate resources: IP: 103.234.208.0/22 IP: 2001:df7:3c00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:bf:e9:60:5b:75:5c:58:12:d9:5e:90:9d:f6:62:f6:37:b8:cb:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:57:04 2026 GMT Not After : May 2 02:02:04 2027 GMT Subject: CN=7BFEC42C6684B396D7740A53DA5B2A392358F2EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cb:da:bc:d0:f2:e3:79:4f:98:11:1a:8c:e2: 61:59:b3:3a:e1:c0:6b:25:7c:5b:09:1b:ad:90:c4: 98:32:ea:10:71:54:7a:98:00:9c:11:03:50:5a:b6: cb:5b:80:47:0c:f9:e8:c4:46:77:7c:13:f3:38:22: a1:04:8b:b9:e1:66:2f:52:d1:d6:89:27:01:e3:2c: 10:67:75:06:f8:39:f9:dc:17:b2:fa:ae:bd:d1:f9: 38:f6:e8:5a:bf:4f:c0:79:4b:e8:90:89:c5:74:be: 72:8f:fd:21:44:81:9d:5f:26:3e:5d:6a:2f:fd:30: bc:ac:bc:eb:5e:a7:63:a9:20:da:c4:9f:6e:2d:de: 90:7c:29:03:63:f5:33:75:a7:d3:61:e5:c0:c4:53: e1:c9:9f:5d:66:07:18:62:3d:ee:3e:77:9b:23:6b: 22:7c:45:a9:10:12:ac:25:ee:bd:ed:73:04:e4:30: 48:5c:a4:98:13:34:c0:92:6d:d2:73:4b:cc:eb:f4: 89:32:dd:98:eb:bc:30:fc:40:92:0c:69:35:ae:9e: 7a:45:d1:69:2d:f1:43:d9:79:bc:34:b1:38:41:ef: 97:c8:df:f1:4f:34:0e:a2:44:1b:8c:a3:c6:d6:f4: 6a:44:23:61:25:61:9c:cb:bd:db:c8:cb:fd:a9:ed: f9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7B:FE:C4:2C:66:84:B3:96:D7:74:0A:53:DA:5B:2A:39:23:58:F2:EE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/7BFEC42C6684B396D7740A53DA5B2A392358F2EE.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.234.208.0/22 IPv6: 2001:df7:3c00::/48 Signature Algorithm: sha256WithRSAEncryption a2:4f:a2:7f:ba:ba:05:94:ef:f1:60:3b:c1:80:20:36:98:5c: a7:04:49:04:1c:3d:ec:2c:a1:cf:93:fe:96:f2:f4:2c:7b:1b: 54:9c:d2:5a:2e:bf:d5:e4:6a:bc:b5:f4:ac:3b:52:68:a4:74: b3:9a:ec:f4:c4:33:1e:24:c7:ae:66:e3:e5:7e:34:ca:bf:58: e8:3a:41:89:e8:c3:2f:4b:cd:0a:3f:2c:a3:d1:4a:e6:2b:c7: 7b:c3:eb:1b:97:e9:8a:e2:c7:73:03:6a:24:68:6f:b7:8d:8a: e4:11:2c:40:40:cd:70:69:cf:85:3c:59:1e:ae:3a:50:2e:03: 1b:49:21:5c:1f:85:1c:49:c0:55:b9:bb:ac:07:a9:7f:db:63: 00:3c:53:0b:58:82:5f:41:03:7e:b5:d9:66:c8:f5:93:ac:f6: dc:6a:11:9a:06:ac:0e:29:1e:55:fc:67:92:5e:93:88:4e:b0: 5c:25:a3:8a:df:81:94:ef:0d:a3:8d:74:a3:01:f2:ca:8b:e4: 36:ab:c2:99:5f:fa:02:3b:2c:d4:29:5e:8b:de:f3:40:13:ad: 5f:0a:7f:fa:28:c3:31:e6:0f:f2:1a:78:10:90:0f:d0:62:1d: 97:44:8d:de:36:ad:cd:2d:3c:31:dd:20:e7:d1:05:fc:3a:e3: 1c:ba:21:2f -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUV7/pYFt1XFgS2V6QnfZi9je4y10wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTcwNFoX DTI3MDUwMjAyMDIwNFowMzExMC8GA1UEAxMoN0JGRUM0MkM2Njg0QjM5NkQ3NzQw QTUzREE1QjJBMzkyMzU4RjJFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI/L2rzQ8uN5T5gRGoziYVmzOuHAayV8WwkbrZDEmDLqEHFUepgAnBEDUFq2 y1uARwz56MRGd3wT8zgioQSLueFmL1LR1oknAeMsEGd1Bvg5+dwXsvquvdH5OPbo Wr9PwHlL6JCJxXS+co/9IUSBnV8mPl1qL/0wvKy8616nY6kg2sSfbi3ekHwpA2P1 M3Wn02HlwMRT4cmfXWYHGGI97j53myNrInxFqRASrCXuve1zBOQwSFykmBM0wJJt 0nNLzOv0iTLdmOu8MPxAkgxpNa6eekXRaS3xQ9l5vDSxOEHvl8jf8U80DqJEG4yj xtb0akQjYSVhnMu928jL/ant+ScCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHv+xCxmhLOW13QKU9pbKjkjWPLuMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2QwN2NmMjAyLWY1ZWMtNDEwMS04MDg1LWNlYjg2ZWE2NWIzZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kMDdjZjIw Mi1mNWVjLTQxMDEtODA4NS1jZWI4NmVhNjViM2UvMC83QkZFQzQyQzY2ODRCMzk2 RDc3NDBBNTNEQTVCMkEzOTIzNThGMkVFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZ+rQMA8EAgACMAkDBwAgAQ33PAAwDQYJKoZIhvcNAQELBQADggEBAKJPon+6 ugWU7/FgO8GAIDaYXKcESQQcPewsoc+T/pby9Cx7G1Sc0louv9Xkary19Kw7Umik dLOa7PTEMx4kx65m4+V+NMq/WOg6QYnowy9LzQo/LKPRSuYrx3vD6xuX6Yrix3MD aiRob7eNiuQRLEBAzXBpz4U8WR6uOlAuAxtJIVwfhRxJwFW5u6wHqX/bYwA8UwtY gl9BA3612WbI9ZOs9txqEZoGrA4pHlX8Z5Jek4hOsFwlo4rfgZTvDaONdKMB8sqL 5Darwplf+gI7LNQpXove80ATrV8Kf/oowzHmD/IaeBCQD9BiHZdEjd42rc0tPDHd IOfRBfw64xy6IS8= -----END CERTIFICATE-----Generated at Wed May 13 01:07:03 2026 by rpki-client