$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.cer File: F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.cer (raw, json) Hash identifier: WjP1F7emRdc+j3VPk3wKruvk4NGB5fyoluO/Q/cgZlY= Subject key identifier: F7:E0:25:17:9C:2F:AE:7B:5C:DC:0D:2E:CA:C0:B9:58:37:B2:42:3D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0321AA146D3BDF4F0F4A70B6E4DA459DF0B78E24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:17:04 +0000 Certificate not after: Sun 02 May 2027 00:22:04 +0000 Subordinate resources: IP: 103.62.202.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:21:aa:14:6d:3b:df:4f:0f:4a:70:b6:e4:da:45:9d:f0:b7:8e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:17:04 2026 GMT Not After : May 2 00:22:04 2027 GMT Subject: CN=F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5a:56:41:5b:8a:ef:49:e2:0c:a6:69:49:8c: a6:7b:f6:24:85:73:64:f3:a7:5e:a9:30:4e:b3:9d: ad:67:fe:60:2c:00:00:50:41:da:ac:51:f2:f4:eb: a4:80:44:9d:e2:72:21:d9:72:b7:e3:33:63:76:f8: 86:3f:bc:50:73:40:bd:f2:b1:48:49:65:a5:4d:8d: 41:af:d6:cd:0a:be:90:5b:10:20:c7:3c:b4:d7:17: 1d:10:9a:2d:b7:14:8d:34:25:a4:41:ef:83:1e:41: 28:08:f0:c7:ab:84:a2:4c:ac:f6:7c:66:e3:b0:d9: 55:bd:77:90:29:f2:a4:1f:38:6e:92:b9:d1:e7:b1: a6:67:6d:95:7f:a0:ad:7a:6c:fe:11:cb:a6:25:99: 70:70:0b:d6:0b:49:fc:56:3c:64:5b:47:ce:78:61: 8c:97:1c:4d:c4:69:2a:27:10:28:fd:3a:61:d3:c7: 16:bd:2d:5f:c2:aa:f7:b4:e7:36:e0:a7:74:b5:d7: 59:eb:83:68:6e:1c:a2:ad:80:d9:2c:8b:23:9a:90: e1:9d:80:06:bf:e8:42:c9:84:27:c7:ed:e2:75:fa: 18:72:1e:15:fe:e0:75:f1:a5:c1:7b:4d:c7:3d:bc: 5e:0a:87:e0:da:1f:9d:5d:73:d0:9b:6f:c4:de:fe: 3a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F7:E0:25:17:9C:2F:AE:7B:5C:DC:0D:2E:CA:C0:B9:58:37:B2:42:3D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/F7E025179C2FAE7B5CDC0D2ECAC0B95837B2423D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.62.202.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:9d:d5:5b:f5:6a:98:17:4f:23:6b:41:3f:3b:43:6d:39:1b: 1d:50:43:6b:4e:5d:dd:f5:62:76:1c:01:61:be:77:e9:12:69: c9:83:2b:80:fd:92:fa:9b:b8:ee:80:2f:8a:93:94:3e:2e:a5: 9f:70:3c:ba:8f:3c:8c:de:47:15:76:ce:e6:fe:cf:95:b2:b0: fd:f1:c3:ce:49:f2:e5:d6:7c:4c:4f:97:25:d8:36:63:dd:7e: 8e:ca:01:78:a7:4f:28:34:7a:df:f6:ee:0e:ff:b1:5f:d4:5d: 8a:8a:ef:4c:29:39:15:3a:10:3b:24:3a:dc:da:8e:97:66:c7: ca:e2:a1:c9:32:9e:0b:01:ab:af:a7:f1:c7:95:3c:de:32:96: de:46:c6:dd:56:69:cd:22:af:a3:a0:c3:26:64:ae:31:30:25: 6f:a9:3d:ef:b9:73:2d:d5:dc:ba:7e:bf:45:cd:30:fa:79:82: 8a:a6:65:37:64:c3:c0:c9:ee:6c:77:23:fe:4a:d9:9d:d3:cb: c1:c4:b0:08:2a:4c:b3:92:6f:9c:e8:0c:c8:3d:6c:e1:c5:1d: b1:dc:58:c3:a7:6f:36:4b:b2:da:a1:cb:5d:0c:75:76:08:4d: 06:b6:c5:97:23:51:2d:56:57:ae:3f:d0:cd:20:00:56:6c:e9: 8d:a8:85:39 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUAyGqFG07308PSnC25NpFnfC3jiQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTcwNFoX DTI3MDUwMjAwMjIwNFowMzExMC8GA1UEAxMoRjdFMDI1MTc5QzJGQUU3QjVDREMw RDJFQ0FDMEI5NTgzN0IyNDIzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANlaVkFbiu9J4gymaUmMpnv2JIVzZPOnXqkwTrOdrWf+YCwAAFBB2qxR8vTr pIBEneJyIdlyt+MzY3b4hj+8UHNAvfKxSEllpU2NQa/WzQq+kFsQIMc8tNcXHRCa LbcUjTQlpEHvgx5BKAjwx6uEokys9nxm47DZVb13kCnypB84bpK50eexpmdtlX+g rXps/hHLpiWZcHAL1gtJ/FY8ZFtHznhhjJccTcRpKicQKP06YdPHFr0tX8Kq97Tn NuCndLXXWeuDaG4coq2A2SyLI5qQ4Z2ABr/oQsmEJ8ft4nX6GHIeFf7gdfGlwXtN xz28XgqH4NofnV1z0JtvxN7+OtcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPfgJRecL657XNwNLsrAuVg3skI9MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM4MWY0NGFhLTg5YTMtNGJjMy1iYjI5LWRiNmM5ODJhMTM2Yi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zODFmNDRh YS04OWEzLTRiYzMtYmIyOS1kYjZjOTgyYTEzNmIvMC9GN0UwMjUxNzlDMkZBRTdC NUNEQzBEMkVDQUMwQjk1ODM3QjI0MjNELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZz7KMA0GCSqGSIb3DQEBCwUAA4IBAQBcndVb9WqYF08ja0E/O0NtORsdUENr Tl3d9WJ2HAFhvnfpEmnJgyuA/ZL6m7jugC+Kk5Q+LqWfcDy6jzyM3kcVds7m/s+V srD98cPOSfLl1nxMT5cl2DZj3X6OygF4p08oNHrf9u4O/7Ff1F2Kiu9MKTkVOhA7 JDrc2o6XZsfK4qHJMp4LAauvp/HHlTzeMpbeRsbdVmnNIq+joMMmZK4xMCVvqT3v uXMt1dy6fr9FzTD6eYKKpmU3ZMPAye5sdyP+Stmd08vBxLAIKkyzkm+c6AzIPWzh xR2x3FjDp282S7LaoctdDHV2CE0GtsWXI1EtVleuP9DNIABWbOmNqIU5 -----END CERTIFICATE-----Generated at Tue May 12 22:45:31 2026 by rpki-client