$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer File: 7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.cer (raw, json) Hash identifier: eRCpKUzRZXpyNMDJK7oR1+h4mN/3Z5kKmdyp2/wYIZo= Subject key identifier: 7D:85:F0:FB:6A:61:D5:D2:2C:8F:36:D6:2F:E9:22:39:45:DA:30:90 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 14E9FBCB7C2AE29664ACB2C147E1D6F4B9B2F8C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:43:23 +0000 Certificate not after: Sun 02 May 2027 01:48:23 +0000 Subordinate resources: IP: 202.94.83.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e9:fb:cb:7c:2a:e2:96:64:ac:b2:c1:47:e1:d6:f4:b9:b2:f8:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:43:23 2026 GMT Not After : May 2 01:48:23 2027 GMT Subject: CN=7D85F0FB6A61D5D22C8F36D62FE9223945DA3090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:43:2f:60:66:2d:8e:b3:5a:41:42:d5:c2:39: e6:6d:fd:77:c4:ae:d4:5b:2b:c2:57:07:4f:52:b2: 17:fd:75:7e:f5:0c:ff:38:b5:45:d1:88:a1:59:9b: 9e:9f:aa:85:97:b8:5b:d4:1a:e7:6a:3d:1d:12:1c: 07:38:e9:b2:7b:df:73:47:f1:4b:5d:31:ad:72:9a: 93:a0:51:4a:3a:a5:93:e1:11:53:57:f3:f9:02:77: 2c:b5:77:9c:2e:74:c8:47:59:91:5d:28:97:72:f0: 4a:e4:f8:8e:47:42:22:22:ab:46:93:9a:da:83:c6: f5:c1:07:c5:96:0f:3a:78:ce:df:b7:f4:72:7e:2d: a9:83:40:a8:24:da:fe:ca:a8:9c:f1:59:2b:5c:18: e9:dd:d5:3f:68:32:d8:7a:72:fe:f9:42:06:c5:30: 66:b3:1f:2e:bf:68:10:05:b2:e1:49:34:f3:47:32: 40:c2:e1:3b:7a:02:fe:8f:50:36:93:0b:7d:ff:a9: f4:14:45:26:a4:07:59:e0:2e:56:2f:57:cd:c8:12: 09:5c:a0:3f:8d:83:0b:54:a7:0a:46:63:06:e6:c8: 68:de:a1:b0:7b:38:e3:5e:d1:83:07:44:46:f8:93: 74:a4:44:40:60:b0:9d:d5:d5:4a:5c:1c:71:96:07: 47:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:85:F0:FB:6A:61:D5:D2:2C:8F:36:D6:2F:E9:22:39:45:DA:30:90 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/7D85F0FB6A61D5D22C8F36D62FE9223945DA3090.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.94.83.0/24 Signature Algorithm: sha256WithRSAEncryption 81:38:e8:df:27:f9:8a:d1:be:32:27:3b:55:34:6f:e6:06:8c: 31:55:4c:5b:54:75:88:dd:da:63:ce:fb:b2:26:0b:2b:b0:26: f2:33:f2:f4:79:fa:a5:80:e4:07:c9:6d:d9:2b:d2:f5:d8:ed: a2:25:c5:c6:08:c7:c1:ba:1d:50:fd:db:c2:4e:b4:83:8d:25: e8:2b:8c:40:eb:7a:f2:3a:6f:74:c4:44:a8:5c:74:96:c0:ab: 1c:04:bf:10:d6:7b:f8:56:4a:91:2c:a5:e2:26:7e:05:23:95: 40:9d:ba:ce:62:bc:68:58:e9:97:be:5d:28:b4:15:a7:8a:d4: 89:d5:9c:9c:a9:77:ac:25:60:01:b3:e6:e0:10:f7:a8:1f:49: 7f:ce:7d:74:5d:a0:40:2a:31:8c:ac:ef:a0:55:0f:d9:42:92: 93:9a:31:d2:54:e9:ee:1a:e2:a7:6e:4c:03:77:11:4e:8e:85: e8:75:3b:f9:e7:11:57:2c:d2:9e:63:2d:04:db:e9:74:dc:be: d7:e3:90:8a:00:d5:4f:3e:22:98:23:1b:72:18:2a:9b:d3:18: fa:0d:51:e6:b8:8a:1a:76:17:c4:20:79:9e:0b:2b:2e:cf:55: 98:2f:c5:2f:65:6b:86:67:39:e7:7e:8e:7d:84:8d:6c:85:16: 24:69:60:cd -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUFOn7y3wq4pZkrLLBR+HW9Lmy+MgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDMyM1oX DTI3MDUwMjAxNDgyM1owMzExMC8GA1UEAxMoN0Q4NUYwRkI2QTYxRDVEMjJDOEYz NkQ2MkZFOTIyMzk0NURBMzA5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMVDL2BmLY6zWkFC1cI55m39d8Su1FsrwlcHT1KyF/11fvUM/zi1RdGIoVmb np+qhZe4W9Qa52o9HRIcBzjpsnvfc0fxS10xrXKak6BRSjqlk+ERU1fz+QJ3LLV3 nC50yEdZkV0ol3LwSuT4jkdCIiKrRpOa2oPG9cEHxZYPOnjO37f0cn4tqYNAqCTa /sqonPFZK1wY6d3VP2gy2Hpy/vlCBsUwZrMfLr9oEAWy4Uk080cyQMLhO3oC/o9Q NpMLff+p9BRFJqQHWeAuVi9XzcgSCVygP42DC1SnCkZjBubIaN6hsHs4417RgwdE RviTdKREQGCwndXVSlwccZYHR9MCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH2F8PtqYdXSLI821i/pIjlF2jCQMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2I4YjQ0MWFkLWYxYWEtNDhkMy05ZWRiLWI5YTVkNWNlOWJhOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iOGI0NDFh ZC1mMWFhLTQ4ZDMtOWVkYi1iOWE1ZDVjZTliYTgvMC83RDg1RjBGQjZBNjFENUQy MkM4RjM2RDYyRkU5MjIzOTQ1REEzMDkwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAyl5TMA0GCSqGSIb3DQEBCwUAA4IBAQCBOOjfJ/mK0b4yJztVNG/mBowxVUxb VHWI3dpjzvuyJgsrsCbyM/L0efqlgOQHyW3ZK9L12O2iJcXGCMfBuh1Q/dvCTrSD jSXoK4xA63ryOm90xESoXHSWwKscBL8Q1nv4VkqRLKXiJn4FI5VAnbrOYrxoWOmX vl0otBWnitSJ1ZycqXesJWABs+bgEPeoH0l/zn10XaBAKjGMrO+gVQ/ZQpKTmjHS VOnuGuKnbkwDdxFOjoXodTv55xFXLNKeYy0E2+l03L7X45CKANVPPiKYIxtyGCqb 0xj6DVHmuIoadhfEIHmeCysuz1WYL8UvZWuGZznnfo59hI1shRYkaWDN -----END CERTIFICATE-----Generated at Tue May 12 22:04:12 2026 by rpki-client