$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer File: B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer (raw, json) Hash identifier: XlMVy5A7HAGUE22nuxXr3Vn/3EQFbRnwRNFbJhPp6Nw= Subject key identifier: B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 38C48767DC9963C7923D946259821C35FD05D9B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:24:34 +0000 Certificate not after: Sun 02 May 2027 01:29:34 +0000 Subordinate resources: IP: 103.76.200.0/22 IP: 2001:df5:9600::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c4:87:67:dc:99:63:c7:92:3d:94:62:59:82:1c:35:fd:05:d9:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:24:34 2026 GMT Not After : May 2 01:29:34 2027 GMT Subject: CN=B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a5:06:17:c5:b6:bf:b4:32:95:43:e4:cc:3e: 27:c0:16:b9:fd:25:0a:14:95:d7:29:1e:8b:e8:d2: 49:62:4c:4d:4e:f9:4f:58:35:d2:5f:35:59:2e:c2: 00:51:82:d3:8e:85:28:63:e9:d0:9c:b6:9b:c0:ee: c4:99:a5:5b:0d:4d:70:aa:49:8f:4f:de:92:84:1c: 9d:9f:9d:85:34:8a:9f:91:4e:50:50:5b:0b:65:05: df:36:06:54:2e:1a:ed:60:93:3f:e2:82:43:97:e5: b5:23:8e:36:2f:37:d5:c3:ce:a3:41:c6:fe:86:d3: d4:33:01:24:83:be:53:55:02:c6:44:0a:21:00:89: ba:00:b2:00:25:33:6e:70:63:09:85:57:3b:e8:c4: 7a:2f:42:5e:01:a6:1d:a4:c8:cb:8b:1a:b8:cd:65: 6c:77:01:1b:e7:b8:b4:1c:07:ec:ac:69:d6:15:0a: 6f:05:c0:47:33:8d:e4:ae:39:35:94:63:03:af:ba: 5d:23:0e:e1:8a:82:93:ce:2c:f4:37:4c:73:cc:51: 59:15:28:64:50:6a:ce:8c:f3:8b:b3:1d:2c:4f:fe: d0:c5:74:4f:9b:88:c9:4b:e7:5e:c1:4f:f7:47:3c: 11:e8:5a:4e:d6:9c:f3:d4:3f:f1:d6:00:f2:c9:17: ad:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.76.200.0/22 IPv6: 2001:df5:9600::/48 Signature Algorithm: sha256WithRSAEncryption 96:be:79:4e:f9:69:2e:fa:9c:a0:1c:ac:6a:c3:53:29:57:ec: c2:7a:44:ae:f5:06:55:b2:55:89:0d:b4:52:40:e2:24:9f:a1: 23:b1:e5:1a:be:f6:06:97:08:d0:49:6f:0f:1c:68:b8:20:e5: 6a:d5:fa:88:80:e9:89:d4:44:bc:79:10:e9:37:03:3d:ed:a0: 24:ac:5a:ae:60:8b:9f:6e:09:50:36:89:b1:e3:f6:e9:96:cc: 05:04:88:a1:b5:3b:8e:a7:75:f3:4d:31:6e:44:e7:9c:a5:06: b9:a3:1b:9e:09:a2:05:bf:06:06:7b:aa:d6:f5:01:6f:2d:1a: 19:e3:dc:5f:a4:a4:a1:4f:76:5e:30:d0:05:20:0f:0f:3b:11: 24:1f:93:e1:58:da:52:f1:fb:66:6e:ea:60:06:1f:bb:ef:52: fa:88:cb:34:56:6d:25:e3:ba:f7:91:e8:ec:ba:60:40:cb:79: 8f:00:ce:7a:fd:fa:78:a7:07:5a:33:20:bf:7c:85:1e:8b:4f: 7a:f8:69:b3:6e:16:5b:25:1c:33:e8:9f:29:bb:1f:fa:20:0a: 06:07:87:56:9f:88:de:78:0e:97:b4:be:bf:7a:74:ea:26:4a: 75:a8:aa:b3:40:e0:f1:38:c2:40:26:86:a3:76:75:0e:e9:05: f1:a7:9a:10 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUOMSHZ9yZY8eSPZRiWYIcNf0F2bEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjQzNFoX DTI3MDUwMjAxMjkzNFowMzExMC8GA1UEAxMoQjdDQjJFOUY2NTEzQjBBQkQ2OUNE MkEyQ0M2MDRENjFDMTVEQUNBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPKlBhfFtr+0MpVD5Mw+J8AWuf0lChSV1ykei+jSSWJMTU75T1g10l81WS7C AFGC046FKGPp0Jy2m8DuxJmlWw1NcKpJj0/ekoQcnZ+dhTSKn5FOUFBbC2UF3zYG VC4a7WCTP+KCQ5fltSOONi831cPOo0HG/obT1DMBJIO+U1UCxkQKIQCJugCyACUz bnBjCYVXO+jEei9CXgGmHaTIy4sauM1lbHcBG+e4tBwH7Kxp1hUKbwXARzON5K45 NZRjA6+6XSMO4YqCk84s9DdMc8xRWRUoZFBqzozzi7MdLE/+0MV0T5uIyUvnXsFP 90c8EehaTtac89Q/8dYA8skXrUECAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLfLLp9lE7Cr1pzSosxgTWHBXaylMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzljMzcwZTZmLWYwYzctNGY0MC04YmE0LWEwMWU1ZDBjNzRlNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85YzM3MGU2 Zi1mMGM3LTRmNDAtOGJhNC1hMDFlNWQwYzc0ZTQvMC9CN0NCMkU5RjY1MTNCMEFC RDY5Q0QyQTJDQzYwNEQ2MUMxNURBQ0E1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZ0zIMA8EAgACMAkDBwAgAQ31lgAwDQYJKoZIhvcNAQELBQADggEBAJa+eU75 aS76nKAcrGrDUylX7MJ6RK71BlWyVYkNtFJA4iSfoSOx5Rq+9gaXCNBJbw8caLgg 5WrV+oiA6YnURLx5EOk3Az3toCSsWq5gi59uCVA2ibHj9umWzAUEiKG1O46ndfNN MW5E55ylBrmjG54JogW/BgZ7qtb1AW8tGhnj3F+kpKFPdl4w0AUgDw87ESQfk+FY 2lLx+2Zu6mAGH7vvUvqIyzRWbSXjuveR6Oy6YEDLeY8Aznr9+ninB1ozIL98hR6L T3r4abNuFlslHDPonym7H/ogCgYHh1afiN54Dpe0vr96dOomSnWoqrNA4PE4wkAm hqN2dQ7pBfGnmhA= -----END CERTIFICATE-----Generated at Tue May 12 22:10:10 2026 by rpki-client