$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.cer File: D2707D53E07D53B00AF1917C7B06CAFE0B48C105.cer (raw, json) Hash identifier: hFLtc4DjF4iW0imhKgzlK8l+NSKE/G9Y2jkS8wNCnyU= Subject key identifier: D2:70:7D:53:E0:7D:53:B0:0A:F1:91:7C:7B:06:CA:FE:0B:48:C1:05 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 42CBF88CB2376EF07E6D363F2213203994442BCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft caRepository: rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:42:38 +0000 Certificate not after: Sun 02 May 2027 02:47:38 +0000 Subordinate resources: IP: 103.79.130.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:cb:f8:8c:b2:37:6e:f0:7e:6d:36:3f:22:13:20:39:94:44:2b:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:42:38 2026 GMT Not After : May 2 02:47:38 2027 GMT Subject: CN=D2707D53E07D53B00AF1917C7B06CAFE0B48C105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:19:29:62:81:07:c6:06:70:b7:6f:01:ae:6d: 65:90:68:86:b6:5a:b8:b0:9c:35:bf:f9:31:24:c7: 46:19:a5:57:f1:1f:a3:83:5f:a7:01:83:a9:b5:0a: ce:1d:cc:b1:aa:bf:b2:b4:88:41:29:73:e6:e4:d8: 24:f5:46:49:9f:f4:5a:6a:7c:f7:0a:5d:51:df:1d: 63:34:af:10:aa:cb:54:5b:9f:5b:97:79:d5:7e:c9: 4d:b7:92:62:ce:07:2f:6a:ec:17:5f:f3:dd:77:9d: 8c:50:bc:e7:5a:5c:79:f9:53:d0:ac:d4:a4:70:f1: 2a:bc:e2:be:c6:da:90:d7:c0:35:71:e7:96:67:3a: ee:ba:6e:19:2b:a7:bd:5d:e9:ba:cb:69:0a:33:c0: d6:5b:4e:af:ad:d6:19:b9:a2:d8:6c:40:a5:18:f8: 5e:fa:5b:b6:4e:ca:9f:35:74:bd:46:8d:ba:b9:0d: 38:b5:0e:22:a8:de:ff:f7:21:6f:52:90:0f:e3:08: 75:6b:39:ba:bf:88:c0:a9:ad:09:e8:c6:08:72:bd: 9d:c4:9c:14:7d:b8:8d:77:bb:45:47:ef:94:3f:34: 0a:da:89:56:b7:a8:53:2b:8d:40:3f:b9:e1:ee:5d: ee:46:a8:77:d0:f0:d6:5e:25:9b:09:a0:a4:25:73: 09:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D2:70:7D:53:E0:7D:53:B0:0A:F1:91:7C:7B:06:CA:FE:0B:48:C1:05 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/D2707D53E07D53B00AF1917C7B06CAFE0B48C105.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.79.130.0/23 Signature Algorithm: sha256WithRSAEncryption 70:e3:ca:7c:8e:71:07:8e:c9:53:90:76:d0:fb:b4:de:8a:b3: 86:a6:72:a8:ea:23:d0:52:2d:09:5f:8d:8a:32:3b:af:c2:5d: 1d:66:1b:10:77:f4:5f:24:d6:a9:e6:e1:1c:0f:7a:ea:c3:54: a8:28:5c:da:cf:19:d2:b0:59:42:69:10:07:b6:84:93:f2:14: 63:40:1b:6c:62:6c:c2:7b:f3:86:c1:d8:04:87:30:6b:d0:a9: 33:9b:8c:31:46:89:19:bb:a5:40:58:f2:56:6d:2b:cc:4e:a4: 5e:4a:28:cb:b8:64:f6:2e:e7:08:31:76:e5:ac:a9:c7:7d:08: a0:ed:65:a7:6b:3c:50:d9:be:d8:ee:bc:9e:fb:58:16:bd:e9: 38:96:02:05:08:7a:1e:5f:2b:a3:6a:76:61:90:52:bb:ca:75: 30:1e:72:89:c7:0f:27:57:26:30:8e:59:b7:76:8d:fa:ea:40: 1e:50:f2:80:8f:66:5a:0f:ae:be:cb:f7:94:34:7b:8e:09:db: 36:6d:97:e4:66:9b:f7:33:fe:7b:fd:5b:0f:8e:4f:06:b6:38: 25:b0:e5:26:a1:ac:ba:36:34:f4:af:e2:07:87:ce:b3:55:99: ee:99:ff:62:7f:8b:e5:4f:3b:4e:af:97:0d:e0:75:aa:04:2e: 22:03:cb:b5 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUQsv4jLI3bvB+bTY/IhMgOZREK8wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyNDIzOFoX DTI3MDUwMjAyNDczOFowMzExMC8GA1UEAxMoRDI3MDdENTNFMDdENTNCMDBBRjE5 MTdDN0IwNkNBRkUwQjQ4QzEwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMkZKWKBB8YGcLdvAa5tZZBohrZauLCcNb/5MSTHRhmlV/Efo4NfpwGDqbUK zh3Msaq/srSIQSlz5uTYJPVGSZ/0Wmp89wpdUd8dYzSvEKrLVFufW5d51X7JTbeS Ys4HL2rsF1/z3XedjFC851pceflT0KzUpHDxKrzivsbakNfANXHnlmc67rpuGSun vV3pustpCjPA1ltOr63WGbmi2GxApRj4Xvpbtk7KnzV0vUaNurkNOLUOIqje//ch b1KQD+MIdWs5ur+IwKmtCejGCHK9ncScFH24jXe7RUfvlD80CtqJVreoUyuNQD+5 4e5d7kaod9Dw1l4lmwmgpCVzCf8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNJwfVPgfVOwCvGRfHsGyv4LSMEFMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ZhZTI0OTA3LWE2ZjItNGE1NS1hYTZmLTE4YzdkYjE0M2ZlOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mYWUyNDkw Ny1hNmYyLTRhNTUtYWE2Zi0xOGM3ZGIxNDNmZTgvMC9EMjcwN0Q1M0UwN0Q1M0Iw MEFGMTkxN0M3QjA2Q0FGRTBCNDhDMTA1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ0+CMA0GCSqGSIb3DQEBCwUAA4IBAQBw48p8jnEHjslTkHbQ+7TeirOGpnKo 6iPQUi0JX42KMjuvwl0dZhsQd/RfJNap5uEcD3rqw1SoKFzazxnSsFlCaRAHtoST 8hRjQBtsYmzCe/OGwdgEhzBr0Kkzm4wxRokZu6VAWPJWbSvMTqReSijLuGT2LucI MXblrKnHfQig7WWnazxQ2b7Y7rye+1gWvek4lgIFCHoeXyujanZhkFK7ynUwHnKJ xw8nVyYwjlm3do366kAeUPKAj2ZaD66+y/eUNHuOCds2bZfkZpv3M/57/VsPjk8G tjglsOUmoay6NjT0r+IHh86zVZnumf9if4vlTztOr5cN4HWqBC4iA8u1 -----END CERTIFICATE-----Generated at Tue May 12 22:02:42 2026 by rpki-client