$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7E5852640ACB27CE4AC466E5338B30E206711DDD.cer File: 7E5852640ACB27CE4AC466E5338B30E206711DDD.cer (raw, json) Hash identifier: sbbzYZaj1CsxtYRQjUUIxas2eAwn3sddMZLCeFVq8cw= Subject key identifier: 7E:58:52:64:0A:CB:27:CE:4A:C4:66:E5:33:8B:30:E2:06:71:1D:DD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 31C80D17807150F45431F344A3FFD4460A0CE856 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft caRepository: rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:47:39 +0000 Certificate not after: Sun 02 May 2027 00:52:39 +0000 Subordinate resources: IP: 103.22.216.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:c8:0d:17:80:71:50:f4:54:31:f3:44:a3:ff:d4:46:0a:0c:e8:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:47:39 2026 GMT Not After : May 2 00:52:39 2027 GMT Subject: CN=7E5852640ACB27CE4AC466E5338B30E206711DDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f3:c0:8a:66:25:59:b8:ec:fd:25:95:ee:c0: e7:c3:ef:fe:d0:f5:ad:41:da:64:30:d0:da:04:e6: b5:60:dc:8c:a5:a4:24:22:bb:37:81:f6:83:74:b6: 41:c9:f0:71:55:b1:b0:18:d3:b0:8c:ce:33:b1:83: a3:19:80:f5:eb:55:91:17:00:8b:ba:d3:8a:2a:fd: 35:4a:e8:14:59:fd:29:d8:95:a8:b1:96:d6:9f:cb: c4:0d:c0:2a:64:81:a6:1e:c3:c6:1a:0d:2b:c1:4e: 46:c8:a7:99:93:b7:ba:06:dc:ec:20:02:4b:1c:46: f5:ae:c1:04:65:d6:c1:8f:d9:d0:58:6e:2f:b7:40: 23:d3:75:9a:95:bf:39:93:c0:e9:14:e0:5a:92:4a: d2:1b:eb:be:fa:4e:b9:54:22:4c:99:c0:9c:ee:03: 91:f3:a6:77:96:34:cf:22:88:11:9a:f3:66:f1:9f: 69:b1:6a:ec:24:11:0e:b0:db:98:e4:25:62:a3:c3: 52:45:77:82:9c:e5:c3:9c:af:73:4f:61:7d:7c:ec: 94:39:ac:a5:3a:46:28:39:4a:bc:40:8c:b5:88:c5: d3:25:52:8f:e6:c7:91:68:43:5e:d9:54:0c:79:6d: 7d:62:2e:17:89:4d:fa:69:21:11:97:2c:f8:a3:4a: 39:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7E:58:52:64:0A:CB:27:CE:4A:C4:66:E5:33:8B:30:E2:06:71:1D:DD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/7E5852640ACB27CE4AC466E5338B30E206711DDD.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.22.216.0/23 Signature Algorithm: sha256WithRSAEncryption 02:ee:14:5f:be:c2:cb:ad:ff:7b:5b:bb:87:f9:b5:0c:7b:06: 34:91:1f:ce:f7:97:e9:3a:b4:9a:41:27:30:ca:bf:b4:94:b2: da:47:93:45:89:45:4d:e4:5a:34:91:95:9e:9b:5d:13:5d:21: 99:d2:78:37:bb:c0:a2:c8:7a:c5:bb:d3:8d:b3:05:51:fe:b5: 63:a1:ea:55:15:4a:bb:fe:c2:27:9a:e2:0c:a4:36:05:c3:65: 82:04:88:5d:66:9c:07:a5:29:81:40:54:c1:fc:23:13:79:fc: a4:21:df:e5:3e:b6:1d:23:ce:77:21:9e:c2:9c:51:e4:3e:ce: 3e:34:36:cf:8b:b5:44:4d:8b:72:5e:db:90:5b:c7:ec:30:ba: 7a:11:b9:3c:6d:dd:e2:c6:fe:76:fe:e6:f6:d9:6d:9d:bb:a4: 56:04:36:93:c1:a8:2a:7c:03:d3:0b:97:f5:2b:d2:2b:8b:8f: 75:7c:70:c1:ca:6f:b8:d1:4b:a5:be:8d:6d:fd:37:29:d0:07: e9:35:d3:5a:27:45:79:58:c7:05:95:ca:c6:64:d1:de:27:23: e7:b3:29:08:88:bf:1c:1a:9b:93:44:2b:ce:d4:ca:0f:97:f4: fe:8b:a1:ed:ba:aa:5c:52:da:eb:30:2a:d6:3c:db:2a:0b:33: a6:24:13:38 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUMcgNF4BxUPRUMfNEo//URgoM6FYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDczOVoX DTI3MDUwMjAwNTIzOVowMzExMC8GA1UEAxMoN0U1ODUyNjQwQUNCMjdDRTRBQzQ2 NkU1MzM4QjMwRTIwNjcxMURERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMLzwIpmJVm47P0lle7A58Pv/tD1rUHaZDDQ2gTmtWDcjKWkJCK7N4H2g3S2 QcnwcVWxsBjTsIzOM7GDoxmA9etVkRcAi7rTiir9NUroFFn9KdiVqLGW1p/LxA3A KmSBph7DxhoNK8FORsinmZO3ugbc7CACSxxG9a7BBGXWwY/Z0FhuL7dAI9N1mpW/ OZPA6RTgWpJK0hvrvvpOuVQiTJnAnO4DkfOmd5Y0zyKIEZrzZvGfabFq7CQRDrDb mOQlYqPDUkV3gpzlw5yvc09hfXzslDmspTpGKDlKvECMtYjF0yVSj+bHkWhDXtlU DHltfWIuF4lN+mkhEZcs+KNKOZ8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH5YUmQKyyfOSsRm5TOLMOIGcR3dMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzY1NDYwN2YwLTE3MDEtNDliMS05MWZmLWIxYmVkNWNiZGVkMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82NTQ2MDdm MC0xNzAxLTQ5YjEtOTFmZi1iMWJlZDVjYmRlZDEvMC83RTU4NTI2NDBBQ0IyN0NF NEFDNDY2RTUzMzhCMzBFMjA2NzExRERELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZxbYMA0GCSqGSIb3DQEBCwUAA4IBAQAC7hRfvsLLrf97W7uH+bUMewY0kR/O 95fpOrSaQScwyr+0lLLaR5NFiUVN5Fo0kZWem10TXSGZ0ng3u8CiyHrFu9ONswVR /rVjoepVFUq7/sInmuIMpDYFw2WCBIhdZpwHpSmBQFTB/CMTefykId/lPrYdI853 IZ7CnFHkPs4+NDbPi7VETYtyXtuQW8fsMLp6Ebk8bd3ixv52/ub22W2du6RWBDaT wagqfAPTC5f1K9Iri491fHDBym+40Uulvo1t/Tcp0AfpNdNaJ0V5WMcFlcrGZNHe JyPnsykIiL8cGpuTRCvO1MoPl/T+i6HtuqpcUtrrMCrWPNsqCzOmJBM4 -----END CERTIFICATE-----Generated at Tue May 12 22:16:01 2026 by rpki-client