$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer File: F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer (raw, json) Hash identifier: DKR7zXLu0AoyJBCUQrSZmU0ybgjjdbUTOKswWglEeg4= Subject key identifier: F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1D01C54967F4DFF7FC2230AFB9F35934ACDBA8B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:19:59 +0000 Certificate not after: Sun 02 May 2027 01:24:59 +0000 Subordinate resources: IP: 103.97.76.0/22 IP: 2401:8440::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:01:c5:49:67:f4:df:f7:fc:22:30:af:b9:f3:59:34:ac:db:a8:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:19:59 2026 GMT Not After : May 2 01:24:59 2027 GMT Subject: CN=F07DE2A6041C4CCDF424D4FE299B586DABA22CAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:70:a2:39:6f:1b:a8:eb:5a:20:79:09:38:cd: a1:9a:79:a9:13:fd:15:ff:2f:30:1b:f3:dc:f4:98: 83:54:fd:ad:94:6c:15:18:67:dc:10:65:28:1c:e7: 8f:35:d6:bc:cd:b7:86:4f:5d:fc:0f:bd:85:9c:d6: d4:31:bf:9a:73:01:30:69:db:27:45:fc:63:9f:82: 9b:dd:18:0f:ad:9d:0e:6e:0f:d9:7a:84:da:54:ee: 66:0a:95:51:6f:f3:96:3b:d2:8a:5c:2d:02:7e:c3: 60:90:a4:5e:65:8c:e3:7e:e6:5c:59:32:f9:d1:b7: a7:53:d9:f7:e9:25:34:a8:32:48:67:8a:28:45:2c: 33:1c:c9:49:58:dd:ae:0c:d7:97:32:0e:61:85:6f: de:c6:6d:89:d4:33:14:9c:fa:01:78:b3:d2:ff:c9: c2:47:b4:1e:7b:31:82:f8:e0:d8:ac:62:97:07:ae: 91:f2:4d:8a:51:0b:b1:14:c4:2d:c9:62:68:69:92: 4d:3f:6e:63:78:b3:af:d7:29:bf:ca:c8:08:20:7a: 9e:49:56:dc:f1:52:8f:7f:b0:94:b8:14:63:e2:58: 04:72:08:c1:93:17:d8:d6:5f:8d:4b:e3:31:c7:43: 77:17:79:55:2a:75:23:29:46:f6:b9:f3:24:45:a1: f8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.97.76.0/22 IPv6: 2401:8440::/32 Signature Algorithm: sha256WithRSAEncryption 28:79:42:b1:50:ad:98:ca:aa:c2:f1:08:f5:38:4d:38:06:61: c5:05:58:5b:12:95:76:47:bf:73:95:14:cd:c1:35:ac:76:e5: 83:44:1f:ad:da:13:d5:e1:bc:7c:15:a9:d4:2f:9f:a9:d4:46: 1d:95:9c:d5:bb:06:28:5d:49:83:4b:60:29:d3:68:04:db:fa: a3:cb:ee:11:02:f3:61:92:86:5a:3b:cf:83:5e:8b:88:6d:7b: 8e:2e:16:33:15:5a:12:0f:f8:89:c1:69:4f:7e:d4:18:25:35: 85:88:d1:72:7f:c7:4d:dc:9d:07:d8:4b:56:37:7e:6d:ee:4e: 17:cd:d7:b5:f2:f8:f7:22:03:02:5e:c5:93:19:3c:d7:ec:fa: 8d:97:0f:6e:f1:ee:cb:8a:82:17:de:c0:36:5a:29:35:25:58: bc:be:6e:16:e1:7c:32:01:7b:3c:82:c4:e3:a8:ea:81:ca:4f: 2e:ed:ad:8c:05:3f:3a:60:0d:a2:ed:51:6a:6e:85:6b:14:40: 3b:27:40:80:8a:fc:ee:bf:56:86:1a:fc:7c:73:6e:7c:0e:c5: 41:a2:4b:27:b7:b0:2d:83:69:55:a3:94:47:fc:fd:17:0f:7c: 64:b5:e7:5b:e8:b4:f4:ff:a8:0b:3b:fe:68:ba:00:8f:c0:92: d5:9e:56:0c -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUHQHFSWf03/f8IjCvufNZNKzbqLgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTk1OVoX DTI3MDUwMjAxMjQ1OVowMzExMC8GA1UEAxMoRjA3REUyQTYwNDFDNENDREY0MjRE NEZFMjk5QjU4NkRBQkEyMkNBRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJhwojlvG6jrWiB5CTjNoZp5qRP9Ff8vMBvz3PSYg1T9rZRsFRhn3BBlKBzn jzXWvM23hk9d/A+9hZzW1DG/mnMBMGnbJ0X8Y5+Cm90YD62dDm4P2XqE2lTuZgqV UW/zljvSilwtAn7DYJCkXmWM437mXFky+dG3p1PZ9+klNKgySGeKKEUsMxzJSVjd rgzXlzIOYYVv3sZtidQzFJz6AXiz0v/Jwke0Hnsxgvjg2KxilweukfJNilELsRTE LcliaGmSTT9uY3izr9cpv8rICCB6nklW3PFSj3+wlLgUY+JYBHIIwZMX2NZfjUvj McdDdxd5VSp1IylG9rnzJEWh+IcCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPB94qYEHEzN9CTU/imbWG2roiyvMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzk1N2IwZDdlLWVhZGUtNDMxOC1hYjIwLThjN2YyZDViZTY5Zi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85NTdiMGQ3 ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMC9GMDdERTJBNjA0MUM0Q0NE RjQyNEQ0RkUyOTlCNTg2REFCQTIyQ0FGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ2FMMA0EAgACMAcDBQAkAYRAMA0GCSqGSIb3DQEBCwUAA4IBAQAoeUKxUK2Y yqrC8Qj1OE04BmHFBVhbEpV2R79zlRTNwTWsduWDRB+t2hPV4bx8FanUL5+p1EYd lZzVuwYoXUmDS2Ap02gE2/qjy+4RAvNhkoZaO8+DXouIbXuOLhYzFVoSD/iJwWlP ftQYJTWFiNFyf8dN3J0H2EtWN35t7k4Xzde18vj3IgMCXsWTGTzX7PqNlw9u8e7L ioIX3sA2Wik1JVi8vm4W4XwyAXs8gsTjqOqByk8u7a2MBT86YA2i7VFqboVrFEA7 J0CAivzuv1aGGvx8c258DsVBoksnt7Atg2lVo5RH/P0XD3xktedb6LT0/6gLO/5o ugCPwJLVnlYM -----END CERTIFICATE-----Generated at Tue May 12 22:10:00 2026 by rpki-client