$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F7CE9829E83FEDABD39870499926D9D41609EAEE.cer File: F7CE9829E83FEDABD39870499926D9D41609EAEE.cer (raw, json) Hash identifier: 1b7ZSIeL5EpbiUYIZ2oNi60/n7TDzN52EGk5WHlOBjU= Subject key identifier: F7:CE:98:29:E8:3F:ED:AB:D3:98:70:49:99:26:D9:D4:16:09:EA:EE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 614B4ECBF3981D2096F628354035F50CA9B70FD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/F7CE9829E83FEDABD39870499926D9D41609EAEE.mft caRepository: rsync://rpki-rsync.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:54:36 +0000 Certificate not after: Sun 02 May 2027 01:59:36 +0000 Subordinate resources: IP: 103.211.49.0/24 IP: 2001:df1:1200::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:4b:4e:cb:f3:98:1d:20:96:f6:28:35:40:35:f5:0c:a9:b7:0f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:54:36 2026 GMT Not After : May 2 01:59:36 2027 GMT Subject: CN=F7CE9829E83FEDABD39870499926D9D41609EAEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:55:6c:0a:07:96:3b:94:12:59:40:97:26:6e: 48:2b:b7:ec:bf:62:1c:79:47:94:1d:3a:7e:7d:96: f5:7f:1a:99:f7:c5:3d:9c:0f:ad:17:75:09:d9:f7: 74:4c:53:93:2b:d0:ad:31:d9:65:1e:81:7a:2e:7d: 49:98:e5:32:29:e3:2a:97:67:6b:13:bc:9e:d7:f5: d8:32:ae:ee:62:23:8b:65:51:49:57:3a:97:9d:f0: 18:a2:33:b7:dd:ee:08:08:e3:5f:93:71:0a:d8:f4: ba:cd:f5:26:4f:c8:4c:77:0f:93:fe:6c:b4:42:b7: 27:8f:42:34:dc:41:88:34:28:d4:e0:16:23:ac:5d: 5d:d5:a6:f9:12:9f:1d:e9:24:58:16:db:2e:4a:ae: a7:ac:f6:d7:49:49:c9:55:83:38:22:cc:d3:2c:aa: cf:ab:b0:df:9e:e2:a6:6a:7c:0a:3b:80:9a:14:e8: aa:d7:90:d1:96:34:89:8f:fb:0c:e8:a3:24:0e:9c: 97:a3:aa:2a:28:7f:f9:2c:57:14:68:bb:33:96:a2: 74:55:e0:e0:f4:75:e1:e7:0c:c6:a5:bc:21:4f:31: 85:2b:6b:97:c2:f7:25:7e:fe:6b:41:f7:0f:ce:d3: a8:70:a2:61:68:25:3f:9c:3a:a5:a5:3c:bc:0e:65: ce:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F7:CE:98:29:E8:3F:ED:AB:D3:98:70:49:99:26:D9:D4:16:09:EA:EE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/F7CE9829E83FEDABD39870499926D9D41609EAEE.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.211.49.0/24 IPv6: 2001:df1:1200::/48 Signature Algorithm: sha256WithRSAEncryption 90:2b:b6:b2:02:71:5c:b4:ea:95:a9:7e:9e:38:dc:40:b5:4f: d5:c0:2c:6b:b4:39:84:04:c1:70:29:4a:d9:99:7e:f6:1e:6a: 4e:86:eb:fa:27:ad:3f:58:93:a5:bc:54:b0:5d:ef:7d:27:da: 5c:e3:f1:99:bc:58:5a:81:5b:fb:40:ee:cb:4b:2f:63:6c:96: 87:21:e9:7d:4b:94:ec:ad:24:44:ab:42:9e:4a:5f:e4:9c:ec: 1b:2c:26:fb:ad:3e:9f:31:e2:f0:76:35:ea:55:a1:9f:eb:2d: f1:e6:71:11:e6:9d:71:aa:d8:86:8c:cb:55:95:82:4d:0f:f7: 77:45:f7:8c:4a:9a:38:58:bb:fd:a4:e1:fe:10:de:f4:24:94: 93:17:d4:75:6b:3d:b3:6c:bf:1a:4b:a2:91:60:18:23:6b:6b: 24:d0:7c:4e:f8:f4:b3:dc:cb:75:53:fa:3a:aa:d6:1b:61:31: c0:37:8e:82:2f:65:5e:d7:51:cd:a5:38:88:18:e9:1a:b4:c7: 50:4b:15:8a:f4:b6:08:9c:a5:1d:37:03:e0:f0:6b:32:98:da: e5:7d:55:af:73:82:0a:3e:76:dd:cf:23:5e:3b:95:ec:70:9a: 85:93:f2:f9:a8:61:1d:9f:99:29:cb:30:f9:18:99:7e:ab:cf: 67:0c:4e:ef -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUYUtOy/OYHSCW9ig1QDX1DKm3D9EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTQzNloX DTI3MDUwMjAxNTkzNlowMzExMC8GA1UEAxMoRjdDRTk4MjlFODNGRURBQkQzOTg3 MDQ5OTkyNkQ5RDQxNjA5RUFFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL5VbAoHljuUEllAlyZuSCu37L9iHHlHlB06fn2W9X8amffFPZwPrRd1Cdn3 dExTkyvQrTHZZR6Bei59SZjlMinjKpdnaxO8ntf12DKu7mIji2VRSVc6l53wGKIz t93uCAjjX5NxCtj0us31Jk/ITHcPk/5stEK3J49CNNxBiDQo1OAWI6xdXdWm+RKf HekkWBbbLkqup6z210lJyVWDOCLM0yyqz6uw357ipmp8CjuAmhToqteQ0ZY0iY/7 DOijJA6cl6OqKih/+SxXFGi7M5aidFXg4PR14ecMxqW8IU8xhStrl8L3JX7+a0H3 D87TqHCiYWglP5w6paU8vA5lzmkCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPfOmCnoP+2r05hwSZkm2dQWCeruMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NjMDllMTNjLWNlYTAtNDdmZi05Yzk2LWY0OWIzOWQ0MzkyMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jYzA5ZTEz Yy1jZWEwLTQ3ZmYtOWM5Ni1mNDliMzlkNDM5MjAvMC9GN0NFOTgyOUU4M0ZFREFC RDM5ODcwNDk5OTI2RDlENDE2MDlFQUVFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ9MxMA8EAgACMAkDBwAgAQ3xEgAwDQYJKoZIhvcNAQELBQADggEBAJArtrIC cVy06pWpfp443EC1T9XALGu0OYQEwXApStmZfvYeak6G6/onrT9Yk6W8VLBd730n 2lzj8Zm8WFqBW/tA7stLL2Nsloch6X1LlOytJESrQp5KX+Sc7BssJvutPp8x4vB2 NepVoZ/rLfHmcRHmnXGq2IaMy1WVgk0P93dF94xKmjhYu/2k4f4Q3vQklJMX1HVr PbNsvxpLopFgGCNrayTQfE749LPcy3VT+jqq1hthMcA3joIvZV7XUc2lOIgY6Rq0 x1BLFYr0tgicpR03A+DwazKY2uV9Va9zggo+dt3PI147lexwmoWT8vmoYR2fmSnL MPkYmX6rz2cMTu8= -----END CERTIFICATE-----Generated at Tue May 12 22:03:34 2026 by rpki-client