$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B7A0E7998A9F266F3882F19118691CB225356F5D.cer File: B7A0E7998A9F266F3882F19118691CB225356F5D.cer (raw, json) Hash identifier: rvrdeoDFB4wU6lhdy/nQWnll/lxIbsoT5hYQbcyQzY0= Subject key identifier: B7:A0:E7:99:8A:9F:26:6F:38:82:F1:91:18:69:1C:B2:25:35:6F:5D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 239C3E6A675D73E7BC5B80E2A0E438E704CDF25A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:04:08 +0000 Certificate not after: Sun 02 May 2027 00:09:08 +0000 Subordinate resources: IP: 103.47.10.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:9c:3e:6a:67:5d:73:e7:bc:5b:80:e2:a0:e4:38:e7:04:cd:f2:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:04:08 2026 GMT Not After : May 2 00:09:08 2027 GMT Subject: CN=B7A0E7998A9F266F3882F19118691CB225356F5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:83:c3:4e:39:6e:1b:bd:71:66:60:7b:6b:1c: 92:6f:1f:f9:ab:68:d2:7e:ee:47:c9:56:79:a9:a4: 62:69:af:a8:ee:d1:88:98:a0:07:62:ef:99:81:58: 88:e2:26:11:80:bf:ff:2a:69:80:65:79:77:bc:69: d0:80:56:92:55:8e:d7:36:c0:f0:f8:7c:16:b3:47: b9:04:69:ce:4f:9a:4d:ad:03:88:de:3e:ec:f9:e6: e6:26:b1:b8:7b:7f:b7:e2:32:ed:2a:d8:b7:8a:a8: 20:f9:85:bc:75:af:6b:34:47:7c:25:29:c4:64:a5: 69:38:96:c3:59:6c:41:b2:54:92:49:2a:bb:5e:e8: e9:bf:12:df:60:a6:a8:7d:ed:42:19:6b:de:f5:b1: 7b:c4:f0:bf:9d:64:47:47:13:3b:b3:b1:05:39:82: 49:34:5a:1f:fd:69:a2:76:c1:94:a0:ed:a6:f5:83: cc:af:bb:98:d3:e1:f6:eb:16:1f:a4:b9:29:47:23: 0e:ed:f4:99:93:07:1d:67:b8:8f:30:99:eb:ab:f1: f4:cb:56:be:90:37:a6:4c:a7:49:ac:c2:cd:c2:82: 0f:e5:cd:74:7d:db:43:ba:c4:fc:80:41:18:4c:8e: 82:d0:64:39:a6:c0:69:18:07:34:a0:6b:45:ba:87: 77:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B7:A0:E7:99:8A:9F:26:6F:38:82:F1:91:18:69:1C:B2:25:35:6F:5D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/B7A0E7998A9F266F3882F19118691CB225356F5D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.47.10.0/23 Signature Algorithm: sha256WithRSAEncryption 60:12:41:68:7f:63:65:93:86:86:09:47:23:82:8f:6e:c8:6a: 65:da:90:6e:6d:61:71:eb:9c:cd:d9:41:75:54:ae:c5:71:21: 00:e5:51:f4:d0:ef:de:ee:6f:f8:1d:4d:c0:ab:a0:7c:83:b0: 26:89:c9:bf:21:48:1d:08:a6:10:de:c9:0f:2b:17:b4:e2:d1: c7:c9:d5:ce:90:17:9a:66:db:1c:7c:be:d4:6f:09:d5:ef:09: 8d:2f:03:8b:a7:ee:7d:c6:fa:66:67:f8:96:e7:65:4c:cb:17: e2:0c:e0:73:65:33:e5:01:88:00:cd:b9:69:56:2c:1e:93:20: f9:aa:55:8d:a7:fc:7e:8b:5e:61:da:aa:1b:ed:1e:14:9e:e6: 51:56:5e:a3:90:f7:41:9d:0d:9b:e1:a9:c9:9c:ad:9f:3d:5a: 92:fa:cd:56:ce:35:61:55:1b:4c:ee:5c:4a:93:69:11:15:3c: d3:b0:70:db:43:69:ef:7f:ac:b5:61:ec:6a:89:52:d4:e6:6f: 5b:60:db:a6:4c:2c:0c:02:b8:32:6e:4f:c9:0a:74:88:93:32: a1:06:a4:97:ef:26:9c:e6:a2:ae:39:2e:b0:91:1b:92:ba:29: 5a:ce:18:68:88:c7:1d:17:fd:25:cc:67:2c:3b:5e:1b:47:0d: 41:75:c8:6a -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUI5w+amddc+e8W4DioOQ45wTN8lowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDQwOFoX DTI3MDUwMjAwMDkwOFowMzExMC8GA1UEAxMoQjdBMEU3OTk4QTlGMjY2RjM4ODJG MTkxMTg2OTFDQjIyNTM1NkY1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKaDw045bhu9cWZge2sckm8f+ato0n7uR8lWeamkYmmvqO7RiJigB2LvmYFY iOImEYC//yppgGV5d7xp0IBWklWO1zbA8Ph8FrNHuQRpzk+aTa0DiN4+7Pnm5iax uHt/t+Iy7SrYt4qoIPmFvHWvazRHfCUpxGSlaTiWw1lsQbJUkkkqu17o6b8S32Cm qH3tQhlr3vWxe8Twv51kR0cTO7OxBTmCSTRaH/1ponbBlKDtpvWDzK+7mNPh9usW H6S5KUcjDu30mZMHHWe4jzCZ66vx9MtWvpA3pkynSazCzcKCD+XNdH3bQ7rE/IBB GEyOgtBkOabAaRgHNKBrRbqHdzUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLeg55mKnyZvOILxkRhpHLIlNW9dMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzI1YTcyZWI5LThlNTMtNDQ3Mi1hMzVhLWZlZThiZjBhZjQ2Zi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yNWE3MmVi OS04ZTUzLTQ0NzItYTM1YS1mZWU4YmYwYWY0NmYvMC9CN0EwRTc5OThBOUYyNjZG Mzg4MkYxOTExODY5MUNCMjI1MzU2RjVELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZy8KMA0GCSqGSIb3DQEBCwUAA4IBAQBgEkFof2Nlk4aGCUcjgo9uyGpl2pBu bWFx65zN2UF1VK7FcSEA5VH00O/e7m/4HU3Aq6B8g7Amicm/IUgdCKYQ3skPKxe0 4tHHydXOkBeaZtscfL7UbwnV7wmNLwOLp+59xvpmZ/iW52VMyxfiDOBzZTPlAYgA zblpViwekyD5qlWNp/x+i15h2qob7R4UnuZRVl6jkPdBnQ2b4anJnK2fPVqS+s1W zjVhVRtM7lxKk2kRFTzTsHDbQ2nvf6y1YexqiVLU5m9bYNumTCwMArgybk/JCnSI kzKhBqSX7yac5qKuOS6wkRuSuilazhhoiMcdF/0lzGcsO14bRw1Bdchq -----END CERTIFICATE-----Generated at Wed May 13 00:27:48 2026 by rpki-client