$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C797413CFB24F6454A9F7473DF020BB107134EE7.cer File: C797413CFB24F6454A9F7473DF020BB107134EE7.cer (raw, json) Hash identifier: m1PBjcePHv0wjvl0TeIuzcOELt+WqjKKi8glEduJmzY= Subject key identifier: C7:97:41:3C:FB:24:F6:45:4A:9F:74:73:DF:02:0B:B1:07:13:4E:E7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 18A767DCE6D43FC0A7BD607DC74CE06384AAE50D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.mft caRepository: rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:16:53 +0000 Certificate not after: Sun 02 May 2027 00:21:53 +0000 Subordinate resources: IP: 103.156.57.0/24 IP: 2406:8240::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a7:67:dc:e6:d4:3f:c0:a7:bd:60:7d:c7:4c:e0:63:84:aa:e5:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:16:53 2026 GMT Not After : May 2 00:21:53 2027 GMT Subject: CN=C797413CFB24F6454A9F7473DF020BB107134EE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:33:74:c8:2d:64:c5:1d:b9:d4:d3:26:bf:c7: ec:77:27:b6:c6:71:81:ce:ab:af:64:03:ed:b4:1a: 64:ba:2d:2a:63:48:5a:88:80:6a:dc:2d:8a:c0:6e: 4d:6a:d6:11:b9:65:f3:48:3d:fb:83:20:95:b9:58: dc:dc:50:cc:b2:60:bd:7a:1a:d3:dd:c3:45:91:45: 0d:79:8f:ac:40:e4:6c:4e:98:c3:ad:46:54:fc:9b: 42:79:4d:72:b0:df:3d:a5:19:52:46:a2:b5:4d:62: aa:35:d4:6a:aa:81:dc:9b:be:9e:c7:9f:25:b9:5a: 5a:9a:e5:83:b7:9a:95:87:1c:36:ae:5e:ab:ce:18: 7d:97:67:bb:a0:0b:63:e1:c0:fe:69:2f:87:df:76: 7c:ed:98:b8:85:eb:05:e5:14:e2:1c:d4:21:12:48: 4d:8d:e5:e3:02:fe:de:d9:22:4e:ae:3d:05:95:dd: 08:74:a4:59:41:6b:83:a0:10:88:d4:21:c8:94:1a: 1a:c4:7e:4f:59:b8:21:98:a2:e8:66:d7:ef:60:9a: b5:43:4a:05:da:2a:5c:ef:94:66:b5:56:0b:a4:21: 6b:98:b0:1b:13:3c:9a:13:e8:a9:d6:72:23:22:67: 45:15:2d:a8:52:33:9a:0e:cb:83:6a:2d:94:cc:cf: 94:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:97:41:3C:FB:24:F6:45:4A:9F:74:73:DF:02:0B:B1:07:13:4E:E7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/C797413CFB24F6454A9F7473DF020BB107134EE7.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.57.0/24 IPv6: 2406:8240::/32 Signature Algorithm: sha256WithRSAEncryption 30:51:7a:d7:6b:06:dd:7f:65:94:21:02:7a:9b:dd:76:f3:ef: 42:c0:b3:37:0f:22:5f:1d:5b:42:06:be:84:7e:46:f2:59:29: dc:01:33:af:ee:06:8a:db:1e:22:a0:5d:63:ba:62:68:7e:6b: 2a:88:3b:fe:99:22:97:32:4c:40:d1:04:1f:ac:fd:ce:41:87: 7c:4b:8c:81:06:60:22:9f:51:2c:39:ce:cc:e8:25:0a:78:32: cd:ba:aa:64:c1:c0:1d:2e:da:1c:ae:0a:2e:78:4d:2f:5e:ee: 3e:44:41:c6:e9:58:28:01:1a:b7:40:2d:8e:26:b2:40:39:d7: e9:42:9a:6d:25:9e:90:66:ac:cc:68:4c:b9:c6:b3:4c:4a:5c: 14:cc:d2:99:9b:33:bd:fd:7d:c2:95:7f:9f:d6:13:d7:0b:2e: 43:47:93:9e:c5:a8:ae:e7:88:91:ed:25:ec:78:af:7f:73:15: 24:2f:ec:85:e2:ff:23:e0:11:bc:1b:14:c4:11:55:a5:90:88: b6:f2:25:b2:6d:c8:4a:0e:42:59:b7:62:09:a9:f3:c6:5d:53: e4:53:fd:bc:58:35:86:1f:1b:1d:13:34:c6:83:e0:e3:21:cb: b7:8b:00:2d:3a:8e:d8:9e:bc:b4:f7:21:ac:e7:2c:ef:78:89: 9c:6e:97:fe -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUGKdn3ObUP8CnvWB9x0zgY4Sq5Q0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTY1M1oX DTI3MDUwMjAwMjE1M1owMzExMC8GA1UEAxMoQzc5NzQxM0NGQjI0RjY0NTRBOUY3 NDczREYwMjBCQjEwNzEzNEVFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPEzdMgtZMUdudTTJr/H7HcntsZxgc6rr2QD7bQaZLotKmNIWoiAatwtisBu TWrWEbll80g9+4MglblY3NxQzLJgvXoa093DRZFFDXmPrEDkbE6Yw61GVPybQnlN crDfPaUZUkaitU1iqjXUaqqB3Ju+nsefJblaWprlg7ealYccNq5eq84YfZdnu6AL Y+HA/mkvh992fO2YuIXrBeUU4hzUIRJITY3l4wL+3tkiTq49BZXdCHSkWUFrg6AQ iNQhyJQaGsR+T1m4IZii6GbX72CatUNKBdoqXO+UZrVWC6Qha5iwGxM8mhPoqdZy IyJnRRUtqFIzmg7Lg2otlMzPlPkCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMeXQTz7JPZFSp90c98CC7EHE07nMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM3OGJiZmQ0LTY3YjQtNDk4ZC04NDExLWU5NjRjNWZlMTE3Mi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zNzhiYmZk NC02N2I0LTQ5OGQtODQxMS1lOTY0YzVmZTExNzIvMC9DNzk3NDEzQ0ZCMjRGNjQ1 NEE5Rjc0NzNERjAyMEJCMTA3MTM0RUU3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQAZ5w5MA0EAgACMAcDBQAkBoJAMA0GCSqGSIb3DQEBCwUAA4IBAQAwUXrXawbd f2WUIQJ6m9128+9CwLM3DyJfHVtCBr6EfkbyWSncATOv7gaK2x4ioF1jumJofmsq iDv+mSKXMkxA0QQfrP3OQYd8S4yBBmAin1EsOc7M6CUKeDLNuqpkwcAdLtocrgou eE0vXu4+REHG6VgoARq3QC2OJrJAOdfpQpptJZ6QZqzMaEy5xrNMSlwUzNKZmzO9 /X3ClX+f1hPXCy5DR5Oexaiu54iR7SXseK9/cxUkL+yF4v8j4BG8GxTEEVWlkIi2 8iWybchKDkJZt2IJqfPGXVPkU/28WDWGHxsdEzTGg+DjIcu3iwAtOo7Ynry09yGs 5yzveImcbpf+ -----END CERTIFICATE-----Generated at Tue May 12 22:16:44 2026 by rpki-client