$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.cer File: B7D58420DE53EA9E240A03F3E3E81F3D74C05972.cer (raw, json) Hash identifier: MxMUY39bX72giiKVoXcRf0dlNXba6Pw9Qfhl+UhjLr4= Subject key identifier: B7:D5:84:20:DE:53:EA:9E:24:0A:03:F3:E3:E8:1F:3D:74:C0:59:72 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1D855C2740D71E82ABBC313494DFCCB0A143EC95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:56:50 +0000 Certificate not after: Sun 02 May 2027 00:01:50 +0000 Subordinate resources: IP: 103.121.168.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:85:5c:27:40:d7:1e:82:ab:bc:31:34:94:df:cc:b0:a1:43:ec:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:56:50 2026 GMT Not After : May 2 00:01:50 2027 GMT Subject: CN=B7D58420DE53EA9E240A03F3E3E81F3D74C05972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:62:3a:30:a0:a7:c3:bc:b1:34:10:eb:36:d7: 3d:2c:8d:34:02:56:cd:d2:76:f0:79:57:e5:9c:0c: 00:83:6e:fe:0f:66:fb:1a:04:64:15:78:af:cd:2e: 08:fb:32:c0:06:9a:45:93:2e:53:9b:6b:89:82:ac: dd:ab:e0:96:06:a1:67:d5:af:c1:7b:6f:ec:b8:f8: 6d:7b:ab:88:3f:83:63:57:7d:aa:44:3e:88:24:fb: 80:cb:fd:53:13:43:ea:44:8b:02:7e:ca:a4:b2:56: 28:10:0d:64:34:80:ea:9d:0e:38:fa:e3:0b:98:5d: 14:00:50:56:74:da:00:01:7d:b3:31:46:10:0d:c9: 28:4e:88:79:53:cc:05:8f:a3:89:29:5b:d0:60:71: 49:26:2f:53:68:d2:d3:aa:5f:20:63:05:75:9f:b0: 7b:46:f3:3a:34:93:76:f7:46:58:f7:24:91:81:2f: 73:62:d8:bb:ba:83:a3:9e:2a:61:03:45:6d:7f:08: 94:96:62:2a:fb:01:8e:33:4f:66:d1:b9:3e:43:ac: 6a:01:74:51:bc:5c:59:b5:c5:0b:fc:d2:60:8e:7a: 77:fa:be:5f:f3:11:41:a7:9d:3a:87:9c:0f:f7:e3: 0c:c5:49:79:1e:db:77:1a:f3:05:7a:ee:ce:c5:92: 79:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B7:D5:84:20:DE:53:EA:9E:24:0A:03:F3:E3:E8:1F:3D:74:C0:59:72 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/B7D58420DE53EA9E240A03F3E3E81F3D74C05972.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.168.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:8b:f8:e9:ca:5f:ad:05:aa:49:d6:c3:db:7b:d0:e8:be:db: b5:cc:c0:7a:1f:85:b4:72:97:c2:3f:f4:2c:9d:4d:86:12:62: e6:2b:56:83:8f:e4:fa:44:c3:b5:36:89:a6:63:ba:79:87:40: 99:0d:76:5c:6d:3a:a4:c3:51:24:6a:bb:d4:46:e2:17:b9:1b: 55:7c:6f:33:c4:9b:53:3e:b1:a1:16:9a:63:c5:54:e2:e1:08: a6:2f:8f:7c:af:56:c1:67:ea:56:29:71:e1:3f:04:18:a7:d2: 6e:39:5f:81:87:4c:0d:4f:ca:a0:c8:55:57:af:9a:31:a2:48: a0:67:e7:60:b2:90:fb:6b:55:8f:af:50:3f:27:ef:cd:1a:12: 9a:86:fe:9f:7d:de:4c:2a:c3:68:34:4e:20:df:6d:95:7d:16: 1a:4b:c3:20:59:70:c9:ae:55:82:58:f4:d0:cd:6d:f5:c8:d3: b0:14:c0:42:15:b7:24:4b:9c:6a:55:ea:1a:e0:2e:47:b7:c0: 24:59:76:4a:1a:68:79:5b:8b:63:bc:f7:1b:02:c8:a7:6d:db: bd:cb:b8:cc:e7:b5:4e:04:9e:60:dc:2a:a1:c4:93:93:36:0b: f9:4b:a7:6b:1b:89:63:d5:ed:57:88:88:a1:a6:35:d9:e8:45: 4c:08:84:e3 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUHYVcJ0DXHoKrvDE0lN/MsKFD7JUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTY1MFoX DTI3MDUwMjAwMDE1MFowMzExMC8GA1UEAxMoQjdENTg0MjBERTUzRUE5RTI0MEEw M0YzRTNFODFGM0Q3NEMwNTk3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL5iOjCgp8O8sTQQ6zbXPSyNNAJWzdJ28HlX5ZwMAINu/g9m+xoEZBV4r80u CPsywAaaRZMuU5triYKs3avglgahZ9WvwXtv7Lj4bXuriD+DY1d9qkQ+iCT7gMv9 UxND6kSLAn7KpLJWKBANZDSA6p0OOPrjC5hdFABQVnTaAAF9szFGEA3JKE6IeVPM BY+jiSlb0GBxSSYvU2jS06pfIGMFdZ+we0bzOjSTdvdGWPckkYEvc2LYu7qDo54q YQNFbX8IlJZiKvsBjjNPZtG5PkOsagF0UbxcWbXFC/zSYI56d/q+X/MRQaedOoec D/fjDMVJeR7bdxrzBXruzsWSefECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLfVhCDeU+qeJAoD8+PoHz10wFlyMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzFhNThhZjI0LTQ2M2ItNDRkOC1iNmYwLTM5YjgyYjQ1OGY3NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xYTU4YWYy NC00NjNiLTQ0ZDgtYjZmMC0zOWI4MmI0NThmNzUvMC9CN0Q1ODQyMERFNTNFQTlF MjQwQTAzRjNFM0U4MUYzRDc0QzA1OTcyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3moMA0GCSqGSIb3DQEBCwUAA4IBAQBci/jpyl+tBapJ1sPbe9Dovtu1zMB6 H4W0cpfCP/QsnU2GEmLmK1aDj+T6RMO1NommY7p5h0CZDXZcbTqkw1EkarvURuIX uRtVfG8zxJtTPrGhFppjxVTi4QimL498r1bBZ+pWKXHhPwQYp9JuOV+Bh0wNT8qg yFVXr5oxokigZ+dgspD7a1WPr1A/J+/NGhKahv6ffd5MKsNoNE4g322VfRYaS8Mg WXDJrlWCWPTQzW31yNOwFMBCFbckS5xqVeoa4C5Ht8AkWXZKGmh5W4tjvPcbAsin bdu9y7jM57VOBJ5g3CqhxJOTNgv5S6drG4lj1e1XiIihpjXZ6EVMCITj -----END CERTIFICATE-----Generated at Wed May 13 01:44:31 2026 by rpki-client