$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer File: 7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.cer (raw, json) Hash identifier: ZsLD5xJoKl/tEO10UnwFWT3199aL7gquIoa2wEjnFkg= Subject key identifier: 7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7F1392EC61A5CADB5268069D9FEE0016B8D83C49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:28:23 +0000 Certificate not after: Sun 02 May 2027 00:33:23 +0000 Subordinate resources: IP: 36.50.97.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:13:92:ec:61:a5:ca:db:52:68:06:9d:9f:ee:00:16:b8:d8:3c:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:28:23 2026 GMT Not After : May 2 00:33:23 2027 GMT Subject: CN=7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:54:37:bf:34:8a:b0:da:9a:06:79:4b:a4:96: 5c:ba:ff:26:95:bd:5f:7a:1f:3e:87:b6:19:62:34: 02:79:99:94:1a:03:73:10:08:62:c0:f4:17:e7:42: 7e:ec:17:2b:fc:44:78:8f:28:3d:7e:f0:bf:9d:de: 99:00:c8:4a:3a:e2:c4:77:69:92:95:75:39:95:0d: d3:a1:a2:f4:b4:c9:9f:6c:90:5d:cd:66:ae:f2:ff: 7c:55:ab:0f:bd:e4:82:19:1c:d6:b5:14:fb:b5:6c: 2c:79:0e:17:20:d4:da:57:c9:11:4c:e2:de:d3:1d: 4a:b8:d2:88:57:be:81:9d:d7:b8:2d:94:b0:6c:c1: c3:1f:e8:6d:ce:1f:c3:90:05:5d:16:28:54:db:ae: 03:4e:42:0d:03:58:ba:60:7e:ce:79:38:8e:04:20: df:ee:f9:32:e0:ae:e7:61:91:3b:86:47:07:29:15: 85:57:f4:19:65:21:11:61:f3:a8:8d:78:b8:df:bc: 42:4d:44:0b:64:c4:11:4e:cd:8e:24:31:94:d7:ba: 53:08:e4:df:ff:3c:ac:55:3a:ea:08:f1:d2:59:54: 52:a7:e5:f6:f0:f9:b9:0b:71:15:f9:46:0d:06:0a: a8:6a:12:c7:f0:34:1f:77:32:cd:50:f0:40:50:85: 78:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7E:8D:66:5F:4A:7B:1F:51:45:CE:BB:0B:96:D7:38:5B:6E:CA:15:4A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/7E8D665F4A7B1F5145CEBB0B96D7385B6ECA154A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.97.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:1e:6b:c9:61:ab:aa:00:f3:7f:e8:66:fd:94:5e:62:21:d5: ed:10:cb:d6:84:fa:cb:46:c1:3a:95:e1:c4:11:71:a2:8c:7f: 9d:46:5c:82:62:fa:2a:ce:5c:14:63:95:29:80:5e:f4:4e:95: 58:35:28:a8:a1:ca:b8:35:f0:14:09:80:10:79:81:58:6e:43: 43:6a:88:a3:4c:63:b6:7d:fb:bd:83:cf:55:db:d2:79:03:ad: 71:55:bf:24:c8:f9:2d:84:54:2b:8f:a5:81:df:f5:68:b2:dd: ca:04:33:91:01:55:19:1b:08:f3:77:ee:6e:2a:36:75:5e:20: 06:3a:c7:69:86:c8:73:9e:84:90:f2:af:8d:2a:b3:ae:c6:43: 08:2e:93:95:9c:43:bd:49:a1:d5:3b:77:82:c2:b1:0b:08:f1: be:e0:c0:a2:a0:67:76:d1:31:3a:22:fe:ee:08:99:2f:6a:7c: 57:c0:39:08:cf:2c:63:fb:f4:94:37:0d:56:cc:e2:9a:72:c0: 13:c3:88:ec:b6:22:f2:ea:57:f6:ae:cb:1d:d8:cb:82:95:38: c7:36:36:75:65:64:a8:b0:da:d8:f2:cd:b8:74:ab:80:e5:07: 91:69:0e:68:37:46:5d:24:38:34:7d:62:ab:c2:08:f5:91:fd: af:d7:51:fc -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUfxOS7GGlyttSaAadn+4AFrjYPEkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjgyM1oX DTI3MDUwMjAwMzMyM1owMzExMC8GA1UEAxMoN0U4RDY2NUY0QTdCMUY1MTQ1Q0VC QjBCOTZENzM4NUI2RUNBMTU0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANhUN780irDamgZ5S6SWXLr/JpW9X3ofPoe2GWI0AnmZlBoDcxAIYsD0F+dC fuwXK/xEeI8oPX7wv53emQDISjrixHdpkpV1OZUN06Gi9LTJn2yQXc1mrvL/fFWr D73kghkc1rUU+7VsLHkOFyDU2lfJEUzi3tMdSrjSiFe+gZ3XuC2UsGzBwx/obc4f w5AFXRYoVNuuA05CDQNYumB+znk4jgQg3+75MuCu52GRO4ZHBykVhVf0GWUhEWHz qI14uN+8Qk1EC2TEEU7NjiQxlNe6Uwjk3/88rFU66gjx0llUUqfl9vD5uQtxFflG DQYKqGoSx/A0H3cyzVDwQFCFeDECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH6NZl9Kex9RRc67C5bXOFtuyhVKMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQ4YzA3NDQxLWNkOWQtNGQ4NS1hYWI0LTY1ZjVkZDRlZDdlMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80OGMwNzQ0 MS1jZDlkLTRkODUtYWFiNC02NWY1ZGQ0ZWQ3ZTAvMC83RThENjY1RjRBN0IxRjUx NDVDRUJCMEI5NkQ3Mzg1QjZFQ0ExNTRBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAJDJhMA0GCSqGSIb3DQEBCwUAA4IBAQA6HmvJYauqAPN/6Gb9lF5iIdXtEMvW hPrLRsE6leHEEXGijH+dRlyCYvoqzlwUY5UpgF70TpVYNSioocq4NfAUCYAQeYFY bkNDaoijTGO2ffu9g89V29J5A61xVb8kyPkthFQrj6WB3/Vost3KBDORAVUZGwjz d+5uKjZ1XiAGOsdphshznoSQ8q+NKrOuxkMILpOVnEO9SaHVO3eCwrELCPG+4MCi oGd20TE6Iv7uCJkvanxXwDkIzyxj+/SUNw1WzOKacsATw4jstiLy6lf2rssd2MuC lTjHNjZ1ZWSosNrY8s24dKuA5QeRaQ5oN0ZdJDg0fWKrwgj1kf2v11H8 -----END CERTIFICATE-----Generated at Tue May 12 21:53:33 2026 by rpki-client