$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer File: 7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.cer (raw, json) Hash identifier: qViQu9II0oYgfvAmzXUTofGCHP8lE2IeY71oM1HleN4= Subject key identifier: 7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 40483F3F14A9D87F9CB035B57D45436B10EC8CCE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft caRepository: rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:04:38 +0000 Certificate not after: Sun 02 May 2027 02:09:38 +0000 Subordinate resources: IP: 103.160.18.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:48:3f:3f:14:a9:d8:7f:9c:b0:35:b5:7d:45:43:6b:10:ec:8c:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:04:38 2026 GMT Not After : May 2 02:09:38 2027 GMT Subject: CN=7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c4:c4:5b:c5:8c:f1:ee:bc:c1:42:4e:b0:9d: f5:e5:df:b6:e4:98:1b:9c:8b:b0:d0:48:05:e6:4b: 0f:bd:d1:e2:24:5a:44:f7:56:d2:b9:de:4a:04:4d: ef:0c:a5:3b:38:e0:8b:2c:fe:a0:86:97:0c:68:4c: 40:ef:cf:c2:45:1a:e2:83:be:fc:5a:43:f9:20:20: a4:d8:f0:7d:18:60:18:19:50:2f:e4:72:af:5d:fb: 21:cd:07:95:52:99:19:21:5d:67:a2:5a:f6:fb:6b: 18:f1:9e:dd:a2:cc:a3:78:89:31:73:fb:00:1b:b9: 9d:f4:30:22:d2:99:cf:bd:74:e9:b0:ab:13:4f:fc: 07:48:1e:54:e7:97:a1:98:d0:e5:66:c1:1f:60:7a: 78:07:76:f7:1e:be:3c:af:c5:3b:45:a1:2b:3b:f2: cc:2e:84:a2:71:e0:5e:5c:51:46:b3:e2:7d:06:80: 6b:8c:9e:aa:21:8b:b6:8a:5e:ff:40:17:4f:39:7e: a5:d1:0f:6e:f3:e8:94:85:f1:e0:2c:b1:f2:f9:51: 94:02:09:43:93:d8:07:51:6b:0e:9f:da:08:45:6c: a6:e6:60:d6:35:f7:66:ac:69:b3:95:23:8f:23:9d: 42:a3:44:e5:9d:d3:e4:d5:d2:b1:b9:fa:93:ba:65: 3c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7E:C1:1C:2C:4A:EF:AB:94:AB:87:00:68:86:A4:AD:25:79:F0:CB:20 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/7EC11C2C4AEFAB94AB87006886A4AD2579F0CB20.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.18.0/23 Signature Algorithm: sha256WithRSAEncryption 63:7e:51:10:0f:5a:0e:54:c8:84:ce:dd:a1:d4:4b:90:55:b3: 9b:a3:2d:76:8d:ce:2c:c2:12:81:66:21:d0:19:3a:13:65:1d: 49:68:b6:39:4c:d8:ed:fc:65:75:72:f6:4f:cf:a4:7a:35:25: 0a:df:e1:54:bd:90:55:8b:cf:65:dc:79:d9:3f:b8:a1:79:d9: 03:18:4b:c5:dc:8b:bb:90:cb:4a:38:97:46:c2:ce:9d:49:46: c2:05:9c:7f:9d:6f:7a:85:9f:bd:cd:86:15:2e:c8:dd:d6:c9: ac:8c:37:a9:e4:60:ee:06:01:9c:39:a3:9d:2f:ca:22:cb:bf: 97:27:46:ef:6c:60:ad:eb:61:37:5e:a9:eb:4a:49:68:26:a4: bf:d9:1e:11:f7:07:8a:16:90:b6:24:b1:4e:72:34:16:18:e4: e6:ed:c6:57:e3:fb:91:5e:6a:67:56:b2:bc:b9:7f:9d:44:ca: 8f:c5:1f:90:37:0c:1e:1f:80:44:e0:66:3c:ec:34:06:5f:3e: 01:47:e7:52:2b:83:7c:8f:5a:37:5f:9a:62:15:bc:33:fb:ca: 38:ce:f6:60:ad:5f:98:c0:85:5f:4e:ba:43:95:2b:3e:bd:03: ec:df:b9:0f:95:a1:83:01:df:54:35:6d:47:fb:b5:ac:60:15: 64:71:95:73 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUQEg/PxSp2H+csDW1fUVDaxDsjM4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDQzOFoX DTI3MDUwMjAyMDkzOFowMzExMC8GA1UEAxMoN0VDMTFDMkM0QUVGQUI5NEFCODcw MDY4ODZBNEFEMjU3OUYwQ0IyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALTExFvFjPHuvMFCTrCd9eXftuSYG5yLsNBIBeZLD73R4iRaRPdW0rneSgRN 7wylOzjgiyz+oIaXDGhMQO/PwkUa4oO+/FpD+SAgpNjwfRhgGBlQL+Ryr137Ic0H lVKZGSFdZ6Ja9vtrGPGe3aLMo3iJMXP7ABu5nfQwItKZz7106bCrE0/8B0geVOeX oZjQ5WbBH2B6eAd29x6+PK/FO0WhKzvyzC6EonHgXlxRRrPifQaAa4yeqiGLtope /0AXTzl+pdEPbvPolIXx4Cyx8vlRlAIJQ5PYB1FrDp/aCEVspuZg1jX3Zqxps5Uj jyOdQqNE5Z3T5NXSsbn6k7plPP0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH7BHCxK76uUq4cAaIakrSV58MsgMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2RkNzQzYzdjLTA3ZTYtNDYxMS1iNDAzLWQ4YzVmMDEyNGE3OC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kZDc0M2M3 Yy0wN2U2LTQ2MTEtYjQwMy1kOGM1ZjAxMjRhNzgvMC83RUMxMUMyQzRBRUZBQjk0 QUI4NzAwNjg4NkE0QUQyNTc5RjBDQjIwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6ASMA0GCSqGSIb3DQEBCwUAA4IBAQBjflEQD1oOVMiEzt2h1EuQVbOboy12 jc4swhKBZiHQGToTZR1JaLY5TNjt/GV1cvZPz6R6NSUK3+FUvZBVi89l3HnZP7ih edkDGEvF3Iu7kMtKOJdGws6dSUbCBZx/nW96hZ+9zYYVLsjd1smsjDep5GDuBgGc OaOdL8oiy7+XJ0bvbGCt62E3XqnrSkloJqS/2R4R9weKFpC2JLFOcjQWGOTm7cZX 4/uRXmpnVrK8uX+dRMqPxR+QNwweH4BE4GY87DQGXz4BR+dSK4N8j1o3X5piFbwz +8o4zvZgrV+YwIVfTrpDlSs+vQPs37kPlaGDAd9UNW1H+7WsYBVkcZVz -----END CERTIFICATE-----Generated at Tue May 12 22:47:39 2026 by rpki-client