$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7F6A7DA96EFF248F18836BABFDA129185606504D.cer File: 7F6A7DA96EFF248F18836BABFDA129185606504D.cer (raw, json) Hash identifier: ZqDDIMI840Yj0uYVNpBB4agporyOrpQHUALjFBCpfgg= Subject key identifier: 7F:6A:7D:A9:6E:FF:24:8F:18:83:6B:AB:FD:A1:29:18:56:06:50:4D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0773D1E48482DF2F811E55398DC82526F95598DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/7F6A7DA96EFF248F18836BABFDA129185606504D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:21:08 +0000 Certificate not after: Sun 02 May 2027 01:26:08 +0000 Subordinate resources: IP: 103.177.255.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:73:d1:e4:84:82:df:2f:81:1e:55:39:8d:c8:25:26:f9:55:98:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:21:08 2026 GMT Not After : May 2 01:26:08 2027 GMT Subject: CN=7F6A7DA96EFF248F18836BABFDA129185606504D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:da:6f:6a:e1:20:c9:88:32:e8:8b:c5:42:ae: 84:59:71:f7:e1:aa:22:27:9e:72:ce:87:36:53:83: 2e:38:90:5b:6c:eb:c9:82:de:d0:45:17:ab:07:c7: cd:0f:8c:f6:72:04:f6:43:6d:0d:a3:40:7b:db:c0: cc:58:21:ba:8f:b3:01:40:f1:3e:8e:7b:5c:a6:ed: b7:96:8e:ba:dd:90:4a:8f:19:4b:4a:92:f6:a8:b1: 62:98:ea:48:cf:db:ff:ab:81:e3:9c:24:d1:38:1f: 6d:e9:41:b8:ac:d5:0e:bd:c3:54:50:b7:90:70:6a: a1:f2:bd:07:d1:ee:b7:31:cd:80:36:1a:66:13:d3: 09:d8:2a:7e:23:6c:6d:6e:99:58:08:3d:dd:15:11: a3:4f:57:39:7a:49:cd:35:2f:3c:96:39:33:67:98: 7a:32:d2:ec:7a:35:51:bc:35:02:b4:97:c9:ed:c3: 77:25:c6:c4:61:72:a0:24:5b:a4:4a:26:5f:8b:fd: e6:49:ec:39:09:85:71:28:41:ea:ad:9d:1a:39:f5: 3e:69:bd:8c:34:41:bb:52:d5:eb:c6:85:6d:5a:a9: 0f:bf:5a:ff:8d:2c:79:45:a9:21:1f:bc:41:6b:cf: 00:06:a9:79:3c:fb:4d:44:bd:a5:36:47:db:55:fd: 69:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7F:6A:7D:A9:6E:FF:24:8F:18:83:6B:AB:FD:A1:29:18:56:06:50:4D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/7F6A7DA96EFF248F18836BABFDA129185606504D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.255.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:a1:ef:45:de:52:ab:f8:06:9a:e0:90:b9:71:47:d0:ed:f3: 92:7f:ec:98:3f:4a:62:eb:6a:83:24:67:d1:54:52:31:61:7c: 31:b2:90:03:2b:e8:9a:57:a3:f5:af:dd:e2:93:e9:61:51:4b: 93:b4:d5:73:51:0a:f3:16:d2:31:5c:16:60:57:c3:b4:db:9a: bc:33:74:49:21:2a:d8:db:19:09:11:1b:9e:02:3c:8e:91:c4: 9b:5d:45:24:ac:fc:f2:d3:45:77:51:94:4c:9a:0a:ee:05:e0: d1:46:8c:84:d6:07:f2:97:95:33:f5:b8:8c:37:21:85:9f:f0: 9f:36:15:11:1b:c5:e8:d5:9a:57:9c:47:a4:40:5b:ee:35:0e: bd:82:2e:60:7c:f5:1c:b1:65:a2:a3:bf:ec:d9:c8:25:86:f7: ca:12:f9:63:38:79:f4:1e:29:39:72:67:fd:55:30:2a:a7:aa: 38:80:a9:31:84:ea:dc:07:a6:6d:c9:9b:1f:f2:31:5e:6b:8e: 0d:8f:28:e2:40:11:a1:f2:cf:37:4b:c7:8f:91:7c:24:e5:bc: 3c:69:d9:e0:a4:16:6b:7a:51:6a:67:35:e8:ba:ac:49:17:3d: e7:a2:86:ff:1d:21:4d:0b:a4:73:18:00:b3:11:3b:8c:18:fa: c2:2d:0d:75 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUB3PR5ISC3y+BHlU5jcglJvlVmNowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjEwOFoX DTI3MDUwMjAxMjYwOFowMzExMC8GA1UEAxMoN0Y2QTdEQTk2RUZGMjQ4RjE4ODM2 QkFCRkRBMTI5MTg1NjA2NTA0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJLab2rhIMmIMuiLxUKuhFlx9+GqIieecs6HNlODLjiQW2zryYLe0EUXqwfH zQ+M9nIE9kNtDaNAe9vAzFghuo+zAUDxPo57XKbtt5aOut2QSo8ZS0qS9qixYpjq SM/b/6uB45wk0TgfbelBuKzVDr3DVFC3kHBqofK9B9HutzHNgDYaZhPTCdgqfiNs bW6ZWAg93RURo09XOXpJzTUvPJY5M2eYejLS7Ho1Ubw1ArSXye3DdyXGxGFyoCRb pEomX4v95knsOQmFcShB6q2dGjn1Pmm9jDRBu1LV68aFbVqpD79a/40seUWpIR+8 QWvPAAapeTz7TUS9pTZH21X9afcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH9qfalu/ySPGINrq/2hKRhWBlBNMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzk4MDM1YjEyLTZjYTMtNGZkMi1iOWIzLTI2MGQ1NzNlNTdjMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85ODAzNWIx Mi02Y2EzLTRmZDItYjliMy0yNjBkNTczZTU3YzIvMC83RjZBN0RBOTZFRkYyNDhG MTg4MzZCQUJGREExMjkxODU2MDY1MDRELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ7H/MA0GCSqGSIb3DQEBCwUAA4IBAQANoe9F3lKr+Aaa4JC5cUfQ7fOSf+yY P0pi62qDJGfRVFIxYXwxspADK+iaV6P1r93ik+lhUUuTtNVzUQrzFtIxXBZgV8O0 25q8M3RJISrY2xkJERueAjyOkcSbXUUkrPzy00V3UZRMmgruBeDRRoyE1gfyl5Uz 9biMNyGFn/CfNhURG8Xo1ZpXnEekQFvuNQ69gi5gfPUcsWWio7/s2cglhvfKEvlj OHn0Hik5cmf9VTAqp6o4gKkxhOrcB6ZtyZsf8jFea44NjyjiQBGh8s83S8ePkXwk 5bw8adngpBZrelFqZzXouqxJFz3noob/HSFNC6RzGACzETuMGPrCLQ11 -----END CERTIFICATE-----Generated at Tue May 12 22:39:18 2026 by rpki-client