$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.cer File: 7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.cer (raw, json) Hash identifier: FUv5QId+nFN12iva+XjcSDOyYUmQksPnq+QNUhgAxbQ= Subject key identifier: 7D:C6:77:32:0E:CD:4F:9F:A6:1F:D2:17:2F:A0:FF:BF:74:4F:6A:33 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 070BBFF984FF52EB711BF81963A29749FCFEB5A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:48:56 +0000 Certificate not after: Sun 02 May 2027 01:53:56 +0000 Subordinate resources: IP: 103.186.192.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:0b:bf:f9:84:ff:52:eb:71:1b:f8:19:63:a2:97:49:fc:fe:b5:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:48:56 2026 GMT Not After : May 2 01:53:56 2027 GMT Subject: CN=7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fa:bd:c4:72:53:81:5d:5d:0b:ac:78:78:16: 84:48:1b:01:0c:1f:d5:46:2d:6c:f7:f2:69:d9:e2: b8:b2:67:a2:90:58:21:a7:a3:d6:d0:60:e1:ec:51: d3:7f:f4:c0:d2:02:db:2e:fd:01:56:3e:d1:de:12: c2:d5:c1:75:cc:f4:16:51:bd:6f:97:41:15:e0:2b: ec:92:33:76:96:3a:ca:8b:49:ba:f0:10:b6:b4:f7: 68:02:04:19:09:b1:e7:7e:16:75:15:14:46:5c:75: 42:b1:f3:af:79:e3:a5:58:69:95:fe:d8:2d:64:85: 84:d3:45:67:3f:de:cb:40:8c:00:ed:26:d3:9b:09: 34:3f:c1:27:b0:65:d7:28:5b:77:45:14:42:37:3b: 4e:02:06:36:1c:cc:79:21:3f:ab:3b:b9:53:2d:9d: a4:61:7b:84:20:29:ab:ef:a0:aa:9d:ba:0b:e0:71: 5d:34:ab:68:fc:86:50:93:a0:02:37:55:09:d9:e9: 55:2b:b5:1f:b9:9f:8a:1e:91:1a:84:20:91:ec:3b: bb:c9:95:bb:fd:77:ba:95:5f:5e:77:c0:15:b7:4a: 69:fb:bc:16:fb:5e:5f:75:27:57:84:6d:aa:27:da: b1:b3:2e:91:b3:2c:f3:04:8a:80:71:e2:12:33:70: f5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:C6:77:32:0E:CD:4F:9F:A6:1F:D2:17:2F:A0:FF:BF:74:4F:6A:33 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/7DC677320ECD4F9FA61FD2172FA0FFBF744F6A33.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.192.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:c8:4c:b1:af:6e:74:72:13:94:4f:9b:df:69:1a:e6:ad:8b: 07:26:21:12:c6:e6:53:3c:72:1d:0f:d7:e5:1c:ac:e0:12:bf: 24:be:c4:2e:63:8b:fc:08:84:d7:0a:e4:57:1c:4e:c0:fa:c7: 3c:4e:2f:ed:4e:a3:36:05:69:9d:79:4a:d2:64:c2:77:a8:99: f3:14:41:ad:7b:4c:e3:c0:e9:6e:8d:66:90:e9:23:72:17:8d: e5:fe:e7:fd:c2:bb:71:66:c1:a9:d0:4b:4a:37:b1:c7:96:09: e8:34:e3:e8:39:35:fd:c9:d7:5d:7d:01:3a:55:af:cf:02:20: f9:f7:7c:36:b2:17:9a:fc:25:89:ae:4f:95:d8:3e:31:3d:31: ec:c7:d6:dc:3c:00:f8:f9:16:94:f1:99:80:83:3f:6d:f2:75: 8b:00:f7:a5:73:90:e7:5d:a9:0b:38:bb:42:f8:49:85:4f:9a: f8:2c:12:df:83:fd:7d:bf:e2:2d:b4:95:87:a1:6d:02:98:66: 46:70:23:67:8e:29:56:4f:7a:40:b4:ce:b9:ef:6f:03:bd:23: da:62:cf:c7:a2:1b:75:71:c8:44:dc:84:32:26:a7:36:ce:0d: 70:6d:32:50:f6:b8:73:71:62:55:97:3b:d7:5b:56:ab:9f:ab: ff:fd:ba:56 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUBwu/+YT/UutxG/gZY6KXSfz+taQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDg1NloX DTI3MDUwMjAxNTM1NlowMzExMC8GA1UEAxMoN0RDNjc3MzIwRUNENEY5RkE2MUZE MjE3MkZBMEZGQkY3NDRGNkEzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIz6vcRyU4FdXQuseHgWhEgbAQwf1UYtbPfyadniuLJnopBYIaej1tBg4exR 03/0wNIC2y79AVY+0d4SwtXBdcz0FlG9b5dBFeAr7JIzdpY6yotJuvAQtrT3aAIE GQmx534WdRUURlx1QrHzr3njpVhplf7YLWSFhNNFZz/ey0CMAO0m05sJND/BJ7Bl 1yhbd0UUQjc7TgIGNhzMeSE/qzu5Uy2dpGF7hCApq++gqp26C+BxXTSraPyGUJOg AjdVCdnpVSu1H7mfih6RGoQgkew7u8mVu/13upVfXnfAFbdKafu8FvteX3UnV4Rt qifasbMukbMs8wSKgHHiEjNw9YUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH3GdzIOzU+fph/SFy+g/790T2ozMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2MzNWE5ZGRmLWMxMDktNGZjMS1hMzBkLThmMDRiODMzODFiZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jMzVhOWRk Zi1jMTA5LTRmYzEtYTMwZC04ZjA0YjgzMzgxYmUvMC83REM2NzczMjBFQ0Q0RjlG QTYxRkQyMTcyRkEwRkZCRjc0NEY2QTMzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ7rAMA0GCSqGSIb3DQEBCwUAA4IBAQAKyEyxr250chOUT5vfaRrmrYsHJiES xuZTPHIdD9flHKzgEr8kvsQuY4v8CITXCuRXHE7A+sc8Ti/tTqM2BWmdeUrSZMJ3 qJnzFEGte0zjwOlujWaQ6SNyF43l/uf9wrtxZsGp0EtKN7HHlgnoNOPoOTX9yddd fQE6Va/PAiD593w2shea/CWJrk+V2D4xPTHsx9bcPAD4+RaU8ZmAgz9t8nWLAPel c5DnXakLOLtC+EmFT5r4LBLfg/19v+IttJWHoW0CmGZGcCNnjilWT3pAtM65728D vSPaYs/Hoht1cchE3IQyJqc2zg1wbTJQ9rhzcWJVlzvXW1arn6v//bpW -----END CERTIFICATE-----Generated at Tue May 12 22:10:13 2026 by rpki-client