$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer File: ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.cer (raw, json) Hash identifier: UdpZmV4VNxZkjgQaK2FPGSQzTghrAzkZrWf4vQj62Eg= Subject key identifier: ED:7B:59:44:27:AC:B8:0A:1E:B2:E4:E9:2D:5E:6B:A6:86:3E:29:F4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 05FD11CAA53DFDC674936ADBEF8D2509736CEDF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:00:35 +0000 Certificate not after: Sun 02 May 2027 01:05:35 +0000 Subordinate resources: IP: 103.216.188.0/24 IP: 103.220.47.0/24 IP: 2001:df1:fe00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:fd:11:ca:a5:3d:fd:c6:74:93:6a:db:ef:8d:25:09:73:6c:ed:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:00:35 2026 GMT Not After : May 2 01:05:35 2027 GMT Subject: CN=ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:49:07:6c:dd:b0:70:bc:83:21:62:24:28:0d: 77:3c:f7:60:93:0e:af:61:d8:ac:af:1d:01:08:25: 94:b6:69:91:f1:2c:0c:30:b1:af:8d:cd:5b:1a:3e: 57:fd:c1:5e:28:f1:63:1e:0e:cb:75:ba:bc:b2:a7: 9f:40:4a:fc:c4:c3:4d:e4:3c:1f:b5:d1:a3:7b:15: e9:c2:2f:83:b1:2c:f0:f6:d3:75:36:af:b8:d7:35: 3e:6e:41:81:7f:a5:38:4b:9d:3d:d4:5b:c1:e2:e1: b2:aa:8c:1c:ea:30:26:8b:8b:78:20:51:96:9d:ce: d0:fc:aa:51:52:da:d2:56:01:3c:cd:3c:a1:a3:bc: b5:dc:e9:68:09:51:07:c7:f5:a7:c1:7a:a9:45:a5: b3:3f:58:ca:39:a8:11:70:01:e5:df:2a:46:9c:81: ca:bd:b0:ad:cd:f8:6a:0d:3c:d8:c4:51:9e:91:0d: 55:e9:e8:1b:5f:1c:80:b2:f4:57:68:99:29:23:69: 6f:1b:11:35:30:ce:9f:82:ba:4f:16:37:17:4f:51: e0:e5:62:0a:28:fa:db:e1:f8:6d:5a:56:5c:20:da: ee:f6:93:dc:6f:74:0e:d8:c3:70:1b:8a:3f:3f:31: d6:58:cd:47:ac:f6:bb:a7:05:bf:08:bd:32:38:41: 40:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: ED:7B:59:44:27:AC:B8:0A:1E:B2:E4:E9:2D:5E:6B:A6:86:3E:29:F4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/ED7B594427ACB80A1EB2E4E92D5E6BA6863E29F4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.216.188.0/24 103.220.47.0/24 IPv6: 2001:df1:fe00::/48 Signature Algorithm: sha256WithRSAEncryption 14:d1:6b:dc:db:20:52:d1:54:22:46:77:e8:ef:b0:41:b2:37: 13:22:52:a3:05:c4:24:f5:2a:f6:ba:47:5a:ee:7e:49:72:5a: 6e:d0:a2:6c:5b:aa:58:6c:08:d6:9f:b5:2d:cf:d6:85:a7:b6: 73:c0:d8:de:28:3c:6f:53:23:ec:37:bd:9f:1f:89:11:84:cc: 7e:c8:14:d4:79:98:3e:5d:24:97:ef:2e:98:ef:3c:4e:c8:93: f9:df:03:a8:11:d4:0e:36:f7:b3:29:6b:73:ee:a6:76:6e:e7: 1c:c4:e3:27:18:f9:51:06:9d:2f:15:88:f5:63:8f:27:4c:f0: dd:9a:e4:82:cd:66:e1:21:48:d0:ab:e9:76:35:ed:b4:e6:4c: c7:b0:7c:4b:1b:d7:66:19:08:cd:1c:b6:ca:c6:44:1e:44:a1: 85:25:18:52:00:10:5e:a7:f0:37:ec:67:31:fd:a1:37:e4:9c: ed:42:1e:ff:78:fa:d9:e3:e3:3b:80:f7:88:bb:41:c7:d9:0d: 39:5e:9a:83:b3:dd:20:50:51:d2:24:e2:8c:1d:bf:72:44:2a: 2c:26:43:0d:c8:2c:9e:d2:f3:a9:13:99:5b:68:9b:23:3d:84: 57:bd:cb:12:51:8e:97:b3:ee:6c:cc:60:5a:a5:d4:64:d1:b2: 2c:d3:bc:db -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUBf0RyqU9/cZ0k2rb740lCXNs7fcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDAzNVoX DTI3MDUwMjAxMDUzNVowMzExMC8GA1UEAxMoRUQ3QjU5NDQyN0FDQjgwQTFFQjJF NEU5MkQ1RTZCQTY4NjNFMjlGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKhJB2zdsHC8gyFiJCgNdzz3YJMOr2HYrK8dAQgllLZpkfEsDDCxr43NWxo+ V/3BXijxYx4Oy3W6vLKnn0BK/MTDTeQ8H7XRo3sV6cIvg7Es8PbTdTavuNc1Pm5B gX+lOEudPdRbweLhsqqMHOowJouLeCBRlp3O0PyqUVLa0lYBPM08oaO8tdzpaAlR B8f1p8F6qUWlsz9YyjmoEXAB5d8qRpyByr2wrc34ag082MRRnpENVenoG18cgLL0 V2iZKSNpbxsRNTDOn4K6TxY3F09R4OViCij62+H4bVpWXCDa7vaT3G90DtjDcBuK Pz8x1ljNR6z2u6cFvwi9MjhBQI0CAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO17WUQnrLgKHrLk6S1ea6aGPin0MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc5OTRkMzc1LWZjN2QtNGRjNy1hMWYxLWUwYjNhNTlmZGY3OC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83OTk0ZDM3 NS1mYzdkLTRkYzctYTFmMS1lMGIzYTU5ZmRmNzgvMC9FRDdCNTk0NDI3QUNCODBB MUVCMkU0RTkyRDVFNkJBNjg2M0UyOUY0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQAZ9i8AwQAZ9wvMA8EAgACMAkDBwAgAQ3x/gAwDQYJKoZIhvcNAQELBQADggEB ABTRa9zbIFLRVCJGd+jvsEGyNxMiUqMFxCT1Kva6R1rufklyWm7QomxbqlhsCNaf tS3P1oWntnPA2N4oPG9TI+w3vZ8fiRGEzH7IFNR5mD5dJJfvLpjvPE7Ik/nfA6gR 1A4297Mpa3PupnZu5xzE4ycY+VEGnS8ViPVjjydM8N2a5ILNZuEhSNCr6XY17bTm TMewfEsb12YZCM0ctsrGRB5EoYUlGFIAEF6n8DfsZzH9oTfknO1CHv94+tnj4zuA 94i7QcfZDTlemoOz3SBQUdIk4owdv3JEKiwmQw3ILJ7S86kTmVtomyM9hFe9yxJR jpez7mzMYFql1GTRsizTvNs= -----END CERTIFICATE-----Generated at Tue May 12 22:03:51 2026 by rpki-client