$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C7CDFA6BC067C7A495919AAD0E26180B86353954.cer File: C7CDFA6BC067C7A495919AAD0E26180B86353954.cer (raw, json) Hash identifier: 8ZoP0BMB7FtVU7cb6Y/H5Hfd0tyrHK8ApKMPdgMICA8= Subject key identifier: C7:CD:FA:6B:C0:67:C7:A4:95:91:9A:AD:0E:26:18:0B:86:35:39:54 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2A478D0F23F4A8164B13C6A9507C550C2A08094A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft caRepository: rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:52:07 +0000 Certificate not after: Sun 02 May 2027 00:57:07 +0000 Subordinate resources: IP: 103.160.202.0/23 IP: 2001:df1:6bc0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:47:8d:0f:23:f4:a8:16:4b:13:c6:a9:50:7c:55:0c:2a:08:09:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:52:07 2026 GMT Not After : May 2 00:57:07 2027 GMT Subject: CN=C7CDFA6BC067C7A495919AAD0E26180B86353954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b9:7f:88:33:34:97:72:93:16:29:96:8f:a6: f5:b1:f6:3f:7c:2f:4d:f9:d5:0b:38:61:e3:8f:c8: 18:72:d3:61:a0:43:de:e1:2c:cb:64:3c:ca:7e:f8: e9:2e:25:5a:ec:5d:30:95:e9:a6:85:52:71:6b:25: 8f:f1:c3:4d:3f:f9:48:25:d0:50:d6:c7:c5:30:8f: 8c:bc:0c:06:24:3b:1c:d7:51:a6:41:7a:bc:a9:22: a5:bc:d5:69:74:35:40:d8:4e:bc:3d:ac:d9:cd:a4: 4c:89:cb:f2:01:33:c3:4f:cb:ef:52:73:fa:1c:f0: 9a:1b:40:2b:60:56:da:da:f9:09:1c:42:c5:0d:fb: 64:82:ad:48:87:e9:c3:da:7e:7f:28:fa:e9:68:ff: 2b:01:5e:8b:97:a2:8b:1a:3f:08:52:f1:b0:c9:f0: 5d:e5:59:8a:cb:b3:b1:c0:b4:9e:02:a0:bc:aa:3f: 05:98:31:b4:be:2c:77:83:e9:4c:f9:5e:15:81:dc: ec:97:56:76:4e:be:d0:5f:bc:94:3f:04:d8:3c:6c: e0:75:30:a9:5e:ad:ab:d6:47:8d:7a:dc:6a:83:01: 47:47:00:e6:20:6c:29:15:25:59:be:8f:f7:2f:8c: a9:72:a5:f1:ee:37:1d:c0:3c:6e:31:3f:01:6e:1b: 8f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:CD:FA:6B:C0:67:C7:A4:95:91:9A:AD:0E:26:18:0B:86:35:39:54 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/C7CDFA6BC067C7A495919AAD0E26180B86353954.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.202.0/23 IPv6: 2001:df1:6bc0::/48 Signature Algorithm: sha256WithRSAEncryption 89:e4:68:58:87:56:eb:25:dc:fe:c0:ad:b6:8c:d7:81:05:2b: fb:01:82:d7:d5:9c:3b:71:6b:ad:a6:1b:c9:4f:e7:41:9d:3f: 59:e9:a2:dc:e7:e1:dd:9f:79:55:00:21:36:aa:7f:df:ca:13: e0:04:1f:7b:cc:75:e3:ad:85:dc:43:74:90:f3:6c:45:d1:2f: 81:05:ed:d9:0c:df:88:a3:b4:53:85:46:4f:f8:08:19:21:4d: 80:8e:5f:15:0d:47:7f:68:ed:41:82:01:5b:79:1c:17:9f:bf: b6:11:cd:64:c3:87:5c:61:5d:d6:2a:65:e3:05:72:f3:06:b5: 55:92:17:9f:2f:af:3c:eb:7a:68:63:9f:00:63:ff:c4:8a:fa: 3f:69:2e:62:06:b3:37:59:9f:0f:2f:ca:01:8c:ed:91:14:d3: c1:bf:16:9f:57:41:45:d5:f3:b5:86:b7:00:13:0f:2e:96:1a: 46:90:b7:e0:f1:71:f3:3f:75:9d:ca:5b:b0:c2:63:ed:ea:b0: f6:a9:37:66:f2:c0:d5:64:c0:5f:57:a8:57:4d:9d:9a:03:a5: 24:b7:1d:18:38:25:b3:e3:df:48:a6:dc:fb:04:e6:67:70:f8: 2a:3f:15:df:39:d7:2d:06:fa:3e:75:83:e6:ee:a7:cf:ac:c3: 5a:65:35:96 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUKkeNDyP0qBZLE8apUHxVDCoICUowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTIwN1oX DTI3MDUwMjAwNTcwN1owMzExMC8GA1UEAxMoQzdDREZBNkJDMDY3QzdBNDk1OTE5 QUFEMEUyNjE4MEI4NjM1Mzk1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANu5f4gzNJdykxYplo+m9bH2P3wvTfnVCzhh44/IGHLTYaBD3uEsy2Q8yn74 6S4lWuxdMJXppoVScWslj/HDTT/5SCXQUNbHxTCPjLwMBiQ7HNdRpkF6vKkipbzV aXQ1QNhOvD2s2c2kTInL8gEzw0/L71Jz+hzwmhtAK2BW2tr5CRxCxQ37ZIKtSIfp w9p+fyj66Wj/KwFei5eiixo/CFLxsMnwXeVZisuzscC0ngKgvKo/BZgxtL4sd4Pp TPleFYHc7JdWdk6+0F+8lD8E2Dxs4HUwqV6tq9ZHjXrcaoMBR0cA5iBsKRUlWb6P 9y+MqXKl8e43HcA8bjE/AW4bj8ECAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMfN+mvAZ8eklZGarQ4mGAuGNTlUMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzZkNjRiZjZhLTQzMDItNDYwZi05NjY5LTA5YTUwYTczYWYxYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82ZDY0YmY2 YS00MzAyLTQ2MGYtOTY2OS0wOWE1MGE3M2FmMWEvMC9DN0NERkE2QkMwNjdDN0E0 OTU5MTlBQUQwRTI2MTgwQjg2MzUzOTU0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ6DKMA8EAgACMAkDBwAgAQ3xa8AwDQYJKoZIhvcNAQELBQADggEBAInkaFiH Vusl3P7ArbaM14EFK/sBgtfVnDtxa62mG8lP50GdP1npotzn4d2feVUAITaqf9/K E+AEH3vMdeOthdxDdJDzbEXRL4EF7dkM34ijtFOFRk/4CBkhTYCOXxUNR39o7UGC AVt5HBefv7YRzWTDh1xhXdYqZeMFcvMGtVWSF58vrzzremhjnwBj/8SK+j9pLmIG szdZnw8vygGM7ZEU08G/Fp9XQUXV87WGtwATDy6WGkaQt+DxcfM/dZ3KW7DCY+3q sPapN2bywNVkwF9XqFdNnZoDpSS3HRg4JbPj30im3PsE5mdw+Co/Fd851y0G+j51 g+bup8+sw1plNZY= -----END CERTIFICATE-----Generated at Tue May 12 22:16:14 2026 by rpki-client