$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer File: C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer (raw, json) Hash identifier: yGveYqFwPMb1L+6rVX63FC/rerfFbqeI9feWvGGSpYw= Subject key identifier: C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1CAD393C38D51F872CC580D0E668703A75CB9D87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft caRepository: rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:55:03 +0000 Certificate not after: Sun 02 May 2027 00:00:03 +0000 Subordinate resources: IP: 103.228.116.0/22 IP: 137.59.160.0/22 IP: 2400:cd80::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ad:39:3c:38:d5:1f:87:2c:c5:80:d0:e6:68:70:3a:75:cb:9d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:55:03 2026 GMT Not After : May 2 00:00:03 2027 GMT Subject: CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ee:01:e8:18:5f:a7:bc:ec:d6:fa:3e:1f:a2: 7d:19:95:a4:d8:de:7a:90:4a:c0:e7:26:8b:33:de: e0:36:cd:e0:bd:c5:d8:68:6c:f7:1e:d7:43:ae:ba: bc:bb:7a:fa:0f:8b:a2:bf:2c:e0:52:6b:c2:58:7e: 54:0c:1b:5c:9c:35:9e:cf:f0:95:5e:38:15:e6:20: 2d:b8:03:52:cb:2c:1e:cf:40:49:00:7f:43:a9:21: b6:a9:f4:f7:13:46:5a:72:7e:fd:2e:01:20:c6:aa: b6:c1:6e:b0:72:5f:c6:c8:8e:2a:36:af:88:ca:d0: 1d:0d:57:f8:c7:5e:cc:2d:1a:56:30:61:5a:30:33: 39:83:84:f3:7f:19:6f:82:17:19:ed:4d:d4:c6:b2: a2:72:58:3d:40:b9:da:68:7e:57:a1:8b:1b:72:78: e1:7a:6b:87:a0:8c:35:15:9d:76:31:70:be:61:6f: de:d2:e2:3f:c7:2a:5e:be:be:48:35:da:5d:c8:03: 6d:0b:9d:55:4a:2c:69:99:7e:fa:13:f2:97:0b:c3: 55:78:92:d0:5c:dc:d0:45:1d:f9:f3:e2:a7:6a:6a: 14:ff:9e:d6:4c:d3:68:3f:d7:45:7a:ba:1c:a2:0a: d1:4b:dc:ac:1d:b6:eb:fe:22:ad:8c:ce:2c:50:0a: da:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.228.116.0/22 137.59.160.0/22 IPv6: 2400:cd80::/32 Signature Algorithm: sha256WithRSAEncryption 9b:8d:9c:3c:45:82:c2:c6:b3:77:ad:fe:83:43:b6:81:c3:d7: c7:38:76:64:af:ef:4a:32:df:13:80:66:09:3b:43:0c:bb:6e: 50:0b:e0:d8:5b:34:52:58:61:82:85:36:a0:c8:eb:dc:89:1a: 6d:97:f2:a0:f0:f9:cf:34:b5:8a:fb:db:17:42:7b:79:7b:91: e2:68:a9:74:e3:60:1b:b0:25:97:e0:33:57:24:18:50:fd:b1: 09:1d:6d:46:d8:89:ba:c4:d5:07:7f:37:f7:02:44:66:31:8e: cb:ad:a4:67:c1:13:71:f6:cc:29:e3:46:e2:dd:48:84:42:5b: b5:af:b4:c9:3d:04:57:3f:54:08:23:ac:64:48:62:9a:f9:71: 7e:22:ab:bd:e7:cd:45:9e:9a:04:fd:ad:e4:ec:ff:cc:8f:2c: 29:fe:63:a8:cc:1a:f9:11:ea:cc:33:16:b1:b4:69:41:36:d1: 9c:04:c9:ea:b8:16:6f:bb:4d:52:db:8f:85:d5:4c:48:1b:7d: 8b:f5:ef:25:1a:4d:64:b4:30:ba:28:84:d1:07:49:43:ed:05: 09:25:99:d8:c5:4c:12:3c:d8:73:89:4a:2f:4b:46:68:e4:27: 8e:d7:df:81:d8:27:ef:21:94:ed:75:90:02:e5:04:4d:14:d1: 32:ca:a0:c4 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUHK05PDjVH4csxYDQ5mhwOnXLnYcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTUwM1oX DTI3MDUwMjAwMDAwM1owMzExMC8GA1UEAxMoQzc2RkFFNzBFNzE0NjQ0OTZFRjRG QThFRUVGMERGNUM5MzEyQzdDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ7uAegYX6e87Nb6Ph+ifRmVpNjeepBKwOcmizPe4DbN4L3F2Ghs9x7XQ666 vLt6+g+Lor8s4FJrwlh+VAwbXJw1ns/wlV44FeYgLbgDUsssHs9ASQB/Q6khtqn0 9xNGWnJ+/S4BIMaqtsFusHJfxsiOKjaviMrQHQ1X+MdezC0aVjBhWjAzOYOE838Z b4IXGe1N1MayonJYPUC52mh+V6GLG3J44Xprh6CMNRWddjFwvmFv3tLiP8cqXr6+ SDXaXcgDbQudVUosaZl++hPylwvDVXiS0Fzc0EUd+fPip2pqFP+e1kzTaD/XRXq6 HKIK0UvcrB226/4irYzOLFAK2s8CAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMdvrnDnFGRJbvT6ju7w31yTEsfJMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE3YTJkMjViLWNiMTgtNDViZS05ZmExLTE1NGNhMTU3OTIyMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xN2EyZDI1 Yi1jYjE4LTQ1YmUtOWZhMS0xNTRjYTE1NzkyMjMvMC9DNzZGQUU3MEU3MTQ2NDQ5 NkVGNEZBOEVFRUYwREY1QzkzMTJDN0M5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAM AwQCZ+R0AwQCiTugMA0EAgACMAcDBQAkAM2AMA0GCSqGSIb3DQEBCwUAA4IBAQCb jZw8RYLCxrN3rf6DQ7aBw9fHOHZkr+9KMt8TgGYJO0MMu25QC+DYWzRSWGGChTag yOvciRptl/Kg8PnPNLWK+9sXQnt5e5HiaKl042AbsCWX4DNXJBhQ/bEJHW1G2Im6 xNUHfzf3AkRmMY7LraRnwRNx9swp40bi3UiEQlu1r7TJPQRXP1QII6xkSGKa+XF+ Iqu9581FnpoE/a3k7P/Mjywp/mOozBr5EerMMxaxtGlBNtGcBMnquBZvu01S24+F 1UxIG32L9e8lGk1ktDC6KITRB0lD7QUJJZnYxUwSPNhziUovS0Zo5CeO19+B2Cfv IZTtdZAC5QRNFNEyyqDE -----END CERTIFICATE-----Generated at Tue May 12 22:47:45 2026 by rpki-client