$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.cer File: 7F8E680B24CA92D069428185BABA1A9F5BC9938A.cer (raw, json) Hash identifier: OfkT8YZHQIkWHY3PhEArljFDaRddrcN11P5bcGlPijw= Subject key identifier: 7F:8E:68:0B:24:CA:92:D0:69:42:81:85:BA:BA:1A:9F:5B:C9:93:8A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1D7C9988D20CB4E8B4DD7FF4EBDEB9944C561917 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:34:57 +0000 Certificate not after: Sun 02 May 2027 02:39:57 +0000 Subordinate resources: IP: 2001:df3:8cc0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:7c:99:88:d2:0c:b4:e8:b4:dd:7f:f4:eb:de:b9:94:4c:56:19:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:34:57 2026 GMT Not After : May 2 02:39:57 2027 GMT Subject: CN=7F8E680B24CA92D069428185BABA1A9F5BC9938A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:87:71:02:74:77:a0:10:7b:c9:f7:81:16:0f: 6c:31:50:35:cb:d6:a5:a3:4b:59:83:36:de:fd:bc: b9:f4:be:79:46:61:36:6d:61:a1:3a:a0:13:8d:74: 45:72:0a:99:bd:ca:99:48:69:0e:19:cb:7f:b5:9c: 05:52:4b:46:2d:1d:2d:26:48:fa:d2:e6:0f:fc:2c: 1a:ed:4b:34:90:72:d8:ef:8b:4b:85:87:64:0a:ae: 23:6b:41:0e:3e:4a:af:97:a9:8d:9a:22:32:ab:db: cc:1e:de:0f:8c:44:0d:ef:32:f6:10:5e:fe:cf:c5: f7:0f:26:92:6b:af:1b:3f:cc:9c:82:53:2b:42:8a: c9:51:a7:28:32:da:5b:ca:f0:61:b4:77:e0:0d:4c: b9:0c:dd:25:72:f0:cb:77:4e:79:af:4b:45:d3:c4: 44:ec:6f:5d:18:6f:16:ff:9e:6a:c9:0e:72:4c:eb: bb:ae:b6:af:da:00:c9:ee:fc:89:f3:d5:1c:df:0f: 9d:96:fe:12:54:44:38:54:25:8f:c4:ac:f5:7b:1a: 0b:1e:33:7d:86:c7:87:0b:9a:cd:32:8a:00:c0:65: e0:2e:36:0e:2c:a9:55:07:26:e2:f5:83:d9:51:35: 28:d1:b6:54:27:8f:f0:75:a1:83:1b:b6:1a:1d:9a: 09:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7F:8E:68:0B:24:CA:92:D0:69:42:81:85:BA:BA:1A:9F:5B:C9:93:8A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/7F8E680B24CA92D069428185BABA1A9F5BC9938A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:8cc0::/48 Signature Algorithm: sha256WithRSAEncryption 5c:e6:a5:77:4f:72:ad:eb:b8:3e:ba:3e:2c:ae:b5:fe:c4:cf: 4c:cd:14:96:24:c0:2f:22:95:63:a7:4f:fe:bf:e4:eb:7e:68: a3:53:89:1e:dc:85:91:52:d0:92:d0:40:7a:89:98:dc:00:4e: 19:a7:df:e1:29:c4:98:7a:25:c4:50:22:f4:13:68:e5:c2:3d: b7:2e:45:71:6a:03:e3:3c:53:3d:bd:26:b4:fa:09:b7:87:65: ff:89:5d:95:e7:20:dd:ad:13:7c:ca:8c:9a:a9:4a:5c:57:df: 1e:c3:44:8f:71:29:30:4e:70:b8:9d:18:fb:f5:cb:35:89:0e: 77:0d:99:e8:aa:c5:d2:6d:fb:aa:ce:71:64:f3:fd:44:c7:9d: d9:00:04:2d:d7:60:8d:7f:78:af:63:40:e8:60:6d:8e:9f:29: d6:df:fc:be:6c:18:7b:5e:7b:7c:8b:7f:a6:c9:92:ff:1e:55: d0:1f:57:12:ee:36:40:c8:c1:c4:1e:a4:c7:4f:f5:0a:87:92: ea:ff:21:04:26:d6:e6:29:55:08:87:ba:48:bd:89:2e:2b:ab: 2f:03:c2:00:ab:72:b8:d7:d9:12:c5:4f:e9:8a:7e:bb:89:21: 8d:9b:f4:d6:4e:b0:09:ef:44:45:b7:e8:34:6a:4b:e8:be:54: 7c:19:99:6d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHXyZiNIMtOi03X/06965lExWGRcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzQ1N1oX DTI3MDUwMjAyMzk1N1owMzExMC8GA1UEAxMoN0Y4RTY4MEIyNENBOTJEMDY5NDI4 MTg1QkFCQTFBOUY1QkM5OTM4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKmHcQJ0d6AQe8n3gRYPbDFQNcvWpaNLWYM23v28ufS+eUZhNm1hoTqgE410 RXIKmb3KmUhpDhnLf7WcBVJLRi0dLSZI+tLmD/wsGu1LNJBy2O+LS4WHZAquI2tB Dj5Kr5epjZoiMqvbzB7eD4xEDe8y9hBe/s/F9w8mkmuvGz/MnIJTK0KKyVGnKDLa W8rwYbR34A1MuQzdJXLwy3dOea9LRdPEROxvXRhvFv+easkOckzru662r9oAye78 ifPVHN8PnZb+ElREOFQlj8Ss9XsaCx4zfYbHhwuazTKKAMBl4C42DiypVQcm4vWD 2VE1KNG2VCeP8HWhgxu2Gh2aCQsCAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH+OaAskypLQaUKBhbq6Gp9byZOKMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2YzYjQ3YWI2LWQxZjEtNGQyZS05Y2ZjLTgwODRhNGJhY2YwYi8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mM2I0N2Fi Ni1kMWYxLTRkMmUtOWNmYy04MDg0YTRiYWNmMGIvMS83RjhFNjgwQjI0Q0E5MkQw Njk0MjgxODVCQUJBMUE5RjVCQzk5MzhBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAIAEN84zAMA0GCSqGSIb3DQEBCwUAA4IBAQBc5qV3T3Kt67g+uj4srrX+xM9M zRSWJMAvIpVjp0/+v+TrfmijU4ke3IWRUtCS0EB6iZjcAE4Zp9/hKcSYeiXEUCL0 E2jlwj23LkVxagPjPFM9vSa0+gm3h2X/iV2V5yDdrRN8yoyaqUpcV98ew0SPcSkw TnC4nRj79cs1iQ53DZnoqsXSbfuqznFk8/1Ex53ZAAQt12CNf3ivY0DoYG2OnynW 3/y+bBh7Xnt8i3+myZL/HlXQH1cS7jZAyMHEHqTHT/UKh5Lq/yEEJtbmKVUIh7pI vYkuK6svA8IAq3K419kSxU/pin67iSGNm/TWTrAJ70RFt+g0akvovlR8GZlt -----END CERTIFICATE-----Generated at Tue May 12 22:03:21 2026 by rpki-client