$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.cer File: 7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.cer (raw, json) Hash identifier: m8GjVsmJ7mv/c/2IhXl9mgKgeqCB7zGb+wEKpF23koo= Subject key identifier: 7E:9E:B8:CF:1D:77:4F:F8:4E:5B:A7:79:B7:0A:4C:B2:9A:77:CA:E5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4E9E71B566E8ECD09D335E389C711934E82C7443 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:49:34 +0000 Certificate not after: Sun 02 May 2027 00:54:34 +0000 Subordinate resources: IP: 103.227.24.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:9e:71:b5:66:e8:ec:d0:9d:33:5e:38:9c:71:19:34:e8:2c:74:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:49:34 2026 GMT Not After : May 2 00:54:34 2027 GMT Subject: CN=7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fb:22:9f:f9:6b:96:b7:00:ed:c1:ee:4a:97: 4f:0d:ea:e6:23:2f:d1:87:a9:c6:94:a2:10:fc:f3: 79:0c:f6:da:ba:de:86:ae:1b:99:03:ec:fd:33:0a: fb:a5:75:32:21:96:82:af:5e:0c:54:a9:f2:dd:fe: 88:ed:3d:cd:13:c9:9e:ab:37:f2:ed:30:a4:b5:ac: 1d:45:b2:ba:bd:df:b0:b0:fe:de:94:1b:02:62:1d: 8c:47:87:ca:50:eb:b2:0a:e6:5a:28:5c:80:e8:8a: 92:d8:70:fd:18:4e:ad:1c:17:a9:5b:c0:57:be:a9: b5:c6:dd:f5:62:ca:ba:25:88:e2:c9:82:e8:f4:0f: 23:69:52:5c:cc:0f:6a:05:a0:31:01:7b:89:a4:25: a5:0a:73:a1:c0:22:9a:56:e2:bf:43:b9:1a:be:13: df:81:96:7d:8a:34:48:80:93:2a:15:d7:cc:5e:77: eb:70:90:f6:72:c3:a4:2a:20:7a:43:a1:f0:65:82: 53:63:b9:de:96:58:3e:86:6c:a6:fd:22:28:23:0a: e2:ff:11:c2:5f:8c:23:f0:c1:51:31:31:1c:d3:30: ca:9f:dd:79:0e:a7:f3:09:24:7d:69:5d:f6:41:cf: f9:f8:14:c1:21:05:0f:fb:9e:a8:40:ca:06:a4:6e: 03:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7E:9E:B8:CF:1D:77:4F:F8:4E:5B:A7:79:B7:0A:4C:B2:9A:77:CA:E5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/7E9EB8CF1D774FF84E5BA779B70A4CB29A77CAE5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.227.24.0/23 Signature Algorithm: sha256WithRSAEncryption 73:1d:fb:8d:94:6b:c1:3b:19:f7:41:a9:ab:63:90:50:3e:2e: 91:1d:d9:3c:e9:f7:40:d9:51:7e:76:e3:7e:3d:5a:20:3c:af: 4f:b9:7a:7c:20:68:e2:3e:8f:cd:69:90:13:f0:36:54:33:15: 72:28:a0:9d:ec:3d:e6:67:08:31:86:a3:c1:0c:96:b4:3f:89: f4:41:b8:f4:b6:28:f8:0d:fd:c8:a1:7a:05:ad:dd:80:82:11: 81:91:54:25:a0:38:97:f2:f9:16:b9:b9:e9:c4:54:22:66:9d: db:35:dc:a4:bb:a1:a2:5c:4e:14:4c:cf:49:a2:fe:fc:91:34: 93:64:74:c6:5b:f2:1b:a9:e5:41:95:13:79:4c:18:8b:4c:8e: 8b:c7:cc:95:d3:6e:6d:ee:7f:51:0e:68:e8:bc:5d:16:04:a0: f1:28:da:26:34:37:57:74:e0:89:ef:98:b9:01:8c:cd:0f:16: fe:65:13:03:1d:62:d6:53:dc:26:e7:75:dc:33:82:4f:99:79: 1b:f9:93:2b:cf:66:5f:8f:ab:d5:7f:0a:49:33:7a:5f:89:b8: d0:a7:8a:05:16:20:55:3f:77:b8:5b:70:ab:5e:38:4e:36:21: c0:d8:59:4e:da:b1:7c:da:61:f2:fd:71:66:16:de:d7:2a:fd: ce:3a:46:ea -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUTp5xtWbo7NCdM144nHEZNOgsdEMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDkzNFoX DTI3MDUwMjAwNTQzNFowMzExMC8GA1UEAxMoN0U5RUI4Q0YxRDc3NEZGODRFNUJB Nzc5QjcwQTRDQjI5QTc3Q0FFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANX7Ip/5a5a3AO3B7kqXTw3q5iMv0YepxpSiEPzzeQz22rrehq4bmQPs/TMK +6V1MiGWgq9eDFSp8t3+iO09zRPJnqs38u0wpLWsHUWyur3fsLD+3pQbAmIdjEeH ylDrsgrmWihcgOiKkthw/RhOrRwXqVvAV76ptcbd9WLKuiWI4smC6PQPI2lSXMwP agWgMQF7iaQlpQpzocAimlbiv0O5Gr4T34GWfYo0SICTKhXXzF5363CQ9nLDpCog ekOh8GWCU2O53pZYPoZspv0iKCMK4v8Rwl+MI/DBUTExHNMwyp/deQ6n8wkkfWld 9kHP+fgUwSEFD/ueqEDKBqRuA9MCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH6euM8dd0/4TlunebcKTLKad8rlMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzY5NmU5NWMyLTQ4ODctNDdmYy04YmFjLTEwYmIxZGE5NzAwMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82OTZlOTVj Mi00ODg3LTQ3ZmMtOGJhYy0xMGJiMWRhOTcwMDMvMC83RTlFQjhDRjFENzc0RkY4 NEU1QkE3NzlCNzBBNENCMjlBNzdDQUU1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ+MYMA0GCSqGSIb3DQEBCwUAA4IBAQBzHfuNlGvBOxn3QamrY5BQPi6RHdk8 6fdA2VF+duN+PVogPK9PuXp8IGjiPo/NaZAT8DZUMxVyKKCd7D3mZwgxhqPBDJa0 P4n0Qbj0tij4Df3IoXoFrd2AghGBkVQloDiX8vkWubnpxFQiZp3bNdyku6GiXE4U TM9Jov78kTSTZHTGW/IbqeVBlRN5TBiLTI6Lx8yV025t7n9RDmjovF0WBKDxKNom NDdXdOCJ75i5AYzNDxb+ZRMDHWLWU9wm53XcM4JPmXkb+ZMrz2Zfj6vVfwpJM3pf ibjQp4oFFiBVP3e4W3CrXjhONiHA2FlO2rF82mHy/XFmFt7XKv3OOkbq -----END CERTIFICATE-----Generated at Tue May 12 22:02:48 2026 by rpki-client