$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7D45B2EDA19AFFB2D113112B9507298311C5DB85.cer File: 7D45B2EDA19AFFB2D113112B9507298311C5DB85.cer (raw, json) Hash identifier: 8rLUPn+4TRWCUgqXwv8ddcwI8o3rHAIPXJf0yUgi+b4= Subject key identifier: 7D:45:B2:ED:A1:9A:FF:B2:D1:13:11:2B:95:07:29:83:11:C5:DB:85 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 26F194B0AC14FBB5529D302A2F233A5A19AA412B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:41:06 +0000 Certificate not after: Sun 02 May 2027 00:46:06 +0000 Subordinate resources: IP: 103.82.126.0/23 IP: 2001:df7:7a00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f1:94:b0:ac:14:fb:b5:52:9d:30:2a:2f:23:3a:5a:19:aa:41:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:41:06 2026 GMT Not After : May 2 00:46:06 2027 GMT Subject: CN=7D45B2EDA19AFFB2D113112B9507298311C5DB85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8f:bf:c0:4c:77:fe:9e:b7:86:b1:9c:48:8b: 98:c3:b6:fb:43:a4:0f:35:36:23:ea:2f:5c:c0:4d: e0:c1:a5:08:1c:3a:cb:e9:0c:ef:8e:31:29:d3:76: ea:2a:bc:84:a5:37:59:3b:54:9b:cf:38:ca:cf:45: 72:89:a4:d7:89:93:ca:43:f2:e9:de:18:e7:07:5a: 3e:c1:25:fe:79:58:60:51:4c:a6:49:6e:f0:3e:56: 13:e1:25:2e:75:60:30:8e:9e:13:6e:d7:fb:12:a1: 57:93:91:1d:7e:54:84:7e:84:fd:00:6d:4a:62:48: be:49:ca:7a:20:c5:ff:42:89:6f:1f:f4:c9:ae:e5: 6b:42:d6:a9:15:de:45:63:05:02:df:a4:c5:a7:cc: 65:cb:e4:73:4c:ed:1c:fe:08:8e:db:fe:38:fb:9d: 3d:ec:27:03:8d:ab:01:42:62:57:db:93:71:a0:2f: e3:1f:df:a4:ad:7c:85:ea:c5:fc:27:63:de:6e:1b: 45:49:10:ee:9b:c6:6d:e5:52:7d:09:01:11:3d:f1: 43:fd:51:a7:c3:4e:a2:49:af:6f:47:d7:bd:f1:bb: 5a:7d:0f:84:83:2f:a5:90:bf:5c:d7:b7:b0:0d:a0: a4:f4:fd:e9:1b:70:73:ec:52:ec:4e:a0:f7:67:26: b7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:45:B2:ED:A1:9A:FF:B2:D1:13:11:2B:95:07:29:83:11:C5:DB:85 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/7D45B2EDA19AFFB2D113112B9507298311C5DB85.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.82.126.0/23 IPv6: 2001:df7:7a00::/48 Signature Algorithm: sha256WithRSAEncryption 61:67:f4:8f:2d:b2:d8:d0:8a:80:54:63:02:82:e4:6a:79:76: 2b:0e:cb:6e:cf:c6:6f:76:98:dd:e9:7b:74:cb:88:e8:7c:cf: 8c:34:59:7d:27:57:8a:9a:c5:00:59:4d:60:67:0f:e1:93:bc: f7:ae:9a:64:84:1c:af:a5:a5:84:6c:84:0d:b1:4f:75:15:d6: b1:a6:a1:48:49:83:c7:03:81:28:cd:29:8c:56:e1:ff:c8:f2: 01:e0:e5:61:45:46:02:be:a9:ee:c7:e7:dc:b9:18:8d:50:c0: 3e:f7:fe:6e:98:c2:17:c2:75:b3:83:68:15:52:74:eb:b0:72: 56:5a:54:99:0e:3b:04:01:d9:fa:cd:d0:ba:89:98:d0:c6:a9: 10:33:d3:54:b1:11:7b:52:bd:2d:1e:5b:42:b3:01:7b:aa:ea: 48:e1:64:7f:b6:80:f2:d5:70:a9:b3:4d:90:5d:41:e8:26:27: 40:ab:45:73:07:27:f1:fc:86:32:19:f3:09:f0:d7:0b:2f:c0: ec:84:d0:2a:a1:54:ac:82:ec:a0:01:97:8f:76:32:ea:81:a8: 9d:f0:3c:64:3d:b4:8c:d1:58:ad:ae:56:65:55:c9:53:0b:91: 34:06:2e:1a:e9:6e:c9:52:b4:8f:17:6d:90:4a:9b:b1:0e:7b: 4a:35:e7:76 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUJvGUsKwU+7VSnTAqLyM6WhmqQSswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDEwNloX DTI3MDUwMjAwNDYwNlowMzExMC8GA1UEAxMoN0Q0NUIyRURBMTlBRkZCMkQxMTMx MTJCOTUwNzI5ODMxMUM1REI4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANCPv8BMd/6et4axnEiLmMO2+0OkDzU2I+ovXMBN4MGlCBw6y+kM744xKdN2 6iq8hKU3WTtUm884ys9Fcomk14mTykPy6d4Y5wdaPsEl/nlYYFFMpklu8D5WE+El LnVgMI6eE27X+xKhV5ORHX5UhH6E/QBtSmJIvknKeiDF/0KJbx/0ya7la0LWqRXe RWMFAt+kxafMZcvkc0ztHP4Ijtv+OPudPewnA42rAUJiV9uTcaAv4x/fpK18herF /Cdj3m4bRUkQ7pvGbeVSfQkBET3xQ/1Rp8NOokmvb0fXvfG7Wn0PhIMvpZC/XNe3 sA2gpPT96Rtwc+xS7E6g92cmt+MCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH1Fsu2hmv+y0RMRK5UHKYMRxduFMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzViZDQzNDBiLTIxYzQtNGZjNy1hMjU5LWUyMzU0YzUzZmRkMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81YmQ0MzQw Yi0yMWM0LTRmYzctYTI1OS1lMjM1NGM1M2ZkZDIvMC83RDQ1QjJFREExOUFGRkIy RDExMzExMkI5NTA3Mjk4MzExQzVEQjg1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ1J+MA8EAgACMAkDBwAgAQ33egAwDQYJKoZIhvcNAQELBQADggEBAGFn9I8t stjQioBUYwKC5Gp5disOy27Pxm92mN3pe3TLiOh8z4w0WX0nV4qaxQBZTWBnD+GT vPeummSEHK+lpYRshA2xT3UV1rGmoUhJg8cDgSjNKYxW4f/I8gHg5WFFRgK+qe7H 59y5GI1QwD73/m6YwhfCdbODaBVSdOuwclZaVJkOOwQB2frN0LqJmNDGqRAz01Sx EXtSvS0eW0KzAXuq6kjhZH+2gPLVcKmzTZBdQegmJ0CrRXMHJ/H8hjIZ8wnw1wsv wOyE0CqhVKyC7KABl492MuqBqJ3wPGQ9tIzRWK2uVmVVyVMLkTQGLhrpbslStI8X bZBKm7EOe0o153Y= -----END CERTIFICATE-----Generated at Tue May 12 22:47:20 2026 by rpki-client