$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F07AB473CFB05364817F5AD683736BA53243996C.cer File: F07AB473CFB05364817F5AD683736BA53243996C.cer (raw, json) Hash identifier: yCdSCZL+n9S53IVT4S029EWgvPZIh/yOJOy92iYZHPE= Subject key identifier: F0:7A:B4:73:CF:B0:53:64:81:7F:5A:D6:83:73:6B:A5:32:43:99:6C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 660C207F2B5BC677D97863D70864100BDA2F72FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/F07AB473CFB05364817F5AD683736BA53243996C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:58:16 +0000 Certificate not after: Sun 02 May 2027 01:03:16 +0000 Subordinate resources: IP: 202.14.92.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:0c:20:7f:2b:5b:c6:77:d9:78:63:d7:08:64:10:0b:da:2f:72:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:58:16 2026 GMT Not After : May 2 01:03:16 2027 GMT Subject: CN=F07AB473CFB05364817F5AD683736BA53243996C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6f:2e:82:bc:7d:75:9c:97:b6:11:c6:10:12: ab:5a:d1:4f:88:7a:5a:ae:3d:f9:ce:0d:f0:1d:a0: 25:78:c5:98:7d:07:61:fb:aa:59:3b:b7:6f:42:0d: 04:39:8e:eb:d8:df:4d:ba:7c:46:42:25:9b:93:2f: 29:74:38:ef:57:b7:a3:98:55:f1:24:6a:8a:42:ba: 0b:c4:64:e4:3f:67:b4:7a:b9:0d:0d:be:18:89:a7: be:b2:2c:bb:d9:ea:7e:c4:8d:f6:26:ce:17:66:86: 94:9d:4d:b9:f3:42:2a:34:56:4d:cd:d1:4b:61:c6: 9a:02:ff:f4:6e:2f:bf:2e:5e:07:55:65:ed:81:c8: 6c:b6:2c:d7:d2:50:ea:cc:b3:b0:26:6f:7e:ed:b7: 5a:d5:b9:ce:70:66:3a:26:fb:ac:4b:23:09:b3:ea: ad:f4:6e:04:03:43:bb:9b:8e:f4:28:e1:6d:3d:de: f3:da:ca:86:6d:57:34:5d:7e:c9:ef:ba:67:0d:8f: 60:d4:60:fc:91:92:04:f7:06:9d:70:09:ff:ad:ac: fc:e5:56:9c:5a:5e:e1:6e:8f:09:1a:26:b0:6c:5c: 18:87:fa:9c:99:4d:e4:3d:44:c6:be:02:32:c6:6a: 9b:b2:ef:26:ca:70:15:15:3b:26:14:83:9a:e7:47: 0c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F0:7A:B4:73:CF:B0:53:64:81:7F:5A:D6:83:73:6B:A5:32:43:99:6C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/F07AB473CFB05364817F5AD683736BA53243996C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.14.92.0/23 Signature Algorithm: sha256WithRSAEncryption 20:71:90:08:1d:cc:76:ba:72:49:fd:5f:e3:30:dc:a9:05:aa: 02:4e:d6:bf:87:4e:0b:45:5f:12:41:54:38:bc:90:85:36:89: fe:b3:5b:3f:a0:0f:88:ac:d8:76:9b:bc:94:8d:dc:14:fb:15: 5d:d5:20:91:25:cc:f6:43:1f:be:d5:b0:6e:ec:8a:fc:86:a0: 94:6b:18:69:77:f3:97:85:eb:33:66:00:17:51:a7:67:0c:da: f0:7f:90:99:99:1b:ab:c1:b9:a0:3f:2b:12:e0:6a:d7:73:df: 5c:1c:14:b7:0b:8c:19:40:78:4f:c0:93:bc:44:33:63:fb:23: 5f:64:de:ee:75:f9:f6:77:a6:88:38:24:e3:29:ef:25:4e:3e: 26:91:bc:d3:fe:5b:04:e7:91:0c:bb:b5:c8:48:2e:bd:de:b9: c0:33:c2:20:f9:5b:3d:a2:99:36:32:3d:51:a6:57:3a:59:46: 6e:27:8f:ec:58:82:f1:91:9c:01:63:7b:ca:96:5d:40:0c:70: 9a:cc:4f:df:75:77:3f:ad:e5:3a:45:0e:27:82:1b:0c:5d:cb: 00:e4:95:69:5d:95:71:27:52:28:62:cc:29:42:01:73:3d:8e: 1a:c5:02:2d:e8:2c:2c:a7:59:bb:39:ea:72:18:71:bd:a4:38: 67:9c:0e:ea -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUZgwgfytbxnfZeGPXCGQQC9ovcvowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTgxNloX DTI3MDUwMjAxMDMxNlowMzExMC8GA1UEAxMoRjA3QUI0NzNDRkIwNTM2NDgxN0Y1 QUQ2ODM3MzZCQTUzMjQzOTk2QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKFvLoK8fXWcl7YRxhASq1rRT4h6Wq49+c4N8B2gJXjFmH0HYfuqWTu3b0IN BDmO69jfTbp8RkIlm5MvKXQ471e3o5hV8SRqikK6C8Rk5D9ntHq5DQ2+GImnvrIs u9nqfsSN9ibOF2aGlJ1NufNCKjRWTc3RS2HGmgL/9G4vvy5eB1Vl7YHIbLYs19JQ 6syzsCZvfu23WtW5znBmOib7rEsjCbPqrfRuBANDu5uO9CjhbT3e89rKhm1XNF1+ ye+6Zw2PYNRg/JGSBPcGnXAJ/62s/OVWnFpe4W6PCRomsGxcGIf6nJlN5D1Exr4C MsZqm7LvJspwFRU7JhSDmudHDDcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPB6tHPPsFNkgX9a1oNza6UyQ5lsMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc2MGU2YTJkLTg0ZGMtNDhkZi05Yjc3LTcyMDg1M2Y0N2M2ZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83NjBlNmEy ZC04NGRjLTQ4ZGYtOWI3Ny03MjA4NTNmNDdjNmQvMC9GMDdBQjQ3M0NGQjA1MzY0 ODE3RjVBRDY4MzczNkJBNTMyNDM5OTZDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQByg5cMA0GCSqGSIb3DQEBCwUAA4IBAQAgcZAIHcx2unJJ/V/jMNypBaoCTta/ h04LRV8SQVQ4vJCFNon+s1s/oA+IrNh2m7yUjdwU+xVd1SCRJcz2Qx++1bBu7Ir8 hqCUaxhpd/OXheszZgAXUadnDNrwf5CZmRurwbmgPysS4GrXc99cHBS3C4wZQHhP wJO8RDNj+yNfZN7udfn2d6aIOCTjKe8lTj4mkbzT/lsE55EMu7XISC693rnAM8Ig +Vs9opk2Mj1Rplc6WUZuJ4/sWILxkZwBY3vKll1ADHCazE/fdXc/reU6RQ4nghsM XcsA5JVpXZVxJ1IoYswpQgFzPY4axQIt6Cwsp1m7OepyGHG9pDhnnA7q -----END CERTIFICATE-----Generated at Tue May 12 22:47:44 2026 by rpki-client