$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer File: AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer (raw, json) Hash identifier: OJz4c8euDoZrRDEoahB7eVB/G9WnlOFeGfo+jGhRSvw= Subject key identifier: AC:7E:AF:B0:07:F3:DD:9B:32:32:7F:16:3D:AF:2A:92:B5:CE:EC:47 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 320D9F6F42EC9807DCC46A1C6A1D7531E418D75B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:23:07 +0000 Certificate not after: Sun 02 May 2027 00:28:07 +0000 Subordinate resources: IP: 103.110.41.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:0d:9f:6f:42:ec:98:07:dc:c4:6a:1c:6a:1d:75:31:e4:18:d7:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:23:07 2026 GMT Not After : May 2 00:28:07 2027 GMT Subject: CN=AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5b:3e:f8:dd:ac:59:88:fd:fb:84:7c:fd:04: cd:1d:70:96:51:07:96:84:f4:cb:2a:b2:15:5f:72: c1:69:d9:af:b1:50:d3:d6:e8:4c:04:26:d1:7d:d2: 07:a1:47:58:8f:81:1b:5b:0b:3a:a0:59:3f:c2:15: 8b:98:04:34:3f:79:f8:e4:21:8f:f8:19:af:96:e5: 16:14:ff:97:f0:ee:42:79:36:e0:df:6e:b8:82:83: 60:f2:04:05:da:80:f4:b0:da:ec:a1:83:44:63:fb: 18:f5:f3:8a:c6:e7:7d:b4:6d:5d:f6:56:81:cf:e5: cc:ea:23:c8:81:6b:36:92:95:c9:28:17:f7:aa:4f: b9:6f:c6:07:1f:37:98:d4:49:c3:c6:1e:6e:47:d0: 7c:5c:55:fd:74:2f:d4:2a:be:ec:b6:07:86:bb:89: 21:64:5b:98:6f:a7:29:66:1f:b4:b8:ac:14:26:d5: 32:01:e3:2d:58:1a:e5:06:ff:1d:3b:f9:8f:8b:1d: 76:b2:a4:a3:cd:6b:2a:e7:8e:a6:28:93:c3:a6:87: 38:57:c0:f6:a4:c3:80:3d:a3:5e:66:ee:6c:06:b6: 23:49:60:96:79:3e:94:2f:bf:12:4b:8f:4e:3b:e4: a6:46:e4:77:38:f2:a5:fe:be:c5:d2:fc:7c:f7:3b: a3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AC:7E:AF:B0:07:F3:DD:9B:32:32:7F:16:3D:AF:2A:92:B5:CE:EC:47 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.110.41.0/24 Signature Algorithm: sha256WithRSAEncryption 53:5c:e7:36:07:eb:d2:79:c1:9c:aa:74:6a:85:a1:c3:a6:76: 4b:61:e0:a0:37:be:95:25:2a:1f:18:ef:1e:f7:4d:40:dc:2e: 85:80:b4:52:e9:a9:eb:90:4b:3a:b2:da:af:d9:5e:c3:8f:d0: 21:dc:f7:15:ae:8b:20:be:70:9d:d8:73:de:d3:fe:0b:0b:67: 95:e5:ed:9c:e8:b1:87:5e:03:6f:66:92:14:52:df:57:d5:25: f3:41:00:26:bb:2a:1d:e9:ff:41:43:82:72:9a:4a:a8:8c:97: 4e:4b:07:a9:ab:3b:5f:e7:6a:65:ff:f1:a6:36:a6:9c:8e:25: 64:af:bc:39:b2:c8:91:9c:fd:92:f8:1a:61:fb:f9:cc:b7:e8: 3a:d5:08:a5:b6:f3:5a:ef:de:45:c8:ca:51:fa:9b:62:ed:a9: b8:88:e4:6c:73:bc:9d:ff:4f:d4:a1:95:5c:46:54:12:2d:48: 54:35:41:2b:1c:21:48:e0:a8:a0:77:07:04:b1:6c:f5:31:18: 68:7c:79:c1:0b:85:8e:45:bb:c1:bf:37:68:5e:6c:03:7b:0d: 94:2d:08:8a:cd:fa:bf:27:2f:24:2e:79:1b:8e:10:fd:77:eb: a1:e8:92:27:26:a0:e4:25:f5:31:ad:ae:08:e6:04:16:db:10: a2:02:bd:93 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUMg2fb0LsmAfcxGocah11MeQY11swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjMwN1oX DTI3MDUwMjAwMjgwN1owMzExMC8GA1UEAxMoQUM3RUFGQjAwN0YzREQ5QjMyMzI3 RjE2M0RBRjJBOTJCNUNFRUM0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKRbPvjdrFmI/fuEfP0EzR1wllEHloT0yyqyFV9ywWnZr7FQ09boTAQm0X3S B6FHWI+BG1sLOqBZP8IVi5gEND95+OQhj/gZr5blFhT/l/DuQnk24N9uuIKDYPIE BdqA9LDa7KGDRGP7GPXzisbnfbRtXfZWgc/lzOojyIFrNpKVySgX96pPuW/GBx83 mNRJw8YebkfQfFxV/XQv1Cq+7LYHhruJIWRbmG+nKWYftLisFCbVMgHjLVga5Qb/ HTv5j4sddrKko81rKueOpiiTw6aHOFfA9qTDgD2jXmbubAa2I0lglnk+lC+/EkuP Tjvkpkbkdzjypf6+xdL8fPc7o18CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKx+r7AH892bMjJ/Fj2vKpK1zuxHMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQwOTgxOTdjLWE1MjYtNDViZC05Y2U5LTE1MzgzYzVkOTUzNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80MDk4MTk3 Yy1hNTI2LTQ1YmQtOWNlOS0xNTM4M2M1ZDk1MzYvMC9BQzdFQUZCMDA3RjNERDlC MzIzMjdGMTYzREFGMkE5MkI1Q0VFQzQ3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ24pMA0GCSqGSIb3DQEBCwUAA4IBAQBTXOc2B+vSecGcqnRqhaHDpnZLYeCg N76VJSofGO8e901A3C6FgLRS6anrkEs6stqv2V7Dj9Ah3PcVrosgvnCd2HPe0/4L C2eV5e2c6LGHXgNvZpIUUt9X1SXzQQAmuyod6f9BQ4JymkqojJdOSwepqztf52pl //GmNqacjiVkr7w5ssiRnP2S+Bph+/nMt+g61QiltvNa795FyMpR+pti7am4iORs c7yd/0/UoZVcRlQSLUhUNUErHCFI4KigdwcEsWz1MRhofHnBC4WORbvBvzdoXmwD ew2ULQiKzfq/Jy8kLnkbjhD9d+uh6JInJqDkJfUxra4I5gQW2xCiAr2T -----END CERTIFICATE-----Generated at Tue May 12 22:10:25 2026 by rpki-client