$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer File: 7FAE1489FF53B0236543706FB85A70734890458C.cer (raw, json) Hash identifier: deZ3UK5mb0guEUFaMc/EgEVmSRJiQvR46MzhS/fl1mU= Subject key identifier: 7F:AE:14:89:FF:53:B0:23:65:43:70:6F:B8:5A:70:73:48:90:45:8C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 723E1807C0F270893A88419F9903C86FBD0CCA47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:51:27 +0000 Certificate not after: Sun 02 May 2027 00:56:27 +0000 Subordinate resources: IP: 103.109.204.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:3e:18:07:c0:f2:70:89:3a:88:41:9f:99:03:c8:6f:bd:0c:ca:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:51:27 2026 GMT Not After : May 2 00:56:27 2027 GMT Subject: CN=7FAE1489FF53B0236543706FB85A70734890458C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1c:a8:df:30:91:f0:5e:d7:f1:96:51:fd:58: 94:50:fc:f3:e0:93:e4:16:83:c7:7a:26:38:f8:0d: bb:f5:ac:7c:6d:44:e4:44:3f:be:7e:ec:9a:1e:24: ca:a7:ec:12:5c:c8:9a:73:46:75:a2:f9:0f:51:34: 0d:45:51:20:bb:79:74:7b:85:c0:6c:b5:5c:00:2a: 17:9e:03:c5:8a:b8:15:a6:e9:9b:09:54:79:5c:68: 2e:ad:15:58:8a:76:6f:17:72:f5:40:a0:66:ea:e1: 45:70:ae:71:aa:fa:21:8b:d1:87:07:5c:a3:ac:bd: bf:d0:03:b8:76:ad:14:91:4c:88:d1:f0:a0:fd:e0: 0e:95:65:c4:c8:47:89:35:8c:d5:0a:b4:83:02:ee: 1a:b2:16:86:a6:dc:9e:7f:16:13:0f:ea:1c:3f:e6: 18:1f:9c:6c:bf:64:12:ab:30:a6:6c:98:58:03:7a: cc:e8:b9:a8:3e:a5:b0:d3:ba:54:8e:3c:15:b5:d2: 45:5c:ec:21:c1:67:d3:76:39:eb:5c:8b:b3:8a:fb: a7:e6:c5:fe:c7:eb:e5:4e:d0:d9:dd:5f:7f:a6:00: 32:b2:a4:22:91:86:b8:bb:e4:e0:98:e7:b3:fc:05: ce:13:83:02:82:20:ac:20:b1:4a:83:48:0a:35:30: 52:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7F:AE:14:89:FF:53:B0:23:65:43:70:6F:B8:5A:70:73:48:90:45:8C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.109.204.0/23 Signature Algorithm: sha256WithRSAEncryption 14:96:5a:46:4c:5d:ca:65:d4:0b:a6:f6:6d:d0:ae:6e:fb:3e: f9:9c:58:41:a1:3c:57:36:46:5e:ff:d1:b8:b2:7c:51:bc:e4: b1:6a:98:d1:0b:75:d7:9c:4e:55:57:69:53:27:51:67:2f:a0: 7e:e9:f3:f1:c1:56:6d:26:c3:36:58:e2:98:0a:6c:1e:90:21: 2d:c1:6d:92:9f:c8:49:10:58:79:45:62:a3:78:9f:12:3b:e8: e5:b8:57:8e:ff:e8:86:54:6b:b7:21:63:ae:8c:bd:f3:e8:2c: 29:28:e8:27:5e:8c:40:6b:22:da:3a:c8:d0:a4:d9:67:6a:16: 4b:13:cc:ca:24:a1:aa:b8:c8:94:f1:c8:80:47:3f:84:08:4e: f8:39:5d:9b:d0:ee:cd:3d:b1:dd:3d:09:ac:c1:46:6b:f4:91: b8:da:d7:44:ba:e9:7a:69:a9:06:c0:5b:a8:e1:86:ca:e6:a2: 02:76:54:27:7d:f8:13:5b:eb:5d:a8:e9:5d:36:08:a2:10:e2: ec:8b:3f:ae:2f:b9:58:b5:df:e7:7a:a2:46:e2:42:d2:2b:6a: 38:93:ef:b5:bb:4b:aa:62:ca:60:86:f8:87:6c:c3:be:74:61: 5e:19:ca:73:db:7c:84:41:47:13:47:5c:6e:01:d7:70:2f:5e: fa:2d:35:9d -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUcj4YB8DycIk6iEGfmQPIb70MykcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTEyN1oX DTI3MDUwMjAwNTYyN1owMzExMC8GA1UEAxMoN0ZBRTE0ODlGRjUzQjAyMzY1NDM3 MDZGQjg1QTcwNzM0ODkwNDU4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMocqN8wkfBe1/GWUf1YlFD88+CT5BaDx3omOPgNu/WsfG1E5EQ/vn7smh4k yqfsElzImnNGdaL5D1E0DUVRILt5dHuFwGy1XAAqF54DxYq4FabpmwlUeVxoLq0V WIp2bxdy9UCgZurhRXCucar6IYvRhwdco6y9v9ADuHatFJFMiNHwoP3gDpVlxMhH iTWM1Qq0gwLuGrIWhqbcnn8WEw/qHD/mGB+cbL9kEqswpmyYWAN6zOi5qD6lsNO6 VI48FbXSRVzsIcFn03Y561yLs4r7p+bF/sfr5U7Q2d1ff6YAMrKkIpGGuLvk4Jjn s/wFzhODAoIgrCCxSoNICjUwUocCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH+uFIn/U7AjZUNwb7hacHNIkEWMMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZjNGUxNjY5LTY4ZjctNGEzOS1hY2MwLTU3YzcxODdiNmNiNy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82YzRlMTY2 OS02OGY3LTRhMzktYWNjMC01N2M3MTg3YjZjYjcvMC83RkFFMTQ4OUZGNTNCMDIz NjU0MzcwNkZCODVBNzA3MzQ4OTA0NThDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ23MMA0GCSqGSIb3DQEBCwUAA4IBAQAUllpGTF3KZdQLpvZt0K5u+z75nFhB oTxXNkZe/9G4snxRvOSxapjRC3XXnE5VV2lTJ1FnL6B+6fPxwVZtJsM2WOKYCmwe kCEtwW2Sn8hJEFh5RWKjeJ8SO+jluFeO/+iGVGu3IWOujL3z6CwpKOgnXoxAayLa OsjQpNlnahZLE8zKJKGquMiU8ciARz+ECE74OV2b0O7NPbHdPQmswUZr9JG42tdE uul6aakGwFuo4YbK5qICdlQnffgTW+tdqOldNgiiEOLsiz+uL7lYtd/neqJG4kLS K2o4k++1u0uqYspghviHbMO+dGFeGcpz23yEQUcTR1xuAddwL176LTWd -----END CERTIFICATE-----Generated at Tue May 12 22:32:24 2026 by rpki-client