$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer File: B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer (raw, json) Hash identifier: jU5doLuggf8Na6NtfM8laDnbQPFjwa6vLsiEBG2/t2U= Subject key identifier: B7:AC:AC:8C:1A:6D:56:7C:70:21:67:C3:BF:5D:55:DC:A8:06:1D:09 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 71C512E358DDAED591D06274AC85C2ADDF780C63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:31:43 +0000 Certificate not after: Sun 02 May 2027 00:36:43 +0000 Subordinate resources: IP: 103.42.116.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c5:12:e3:58:dd:ae:d5:91:d0:62:74:ac:85:c2:ad:df:78:0c:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:31:43 2026 GMT Not After : May 2 00:36:43 2027 GMT Subject: CN=B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3c:af:41:8b:23:64:0d:67:96:1c:98:33:68: 3d:92:4f:94:db:22:a8:12:ef:fd:16:55:f8:af:35: 0b:5f:90:72:c7:e3:05:a5:2b:dd:61:50:bb:33:83: 61:cc:17:44:40:46:f7:77:c3:c8:ad:fc:d0:29:70: 88:c3:d8:6b:e8:50:e8:31:3f:64:1c:b5:bb:c3:18: 25:8c:ce:a0:07:a2:61:8a:a6:67:57:b7:86:32:82: 74:ec:04:95:7a:45:2b:49:1f:83:36:aa:01:bc:5e: 68:ad:82:c6:f3:e9:6c:75:03:e0:89:7f:f1:d2:5a: 4d:fe:cb:21:3c:c2:73:8e:ea:76:74:f1:d0:21:60: 71:c8:c3:66:45:d5:6f:41:cb:f0:6a:12:fd:81:69: 9d:45:0f:17:60:52:90:25:89:99:78:94:2d:39:2a: 94:f3:2d:a7:c8:71:12:06:8f:f3:41:f3:ef:fc:2c: 82:bf:dd:2b:19:23:b0:87:f3:25:de:fc:29:92:b0: f4:b6:66:5e:63:09:76:54:f2:00:2e:66:36:79:72: 7c:b6:4d:1f:4f:65:58:67:67:33:b8:4a:3d:15:9d: 7b:8b:9b:80:e3:54:fc:5b:4b:88:aa:d4:dc:6f:0a: fc:d4:b1:8d:d7:32:86:59:7f:09:42:b7:51:24:c6: 26:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B7:AC:AC:8C:1A:6D:56:7C:70:21:67:C3:BF:5D:55:DC:A8:06:1D:09 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.42.116.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:dd:71:6f:c5:fa:0f:d4:ca:a9:be:87:a6:e7:6e:03:79:59: 09:39:af:22:cb:89:b7:26:82:a9:45:3f:ef:0a:96:1f:73:bb: 1e:e1:22:f3:67:e5:66:22:0e:1e:cf:e0:c2:f5:26:4b:f9:ad: 47:b1:dd:47:88:af:47:63:67:dc:0b:05:e9:b9:c9:39:e1:46: 24:e4:fd:7f:3a:0a:08:4e:74:e3:bc:bc:f3:af:94:de:0a:e6: d3:05:c3:4e:07:13:c8:71:28:13:6a:84:94:f9:1e:bc:85:f3: 03:64:b4:72:3b:0e:ea:84:c3:f2:65:b7:a2:05:64:4b:30:da: aa:84:6d:cf:dd:fb:99:53:18:b8:d3:e1:71:27:04:1c:2b:fb: d6:07:38:4d:6a:60:82:9c:58:ae:00:72:c4:75:2b:c8:c3:c8: 98:02:89:b3:24:99:68:a9:af:cc:a4:12:98:48:6f:2c:e2:5f: f8:2e:f1:15:9c:3c:ca:3f:88:41:a6:a7:45:97:0d:b9:e3:e7: ab:37:55:31:bc:e5:20:72:ae:09:40:e7:c4:2b:f9:f3:8d:0d: f8:bf:f5:19:de:99:12:ba:de:2e:b9:c3:bc:2a:96:dc:f4:db: 9e:7e:28:10:ee:b0:ac:ec:98:b3:0f:7e:89:e5:f9:b7:54:be: bc:97:62:c3 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUccUS41jdrtWR0GJ0rIXCrd94DGMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzE0M1oX DTI3MDUwMjAwMzY0M1owMzExMC8GA1UEAxMoQjdBQ0FDOEMxQTZENTY3QzcwMjE2 N0MzQkY1RDU1RENBODA2MUQwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKI8r0GLI2QNZ5YcmDNoPZJPlNsiqBLv/RZV+K81C1+QcsfjBaUr3WFQuzOD YcwXREBG93fDyK380ClwiMPYa+hQ6DE/ZBy1u8MYJYzOoAeiYYqmZ1e3hjKCdOwE lXpFK0kfgzaqAbxeaK2CxvPpbHUD4Il/8dJaTf7LITzCc47qdnTx0CFgccjDZkXV b0HL8GoS/YFpnUUPF2BSkCWJmXiULTkqlPMtp8hxEgaP80Hz7/wsgr/dKxkjsIfz Jd78KZKw9LZmXmMJdlTyAC5mNnlyfLZNH09lWGdnM7hKPRWde4ubgONU/FtLiKrU 3G8K/NSxjdcyhll/CUK3USTGJscCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLesrIwabVZ8cCFnw79dVdyoBh0JMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzRmNTg5MzRkLTFiMDAtNDQ4OS05MmVkLTFjYTZkYzRiMjkwZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80ZjU4OTM0 ZC0xYjAwLTQ0ODktOTJlZC0xY2E2ZGM0YjI5MGYvMC9CN0FDQUM4QzFBNkQ1NjdD NzAyMTY3QzNCRjVENTVEQ0E4MDYxRDA5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZyp0MA0GCSqGSIb3DQEBCwUAA4IBAQAb3XFvxfoP1Mqpvoem524DeVkJOa8i y4m3JoKpRT/vCpYfc7se4SLzZ+VmIg4ez+DC9SZL+a1Hsd1HiK9HY2fcCwXpuck5 4UYk5P1/OgoITnTjvLzzr5TeCubTBcNOBxPIcSgTaoSU+R68hfMDZLRyOw7qhMPy ZbeiBWRLMNqqhG3P3fuZUxi40+FxJwQcK/vWBzhNamCCnFiuAHLEdSvIw8iYAomz JJloqa/MpBKYSG8s4l/4LvEVnDzKP4hBpqdFlw254+erN1UxvOUgcq4JQOfEK/nz jQ34v/UZ3pkSut4uucO8Kpbc9NuefigQ7rCs7JizD36J5fm3VL68l2LD -----END CERTIFICATE-----Generated at Tue May 12 22:16:31 2026 by rpki-client