$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B7A1755465FC79A961574484316FD4B1DEA1ECEA.cer File: B7A1755465FC79A961574484316FD4B1DEA1ECEA.cer (raw, json) Hash identifier: sWAIINVwl+XNGNyNsZ2otmgOWrCA4egMCM/UcgOr5SU= Subject key identifier: B7:A1:75:54:65:FC:79:A9:61:57:44:84:31:6F:D4:B1:DE:A1:EC:EA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 39D515B69B39A78CAF0382BA2C4EDC5B68F731B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/B7A1755465FC79A961574484316FD4B1DEA1ECEA.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:40:53 +0000 Certificate not after: Sun 02 May 2027 01:45:53 +0000 Subordinate resources: IP: 103.192.174.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:d5:15:b6:9b:39:a7:8c:af:03:82:ba:2c:4e:dc:5b:68:f7:31:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:40:53 2026 GMT Not After : May 2 01:45:53 2027 GMT Subject: CN=B7A1755465FC79A961574484316FD4B1DEA1ECEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:19:9a:8d:b9:f1:75:1b:bc:68:59:27:ea:bd: b2:63:4d:88:39:0e:71:73:3c:2b:d4:a7:85:f8:f8: 5b:5f:33:cf:7c:1d:3c:c3:b1:82:56:90:93:df:13: 5b:ac:99:f7:b6:22:d7:58:42:4d:fe:c5:31:24:5d: e0:bf:ba:53:2b:b5:7c:f5:c1:39:b3:31:10:30:f1: 17:20:15:6b:52:85:51:30:25:7d:01:82:cf:16:db: ed:51:e0:47:e1:9b:9c:ae:53:eb:4e:d3:f8:ed:ea: bf:3d:7b:b2:ce:f2:9a:f9:6e:98:50:a6:17:57:de: b1:a3:5c:53:12:c8:e5:54:2f:84:83:1b:aa:df:f8: 1c:d9:cf:9c:d0:48:2b:83:72:e4:40:28:a5:33:95: fc:5a:82:65:d9:2f:9e:74:3c:5a:70:ab:19:3e:25: fd:43:f7:9c:5c:89:46:5d:aa:23:83:93:4d:b2:24: f0:60:d7:1f:e2:cd:69:44:63:f6:a9:af:9f:f7:3a: 0e:dc:0f:36:0e:e3:d6:57:b3:ae:b7:54:5d:bf:d5: ca:10:8e:c0:be:e0:24:b4:ce:ea:e3:e0:a1:0b:38: 3e:91:26:0c:b8:9c:a7:dc:f3:65:6d:78:70:17:ac: 3c:83:4d:2e:91:f3:5d:ee:e1:e2:b4:a3:c0:52:fb: 41:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B7:A1:75:54:65:FC:79:A9:61:57:44:84:31:6F:D4:B1:DE:A1:EC:EA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/B7A1755465FC79A961574484316FD4B1DEA1ECEA.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.192.174.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:e7:f5:23:db:4d:6a:c1:00:f9:8c:7f:7a:88:c9:80:e4:5c: 0b:42:ba:2a:89:56:3a:b1:79:3b:31:c0:54:75:3c:ab:ef:f3: bc:43:08:7b:52:f6:63:21:e3:b8:e1:c3:f3:19:d7:51:9f:f0: 81:8e:22:de:40:cb:f2:db:40:e9:8b:8e:9c:22:2e:83:bb:82: f6:3b:a2:d1:db:95:03:1a:9c:2c:e4:bc:2e:fb:eb:f4:e1:a5: 5e:bf:68:6f:50:f5:b2:cb:8f:e3:55:cc:fe:43:d9:de:b4:90: 5c:9d:a6:00:ae:18:88:9b:f8:a6:4d:a9:2e:bb:e0:aa:fd:73: 6c:ba:a2:d7:11:62:42:26:ab:4f:a3:2e:ae:98:9c:f0:0e:82: f6:2f:3f:25:85:fc:b7:ba:4d:2f:39:e1:08:0f:05:30:20:e5: 04:74:c0:78:88:57:f6:aa:f2:87:ba:da:52:9a:c4:ce:02:9f: c2:ef:45:7c:21:3c:b3:d0:58:92:80:04:f0:93:d4:51:91:ab: 1d:c9:1c:41:a7:26:02:1a:84:a8:d7:46:d5:c8:97:87:70:f0: 33:b4:b8:a9:3e:5f:7c:6f:5a:f2:ef:da:ce:4c:42:11:60:46: b5:d8:c7:82:51:74:4f:43:ce:bd:d8:d9:ec:26:01:b3:22:74: 1e:66:d3:b1 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUOdUVtps5p4yvA4K6LE7cW2j3MbUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDA1M1oX DTI3MDUwMjAxNDU1M1owMzExMC8GA1UEAxMoQjdBMTc1NTQ2NUZDNzlBOTYxNTc0 NDg0MzE2RkQ0QjFERUExRUNFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJMZmo258XUbvGhZJ+q9smNNiDkOcXM8K9Snhfj4W18zz3wdPMOxglaQk98T W6yZ97Yi11hCTf7FMSRd4L+6Uyu1fPXBObMxEDDxFyAVa1KFUTAlfQGCzxbb7VHg R+GbnK5T607T+O3qvz17ss7ymvlumFCmF1fesaNcUxLI5VQvhIMbqt/4HNnPnNBI K4Ny5EAopTOV/FqCZdkvnnQ8WnCrGT4l/UP3nFyJRl2qI4OTTbIk8GDXH+LNaURj 9qmvn/c6DtwPNg7j1lezrrdUXb/VyhCOwL7gJLTO6uPgoQs4PpEmDLicp9zzZW14 cBesPINNLpHzXe7h4rSjwFL7QU0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLehdVRl/HmpYVdEhDFv1LHeoezqMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2I0ZGFkY2QwLWYxYTktNDhlNC1hMmM1LWRlMTgxOGJmZmU0My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iNGRhZGNk MC1mMWE5LTQ4ZTQtYTJjNS1kZTE4MThiZmZlNDMvMC9CN0ExNzU1NDY1RkM3OUE5 NjE1NzQ0ODQzMTZGRDRCMURFQTFFQ0VBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ8CuMA0GCSqGSIb3DQEBCwUAA4IBAQAb5/Uj201qwQD5jH96iMmA5FwLQroq iVY6sXk7McBUdTyr7/O8Qwh7UvZjIeO44cPzGddRn/CBjiLeQMvy20Dpi46cIi6D u4L2O6LR25UDGpws5Lwu++v04aVev2hvUPWyy4/jVcz+Q9netJBcnaYArhiIm/im Takuu+Cq/XNsuqLXEWJCJqtPoy6umJzwDoL2Lz8lhfy3uk0vOeEIDwUwIOUEdMB4 iFf2qvKHutpSmsTOAp/C70V8ITyz0FiSgATwk9RRkasdyRxBpyYCGoSo10bVyJeH cPAztLipPl98b1ry79rOTEIRYEa12MeCUXRPQ8692NnsJgGzInQeZtOx -----END CERTIFICATE-----Generated at Tue May 12 22:29:04 2026 by rpki-client