$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer File: 7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.cer (raw, json) Hash identifier: P5R6Tv+U376H6qD2JAqBipTUkfnkRcC+l+yIr4QO5dk= Subject key identifier: 7D:21:9D:B4:8C:DF:74:38:98:A3:6F:EE:74:FA:88:BF:6F:2F:1E:CF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 359FAEB61DB39A49B37D80B6A1D3F610CA44212A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:46:53 +0000 Certificate not after: Sun 02 May 2027 02:51:53 +0000 Subordinate resources: IP: 103.123.85.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:9f:ae:b6:1d:b3:9a:49:b3:7d:80:b6:a1:d3:f6:10:ca:44:21:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:46:53 2026 GMT Not After : May 2 02:51:53 2027 GMT Subject: CN=7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:90:eb:73:ee:b0:83:5f:d3:dc:92:11:e9:b9: 3f:17:5e:c7:e4:8a:32:c2:ea:07:94:be:43:d1:48: 7e:db:57:bf:24:79:41:86:8c:9c:4d:f3:38:2c:a5: d3:a1:80:15:ba:d2:3e:0c:3b:73:eb:d5:83:dd:b2: e4:40:6f:9e:4c:11:de:db:59:72:e0:e0:2f:42:5a: c4:b7:a3:30:2a:cc:7f:07:96:ed:7c:29:9e:12:ef: a7:bc:f2:0c:9f:da:2f:36:56:db:9a:48:9d:b3:e3: d4:98:99:5d:e8:80:0c:85:d7:af:64:04:e6:b8:fd: e9:7a:d2:b4:9e:48:c9:f2:bc:fd:31:b9:8f:b2:f4: b4:15:e8:a0:fa:b6:8c:d7:86:75:f5:d9:2b:7d:2a: bf:8a:47:db:55:f5:46:96:a1:a0:40:6e:d3:98:b4: 9e:a2:53:51:65:25:9f:d6:f4:66:4c:d8:46:35:86: ef:f3:66:6c:b3:95:45:9f:b3:dd:4f:f0:10:0c:b4: fd:f6:48:46:d1:5a:88:2f:41:98:5e:04:db:54:d2: 36:98:a7:ba:cf:a2:03:f2:fb:04:ac:0c:e3:67:43: 5b:22:a8:b9:68:05:ee:86:a8:85:17:13:91:94:40: 1f:65:77:eb:2b:a4:ff:b7:12:c2:1f:d1:a0:48:91: 3c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:21:9D:B4:8C:DF:74:38:98:A3:6F:EE:74:FA:88:BF:6F:2F:1E:CF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/7D219DB48CDF743898A36FEE74FA88BF6F2F1ECF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.123.85.0/24 Signature Algorithm: sha256WithRSAEncryption 46:0b:69:60:5b:71:f6:f2:cd:37:34:a3:54:7f:11:30:40:fc: 59:0f:2f:b1:4c:dd:ea:79:bf:9b:96:d7:6e:49:8c:d7:a6:de: 04:e9:0e:c4:38:fc:49:4b:af:ff:af:14:9f:82:68:13:32:93: 45:ae:9a:d0:d5:17:ab:21:1b:53:d9:e7:ea:10:f9:d9:61:8f: d6:b1:22:97:a1:37:5e:c0:a9:5e:87:45:80:f5:a8:3c:41:f4: 51:9b:4b:80:d6:f4:3b:b2:60:06:0f:d1:42:6d:a8:cf:a2:29: 84:1d:cc:ef:a9:b2:b9:d0:94:3a:81:33:4e:24:27:28:28:5e: eb:27:f3:66:e2:a4:e9:5a:da:41:94:b8:3c:20:bd:09:ee:b5: c1:c8:d7:12:50:82:72:01:7b:d2:a6:f8:96:7d:8d:44:2f:a9: 70:7e:f8:67:ef:8b:7f:2f:fd:6a:a4:b2:7a:b3:52:66:ca:3b: bb:13:a7:01:c0:12:c9:e9:7b:e9:7e:e0:a2:0e:fb:ed:81:48: 98:2a:63:5a:b2:fb:6f:67:bd:ac:27:5a:26:a2:d4:69:23:0f: aa:83:12:8c:ae:bd:b5:bf:eb:a6:c1:d5:93:17:3a:d7:71:a1: 7a:66:4d:bd:75:14:6b:89:ae:24:c9:d9:d0:93:28:07:1d:f5: 3d:45:ec:75 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUNZ+uth2zmkmzfYC2odP2EMpEISowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyNDY1M1oX DTI3MDUwMjAyNTE1M1owMzExMC8GA1UEAxMoN0QyMTlEQjQ4Q0RGNzQzODk4QTM2 RkVFNzRGQTg4QkY2RjJGMUVDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCQ63PusINf09ySEem5Pxdex+SKMsLqB5S+Q9FIfttXvyR5QYaMnE3zOCyl 06GAFbrSPgw7c+vVg92y5EBvnkwR3ttZcuDgL0JaxLejMCrMfweW7XwpnhLvp7zy DJ/aLzZW25pInbPj1JiZXeiADIXXr2QE5rj96XrStJ5IyfK8/TG5j7L0tBXooPq2 jNeGdfXZK30qv4pH21X1RpahoEBu05i0nqJTUWUln9b0ZkzYRjWG7/NmbLOVRZ+z 3U/wEAy0/fZIRtFaiC9BmF4E21TSNpinus+iA/L7BKwM42dDWyKouWgF7oaohRcT kZRAH2V36yuk/7cSwh/RoEiRPD0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH0hnbSM33Q4mKNv7nT6iL9vLx7PMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ZkMmI0Zjc3LTc0ZDAtNDc5Ny1hZWUwLTllYTkwNzY1NDczMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mZDJiNGY3 Ny03NGQwLTQ3OTctYWVlMC05ZWE5MDc2NTQ3MzAvMC83RDIxOURCNDhDREY3NDM4 OThBMzZGRUU3NEZBODhCRjZGMkYxRUNGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ3tVMA0GCSqGSIb3DQEBCwUAA4IBAQBGC2lgW3H28s03NKNUfxEwQPxZDy+x TN3qeb+bltduSYzXpt4E6Q7EOPxJS6//rxSfgmgTMpNFrprQ1RerIRtT2efqEPnZ YY/WsSKXoTdewKleh0WA9ag8QfRRm0uA1vQ7smAGD9FCbajPoimEHczvqbK50JQ6 gTNOJCcoKF7rJ/Nm4qTpWtpBlLg8IL0J7rXByNcSUIJyAXvSpviWfY1EL6lwfvhn 74t/L/1qpLJ6s1Jmyju7E6cBwBLJ6XvpfuCiDvvtgUiYKmNasvtvZ72sJ1omotRp Iw+qgxKMrr21v+umwdWTFzrXcaF6Zk29dRRria4kydnQkygHHfU9Rex1 -----END CERTIFICATE-----Generated at Tue May 12 22:10:33 2026 by rpki-client