$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.cer File: 7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.cer (raw, json) Hash identifier: IfgE6Nc6gj1gC8NRLzJMgy8bioYyUS8qZJyI6n5lVVQ= Subject key identifier: 7F:5A:37:E4:2E:0F:2B:7D:7D:44:5E:64:D5:8D:13:F9:D4:FF:FA:01 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4B7D09CF3825DD66A7C6DD2A36056FE43FB7A758 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:24:55 +0000 Certificate not after: Sun 02 May 2027 01:29:55 +0000 Subordinate resources: IP: 103.177.90.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:7d:09:cf:38:25:dd:66:a7:c6:dd:2a:36:05:6f:e4:3f:b7:a7:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:24:55 2026 GMT Not After : May 2 01:29:55 2027 GMT Subject: CN=7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e6:37:21:41:56:51:ed:19:9a:88:35:e1:41: 64:93:56:83:47:5f:75:91:34:7f:5b:a1:b9:ad:51: 99:c2:b5:ca:d1:44:4c:12:be:31:5d:b5:ff:2c:c7: 90:97:a4:6f:2f:b4:d4:e5:b0:05:ba:9f:63:d7:9e: bd:c9:f4:76:62:91:28:2c:8e:c9:7f:2b:9b:2c:bd: 07:11:bb:03:d2:40:71:21:35:ee:46:99:26:c9:f1: 59:f9:4b:09:4b:f3:ee:14:9e:4d:62:e4:a8:07:47: a7:32:cb:f2:ae:6d:2c:e0:8e:29:a7:ec:88:6b:37: 74:02:29:73:0a:39:f7:6a:a9:3e:86:eb:6c:58:63: 04:92:9b:20:90:04:75:db:f3:7f:3e:66:ed:d5:4b: 58:a8:28:da:16:2c:34:69:92:4e:56:fc:b3:fe:69: b3:47:18:ab:66:61:f9:35:c6:f4:ed:85:c5:87:00: 5f:84:67:f7:c2:be:46:6c:d5:c2:00:b0:ec:7b:bc: 2a:1e:9a:0d:6c:b6:28:f5:c5:34:94:90:a7:47:74: cd:1a:78:b2:6b:15:a3:79:b4:d9:f9:6b:6a:69:07: 4c:8f:bf:59:f6:46:bc:62:6d:5b:b2:50:db:d2:5c: 10:a1:b5:cd:e1:0a:88:53:4d:ba:5b:e0:c6:b4:ad: a9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7F:5A:37:E4:2E:0F:2B:7D:7D:44:5E:64:D5:8D:13:F9:D4:FF:FA:01 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.90.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:6d:85:79:1d:0f:06:a1:ba:65:be:34:4d:16:a6:d3:63:41: d1:02:c5:aa:02:ed:7e:38:24:7b:3f:a0:71:04:67:5e:e6:df: 68:af:8d:3e:0c:1c:6e:d6:82:31:7e:48:4f:07:af:1f:57:27: 71:93:b6:c3:6f:e8:5b:bb:93:d6:03:79:b4:13:4c:db:b3:21: 53:3f:c6:62:3c:b5:89:34:c2:ad:c4:d3:fd:91:23:86:be:6a: 69:fe:14:75:da:17:f2:c3:ad:f8:b4:2f:f3:30:2e:72:00:b0: 64:53:59:6b:31:10:04:c2:7b:98:7f:77:6f:3f:17:f6:db:ee: 26:a2:14:ca:c6:ce:a2:00:5c:3f:74:c8:e6:fe:5d:4c:6b:dd: 42:35:0f:d8:2d:0c:80:b6:19:ca:d0:13:17:45:55:b6:80:84: 34:6b:18:43:68:f2:f2:d1:0b:0f:3e:cf:12:03:eb:f4:41:a8: 48:66:2a:ce:7b:69:7d:60:32:ec:0a:ed:51:42:26:2e:1d:7b: 1b:2a:73:9a:25:80:5c:25:ca:ec:5a:24:91:03:f3:54:20:0d: c7:30:4e:83:b1:e5:2c:15:da:08:7a:db:2b:53:4f:f9:d3:06: 46:e4:16:92:53:1f:4b:ab:d1:10:3e:d3:c2:86:f8:1d:a6:8a: 8e:64:89:a7 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUS30Jzzgl3Wanxt0qNgVv5D+3p1gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjQ1NVoX DTI3MDUwMjAxMjk1NVowMzExMC8GA1UEAxMoN0Y1QTM3RTQyRTBGMkI3RDdENDQ1 RTY0RDU4RDEzRjlENEZGRkEwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ/mNyFBVlHtGZqINeFBZJNWg0dfdZE0f1uhua1RmcK1ytFETBK+MV21/yzH kJekby+01OWwBbqfY9eevcn0dmKRKCyOyX8rmyy9BxG7A9JAcSE17kaZJsnxWflL CUvz7hSeTWLkqAdHpzLL8q5tLOCOKafsiGs3dAIpcwo592qpPobrbFhjBJKbIJAE ddvzfz5m7dVLWKgo2hYsNGmSTlb8s/5ps0cYq2Zh+TXG9O2FxYcAX4Rn98K+RmzV wgCw7Hu8Kh6aDWy2KPXFNJSQp0d0zRp4smsVo3m02flramkHTI+/WfZGvGJtW7JQ 29JcEKG1zeEKiFNNulvgxrStqWcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH9aN+QuDyt9fUReZNWNE/nU//oBMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzljY2M1ZjY0LWVkNjItNDg0OC04YzM4LTQyZGY0OGUzNGJiNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85Y2NjNWY2 NC1lZDYyLTQ4NDgtOGMzOC00MmRmNDhlMzRiYjYvMC83RjVBMzdFNDJFMEYyQjdE N0Q0NDVFNjRENThEMTNGOUQ0RkZGQTAxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7FaMA0GCSqGSIb3DQEBCwUAA4IBAQB7bYV5HQ8GobplvjRNFqbTY0HRAsWq Au1+OCR7P6BxBGde5t9or40+DBxu1oIxfkhPB68fVydxk7bDb+hbu5PWA3m0E0zb syFTP8ZiPLWJNMKtxNP9kSOGvmpp/hR12hfyw634tC/zMC5yALBkU1lrMRAEwnuY f3dvPxf22+4mohTKxs6iAFw/dMjm/l1Ma91CNQ/YLQyAthnK0BMXRVW2gIQ0axhD aPLy0QsPPs8SA+v0QahIZirOe2l9YDLsCu1RQiYuHXsbKnOaJYBcJcrsWiSRA/NU IA3HME6DseUsFdoIetsrU0/50wZG5BaSUx9Lq9EQPtPChvgdpoqOZImn -----END CERTIFICATE-----Generated at Tue May 12 22:02:42 2026 by rpki-client