$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7F0FE51D58ADF1A51A432DCB48A0CA70C5D30377.cer File: 7F0FE51D58ADF1A51A432DCB48A0CA70C5D30377.cer (raw, json) Hash identifier: p+q4eJPSM2FKtv4gto1Sw12lc1CAQYLfknW1W/eQrSA= Subject key identifier: 7F:0F:E5:1D:58:AD:F1:A5:1A:43:2D:CB:48:A0:CA:70:C5:D3:03:77 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 780F5D09B105BD13BDCFF564541384D3F74644D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/7F0FE51D58ADF1A51A432DCB48A0CA70C5D30377.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:51:01 +0000 Certificate not after: Sat 01 May 2027 23:56:01 +0000 Subordinate resources: IP: 103.154.170.0/23 IP: 2001:df4:9280::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:0f:5d:09:b1:05:bd:13:bd:cf:f5:64:54:13:84:d3:f7:46:44:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:51:01 2026 GMT Not After : May 1 23:56:01 2027 GMT Subject: CN=7F0FE51D58ADF1A51A432DCB48A0CA70C5D30377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c6:27:a4:48:88:a1:42:5d:c4:a1:4d:5e:01: bb:a7:d7:75:cc:4d:99:19:12:41:ff:0d:b8:dc:54: 52:62:72:5f:3f:ce:11:a7:4f:d6:2f:41:25:02:61: d2:58:69:d4:94:fd:b9:35:0f:47:0f:81:c3:63:c8: 60:60:6c:b8:5d:de:dc:ca:9b:ab:b0:40:53:51:35: 78:4c:d2:78:87:6b:13:d9:5e:72:0c:a2:f3:cf:91: 56:d5:09:f2:f6:05:33:e8:5f:ec:73:9d:7f:2a:34: cf:d2:e2:c8:9f:dc:b8:dd:4c:2d:fe:be:70:a1:69: 4b:b6:92:42:3b:a9:f0:43:bb:a3:78:c6:87:ce:5a: 15:af:a6:f3:15:2e:44:b6:ba:2b:9a:4f:7d:ee:fc: cb:1a:11:ce:a4:37:7a:ba:c6:9c:a9:25:f1:7a:c9: 34:30:cc:a3:d5:4f:5f:40:f3:f9:a7:57:fe:5b:26: 7b:31:9d:ae:5b:2e:26:66:1d:fa:80:5f:80:dd:29: 26:d6:5f:a2:d2:f9:a7:c0:3f:40:a4:bd:e7:ce:52: 3b:cc:68:ea:99:f8:ed:29:92:7b:1c:79:21:fa:ec: d8:0a:ad:cb:bb:02:c6:59:5b:50:28:d7:07:ef:2f: 05:45:a6:f4:76:5a:8f:aa:b3:86:0b:24:f4:3d:c9: 9e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7F:0F:E5:1D:58:AD:F1:A5:1A:43:2D:CB:48:A0:CA:70:C5:D3:03:77 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/7F0FE51D58ADF1A51A432DCB48A0CA70C5D30377.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.154.170.0/23 IPv6: 2001:df4:9280::/48 Signature Algorithm: sha256WithRSAEncryption 50:d9:32:73:43:69:33:69:96:08:63:be:e5:c6:6b:c9:93:41: 20:48:c2:b2:69:2a:94:7d:cc:09:f5:a0:de:27:94:e7:f6:2f: 3c:32:07:d7:2c:2d:78:2f:7d:2b:4a:e8:e1:cd:6e:07:97:61: 30:57:34:de:28:43:7f:1b:3c:5c:bc:b3:e8:d0:62:70:ab:80: 1b:d3:a8:fb:6a:da:a0:2b:a0:c6:a8:84:23:6b:57:aa:eb:50: af:af:14:1a:55:f6:1c:b7:ec:a9:e2:15:dc:07:7c:a4:58:24: 15:78:97:e9:3e:d7:1f:8a:dd:13:1c:3a:5d:5a:2d:12:bc:77: 45:28:08:83:8e:ad:4e:ca:a8:5e:e8:b4:4c:07:5b:ba:47:83: a5:9b:ec:11:bf:6a:6a:86:f0:6c:23:11:57:e5:bf:82:e1:ea: d3:ff:b0:99:79:21:b8:50:09:ff:f8:cd:94:0b:57:e0:d7:38: 8e:2f:8c:7c:1f:98:40:f8:ec:e0:26:92:cd:e6:21:d6:2a:d5: 49:10:43:48:96:8f:d0:4c:4b:92:ea:a6:e0:8e:7f:e6:1c:f4: bf:2e:4f:1e:6e:67:92:b6:73:2a:aa:f1:37:2c:41:be:72:0c: 0d:d3:9c:8a:b6:d6:32:b3:a5:62:ba:cb:18:75:23:db:2f:30: 3b:35:d9:ca -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUeA9dCbEFvRO9z/VkVBOE0/dGRNcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTEwMVoX DTI3MDUwMTIzNTYwMVowMzExMC8GA1UEAxMoN0YwRkU1MUQ1OEFERjFBNTFBNDMy RENCNDhBMENBNzBDNUQzMDM3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN7GJ6RIiKFCXcShTV4Bu6fXdcxNmRkSQf8NuNxUUmJyXz/OEadP1i9BJQJh 0lhp1JT9uTUPRw+Bw2PIYGBsuF3e3Mqbq7BAU1E1eEzSeIdrE9lecgyi88+RVtUJ 8vYFM+hf7HOdfyo0z9LiyJ/cuN1MLf6+cKFpS7aSQjup8EO7o3jGh85aFa+m8xUu RLa6K5pPfe78yxoRzqQ3errGnKkl8XrJNDDMo9VPX0Dz+adX/lsmezGdrlsuJmYd +oBfgN0pJtZfotL5p8A/QKS9585SO8xo6pn47SmSexx5Ifrs2Aqty7sCxllbUCjX B+8vBUWm9HZaj6qzhgsk9D3JnmECAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH8P5R1YrfGlGkMty0igynDF0wN3MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzEyNTFkNmNmLWM3YjEtNDY4Ny05MjAzLWQxNjFjYzQwYjZhMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xMjUxZDZj Zi1jN2IxLTQ2ODctOTIwMy1kMTYxY2M0MGI2YTIvMC83RjBGRTUxRDU4QURGMUE1 MUE0MzJEQ0I0OEEwQ0E3MEM1RDMwMzc3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ5qqMA8EAgACMAkDBwAgAQ30koAwDQYJKoZIhvcNAQELBQADggEBAFDZMnND aTNplghjvuXGa8mTQSBIwrJpKpR9zAn1oN4nlOf2LzwyB9csLXgvfStK6OHNbgeX YTBXNN4oQ38bPFy8s+jQYnCrgBvTqPtq2qAroMaohCNrV6rrUK+vFBpV9hy37Kni FdwHfKRYJBV4l+k+1x+K3RMcOl1aLRK8d0UoCIOOrU7KqF7otEwHW7pHg6Wb7BG/ amqG8GwjEVflv4Lh6tP/sJl5IbhQCf/4zZQLV+DXOI4vjHwfmED47OAmks3mIdYq 1UkQQ0iWj9BMS5LqpuCOf+Yc9L8uTx5uZ5K2cyqq8TcsQb5yDA3TnIq21jKzpWK6 yxh1I9svMDs12co= -----END CERTIFICATE-----Generated at Tue May 12 22:33:23 2026 by rpki-client