$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer File: DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer (raw, json) Hash identifier: UrRMo/NvDbyQdBpvhHGSp1nGE4sfO1GKa11dPGxSr4E= Subject key identifier: DE:7C:DE:1E:AB:9B:0E:FB:E8:0E:07:87:47:EE:60:FD:AE:F8:FE:2A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4EE42B21283E752067759B752663A37EB0A3613F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:43:01 +0000 Certificate not after: Sun 02 May 2027 01:48:01 +0000 Subordinate resources: IP: 103.171.184.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e4:2b:21:28:3e:75:20:67:75:9b:75:26:63:a3:7e:b0:a3:61:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:43:01 2026 GMT Not After : May 2 01:48:01 2027 GMT Subject: CN=DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f2:d6:9c:2c:48:e1:bf:16:f3:15:48:36:74: 5b:27:96:31:08:fc:01:75:2b:91:d9:1b:4e:4b:2d: 2b:d0:eb:12:80:06:b5:4e:c7:ce:ea:fe:b9:c6:98: 6e:20:53:ce:33:b5:b8:6d:a1:0e:38:32:7b:b4:c9: ef:4a:6c:6f:33:2b:77:8f:4d:97:f4:e1:72:03:f2: 95:98:f6:d8:c5:4c:ba:60:91:a9:f8:c0:bb:f7:cb: c9:9e:4f:ca:5f:64:2d:59:47:4e:33:c3:46:81:64: 6e:47:43:d3:50:49:0a:26:23:c8:6e:51:f4:59:9d: ba:04:c4:dc:90:bd:87:03:ad:51:a5:2b:42:48:71: 50:85:a9:69:cb:e6:70:a9:f6:1a:47:1c:86:ff:46: 25:ec:65:51:02:ac:ce:b5:bf:d6:67:06:ab:f9:f1: 87:31:fd:1c:ff:76:03:59:cc:a1:c2:89:b4:f0:d7: 9c:fe:59:c2:b2:f8:11:37:b1:3c:c8:d7:cd:e0:88: 9d:c5:87:c7:b9:99:b2:44:9c:e2:83:ec:7f:b3:bc: 2e:5e:54:dc:57:be:c4:82:82:a1:97:76:c3:8f:6d: 18:2a:0e:d0:c3:b4:18:91:4d:40:b0:10:8c:60:d9: 10:a1:59:da:63:37:91:ff:88:d5:ce:4f:ee:ec:9f: 75:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DE:7C:DE:1E:AB:9B:0E:FB:E8:0E:07:87:47:EE:60:FD:AE:F8:FE:2A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.171.184.0/23 Signature Algorithm: sha256WithRSAEncryption 72:80:66:77:a8:30:7f:9c:ff:a0:c2:70:85:8d:34:72:bc:37: 79:b1:3b:76:cf:de:cb:79:75:54:d4:c2:91:b9:d9:7f:3c:2b: 6e:de:e1:9f:8e:e7:67:9a:c5:5c:fe:36:66:90:11:52:2a:24: bb:89:3a:b6:50:db:99:b2:17:2a:46:46:d6:33:12:e9:7c:6b: 09:13:2a:bd:4e:e7:df:52:0b:68:0f:37:a0:5f:59:6c:fb:47: 88:95:86:e3:3e:1f:92:36:06:ef:b6:8e:ea:55:fe:a4:6a:ea: 7b:22:9e:e2:73:3b:08:20:5a:55:56:12:f9:0b:56:16:d0:f9: f5:bc:82:32:8e:9c:5a:93:35:22:9e:a2:15:45:5b:36:de:ed: 9c:11:6e:d7:01:c6:81:24:87:5c:4f:35:5e:42:3c:e5:b8:8c: 1d:99:ee:ff:27:57:95:62:76:1b:ea:50:07:17:ce:95:fd:ae: bb:cd:71:bb:80:89:20:70:b5:08:33:89:b7:bf:49:40:b4:95: 0a:37:a3:98:c2:07:61:bc:f9:fb:e4:57:92:18:26:c2:6c:c8: ab:48:ae:12:ff:c9:e6:1e:91:41:44:0b:32:bf:e6:d6:7d:79: 7b:70:b1:6d:ec:4e:eb:9f:42:3e:ac:be:2b:88:a4:8c:54:9c: 66:cd:49:59 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUTuQrISg+dSBndZt1JmOjfrCjYT8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDMwMVoX DTI3MDUwMjAxNDgwMVowMzExMC8GA1UEAxMoREU3Q0RFMUVBQjlCMEVGQkU4MEUw Nzg3NDdFRTYwRkRBRUY4RkUyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOPy1pwsSOG/FvMVSDZ0WyeWMQj8AXUrkdkbTkstK9DrEoAGtU7Hzur+ucaY biBTzjO1uG2hDjgye7TJ70psbzMrd49Nl/ThcgPylZj22MVMumCRqfjAu/fLyZ5P yl9kLVlHTjPDRoFkbkdD01BJCiYjyG5R9FmdugTE3JC9hwOtUaUrQkhxUIWpacvm cKn2Gkcchv9GJexlUQKszrW/1mcGq/nxhzH9HP92A1nMocKJtPDXnP5ZwrL4ETex PMjXzeCIncWHx7mZskSc4oPsf7O8Ll5U3Fe+xIKCoZd2w49tGCoO0MO0GJFNQLAQ jGDZEKFZ2mM3kf+I1c5P7uyfdS8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFN583h6rmw776A4Hh0fuYP2u+P4qMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2I4NTVmNDUwLWViN2YtNGEyNi1hNmM0LWY5ODI3ZWUwYTViOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iODU1ZjQ1 MC1lYjdmLTRhMjYtYTZjNC1mOTgyN2VlMGE1YjgvMC9ERTdDREUxRUFCOUIwRUZC RTgwRTA3ODc0N0VFNjBGREFFRjhGRTJBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6u4MA0GCSqGSIb3DQEBCwUAA4IBAQBygGZ3qDB/nP+gwnCFjTRyvDd5sTt2 z97LeXVU1MKRudl/PCtu3uGfjudnmsVc/jZmkBFSKiS7iTq2UNuZshcqRkbWMxLp fGsJEyq9TuffUgtoDzegX1ls+0eIlYbjPh+SNgbvto7qVf6kaup7Ip7iczsIIFpV VhL5C1YW0Pn1vIIyjpxakzUinqIVRVs23u2cEW7XAcaBJIdcTzVeQjzluIwdme7/ J1eVYnYb6lAHF86V/a67zXG7gIkgcLUIM4m3v0lAtJUKN6OYwgdhvPn75FeSGCbC bMirSK4S/8nmHpFBRAsyv+bWfXl7cLFt7E7rn0I+rL4riKSMVJxmzUlZ -----END CERTIFICATE-----Generated at Tue May 12 22:03:24 2026 by rpki-client