$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.cer File: B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.cer (raw, json) Hash identifier: 0ZJLAjIhRo1/9ahIyXEiKoLOZTJjPPlMuke0Ft6PC1M= Subject key identifier: B7:D0:DD:FE:90:14:6E:06:D3:BE:A1:3C:2C:79:4B:52:7F:31:51:F8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6BD837CBA14B833665BFD0EF5E562C70DD8B5598 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:29:24 +0000 Certificate not after: Sun 02 May 2027 02:34:24 +0000 Subordinate resources: IP: 43.241.246.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d8:37:cb:a1:4b:83:36:65:bf:d0:ef:5e:56:2c:70:dd:8b:55:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:29:24 2026 GMT Not After : May 2 02:34:24 2027 GMT Subject: CN=B7D0DDFE90146E06D3BEA13C2C794B527F3151F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:73:14:f9:d4:e0:54:54:ef:47:f0:2f:fd:c7: 1c:c1:9e:53:24:5a:fa:5d:e0:9d:19:61:7a:03:87: 1c:30:b5:a5:b4:bf:0a:35:5b:13:98:a5:86:01:cd: 5b:6e:45:b3:4d:43:04:09:ff:d6:cd:c9:80:1a:1b: b0:84:c1:a6:13:81:e1:67:a9:f7:5b:88:f4:ea:3b: a7:de:8d:54:88:77:55:f1:e7:3e:92:ff:9f:80:dc: ae:06:08:9c:38:3a:ce:ec:40:8a:89:94:47:29:b5: df:a5:20:a4:5c:d8:18:5b:97:cb:2f:10:05:be:a6: 63:fd:eb:54:d3:27:f4:31:4c:ca:f5:94:de:11:00: fc:3b:19:4c:bc:28:cd:a8:1f:9e:f5:c5:ac:8d:3c: e6:fc:9a:d7:7f:8e:44:99:fd:15:a4:b0:de:86:32: 2f:a2:85:96:04:7d:53:10:26:49:64:8e:b6:78:36: ed:ee:96:a4:57:6a:0d:6a:7f:c3:b4:63:b2:d0:cb: e5:0c:48:6b:10:51:0d:30:3b:13:d9:6e:5b:d3:d1: a9:ca:0c:c5:0a:c3:85:fe:6b:7c:a3:35:f7:e9:b9: de:69:b7:ea:67:6f:64:77:17:af:de:99:f3:38:b5: 2c:29:4d:b6:4c:47:03:80:74:b2:25:08:01:06:19: dc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B7:D0:DD:FE:90:14:6E:06:D3:BE:A1:3C:2C:79:4B:52:7F:31:51:F8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/B7D0DDFE90146E06D3BEA13C2C794B527F3151F8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.241.246.0/23 Signature Algorithm: sha256WithRSAEncryption 66:24:10:09:cf:18:2d:2b:1d:6e:f1:4d:89:20:45:34:1f:6a: 56:23:63:1a:c9:cf:3a:ee:ac:4f:6f:8e:6d:98:39:9e:f6:c6: 86:5c:0a:53:a7:df:02:82:76:38:f8:33:c7:da:07:59:e2:3d: 77:2d:97:25:ef:eb:f8:cb:42:a3:b5:43:5a:b3:19:42:5a:5d: 28:99:ab:2e:1f:b5:5a:29:57:7d:df:aa:5a:00:96:61:8b:e5: ae:00:c4:d2:01:47:2f:92:b6:75:b0:eb:14:c7:14:1b:79:38: 89:e3:c2:bb:c5:32:75:4e:c2:9b:87:c2:32:64:a1:cc:15:92: 05:4b:ac:88:07:da:f6:22:59:6b:e1:02:74:ea:d9:8a:57:30: 70:a5:fb:6e:4e:20:ab:3c:bd:8a:da:9a:58:dc:26:68:a6:95: 10:87:bc:56:f6:e1:fe:00:7b:98:50:58:47:64:4e:28:fd:dc: a4:19:4c:d0:79:2f:28:41:0a:c0:2e:40:d1:67:00:c2:06:9f: 1d:e1:b0:ac:17:d2:6b:b0:2e:33:63:89:c3:1c:fa:d0:04:7d: 5b:2e:3a:66:11:28:4b:e4:72:68:e7:a3:66:19:27:0d:36:b7: fe:e8:9b:c9:1f:d5:e2:26:49:99:68:68:33:65:62:fa:49:15: 33:b6:7d:1a -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUa9g3y6FLgzZlv9DvXlYscN2LVZgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjkyNFoX DTI3MDUwMjAyMzQyNFowMzExMC8GA1UEAxMoQjdEMERERkU5MDE0NkUwNkQzQkVB MTNDMkM3OTRCNTI3RjMxNTFGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJlzFPnU4FRU70fwL/3HHMGeUyRa+l3gnRlhegOHHDC1pbS/CjVbE5ilhgHN W25Fs01DBAn/1s3JgBobsITBphOB4Wep91uI9Oo7p96NVIh3VfHnPpL/n4DcrgYI nDg6zuxAiomURym136UgpFzYGFuXyy8QBb6mY/3rVNMn9DFMyvWU3hEA/DsZTLwo zagfnvXFrI085vya13+ORJn9FaSw3oYyL6KFlgR9UxAmSWSOtng27e6WpFdqDWp/ w7RjstDL5QxIaxBRDTA7E9luW9PRqcoMxQrDhf5rfKM19+m53mm36mdvZHcXr96Z 8zi1LClNtkxHA4B0siUIAQYZ3EcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLfQ3f6QFG4G076hPCx5S1J/MVH4MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2YxMDg3MTU5LTMwZGQtNDFiYS05OTc5LTAzNTg4MTEyYTc4MC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mMTA4NzE1 OS0zMGRkLTQxYmEtOTk3OS0wMzU4ODExMmE3ODAvMC9CN0QwRERGRTkwMTQ2RTA2 RDNCRUExM0MyQzc5NEI1MjdGMzE1MUY4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBK/H2MA0GCSqGSIb3DQEBCwUAA4IBAQBmJBAJzxgtKx1u8U2JIEU0H2pWI2Ma yc867qxPb45tmDme9saGXApTp98CgnY4+DPH2gdZ4j13LZcl7+v4y0KjtUNasxlC Wl0omasuH7VaKVd936paAJZhi+WuAMTSAUcvkrZ1sOsUxxQbeTiJ48K7xTJ1TsKb h8IyZKHMFZIFS6yIB9r2Illr4QJ06tmKVzBwpftuTiCrPL2K2ppY3CZoppUQh7xW 9uH+AHuYUFhHZE4o/dykGUzQeS8oQQrALkDRZwDCBp8d4bCsF9JrsC4zY4nDHPrQ BH1bLjpmEShL5HJo56NmGScNNrf+6JvJH9XiJkmZaGgzZWL6SRUztn0a -----END CERTIFICATE-----Generated at Tue May 12 22:45:48 2026 by rpki-client