$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.cer File: 7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.cer (raw, json) Hash identifier: fkd1WI/TC43dgq2KA+nsuhTjNOPQ3O0/LyurhsS7lAk= Subject key identifier: 7D:51:3C:A0:27:0A:04:6B:FF:27:E9:C4:9D:A0:E9:90:3C:DD:2C:0C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 73D87A4360279ECFC9DE227ECFCAD2E6C35D9CF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:53:24 +0000 Certificate not after: Sat 01 May 2027 23:58:24 +0000 Subordinate resources: IP: 103.147.10.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:d8:7a:43:60:27:9e:cf:c9:de:22:7e:cf:ca:d2:e6:c3:5d:9c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:53:24 2026 GMT Not After : May 1 23:58:24 2027 GMT Subject: CN=7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a9:2b:58:81:bb:cb:18:fe:74:86:c9:83:3b: 3a:5e:79:7b:13:0b:5a:c1:79:de:db:56:5b:d0:3f: a3:d0:e4:2b:b4:39:86:f3:02:df:d3:b0:2c:06:03: 01:0d:b2:8e:78:b5:cf:ca:c9:61:53:b0:d7:fe:02: 89:ab:3e:55:8c:06:18:9b:27:64:0b:cb:08:0e:33: 42:29:5a:8a:35:f7:aa:df:98:b2:04:7d:aa:87:70: d4:c4:ff:e9:4e:0e:c2:aa:c6:d4:17:4d:e9:eb:ae: c3:bb:96:33:e3:87:12:70:aa:f2:94:98:8e:63:5c: 84:f9:ed:0f:5e:1e:8d:5f:94:17:70:4e:bf:d2:36: cf:a1:47:95:3a:0e:8f:2a:7b:64:d5:a2:9f:df:14: 34:cf:6a:58:a8:41:3c:1a:92:43:e8:1a:7b:29:79: b8:96:7d:d5:de:71:d7:f5:13:18:f7:bc:f5:23:58: 97:c0:02:bc:51:7e:41:49:36:92:dd:df:b1:8f:9e: 40:cd:73:34:e9:1c:f8:e1:02:cb:74:39:78:14:5e: 1a:0a:0b:01:4a:68:a0:bb:c8:b0:3d:ff:8b:d2:52: a1:bc:62:4d:1b:86:5c:be:f6:d9:6b:95:ed:22:e5: 5a:3a:42:2c:52:cb:bb:67:b9:17:8a:23:f5:ce:41: d3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:51:3C:A0:27:0A:04:6B:FF:27:E9:C4:9D:A0:E9:90:3C:DD:2C:0C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/7D513CA0270A046BFF27E9C49DA0E9903CDD2C0C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.10.0/23 Signature Algorithm: sha256WithRSAEncryption 58:c0:b3:e1:3e:92:97:84:af:55:70:02:1b:32:40:69:dc:7b: 7b:0b:9e:80:78:d5:93:fc:41:30:0b:b6:d0:b9:15:46:d7:c4: 2b:83:52:62:49:77:0e:42:1b:4e:01:38:2e:57:9e:83:54:e8: 35:a6:39:f0:0a:c5:2c:0e:e3:24:e6:04:7c:a7:61:d1:86:a1: 8e:fa:1b:e4:e0:e6:f4:39:35:ea:9c:a2:12:0d:71:6c:dc:64: 5e:54:40:64:36:73:98:06:6d:4a:c3:d1:1c:71:26:c7:a2:c4: 42:4a:37:e7:d3:f7:51:bd:46:cf:92:85:b9:85:df:96:f2:93: a7:36:14:89:7e:75:e2:38:dd:b0:83:0f:71:00:9b:37:10:64: 90:19:ca:c9:72:94:ae:c7:0d:38:fa:74:d7:cb:45:a3:fd:c8: 39:57:35:22:94:95:50:0a:ff:48:e2:3c:30:d6:d8:d6:62:fb: d7:5d:18:52:93:82:ad:4b:4c:ec:ab:ba:59:d7:f6:f9:0c:19: bf:ca:50:ef:06:51:21:4e:6f:13:ac:b7:3b:11:6d:03:dd:b2: c1:36:c7:5b:1e:a5:5d:de:87:4c:e3:62:89:1d:d1:1a:17:ba: c1:6e:9a:a6:bf:35:61:f4:40:5b:18:ee:c9:11:3a:90:0a:bc: 90:fa:6d:24 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUc9h6Q2Anns/J3iJ+z8rS5sNdnPkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTMyNFoX DTI3MDUwMTIzNTgyNFowMzExMC8GA1UEAxMoN0Q1MTNDQTAyNzBBMDQ2QkZGMjdF OUM0OURBMEU5OTAzQ0REMkMwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKmpK1iBu8sY/nSGyYM7Ol55exMLWsF53ttWW9A/o9DkK7Q5hvMC39OwLAYD AQ2yjni1z8rJYVOw1/4Cias+VYwGGJsnZAvLCA4zQilaijX3qt+YsgR9qodw1MT/ 6U4OwqrG1BdN6euuw7uWM+OHEnCq8pSYjmNchPntD14ejV+UF3BOv9I2z6FHlToO jyp7ZNWin98UNM9qWKhBPBqSQ+gaeyl5uJZ91d5x1/UTGPe89SNYl8ACvFF+QUk2 kt3fsY+eQM1zNOkc+OECy3Q5eBReGgoLAUpooLvIsD3/i9JSobxiTRuGXL722WuV 7SLlWjpCLFLLu2e5F4oj9c5B04cCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH1RPKAnCgRr/yfpxJ2g6ZA83SwMMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE1NjJjZjNkLWQ5ZjctNDhhOS05MTU5LTlmMGQ3YTQ3Njc5MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xNTYyY2Yz ZC1kOWY3LTQ4YTktOTE1OS05ZjBkN2E0NzY3OTAvMC83RDUxM0NBMDI3MEEwNDZC RkYyN0U5QzQ5REEwRTk5MDNDREQyQzBDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ5MKMA0GCSqGSIb3DQEBCwUAA4IBAQBYwLPhPpKXhK9VcAIbMkBp3Ht7C56A eNWT/EEwC7bQuRVG18Qrg1JiSXcOQhtOATguV56DVOg1pjnwCsUsDuMk5gR8p2HR hqGO+hvk4Ob0OTXqnKISDXFs3GReVEBkNnOYBm1Kw9EccSbHosRCSjfn0/dRvUbP koW5hd+W8pOnNhSJfnXiON2wgw9xAJs3EGSQGcrJcpSuxw04+nTXy0Wj/cg5VzUi lJVQCv9I4jww1tjWYvvXXRhSk4KtS0zsq7pZ1/b5DBm/ylDvBlEhTm8TrLc7EW0D 3bLBNsdbHqVd3odM42KJHdEaF7rBbpqmvzVh9EBbGO7JETqQCryQ+m0k -----END CERTIFICATE-----Generated at Wed May 13 03:58:44 2026 by rpki-client