$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer File: D7F0443E844F58413FEE61023C66F3C2AF619180.cer (raw, json) Hash identifier: CbyPNSz0jBRtTCLMLhagXNDNpf+0GNucQWo2xA5oFHI= Subject key identifier: D7:F0:44:3E:84:4F:58:41:3F:EE:61:02:3C:66:F3:C2:AF:61:91:80 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 38D7731740857DF989BEB49EA95B71749243B1DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:02:57 +0000 Certificate not after: Sun 02 May 2027 01:07:57 +0000 Subordinate resources: IP: 103.55.254.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:d7:73:17:40:85:7d:f9:89:be:b4:9e:a9:5b:71:74:92:43:b1:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:02:57 2026 GMT Not After : May 2 01:07:57 2027 GMT Subject: CN=D7F0443E844F58413FEE61023C66F3C2AF619180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:dd:8f:0f:ff:5c:2a:d1:37:e9:33:6c:a6: 38:86:ee:24:b5:74:b3:27:56:8e:5a:40:48:95:3d: 6e:ff:08:84:6a:9a:4d:49:2a:09:22:f2:db:0c:e4: 56:75:ce:ff:03:ca:6f:b3:4c:0e:b3:d8:ea:f8:4f: fc:6f:81:f5:9e:3d:72:d5:55:8a:ff:5c:02:99:bc: 8d:e1:00:5e:a4:94:d9:c0:62:88:9e:50:71:38:21: 0b:50:75:f6:10:d0:5a:f5:bf:16:a7:57:d7:72:f0: a2:e1:78:93:c1:8b:ee:41:25:0a:be:d5:13:85:13: fa:cc:45:e0:d5:29:c0:d9:ff:9f:a5:64:19:f6:5b: 4a:d9:a6:bf:08:a7:8f:a0:18:3e:74:c2:7c:f9:e5: 4f:d8:44:a3:59:02:13:c2:93:2a:41:f5:ce:e1:ff: 28:e9:03:23:03:9a:4b:3a:44:7a:2a:35:7c:4e:1f: 74:ce:27:5d:95:d0:df:d6:88:66:ba:a1:77:e3:5c: 3b:6d:14:12:cd:ee:3e:1b:d7:6c:34:53:43:09:98: c4:b3:5b:d5:05:00:17:05:3b:48:74:a0:29:f1:ad: 9d:ca:4d:a0:22:5d:72:0c:90:4e:46:81:08:95:c7: 88:a0:6b:49:57:fb:c3:b6:7c:4d:ee:b1:d0:67:ac: ed:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D7:F0:44:3E:84:4F:58:41:3F:EE:61:02:3C:66:F3:C2:AF:61:91:80 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.55.254.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:8e:1c:4f:8f:e6:56:29:34:3e:55:e8:18:8e:bd:81:04:1e: c3:34:95:7a:94:35:69:46:44:f5:f7:93:99:5c:44:44:1e:dd: 33:2f:be:55:80:27:c1:f0:eb:07:be:ce:4a:0f:c8:7e:02:15: 16:32:ce:62:0b:17:81:d3:6d:43:5a:23:5e:49:63:88:38:9f: bf:bd:5a:54:52:69:37:6c:c3:1b:3f:17:cd:d6:60:94:99:38: 18:79:51:ee:07:f9:72:f2:ba:fe:5d:fa:de:78:89:68:8a:85: 38:4f:7e:ec:aa:9a:c1:e3:19:e2:54:9c:67:63:fb:15:4b:fc: 27:cb:aa:c9:0b:5c:1f:85:20:64:a3:01:f4:c7:4b:06:b7:f2: 3c:a8:a2:9b:b5:1b:8b:34:e0:98:0d:e9:41:fe:a5:71:42:a2: 45:d8:e9:1d:6d:07:fb:d4:f4:ff:4f:39:0a:c9:0e:e3:c2:a6: 22:a9:6c:39:4c:e0:a6:b5:40:72:da:90:b7:25:f1:7f:73:b4: e1:66:9a:a8:d0:cc:79:68:80:9a:78:b2:2d:fc:07:d1:ed:78: 21:27:6f:29:46:a4:06:1d:6f:17:b2:d4:a0:eb:26:f4:66:3f: c5:52:41:c5:3d:d5:0c:0c:ac:98:e7:17:32:31:4e:08:78:78: ff:d5:aa:35 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUONdzF0CFffmJvrSeqVtxdJJDsdswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDI1N1oX DTI3MDUwMjAxMDc1N1owMzExMC8GA1UEAxMoRDdGMDQ0M0U4NDRGNTg0MTNGRUU2 MTAyM0M2NkYzQzJBRjYxOTE4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALCM3Y8P/1wq0TfpM2ymOIbuJLV0sydWjlpASJU9bv8IhGqaTUkqCSLy2wzk VnXO/wPKb7NMDrPY6vhP/G+B9Z49ctVViv9cApm8jeEAXqSU2cBiiJ5QcTghC1B1 9hDQWvW/FqdX13LwouF4k8GL7kElCr7VE4UT+sxF4NUpwNn/n6VkGfZbStmmvwin j6AYPnTCfPnlT9hEo1kCE8KTKkH1zuH/KOkDIwOaSzpEeio1fE4fdM4nXZXQ39aI Zrqhd+NcO20UEs3uPhvXbDRTQwmYxLNb1QUAFwU7SHSgKfGtncpNoCJdcgyQTkaB CJXHiKBrSVf7w7Z8Te6x0Ges7ckCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNfwRD6ET1hBP+5hAjxm88KvYZGAMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdjNjM2YTQ2LTM4ZmYtNDQ5Ni05NzIxLThjMDNjZjA0NjM0NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83YzYzNmE0 Ni0zOGZmLTQ0OTYtOTcyMS04YzAzY2YwNDYzNDUvMC9EN0YwNDQzRTg0NEY1ODQx M0ZFRTYxMDIzQzY2RjNDMkFGNjE5MTgwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZzf+MA0GCSqGSIb3DQEBCwUAA4IBAQB7jhxPj+ZWKTQ+VegYjr2BBB7DNJV6 lDVpRkT195OZXEREHt0zL75VgCfB8OsHvs5KD8h+AhUWMs5iCxeB021DWiNeSWOI OJ+/vVpUUmk3bMMbPxfN1mCUmTgYeVHuB/ly8rr+XfreeIloioU4T37sqprB4xni VJxnY/sVS/wny6rJC1wfhSBkowH0x0sGt/I8qKKbtRuLNOCYDelB/qVxQqJF2Okd bQf71PT/TzkKyQ7jwqYiqWw5TOCmtUBy2pC3JfF/c7ThZpqo0Mx5aICaeLIt/AfR 7XghJ28pRqQGHW8XstSg6yb0Zj/FUkHFPdUMDKyY5xcyMU4IeHj/1ao1 -----END CERTIFICATE-----Generated at Tue May 12 22:39:06 2026 by rpki-client