$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7C6942D9E39D2E0708854282CB6A37230729EB7C.cer File: 7C6942D9E39D2E0708854282CB6A37230729EB7C.cer (raw, json) Hash identifier: InmNB4FCN4n3kzLe4nNHGGflDQzmK8AvuERfAVFgy2Q= Subject key identifier: 7C:69:42:D9:E3:9D:2E:07:08:85:42:82:CB:6A:37:23:07:29:EB:7C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 56AAC2F3096705627F43CC9BBFF54116ED97CB0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:10:30 +0000 Certificate not after: Sun 02 May 2027 01:15:30 +0000 Subordinate resources: IP: 103.188.174.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:aa:c2:f3:09:67:05:62:7f:43:cc:9b:bf:f5:41:16:ed:97:cb:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:10:30 2026 GMT Not After : May 2 01:15:30 2027 GMT Subject: CN=7C6942D9E39D2E0708854282CB6A37230729EB7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:69:a3:17:55:64:5c:c5:1b:f8:38:08:ca:b3: 16:a9:6b:f8:f8:1a:70:58:84:9d:04:88:44:b5:e7: 61:24:fe:08:b9:53:f5:0e:16:c4:e5:de:c0:20:fd: db:58:4b:70:5b:45:8a:98:36:42:24:2a:f6:cd:b6: 67:9f:fd:6f:6b:51:a5:00:7b:51:c3:3f:88:09:cc: 4b:5f:18:d3:96:cd:a9:52:ad:64:ed:fc:d3:ba:72: 9b:76:7c:e4:17:c9:cb:05:72:0f:54:10:2f:c9:cd: 2a:d0:19:48:f2:85:4a:78:e5:ee:1e:60:d2:c3:2a: 4b:6f:b4:97:e7:b3:12:b7:ef:ff:0d:73:d3:3b:b5: 78:85:bf:06:0e:f6:65:c1:25:17:e0:c1:2c:b3:ad: fc:d6:31:d4:50:e3:c5:4f:c9:ca:7e:d0:8f:f7:7a: 56:4d:1c:30:c8:6c:64:20:c9:e7:9d:67:93:96:ca: 59:01:66:25:ef:64:4b:6d:c2:b9:dd:92:d9:18:5d: 6f:73:62:d2:d0:87:4e:56:a9:02:25:f3:f1:de:53: 71:1b:a2:35:c5:55:0b:8c:8c:68:91:1d:85:49:1d: 7c:a0:c5:73:5e:c7:eb:a0:03:01:7f:7d:a1:5a:14: 18:36:57:1c:3e:b6:6f:a6:aa:37:33:bd:e4:99:ef: 72:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7C:69:42:D9:E3:9D:2E:07:08:85:42:82:CB:6A:37:23:07:29:EB:7C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/7C6942D9E39D2E0708854282CB6A37230729EB7C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.188.174.0/23 Signature Algorithm: sha256WithRSAEncryption 86:47:df:50:20:ec:6b:cb:aa:76:5f:88:16:d0:6a:da:07:59: a7:6f:ee:e5:ee:e4:bc:23:44:64:da:38:e0:3d:ff:79:bb:9c: de:15:ac:ba:92:80:d5:27:37:97:09:e3:27:4b:0e:77:8c:95: 71:1d:54:d0:bb:0f:e8:74:07:08:ce:e5:05:e8:ad:8d:cb:85: 64:1b:08:e8:15:05:83:a3:b3:9f:f6:ea:25:5e:b3:14:75:1c: 90:85:0f:08:f2:9b:7b:de:75:6d:6e:17:e6:a8:7d:52:5d:c5: 8a:d2:10:30:29:ca:ac:50:9a:4b:be:22:aa:00:41:a0:6d:81: 7f:43:96:e2:8b:30:3f:49:79:d2:d5:9b:86:f5:5b:92:70:2d: a6:71:9e:3f:5d:10:0f:68:51:1c:c8:56:eb:6f:6c:f0:83:b2: c8:3f:e5:cc:2d:2b:ea:ce:9e:6f:5e:03:4e:49:31:8b:50:10: aa:98:fc:0b:26:26:72:fa:d4:07:66:41:f6:c7:d3:b3:0c:b9: 25:88:62:ec:f2:46:0d:32:13:39:cb:62:f9:35:a0:f2:df:ab: fd:37:7c:8c:b4:70:55:82:9a:0d:02:e6:c9:a6:73:98:99:b0: 0f:db:70:1f:2a:8a:fc:05:2f:ff:51:51:1d:a1:ee:22:5f:f5: 17:38:f8:17 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUVqrC8wlnBWJ/Q8ybv/VBFu2Xyw4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTAzMFoX DTI3MDUwMjAxMTUzMFowMzExMC8GA1UEAxMoN0M2OTQyRDlFMzlEMkUwNzA4ODU0 MjgyQ0I2QTM3MjMwNzI5RUI3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALdpoxdVZFzFG/g4CMqzFqlr+PgacFiEnQSIRLXnYST+CLlT9Q4WxOXewCD9 21hLcFtFipg2QiQq9s22Z5/9b2tRpQB7UcM/iAnMS18Y05bNqVKtZO3807pym3Z8 5BfJywVyD1QQL8nNKtAZSPKFSnjl7h5g0sMqS2+0l+ezErfv/w1z0zu1eIW/Bg72 ZcElF+DBLLOt/NYx1FDjxU/Jyn7Qj/d6Vk0cMMhsZCDJ551nk5bKWQFmJe9kS23C ud2S2Rhdb3Ni0tCHTlapAiXz8d5TcRuiNcVVC4yMaJEdhUkdfKDFc17H66ADAX99 oVoUGDZXHD62b6aqNzO95JnvcoUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHxpQtnjnS4HCIVCgstqNyMHKet8MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg2YmQ1NTM4LTQyNzAtNDEyZC05ZDY2LWMyYjUxNTdkM2Q2ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84NmJkNTUz OC00MjcwLTQxMmQtOWQ2Ni1jMmI1MTU3ZDNkNmUvMC83QzY5NDJEOUUzOUQyRTA3 MDg4NTQyODJDQjZBMzcyMzA3MjlFQjdDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7yuMA0GCSqGSIb3DQEBCwUAA4IBAQCGR99QIOxry6p2X4gW0GraB1mnb+7l 7uS8I0Rk2jjgPf95u5zeFay6koDVJzeXCeMnSw53jJVxHVTQuw/odAcIzuUF6K2N y4VkGwjoFQWDo7Of9uolXrMUdRyQhQ8I8pt73nVtbhfmqH1SXcWK0hAwKcqsUJpL viKqAEGgbYF/Q5biizA/SXnS1ZuG9VuScC2mcZ4/XRAPaFEcyFbrb2zwg7LIP+XM LSvqzp5vXgNOSTGLUBCqmPwLJiZy+tQHZkH2x9OzDLkliGLs8kYNMhM5y2L5NaDy 36v9N3yMtHBVgpoNAubJpnOYmbAP23AfKor8BS//UVEdoe4iX/UXOPgX -----END CERTIFICATE-----Generated at Tue May 12 22:02:48 2026 by rpki-client