$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer File: A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer (raw, json) Hash identifier: YTJyY/+/eGj/lAOSQd1tFvDcnUDNnYODu/aZN+nTG6I= Subject key identifier: A7:88:9B:33:86:7E:D2:BD:F1:5C:39:F7:22:D2:0B:AF:76:B4:20:EE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 503894D1CAEE9744EDEEC6BF9E9875F57EE9EF52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:45:05 +0000 Certificate not after: Sun 02 May 2027 00:50:05 +0000 Subordinate resources: IP: 103.84.117.0/24 IP: 103.202.227.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:38:94:d1:ca:ee:97:44:ed:ee:c6:bf:9e:98:75:f5:7e:e9:ef:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:45:05 2026 GMT Not After : May 2 00:50:05 2027 GMT Subject: CN=A7889B33867ED2BDF15C39F722D20BAF76B420EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ec:8e:75:93:7e:e3:bb:53:93:d3:61:3c:03: c9:cd:9d:6b:3b:94:89:e1:28:f7:16:6b:e4:68:df: ca:92:06:08:ae:58:90:db:cf:c0:a6:f7:1a:ea:53: bc:59:07:c2:48:20:70:9f:25:d2:a9:7a:aa:d5:99: 68:2b:66:34:af:20:cd:05:c9:e0:20:a6:89:9b:be: ea:fc:03:8b:c7:0e:bb:97:77:55:04:c7:ff:17:a8: e7:b4:13:53:b1:8e:2d:c4:da:0f:56:11:67:4d:08: ce:6d:e5:f1:6d:b3:9b:ab:d3:4f:e8:8b:f1:c4:5a: ee:90:44:78:48:bc:40:5b:0d:23:5b:fa:c4:21:79: f3:0c:a5:45:e9:9e:4d:9a:81:0a:6c:fd:87:5d:23: f3:d7:02:e0:21:06:7f:aa:2a:a3:02:f5:24:91:34: 1f:e6:00:1d:fa:43:8c:46:e0:23:6a:bf:fd:f6:a4: f4:54:c5:db:ae:85:76:a5:af:8c:42:a7:80:8d:47: e9:27:6a:7e:cd:c7:b2:ca:ac:76:8e:e3:e8:2e:0a: 83:e3:69:a4:db:6e:a0:be:d1:26:0c:ce:98:0a:a7: 2a:ce:f0:15:34:47:21:75:27:81:06:2e:27:bf:10: ad:21:ba:10:53:c5:e3:c0:df:d3:f7:2a:d0:fa:53: f1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A7:88:9B:33:86:7E:D2:BD:F1:5C:39:F7:22:D2:0B:AF:76:B4:20:EE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.84.117.0/24 103.202.227.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:a8:39:8e:06:f1:5f:b9:74:24:12:cf:d6:a2:f6:53:12:d1: 55:1a:c1:8a:3b:7b:42:d4:69:31:9d:dd:b6:8f:02:87:f6:48: 9a:5a:e6:d3:fa:48:ea:c8:f2:bd:91:23:01:78:e4:c7:38:97: b4:dd:b1:d2:d5:61:65:60:0d:a3:7f:dd:7b:fe:16:c7:33:ef: 00:ce:fd:d8:fd:24:57:f6:ec:fe:79:14:15:60:8a:27:11:63: 92:c1:02:18:61:a3:cb:6c:86:c4:dc:0f:af:2c:8a:85:45:1f: 11:13:0e:92:d6:c1:68:c2:cd:e4:ed:f5:53:5a:95:d3:27:20: a4:48:07:95:99:f8:89:ec:32:41:fc:f5:08:de:ac:6b:eb:f9: 76:77:49:9c:3f:f2:c3:fa:f1:6d:a6:54:3a:67:5a:ea:9c:bf: 44:39:7d:29:d4:85:8a:1f:2d:ae:4a:2e:23:a0:14:96:d1:b5: 49:17:c0:3a:f2:08:58:6a:b5:dd:00:81:f6:33:45:84:21:37: 59:45:9c:8b:5e:26:c2:1d:79:a9:b1:71:a7:1a:65:d0:1c:54: c6:89:75:f5:e9:f9:e3:7d:95:a9:19:bb:49:b9:63:3f:ee:fd: 73:68:03:19:35:c2:4a:67:38:ce:7c:17:5e:af:22:5b:bc:4c: db:fb:18:29 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUUDiU0crul0Tt7sa/nph19X7p71IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDUwNVoX DTI3MDUwMjAwNTAwNVowMzExMC8GA1UEAxMoQTc4ODlCMzM4NjdFRDJCREYxNUMz OUY3MjJEMjBCQUY3NkI0MjBFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPsjnWTfuO7U5PTYTwDyc2dazuUieEo9xZr5GjfypIGCK5YkNvPwKb3GupT vFkHwkggcJ8l0ql6qtWZaCtmNK8gzQXJ4CCmiZu+6vwDi8cOu5d3VQTH/xeo57QT U7GOLcTaD1YRZ00Izm3l8W2zm6vTT+iL8cRa7pBEeEi8QFsNI1v6xCF58wylReme TZqBCmz9h10j89cC4CEGf6oqowL1JJE0H+YAHfpDjEbgI2q//fak9FTF266FdqWv jEKngI1H6Sdqfs3Hssqsdo7j6C4Kg+NppNtuoL7RJgzOmAqnKs7wFTRHIXUngQYu J78QrSG6EFPF48Df0/cq0PpT8c0CAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKeImzOGftK98Vw59yLSC692tCDuMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzYxMzJhNzQwLWJkN2QtNDZiOC1iMTBhLWE3YTcwM2UzNTBmMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82MTMyYTc0 MC1iZDdkLTQ2YjgtYjEwYS1hN2E3MDNlMzUwZjIvMC9BNzg4OUIzMzg2N0VEMkJE RjE1QzM5RjcyMkQyMEJBRjc2QjQyMEVFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQAZ1R1AwQAZ8rjMA0GCSqGSIb3DQEBCwUAA4IBAQA9qDmOBvFfuXQkEs/WovZT EtFVGsGKO3tC1Gkxnd22jwKH9kiaWubT+kjqyPK9kSMBeOTHOJe03bHS1WFlYA2j f917/hbHM+8Azv3Y/SRX9uz+eRQVYIonEWOSwQIYYaPLbIbE3A+vLIqFRR8REw6S 1sFows3k7fVTWpXTJyCkSAeVmfiJ7DJB/PUI3qxr6/l2d0mcP/LD+vFtplQ6Z1rq nL9EOX0p1IWKHy2uSi4joBSW0bVJF8A68ghYarXdAIH2M0WEITdZRZyLXibCHXmp sXGnGmXQHFTGiXX16fnjfZWpGbtJuWM/7v1zaAMZNcJKZzjOfBderyJbvEzb+xgp -----END CERTIFICATE-----Generated at Tue May 12 22:39:03 2026 by rpki-client