$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer File: 7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.cer (raw, json) Hash identifier: hbI/QC+Ctap1Ms9LTboNYB7qfhI5uHvTnAyrdD6cQtA= Subject key identifier: 7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 395B01C9D9748F742F959727F0AA6AF9DC6B278D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:49:53 +0000 Certificate not after: Sun 02 May 2027 01:54:53 +0000 Subordinate resources: IP: 202.75.16.0/20 IP: 2401:8240::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 01:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:5b:01:c9:d9:74:8f:74:2f:95:97:27:f0:aa:6a:f9:dc:6b:27:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:49:53 2026 GMT Not After : May 2 01:54:53 2027 GMT Subject: CN=7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:21:5c:db:8a:28:c1:e6:74:6e:e3:0b:a8:2b: 72:75:e1:11:ac:82:42:49:72:ae:76:f3:28:c5:66: 49:ca:46:91:56:83:23:2e:aa:71:88:51:68:27:48: 9d:a1:5a:3c:d6:29:2e:e4:7e:41:d4:98:b1:76:15: f4:e1:c0:0e:33:91:b3:0e:51:74:39:72:55:b9:04: 45:22:b4:13:ef:c6:78:99:9a:c5:88:a3:16:be:2f: 11:eb:e2:29:7d:28:c8:07:d9:1b:43:14:0a:12:cb: 11:b0:65:98:c1:3b:c8:59:a6:05:e4:2f:5f:21:a8: c5:04:56:94:a0:01:0d:df:41:13:d3:13:d3:9b:04: 9d:f8:30:20:b6:60:5f:b5:e8:6e:ed:01:0f:ec:13: ef:73:74:64:9d:1f:21:d4:f6:2b:87:c7:46:31:ae: c1:1a:84:1a:e6:fa:54:cf:00:fa:c4:5d:2e:8f:fb: 55:f3:e5:91:0a:01:1d:b1:33:5a:d6:cf:cb:a6:4f: 36:33:b6:09:90:da:e5:da:a6:cc:94:83:2c:1c:31: 67:e9:ba:18:e5:11:5a:96:54:7e:6c:21:c8:e3:7f: 89:47:8a:cb:5a:7a:f2:bf:b1:ca:e3:77:0d:09:af: bc:8a:cf:b3:0e:fd:e8:61:66:ed:d4:28:66:84:24: 04:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7B:33:EF:49:B9:12:AE:F2:A1:A5:17:C2:CA:C9:3D:0E:75:01:CE:6E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/7B33EF49B912AEF2A1A517C2CAC93D0E7501CE6E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.75.16.0/20 IPv6: 2401:8240::/32 Signature Algorithm: sha256WithRSAEncryption 08:92:71:e2:43:98:e4:30:cf:a2:09:9d:65:23:23:fc:6d:60: 1b:7e:87:06:34:6c:94:19:95:b8:5f:89:d7:1f:e2:2d:4f:bd: 68:39:92:b1:e8:af:f9:bb:2a:72:af:b1:a9:97:f1:f4:80:b7: f7:0e:3c:32:6d:ab:4f:52:91:ba:36:7c:b1:79:7a:18:a0:70: 26:dd:a5:08:74:36:8b:f2:82:c2:11:95:f1:f5:94:77:6e:3d: ed:cf:f3:f8:c3:d3:31:7c:c1:1e:ed:eb:d6:09:ff:99:95:81: 84:3d:65:2c:18:e5:ca:1c:96:31:f1:4c:ad:db:f3:d6:d3:0f: 0d:d7:63:eb:4e:ec:82:66:6d:6d:a9:6f:dd:a6:01:ef:90:0e: 58:f4:b0:48:a3:dd:07:6f:1a:0e:60:95:9f:d8:7e:0f:0f:92: bf:7d:d6:07:06:b8:28:a6:3e:d9:7c:d5:1b:7a:f0:12:53:09: 2c:02:9e:41:f3:47:78:7e:e9:0f:3b:41:61:a0:c9:eb:29:c1: 54:b6:e0:30:43:ae:fd:08:16:ca:ba:f7:7f:3d:8e:c1:53:3c: 95:51:db:36:f4:8d:cc:3b:6a:42:aa:c0:17:71:94:81:92:8c: 05:41:af:8a:fa:d7:48:44:6f:bb:ad:e6:79:db:ab:6b:ac:93: 10:f9:8b:6b -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUOVsBydl0j3QvlZcn8Kpq+dxrJ40wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDk1M1oX DTI3MDUwMjAxNTQ1M1owMzExMC8GA1UEAxMoN0IzM0VGNDlCOTEyQUVGMkExQTUx N0MyQ0FDOTNEMEU3NTAxQ0U2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM4hXNuKKMHmdG7jC6grcnXhEayCQklyrnbzKMVmScpGkVaDIy6qcYhRaCdI naFaPNYpLuR+QdSYsXYV9OHADjORsw5RdDlyVbkERSK0E+/GeJmaxYijFr4vEevi KX0oyAfZG0MUChLLEbBlmME7yFmmBeQvXyGoxQRWlKABDd9BE9MT05sEnfgwILZg X7Xobu0BD+wT73N0ZJ0fIdT2K4fHRjGuwRqEGub6VM8A+sRdLo/7VfPlkQoBHbEz WtbPy6ZPNjO2CZDa5dqmzJSDLBwxZ+m6GOURWpZUfmwhyON/iUeKy1p68r+xyuN3 DQmvvIrPsw796GFm7dQoZoQkBN8CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHsz70m5Eq7yoaUXwsrJPQ51Ac5uMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2M0NTQ3MTA0LTkzOWUtNDBlMy04ZmM4LTQyNTIyNjQyMDQ0Yi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jNDU0NzEw NC05MzllLTQwZTMtOGZjOC00MjUyMjY0MjA0NGIvMC83QjMzRUY0OUI5MTJBRUYy QTFBNTE3QzJDQUM5M0QwRTc1MDFDRTZFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQEyksQMA0EAgACMAcDBQAkAYJAMA0GCSqGSIb3DQEBCwUAA4IBAQAIknHiQ5jk MM+iCZ1lIyP8bWAbfocGNGyUGZW4X4nXH+ItT71oOZKx6K/5uypyr7Gpl/H0gLf3 DjwybatPUpG6NnyxeXoYoHAm3aUIdDaL8oLCEZXx9ZR3bj3tz/P4w9MxfMEe7evW Cf+ZlYGEPWUsGOXKHJYx8Uyt2/PW0w8N12PrTuyCZm1tqW/dpgHvkA5Y9LBIo90H bxoOYJWf2H4PD5K/fdYHBrgopj7ZfNUbevASUwksAp5B80d4fukPO0FhoMnrKcFU tuAwQ679CBbKuvd/PY7BUzyVUds29I3MO2pCqsAXcZSBkowFQa+K+tdIRG+7reZ5 26trrJMQ+Ytr -----END CERTIFICATE-----Generated at Thu May 7 03:53:35 2026 by rpki-client