$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.cer File: 7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.cer (raw, json) Hash identifier: EEa70nAjGxbSGB0y2voSbvAozusL16tnGa2aA0pP4N0= Subject key identifier: 7F:D6:28:99:F2:DD:1D:AD:3F:6A:35:57:A8:03:61:8D:ED:44:F5:AD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6E0920D81C010CE3B2F4DC8816A595ED203517C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:42:46 +0000 Certificate not after: Sat 01 May 2027 23:47:46 +0000 Subordinate resources: IP: 103.187.88.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:09:20:d8:1c:01:0c:e3:b2:f4:dc:88:16:a5:95:ed:20:35:17:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:42:46 2026 GMT Not After : May 1 23:47:46 2027 GMT Subject: CN=7FD62899F2DD1DAD3F6A3557A803618DED44F5AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1e:8c:ac:aa:42:4a:b8:0d:71:e6:6f:a3:87: 40:e3:92:7d:91:c3:4a:7e:4d:3d:65:75:07:a4:39: 01:96:8c:06:62:c2:cd:01:9c:12:89:13:42:57:ac: 1e:5d:af:06:7f:98:73:dd:fd:6a:b0:b8:f0:c4:f0: eb:16:2e:fb:d2:db:a1:0d:8c:38:11:06:2c:af:6f: e2:b3:17:52:fe:24:7b:9c:d6:3e:79:bd:35:78:8f: 91:ed:a2:fb:8f:aa:80:d3:c3:e3:30:3f:54:4a:2b: 7c:41:69:22:07:14:fe:bf:5b:f9:37:d3:c0:61:59: d6:07:e4:ab:2e:0d:72:30:e2:ed:59:d0:4a:dd:c3: e2:f5:b5:fa:0e:b6:4f:0d:0f:93:e1:24:39:55:04: f6:d4:0a:1d:17:bd:5e:0f:6a:c7:16:50:d8:6c:48: bd:be:ec:4f:5d:6b:2f:60:72:fd:b6:ae:35:97:16: 8d:85:68:51:58:ca:6c:84:0b:53:3a:90:83:ef:8e: 3d:c1:2e:24:f6:92:f6:d9:3f:fb:02:dc:7a:e1:40: f7:84:01:04:19:81:8a:f6:6c:60:69:e9:ca:04:65: 45:88:22:89:98:e4:f4:a1:1c:27:b8:4c:49:2f:71: 73:3a:ba:ab:47:08:1e:71:01:e9:c2:84:b2:4a:c0: 61:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7F:D6:28:99:F2:DD:1D:AD:3F:6A:35:57:A8:03:61:8D:ED:44:F5:AD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/7FD62899F2DD1DAD3F6A3557A803618DED44F5AD.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.187.88.0/23 Signature Algorithm: sha256WithRSAEncryption 76:13:45:8d:de:e3:e7:19:f3:68:31:a9:40:a4:a8:e7:0d:f4: f3:43:f7:b6:e5:34:b2:43:1d:e6:95:b7:0c:38:76:fd:c2:25: 56:33:98:72:3a:47:03:86:ff:ed:8f:d7:45:02:a4:78:40:fd: 71:e0:fc:19:a9:22:50:15:55:61:3c:c2:e5:f2:0e:c6:f8:d0: f5:c2:04:f0:ee:ae:6c:54:a2:f6:92:ed:8a:8b:de:d1:1b:77: 46:c9:93:d6:e9:22:c0:44:c7:ff:d5:70:6a:eb:60:1d:24:1f: 36:6e:21:bc:da:a9:d9:bd:b1:b7:9b:b1:ab:6d:28:cc:dd:cb: f5:8d:10:8c:10:0b:fa:7a:e3:39:1f:68:1a:e3:a5:ab:70:a6: 83:59:51:d2:2c:80:35:53:dd:4a:5d:17:58:d3:fa:fe:36:7f: 54:81:c2:ca:f8:a7:2a:b6:1e:f8:98:e3:38:10:3b:a0:fd:4c: 54:05:3e:1b:0b:d3:ba:33:74:20:2a:b4:81:ed:e2:49:c2:5e: ad:11:67:73:68:cc:c9:e7:04:48:af:f7:1c:16:63:1c:69:c5: 50:4a:80:ca:84:8d:5c:b4:36:61:5f:73:4c:a9:8d:b8:e5:43: 48:e3:32:23:21:0e:c4:23:f2:df:1c:87:16:b2:c8:88:16:4d: fc:15:3a:dc -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUbgkg2BwBDOOy9NyIFqWV7SA1F8IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDI0NloX DTI3MDUwMTIzNDc0NlowMzExMC8GA1UEAxMoN0ZENjI4OTlGMkREMURBRDNGNkEz NTU3QTgwMzYxOERFRDQ0RjVBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANYejKyqQkq4DXHmb6OHQOOSfZHDSn5NPWV1B6Q5AZaMBmLCzQGcEokTQles Hl2vBn+Yc939arC48MTw6xYu+9LboQ2MOBEGLK9v4rMXUv4ke5zWPnm9NXiPke2i +4+qgNPD4zA/VEorfEFpIgcU/r9b+TfTwGFZ1gfkqy4NcjDi7VnQSt3D4vW1+g62 Tw0Pk+EkOVUE9tQKHRe9Xg9qxxZQ2GxIvb7sT11rL2By/bauNZcWjYVoUVjKbIQL UzqQg++OPcEuJPaS9tk/+wLceuFA94QBBBmBivZsYGnpygRlRYgiiZjk9KEcJ7hM SS9xczq6q0cIHnEB6cKEskrAYb0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH/WKJny3R2tP2o1V6gDYY3tRPWtMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzA0NTBmMGY1LWI4ODMtNGIyNC05NzkyLTdlOTU3YWY4OGJmOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wNDUwZjBm NS1iODgzLTRiMjQtOTc5Mi03ZTk1N2FmODhiZjgvMC83RkQ2Mjg5OUYyREQxREFE M0Y2QTM1NTdBODAzNjE4REVENDRGNUFELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7tYMA0GCSqGSIb3DQEBCwUAA4IBAQB2E0WN3uPnGfNoMalApKjnDfTzQ/e2 5TSyQx3mlbcMOHb9wiVWM5hyOkcDhv/tj9dFAqR4QP1x4PwZqSJQFVVhPMLl8g7G +ND1wgTw7q5sVKL2ku2Ki97RG3dGyZPW6SLARMf/1XBq62AdJB82biG82qnZvbG3 m7GrbSjM3cv1jRCMEAv6euM5H2ga46WrcKaDWVHSLIA1U91KXRdY0/r+Nn9UgcLK +Kcqth74mOM4EDug/UxUBT4bC9O6M3QgKrSB7eJJwl6tEWdzaMzJ5wRIr/ccFmMc acVQSoDKhI1ctDZhX3NMqY245UNI4zIjIQ7EI/LfHIcWssiIFk38FTrc -----END CERTIFICATE-----Generated at Tue May 12 22:10:25 2026 by rpki-client