$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer File: C7AFEA469B71F53F5DE57E840403A9F9FED41740.cer (raw, json) Hash identifier: u14UV3a0FH/SUhaKCahqppiOkVV2arm5B+uHM5DLRN0= Subject key identifier: C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5C5B0CBD5FD0135CFFAE6C3912093E741754F01D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:01:28 +0000 Certificate not after: Sun 02 May 2027 01:06:28 +0000 Subordinate resources: IP: 103.13.234.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:5b:0c:bd:5f:d0:13:5c:ff:ae:6c:39:12:09:3e:74:17:54:f0:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:01:28 2026 GMT Not After : May 2 01:06:28 2027 GMT Subject: CN=C7AFEA469B71F53F5DE57E840403A9F9FED41740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d2:e6:dd:52:88:2b:71:35:51:27:bb:d6:42: 42:62:de:1b:f8:24:cc:ee:67:d1:55:09:6a:bb:97: 4b:b8:61:e5:74:b8:63:d5:2f:96:28:9a:14:f3:25: 02:71:2b:ef:50:9a:29:8b:f6:71:bf:e6:5b:a3:c0: 98:7f:2b:9d:4a:cb:61:63:a6:6d:6b:c9:fb:a7:cd: 5e:97:2f:e7:c7:b2:05:f5:9c:b7:26:4d:73:7f:67: 74:c3:54:f1:8a:05:3a:83:fd:4b:eb:3f:0a:a5:ad: 23:a9:60:a7:fd:0f:e3:9f:75:d3:cf:9c:fd:2c:d8: 79:66:90:0c:58:31:2d:31:37:b7:d7:e7:50:04:ab: c1:69:21:50:44:2e:c4:04:b7:c3:ed:07:5a:d4:44: 1b:58:d6:10:ba:3a:b9:c1:f7:cb:9d:fd:68:dc:90: 21:60:a5:d7:ca:40:df:26:97:c7:67:f1:c1:b6:68: d4:6b:46:ce:d6:22:d2:a9:ad:fd:22:44:31:20:55: 2c:d4:52:1c:1d:89:b2:c0:54:25:5a:65:61:ba:af: dd:34:8c:76:5f:b6:cf:c5:6a:da:72:fe:ea:c2:a5: 8d:fc:61:f1:e3:e3:9e:c8:74:8f:da:94:53:17:ed: 21:1d:c6:75:35:30:10:b8:b4:2d:2a:98:4c:f5:5b: 20:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:AF:EA:46:9B:71:F5:3F:5D:E5:7E:84:04:03:A9:F9:FE:D4:17:40 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/C7AFEA469B71F53F5DE57E840403A9F9FED41740.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.13.234.0/23 Signature Algorithm: sha256WithRSAEncryption 93:57:2f:18:39:6c:db:26:56:14:19:5c:8c:cf:f0:bb:14:d9: f7:31:06:40:28:e3:9f:ff:6d:b5:c8:66:3a:16:2a:60:27:59: b7:3f:8c:bb:60:f8:ec:2e:59:3e:15:ea:ba:c7:92:16:f9:41: 2b:f1:98:21:71:3b:ac:0d:d4:b5:7d:19:91:54:6c:66:f5:2d: 60:c0:bd:5f:84:d8:ed:51:c2:30:45:1d:e5:90:7c:60:7b:3c: d1:c5:d9:25:76:62:69:97:35:9c:05:3d:24:4c:7d:8b:21:1d: 3e:af:6a:ed:ce:7d:5b:98:3d:1d:a2:2a:65:bb:54:51:5c:a4: c7:32:cc:a7:bb:4c:c5:d0:9b:fe:94:3d:c1:ca:44:57:31:28: 42:75:d3:40:43:88:39:65:ac:c1:20:ca:ea:20:40:32:d4:37: d2:1f:1b:56:cb:65:d3:fd:ac:df:cf:eb:c8:24:4a:37:a2:01: 60:a6:03:29:84:cd:0c:a6:3f:c5:2a:5b:85:5e:81:47:35:1d: 05:2b:87:4d:7d:48:6c:ff:51:2a:29:d8:7f:b0:32:b5:62:75: 5f:e3:bb:21:52:ff:83:ea:d4:35:4f:41:06:a4:e1:fe:dd:ab: fc:71:56:81:78:82:46:ba:51:bb:22:88:d0:1d:80:b8:da:d9: 4e:44:32:9f -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUXFsMvV/QE1z/rmw5Egk+dBdU8B0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDEyOFoX DTI3MDUwMjAxMDYyOFowMzExMC8GA1UEAxMoQzdBRkVBNDY5QjcxRjUzRjVERTU3 RTg0MDQwM0E5RjlGRUQ0MTc0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPS5t1SiCtxNVEnu9ZCQmLeG/gkzO5n0VUJaruXS7hh5XS4Y9UvliiaFPMl AnEr71CaKYv2cb/mW6PAmH8rnUrLYWOmbWvJ+6fNXpcv58eyBfWctyZNc39ndMNU 8YoFOoP9S+s/CqWtI6lgp/0P459108+c/SzYeWaQDFgxLTE3t9fnUASrwWkhUEQu xAS3w+0HWtREG1jWELo6ucH3y539aNyQIWCl18pA3yaXx2fxwbZo1GtGztYi0qmt /SJEMSBVLNRSHB2JssBUJVplYbqv3TSMdl+2z8Vq2nL+6sKljfxh8ePjnsh0j9qU UxftIR3GdTUwELi0LSqYTPVbIGUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMev6kabcfU/XeV+hAQDqfn+1BdAMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdhYzRkNzVlLTNkYTgtNDk5MC04MDQyLTdlMGVjZjU5ZjEzYi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83YWM0ZDc1 ZS0zZGE4LTQ5OTAtODA0Mi03ZTBlY2Y1OWYxM2IvMC9DN0FGRUE0NjlCNzFGNTNG NURFNTdFODQwNDAzQTlGOUZFRDQxNzQwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZw3qMA0GCSqGSIb3DQEBCwUAA4IBAQCTVy8YOWzbJlYUGVyMz/C7FNn3MQZA KOOf/221yGY6FipgJ1m3P4y7YPjsLlk+Feq6x5IW+UEr8ZghcTusDdS1fRmRVGxm 9S1gwL1fhNjtUcIwRR3lkHxgezzRxdkldmJplzWcBT0kTH2LIR0+r2rtzn1bmD0d oiplu1RRXKTHMsynu0zF0Jv+lD3BykRXMShCddNAQ4g5ZazBIMrqIEAy1DfSHxtW y2XT/azfz+vIJEo3ogFgpgMphM0Mpj/FKluFXoFHNR0FK4dNfUhs/1EqKdh/sDK1 YnVf47shUv+D6tQ1T0EGpOH+3av8cVaBeIJGulG7IojQHYC42tlORDKf -----END CERTIFICATE-----Generated at Tue May 12 22:02:35 2026 by rpki-client