$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer File: 7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer (raw, json) Hash identifier: zEuVLZE/Ilg3wS1aeMflWIKTnXOQnMAa0ulnTqXHslw= Subject key identifier: 7D:D6:B5:0A:2D:41:EA:EB:84:8E:7C:42:D7:4C:0D:77:D1:30:35:06 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0C6FD8D5504B669724B6AEC6BF51D52CB09F69BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft caRepository: rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:09:37 +0000 Certificate not after: Sun 02 May 2027 01:14:37 +0000 Subordinate resources: IP: 103.214.100.0/22 IP: 2404:c380::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:6f:d8:d5:50:4b:66:97:24:b6:ae:c6:bf:51:d5:2c:b0:9f:69:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:09:37 2026 GMT Not After : May 2 01:14:37 2027 GMT Subject: CN=7DD6B50A2D41EAEB848E7C42D74C0D77D1303506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c8:0f:13:94:47:ea:99:7d:d0:a6:42:41:33: 4f:98:d5:88:2b:a7:02:4c:d3:ea:d1:6f:26:bc:73: 65:59:0f:9a:c5:19:e1:c3:b0:51:c3:6d:09:ef:9f: c0:c7:10:62:d6:31:0e:f0:24:6f:3f:e2:cb:32:6d: bb:4b:a7:ac:22:41:c1:01:f1:69:06:d8:82:e6:10: 59:c2:98:71:90:aa:d5:ca:1d:c9:09:d5:82:f6:b8: 70:ef:95:44:db:d9:0e:76:55:28:cb:ed:69:5d:9f: 29:2f:33:61:b6:1c:07:1d:b4:e6:86:4c:4c:91:ff: f1:10:45:1c:f9:fa:28:30:a3:5d:cc:dc:15:0b:07: 94:ef:0c:5b:32:2e:a1:51:2a:48:6a:a8:8a:0f:91: aa:a8:a1:97:78:15:87:c0:f0:46:7c:8f:b0:c5:19: 43:a3:10:ad:bd:4c:28:bd:55:6d:f3:c0:21:a1:f6: 0e:0c:a8:b4:e1:cd:ac:d6:5f:16:b0:cd:11:ef:16: 0d:2a:f7:8e:00:17:49:9e:33:ad:15:d4:1c:e4:d2: 20:03:2a:c4:e1:be:99:89:45:3e:7f:b3:98:64:55: 6a:37:bd:6f:7e:3c:63:af:4c:ef:12:32:e6:af:31: 40:a2:1b:e6:94:92:6f:e8:8b:a3:41:51:62:db:7f: 38:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:D6:B5:0A:2D:41:EA:EB:84:8E:7C:42:D7:4C:0D:77:D1:30:35:06 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.214.100.0/22 IPv6: 2404:c380::/32 Signature Algorithm: sha256WithRSAEncryption 3b:92:12:88:dc:13:fa:50:23:ff:46:4b:58:fe:7a:5c:31:82: b6:f8:06:fc:de:d9:44:e3:ed:5a:9f:49:16:ed:cc:1d:07:0d: 07:44:83:e2:e8:a4:cb:a8:c9:68:c7:38:e2:5e:1d:8a:e2:fe: 4e:56:17:3e:7c:cc:71:88:49:43:15:f2:e2:88:e5:51:0d:e6: 12:e1:2b:7c:99:df:38:0d:de:13:3a:14:52:48:2e:ce:54:d4: 8f:ec:b9:24:5b:04:13:55:28:49:03:fb:ab:72:0c:d2:8e:30: d7:a2:53:56:14:e7:d4:4c:96:91:ff:f3:d4:f4:0e:db:8f:44: d0:86:32:86:6b:28:5e:04:51:60:07:34:b9:15:92:ae:01:27: a9:76:2b:7f:c4:fe:97:d0:6e:c2:08:97:3c:c1:d9:96:5e:bf: 59:4d:a6:c5:dc:4a:83:a2:d9:26:24:41:95:80:1b:89:48:9b: d9:8d:c8:f4:60:99:23:2d:b9:09:28:80:29:52:ee:77:35:f4: b7:b8:67:d1:f0:b0:71:da:70:aa:35:1b:25:32:c1:8a:36:fb: 17:1a:1b:41:06:b4:64:13:07:90:d2:9f:de:2f:1a:cd:5e:db: 46:17:f7:fd:4c:77:30:24:9c:0a:f9:57:ac:ab:18:2c:fc:1d: 97:bc:d4:d5 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUDG/Y1VBLZpcktq7Gv1HVLLCfab0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDkzN1oX DTI3MDUwMjAxMTQzN1owMzExMC8GA1UEAxMoN0RENkI1MEEyRDQxRUFFQjg0OEU3 QzQyRDc0QzBENzdEMTMwMzUwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMfIDxOUR+qZfdCmQkEzT5jViCunAkzT6tFvJrxzZVkPmsUZ4cOwUcNtCe+f wMcQYtYxDvAkbz/iyzJtu0unrCJBwQHxaQbYguYQWcKYcZCq1codyQnVgva4cO+V RNvZDnZVKMvtaV2fKS8zYbYcBx205oZMTJH/8RBFHPn6KDCjXczcFQsHlO8MWzIu oVEqSGqoig+Rqqihl3gVh8DwRnyPsMUZQ6MQrb1MKL1VbfPAIaH2DgyotOHNrNZf FrDNEe8WDSr3jgAXSZ4zrRXUHOTSIAMqxOG+mYlFPn+zmGRVaje9b348Y69M7xIy 5q8xQKIb5pSSb+iLo0FRYtt/ONMCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH3WtQotQerrhI58QtdMDXfRMDUGMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg1ZTUxODc1LTUwODctNDI2NC1hOGJkLTQxNTZmNTViYWFhYi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84NWU1MTg3 NS01MDg3LTQyNjQtYThiZC00MTU2ZjU1YmFhYWIvMC83REQ2QjUwQTJENDFFQUVC ODQ4RTdDNDJENzRDMEQ3N0QxMzAzNTA2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ9ZkMA0EAgACMAcDBQAkBMOAMA0GCSqGSIb3DQEBCwUAA4IBAQA7khKI3BP6 UCP/RktY/npcMYK2+Ab83tlE4+1an0kW7cwdBw0HRIPi6KTLqMloxzjiXh2K4v5O Vhc+fMxxiElDFfLiiOVRDeYS4St8md84Dd4TOhRSSC7OVNSP7LkkWwQTVShJA/ur cgzSjjDXolNWFOfUTJaR//PU9A7bj0TQhjKGayheBFFgBzS5FZKuASepdit/xP6X 0G7CCJc8wdmWXr9ZTabF3EqDotkmJEGVgBuJSJvZjcj0YJkjLbkJKIApUu53NfS3 uGfR8LBx2nCqNRslMsGKNvsXGhtBBrRkEweQ0p/eLxrNXttGF/f9THcwJJwK+Ves qxgs/B2XvNTV -----END CERTIFICATE-----Generated at Tue May 12 22:32:59 2026 by rpki-client