$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7CA991AB85999F4151C22A6310EF08374F65F5D1.cer File: 7CA991AB85999F4151C22A6310EF08374F65F5D1.cer (raw, json) Hash identifier: JsOXSFF9nA9acxSRkfeaWW7urSz8Biq2ricGiUL7ynw= Subject key identifier: 7C:A9:91:AB:85:99:9F:41:51:C2:2A:63:10:EF:08:37:4F:65:F5:D1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 03E95517EB66BE706A50B52FB9D375411DE9BB4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:50:56 +0000 Certificate not after: Sun 02 May 2027 00:55:56 +0000 Subordinate resources: IP: 103.21.204.0/22 IP: 103.248.196.0/22 IP: 2400:f340::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:e9:55:17:eb:66:be:70:6a:50:b5:2f:b9:d3:75:41:1d:e9:bb:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:50:56 2026 GMT Not After : May 2 00:55:56 2027 GMT Subject: CN=7CA991AB85999F4151C22A6310EF08374F65F5D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e7:43:45:93:28:3e:c6:77:28:d6:c0:5b:d0: c1:64:a5:3d:05:a2:89:06:97:4e:b1:38:8f:65:fa: 24:cd:c5:40:2e:78:69:f4:a7:d3:38:ab:89:83:f5: 7f:81:f2:02:fa:52:12:93:ed:7d:f9:4d:5b:06:03: 35:94:22:e1:d8:fa:b8:f0:a4:60:d5:da:c6:7b:d0: cf:fd:5a:81:55:e7:b4:61:79:08:6f:d4:08:ed:e5: 78:cf:3f:07:19:9f:06:c4:0f:20:24:0b:5d:ec:cf: 0d:4c:c5:3c:b2:f7:74:ad:5e:b2:7b:f2:80:1d:c7: 38:c7:bd:19:5a:34:45:a5:78:31:d6:24:67:9c:97: 38:80:47:72:06:a9:90:b3:fb:05:da:93:5f:41:08: 12:75:ef:ea:06:eb:73:8c:88:b7:b6:0b:48:ee:9d: f2:11:bf:c1:21:10:78:ec:a4:6d:2c:a7:73:9d:9d: f3:6b:46:c1:ae:f2:4c:c9:80:cf:56:78:23:97:a4: 05:6b:c8:bd:2c:38:e5:5f:4d:e0:ac:df:0e:53:c9: ad:ac:b6:1a:87:3f:ae:41:43:76:b9:fc:e6:7d:12: 26:8b:ec:0b:2f:48:38:18:1d:fe:4f:a2:1f:a4:31: 78:ae:84:94:00:7d:bd:68:b7:56:01:22:1d:f1:3e: 1a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7C:A9:91:AB:85:99:9F:41:51:C2:2A:63:10:EF:08:37:4F:65:F5:D1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/7CA991AB85999F4151C22A6310EF08374F65F5D1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.21.204.0/22 103.248.196.0/22 IPv6: 2400:f340::/32 Signature Algorithm: sha256WithRSAEncryption 2f:f3:07:1d:5a:0d:bf:b3:db:a3:fd:6f:37:da:18:7c:d5:2a: d0:d0:15:bd:79:a0:23:b5:51:96:c8:b5:95:c8:d3:30:aa:05: 09:2c:d3:99:52:08:dd:7e:37:cb:1c:bf:59:59:88:2a:de:60: 38:88:15:7d:d8:61:ec:d2:7d:74:bc:90:76:0b:a3:e3:14:05: bd:4c:98:bd:a6:27:92:9c:7a:9e:77:7f:b4:42:8d:98:22:b2: f0:c0:09:70:6c:18:2b:df:9f:70:79:91:3b:c8:db:8f:69:9e: 8f:98:0a:40:1b:1b:91:8b:89:43:09:fa:57:c8:db:81:6b:05: c0:f0:6e:72:77:c4:9d:55:f6:51:5b:02:70:38:b4:f1:9d:19: 4f:a7:41:10:fe:71:9f:cc:76:09:bd:61:b5:0b:c6:b6:b8:ea: 44:f5:38:b9:91:bb:11:2b:65:0c:c5:70:6d:d0:ea:ae:a0:d0: b3:b2:9d:8d:a6:71:bd:a9:d6:e4:60:92:4f:cd:a6:f0:fd:a0: 21:02:69:f9:81:2c:2a:95:a8:a6:ac:3f:31:c6:91:25:4b:34: d8:77:72:36:52:40:6a:d5:d7:d6:2a:55:60:b7:4d:4d:41:69: 1e:cb:cd:a5:51:0b:d9:67:91:ce:f9:79:d4:4c:db:28:a6:76: 3c:a4:76:60 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUA+lVF+tmvnBqULUvudN1QR3pu0owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTA1NloX DTI3MDUwMjAwNTU1NlowMzExMC8GA1UEAxMoN0NBOTkxQUI4NTk5OUY0MTUxQzIy QTYzMTBFRjA4Mzc0RjY1RjVEMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMDnQ0WTKD7GdyjWwFvQwWSlPQWiiQaXTrE4j2X6JM3FQC54afSn0ziriYP1 f4HyAvpSEpPtfflNWwYDNZQi4dj6uPCkYNXaxnvQz/1agVXntGF5CG/UCO3leM8/ BxmfBsQPICQLXezPDUzFPLL3dK1esnvygB3HOMe9GVo0RaV4MdYkZ5yXOIBHcgap kLP7BdqTX0EIEnXv6gbrc4yIt7YLSO6d8hG/wSEQeOykbSync52d82tGwa7yTMmA z1Z4I5ekBWvIvSw45V9N4KzfDlPJray2Goc/rkFDdrn85n0SJovsCy9IOBgd/k+i H6QxeK6ElAB9vWi3VgEiHfE+GmkCAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHypkauFmZ9BUcIqYxDvCDdPZfXRMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZiZTU3OGQwLWQzYWEtNGYwZi1iYjlkLWY3NGI0OWM2YTY1NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82YmU1Nzhk MC1kM2FhLTRmMGYtYmI5ZC1mNzRiNDljNmE2NTUvMC83Q0E5OTFBQjg1OTk5RjQx NTFDMjJBNjMxMEVGMDgzNzRGNjVGNUQxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQCZxXMAwQCZ/jEMA0EAgACMAcDBQAkAPNAMA0GCSqGSIb3DQEBCwUAA4IBAQAv 8wcdWg2/s9uj/W832hh81SrQ0BW9eaAjtVGWyLWVyNMwqgUJLNOZUgjdfjfLHL9Z WYgq3mA4iBV92GHs0n10vJB2C6PjFAW9TJi9pieSnHqed3+0Qo2YIrLwwAlwbBgr 359weZE7yNuPaZ6PmApAGxuRi4lDCfpXyNuBawXA8G5yd8SdVfZRWwJwOLTxnRlP p0EQ/nGfzHYJvWG1C8a2uOpE9Ti5kbsRK2UMxXBt0OquoNCzsp2NpnG9qdbkYJJP zabw/aAhAmn5gSwqlaimrD8xxpElSzTYd3I2UkBq1dfWKlVgt01NQWkey82lUQvZ Z5HO+XnUTNsopnY8pHZg -----END CERTIFICATE-----Generated at Tue May 12 22:02:56 2026 by rpki-client