$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.cer File: C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.cer (raw, json) Hash identifier: t+GshTGMjP87jbyUYvulvtLC07G5FBAAko0/AX/ONBc= Subject key identifier: C7:DE:60:25:CC:D5:68:B7:25:D1:5D:1F:9F:FA:30:08:9F:8A:DA:01 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 62835B4684D661D90D7E917ED51FB4EB1131144D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:50:55 +0000 Certificate not after: Sun 02 May 2027 01:55:55 +0000 Subordinate resources: IP: 103.156.132.0/23 IP: 2406:8940::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:83:5b:46:84:d6:61:d9:0d:7e:91:7e:d5:1f:b4:eb:11:31:14:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:50:55 2026 GMT Not After : May 2 01:55:55 2027 GMT Subject: CN=C7DE6025CCD568B725D15D1F9FFA30089F8ADA01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7e:ff:d9:00:4e:ea:71:e3:f0:56:60:77:14: 46:97:b6:d9:14:e6:97:d9:7f:9b:5e:2d:6d:3d:7a: 28:b9:60:e3:4e:83:0f:15:59:e1:8b:28:4c:3a:03: a5:d5:22:bb:58:99:2b:fe:98:ef:84:a3:f4:1d:b8: 0c:91:83:b9:21:1f:4b:fa:11:b7:1f:76:16:6c:a2: 87:1c:a5:d1:20:a5:73:3d:d9:0c:52:eb:ea:bb:df: 69:be:5e:a0:c2:d4:f3:b8:c8:46:6f:75:32:60:6b: 55:b2:bb:9f:ef:ca:a7:f9:16:e6:a8:42:7e:f0:2c: f1:7a:d1:d0:9f:76:8f:78:fe:61:e9:fa:97:19:ce: 29:f0:cf:98:58:39:c3:9c:d5:c6:e7:82:99:c5:22: 6a:74:f1:94:b9:82:72:98:f7:f4:35:59:39:13:b1: 13:c1:37:fd:76:ae:52:25:36:6c:08:d3:ab:54:23: c3:3b:88:5b:f4:8f:4d:10:79:39:e1:d8:d2:ba:7c: 62:d1:ef:a6:74:6d:4a:8c:2a:6e:e0:81:d9:89:36: cf:6d:31:1d:0d:88:fb:e1:e8:ba:a3:f6:af:0b:f2: 65:bc:40:65:17:95:1b:1d:ba:69:45:bb:11:a2:8b: f8:d5:2c:12:cd:bb:28:02:83:2b:aa:32:09:8a:15: 6f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:DE:60:25:CC:D5:68:B7:25:D1:5D:1F:9F:FA:30:08:9F:8A:DA:01 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/C7DE6025CCD568B725D15D1F9FFA30089F8ADA01.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.132.0/23 IPv6: 2406:8940::/32 Signature Algorithm: sha256WithRSAEncryption 94:b5:d3:2f:81:de:04:b4:e0:c2:2b:23:65:11:c6:10:f7:31: 11:aa:f7:d3:05:8b:b8:97:4f:4a:98:35:d2:a4:a3:be:eb:6f: b7:16:9e:88:ae:8d:16:6c:c9:90:76:27:55:16:15:94:bc:31: e0:4e:aa:a8:94:db:29:51:93:67:2f:08:ce:95:96:26:ab:3a: 25:a5:9d:d0:b2:33:8d:1f:a2:85:ba:8a:91:b3:43:16:37:f6: df:d8:d8:56:81:02:dc:20:a4:44:c6:2e:0e:a6:9b:8c:22:21: e6:32:8b:ce:6a:49:0e:1f:6c:12:60:bf:92:4e:95:2e:d2:2f: bb:7d:b0:e7:34:26:89:79:a7:18:be:e0:a1:74:14:eb:c1:2c: ef:94:d1:de:23:cd:71:25:0e:49:55:26:4c:7f:d8:90:df:68: 49:06:39:3a:03:22:69:ad:1d:78:9d:72:ae:0e:a6:1f:5a:06: 30:56:0a:07:14:d6:27:41:dc:4a:96:52:79:5b:59:7e:f5:12: 61:ba:81:52:93:ab:37:63:6c:7c:d3:9f:7c:a7:0b:bd:4b:bd: 8f:67:f6:15:cb:a3:b4:9b:aa:1f:e0:72:30:4e:6b:1d:e3:21: 40:5e:05:bc:64:f5:cc:ff:c5:7f:50:5c:7f:29:86:21:14:86: b2:85:0b:40 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUYoNbRoTWYdkNfpF+1R+06xExFE0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTA1NVoX DTI3MDUwMjAxNTU1NVowMzExMC8GA1UEAxMoQzdERTYwMjVDQ0Q1NjhCNzI1RDE1 RDFGOUZGQTMwMDg5RjhBREEwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKZ+/9kATupx4/BWYHcURpe22RTml9l/m14tbT16KLlg406DDxVZ4YsoTDoD pdUiu1iZK/6Y74Sj9B24DJGDuSEfS/oRtx92Fmyihxyl0SClcz3ZDFLr6rvfab5e oMLU87jIRm91MmBrVbK7n+/Kp/kW5qhCfvAs8XrR0J92j3j+Yen6lxnOKfDPmFg5 w5zVxueCmcUianTxlLmCcpj39DVZOROxE8E3/XauUiU2bAjTq1QjwzuIW/SPTRB5 OeHY0rp8YtHvpnRtSowqbuCB2Yk2z20xHQ2I++HouqP2rwvyZbxAZReVGx26aUW7 EaKL+NUsEs27KAKDK6oyCYoVb7MCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMfeYCXM1Wi3JdFdH5/6MAifitoBMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2M2NDBmNjcyLTc2ZDQtNDE1OC1hZWRmLTZkZjBhZjI5ZjM1Yi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jNjQwZjY3 Mi03NmQ0LTQxNTgtYWVkZi02ZGYwYWYyOWYzNWIvMC9DN0RFNjAyNUNDRDU2OEI3 MjVEMTVEMUY5RkZBMzAwODlGOEFEQTAxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ5yEMA0EAgACMAcDBQAkBolAMA0GCSqGSIb3DQEBCwUAA4IBAQCUtdMvgd4E tODCKyNlEcYQ9zERqvfTBYu4l09KmDXSpKO+62+3Fp6Iro0WbMmQdidVFhWUvDHg TqqolNspUZNnLwjOlZYmqzolpZ3QsjONH6KFuoqRs0MWN/bf2NhWgQLcIKRExi4O ppuMIiHmMovOakkOH2wSYL+STpUu0i+7fbDnNCaJeacYvuChdBTrwSzvlNHeI81x JQ5JVSZMf9iQ32hJBjk6AyJprR14nXKuDqYfWgYwVgoHFNYnQdxKllJ5W1l+9RJh uoFSk6s3Y2x80598pwu9S72PZ/YVy6O0m6of4HIwTmsd4yFAXgW8ZPXM/8V/UFx/ KYYhFIayhQtA -----END CERTIFICATE-----Generated at Tue May 12 22:16:13 2026 by rpki-client