$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer File: AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.cer (raw, json) Hash identifier: XWHijePAZWBv0S2MO1sZcTWjE+itNI9b9s3t757LneA= Subject key identifier: AE:7D:92:7F:47:7C:3D:2C:E6:7B:B0:A5:24:40:38:DA:BC:F4:C4:BB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1A17A328F1386555EC9A36C5D78B767BEF0C3E16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:41:43 +0000 Certificate not after: Sun 02 May 2027 02:46:43 +0000 Subordinate resources: IP: 103.154.178.0/23 IP: 2406:5c40::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:17:a3:28:f1:38:65:55:ec:9a:36:c5:d7:8b:76:7b:ef:0c:3e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:41:43 2026 GMT Not After : May 2 02:46:43 2027 GMT Subject: CN=AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:06:f1:56:b7:3f:b2:06:ab:86:9a:27:e0:01: 62:b8:e7:63:b6:8a:47:df:04:4e:dd:5c:ec:f5:7c: 72:d6:77:d6:01:02:ec:2d:7f:d5:79:6c:ed:17:3a: 10:64:14:42:1a:15:ab:b3:2b:75:b7:03:6f:3e:8d: 01:ff:d7:50:45:9b:07:65:0f:1b:8d:f5:88:16:e9: d3:9d:23:6f:ab:d4:49:57:fb:31:c8:99:83:b9:b4: be:4c:01:cc:07:ca:98:bc:7d:05:75:0b:1a:d4:0d: 13:9d:0b:c1:26:b8:58:d5:6c:24:f3:79:38:f3:fe: e9:e6:89:58:6a:e8:e1:c8:d7:6a:32:e1:98:eb:7e: 9a:cd:7c:23:76:eb:33:10:7b:4a:72:a5:a4:b9:e0: a3:f7:fb:a6:b3:06:6f:28:3b:a7:54:81:b3:6d:61: 13:cf:7a:0f:22:05:c2:aa:8f:2e:f9:25:e6:75:c7: 6d:bd:47:fc:90:52:e2:7d:bf:ac:bb:0e:fa:34:ab: 90:b8:aa:38:b9:22:9b:15:85:14:55:65:b5:52:18: 4e:ea:06:98:ba:67:ed:bd:69:1f:9e:de:40:00:94: 66:cc:b8:3d:6b:77:a6:3e:0b:fc:47:e7:6a:42:46: d8:25:1d:03:7f:a5:e9:f0:78:07:a8:a4:c1:ea:72: fb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:7D:92:7F:47:7C:3D:2C:E6:7B:B0:A5:24:40:38:DA:BC:F4:C4:BB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/AE7D927F477C3D2CE67BB0A5244038DABCF4C4BB.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.154.178.0/23 IPv6: 2406:5c40::/32 Signature Algorithm: sha256WithRSAEncryption 2d:34:8e:b6:7a:15:53:4c:10:d4:37:27:98:88:99:d3:dc:dc: 07:13:50:e7:ec:75:09:3e:16:8e:f9:7a:6c:46:b1:90:71:c7: 03:2a:67:b9:99:c7:48:dc:f7:7f:02:3e:73:8a:37:c5:55:ae: fc:cf:88:5c:a6:54:ac:a6:67:f9:f7:c2:fa:55:46:c2:74:36: a4:f6:66:2b:c4:18:f6:d7:35:c8:b7:c1:61:e4:66:86:b7:76: d9:c2:2f:41:c0:78:fc:c8:af:31:be:ed:2e:f9:5a:27:5f:9d: 69:d9:49:35:14:3b:1e:63:f2:a7:e9:64:55:e8:14:bb:65:c5: e2:c7:9d:62:55:94:86:aa:0c:7d:52:14:49:69:33:98:92:f1: bf:65:6e:94:83:e6:cd:07:9b:2f:cd:2c:9d:59:0e:99:13:8a: a5:e4:3e:3d:32:94:06:29:94:b3:08:cd:06:ae:6c:b8:39:71: e5:e6:11:97:ae:96:e8:e9:26:a5:30:f0:3c:7c:01:81:43:15: 3f:57:d5:3e:76:b7:b9:53:49:11:24:f2:1b:76:0b:58:dd:b0: fd:b0:fb:c7:a4:9d:7e:46:ee:3a:de:6b:4c:61:cf:a6:60:4c: 83:53:c0:16:6c:25:28:7b:d7:aa:c0:c3:13:7e:b6:f5:59:96: 5c:75:f3:34 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUGhejKPE4ZVXsmjbF14t2e+8MPhYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyNDE0M1oX DTI3MDUwMjAyNDY0M1owMzExMC8GA1UEAxMoQUU3RDkyN0Y0NzdDM0QyQ0U2N0JC MEE1MjQ0MDM4REFCQ0Y0QzRCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK4G8Va3P7IGq4aaJ+ABYrjnY7aKR98ETt1c7PV8ctZ31gEC7C1/1Xls7Rc6 EGQUQhoVq7MrdbcDbz6NAf/XUEWbB2UPG431iBbp050jb6vUSVf7MciZg7m0vkwB zAfKmLx9BXULGtQNE50LwSa4WNVsJPN5OPP+6eaJWGro4cjXajLhmOt+ms18I3br MxB7SnKlpLngo/f7prMGbyg7p1SBs21hE896DyIFwqqPLvkl5nXHbb1H/JBS4n2/ rLsO+jSrkLiqOLkimxWFFFVltVIYTuoGmLpn7b1pH57eQACUZsy4PWt3pj4L/Efn akJG2CUdA3+l6fB4B6ikwepy+2UCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK59kn9HfD0s5nuwpSRAONq89MS7MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y5ZDZhY2M2LTBhZjMtNGI5Ny05OWE0LTBmNDVlOGVjZjU3Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mOWQ2YWNj Ni0wYWYzLTRiOTctOTlhNC0wZjQ1ZThlY2Y1NzYvMC9BRTdEOTI3RjQ3N0MzRDJD RTY3QkIwQTUyNDQwMzhEQUJDRjRDNEJCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5qyMA0EAgACMAcDBQAkBlxAMA0GCSqGSIb3DQEBCwUAA4IBAQAtNI62ehVT TBDUNyeYiJnT3NwHE1Dn7HUJPhaO+XpsRrGQcccDKme5mcdI3Pd/Aj5zijfFVa78 z4hcplSspmf598L6VUbCdDak9mYrxBj21zXIt8Fh5GaGt3bZwi9BwHj8yK8xvu0u +VonX51p2Uk1FDseY/Kn6WRV6BS7ZcXix51iVZSGqgx9UhRJaTOYkvG/ZW6Ug+bN B5svzSydWQ6ZE4ql5D49MpQGKZSzCM0Grmy4OXHl5hGXrpbo6SalMPA8fAGBQxU/ V9U+dre5U0kRJPIbdgtY3bD9sPvHpJ1+Ru463mtMYc+mYEyDU8AWbCUoe9eqwMMT frb1WZZcdfM0 -----END CERTIFICATE-----Generated at Tue May 12 22:04:01 2026 by rpki-client