$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7FADEABD3029D45ECF3371F9E7F572A2F4ADED12.cer File: 7FADEABD3029D45ECF3371F9E7F572A2F4ADED12.cer (raw, json) Hash identifier: C4g/n4WSpuKoCJ/mDQXzBzZZakqljo2mE4ztmhSY8hE= Subject key identifier: 7F:AD:EA:BD:30:29:D4:5E:CF:33:71:F9:E7:F5:72:A2:F4:AD:ED:12 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0736ECE00E84F91A7C9F2AC88DD4C3AB03C7488A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/7FADEABD3029D45ECF3371F9E7F572A2F4ADED12.mft caRepository: rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:53:32 +0000 Certificate not after: Sat 01 May 2027 23:58:32 +0000 Subordinate resources: IP: 103.40.94.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:36:ec:e0:0e:84:f9:1a:7c:9f:2a:c8:8d:d4:c3:ab:03:c7:48:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:53:32 2026 GMT Not After : May 1 23:58:32 2027 GMT Subject: CN=7FADEABD3029D45ECF3371F9E7F572A2F4ADED12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:11:51:a4:8e:1c:b7:d4:54:60:92:f8:ba:bb: ec:c3:b7:93:e4:78:98:ad:2e:3f:3b:d7:f1:f8:98: a8:98:7c:e5:82:12:6c:4d:f6:72:2e:6c:a6:60:50: 16:f5:da:bd:12:4c:db:c6:18:f4:ba:29:38:c3:69: 27:fb:17:22:fd:f9:2b:0e:f0:26:9d:9f:94:ff:e8: b8:a3:94:b8:11:11:f1:ed:e1:61:bf:6d:a9:e7:f6: d1:c5:f6:18:7c:21:4b:87:71:f8:74:2d:be:ee:90: a8:69:f9:75:7e:70:2e:84:16:ec:1c:0a:0b:e2:be: 1b:91:16:34:8c:78:c0:d3:2e:03:c0:f7:cd:75:28: ff:b9:c9:22:7c:83:b3:7a:87:d6:9d:cf:c4:8b:be: 4f:47:d7:d5:c1:fb:58:31:93:9b:cf:5d:a6:7b:bd: 06:b8:40:5d:3e:d1:58:31:50:1e:c4:9a:37:1e:ff: 79:a8:f6:b4:ce:cd:95:51:ef:bd:79:cf:7d:b7:1c: 88:78:90:ed:2f:74:16:c1:b9:ef:21:3f:84:97:23: f9:6a:9e:26:5e:ea:92:26:5d:03:da:f7:ec:a2:e0: 19:66:c8:ea:70:37:ea:a9:86:bb:2d:35:d4:2f:8a: 94:81:58:31:c6:53:43:95:01:ed:20:3c:f0:bf:84: 49:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7F:AD:EA:BD:30:29:D4:5E:CF:33:71:F9:E7:F5:72:A2:F4:AD:ED:12 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/7FADEABD3029D45ECF3371F9E7F572A2F4ADED12.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.40.94.0/24 Signature Algorithm: sha256WithRSAEncryption 79:42:fd:64:09:d1:2b:8f:24:27:74:02:4a:40:e8:2c:b0:60: ce:96:48:2e:10:97:18:e1:91:2f:e2:f5:46:e4:55:56:4c:8d: c6:56:22:0e:da:5a:e6:1f:ff:66:1c:e7:ef:f1:aa:88:26:1d: 98:0d:71:26:e6:d7:81:29:d6:2e:1c:74:75:d0:02:e2:aa:29: be:d3:25:d6:85:2e:47:43:81:5f:97:38:2e:c1:5b:19:9e:14: 00:3f:c0:25:59:67:0f:1a:27:33:bd:37:e5:6f:e7:9a:9f:3b: c7:de:61:16:c0:62:f8:01:74:24:fc:a5:1e:9e:57:86:cd:ba: 59:b3:f7:03:f4:d9:be:b8:2f:82:3b:00:f1:bc:4d:84:ac:7d: 11:9c:71:ec:81:bf:5a:66:47:62:49:26:fe:9b:a0:2e:3e:18: 8f:fa:fa:f9:d9:a2:fe:6e:b1:27:17:34:73:2a:0d:5b:61:df: 0a:4c:9b:59:6a:31:82:e4:92:18:83:bf:ea:2c:87:80:84:af: b7:ef:61:8a:6f:5d:c7:4f:fb:d0:0c:e3:9a:a7:1f:8f:4e:ff: cf:df:c6:e4:3b:ee:83:c5:b4:cc:e2:46:ed:7f:c4:5b:94:2f: ab:ef:b3:da:79:60:17:f8:23:fb:f6:70:f7:76:97:24:c4:6b: 60:c3:07:ab -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUBzbs4A6E+Rp8nyrIjdTDqwPHSIowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTMzMloX DTI3MDUwMTIzNTgzMlowMzExMC8GA1UEAxMoN0ZBREVBQkQzMDI5RDQ1RUNGMzM3 MUY5RTdGNTcyQTJGNEFERUQxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIRUaSOHLfUVGCS+Lq77MO3k+R4mK0uPzvX8fiYqJh85YISbE32ci5spmBQ FvXavRJM28YY9LopOMNpJ/sXIv35Kw7wJp2flP/ouKOUuBER8e3hYb9tqef20cX2 GHwhS4dx+HQtvu6QqGn5dX5wLoQW7BwKC+K+G5EWNIx4wNMuA8D3zXUo/7nJInyD s3qH1p3PxIu+T0fX1cH7WDGTm89dpnu9BrhAXT7RWDFQHsSaNx7/eaj2tM7NlVHv vXnPfbcciHiQ7S90FsG57yE/hJcj+WqeJl7qkiZdA9r37KLgGWbI6nA36qmGuy01 1C+KlIFYMcZTQ5UB7SA88L+ESVUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH+t6r0wKdRezzNx+ef1cqL0re0SMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE1YmFlMzBjLWIzNjMtNDA3Yi1hMGFiLTMxNTRlYjMwOWFlOS8xLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xNWJhZTMw Yy1iMzYzLTQwN2ItYTBhYi0zMTU0ZWIzMDlhZTkvMS83RkFERUFCRDMwMjlENDVF Q0YzMzcxRjlFN0Y1NzJBMkY0QURFRDEyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZyheMA0GCSqGSIb3DQEBCwUAA4IBAQB5Qv1kCdErjyQndAJKQOgssGDOlkgu EJcY4ZEv4vVG5FVWTI3GViIO2lrmH/9mHOfv8aqIJh2YDXEm5teBKdYuHHR10ALi qim+0yXWhS5HQ4FflzguwVsZnhQAP8AlWWcPGiczvTflb+eanzvH3mEWwGL4AXQk /KUenleGzbpZs/cD9Nm+uC+COwDxvE2ErH0RnHHsgb9aZkdiSSb+m6AuPhiP+vr5 2aL+brEnFzRzKg1bYd8KTJtZajGC5JIYg7/qLIeAhK+372GKb13HT/vQDOOapx+P Tv/P38bkO+6DxbTM4kbtf8RblC+r77PaeWAX+CP79nD3dpckxGtgwwer -----END CERTIFICATE-----Generated at Tue May 12 22:10:45 2026 by rpki-client