$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/A7EC36E89BE7B48874142363CBDE6AF22273C559.cer File: A7EC36E89BE7B48874142363CBDE6AF22273C559.cer (raw, json) Hash identifier: MpvjsIw3Pepqlju02D/LI04CMMKrqgJWRg7IGizm+Hw= Subject key identifier: A7:EC:36:E8:9B:E7:B4:88:74:14:23:63:CB:DE:6A:F2:22:73:C5:59 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 10789DA61A039C544B016C28101B6A0D2BD39084 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:34:31 +0000 Certificate not after: Sun 02 May 2027 02:39:31 +0000 Subordinate resources: IP: 103.239.22.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:78:9d:a6:1a:03:9c:54:4b:01:6c:28:10:1b:6a:0d:2b:d3:90:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:34:31 2026 GMT Not After : May 2 02:39:31 2027 GMT Subject: CN=A7EC36E89BE7B48874142363CBDE6AF22273C559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6a:78:0c:f3:ca:41:ba:2a:db:1a:19:1e:a9: 40:a9:cf:2d:9b:74:76:50:34:8c:1c:5d:8a:82:5a: fc:ae:dc:00:7b:b4:d6:05:ce:86:e1:7c:90:9d:bf: d9:3b:57:02:f4:a7:01:38:15:77:bf:e6:1d:0d:46: 01:f3:e8:8f:57:52:6c:8e:09:5d:d3:01:4d:21:b1: cf:db:fe:c2:10:25:c0:a1:6e:bd:2d:fd:0a:b9:fb: 31:d0:a2:fb:ec:59:e8:3b:74:84:6f:0a:4d:c5:27: 43:e0:ca:f6:ed:8a:09:e4:74:f4:d9:24:58:05:c5: 49:d7:88:5f:1a:fe:33:65:15:7d:9e:94:a9:c7:15: ca:46:8d:d5:24:cc:73:73:d6:ca:ce:50:cc:b0:5f: ec:84:6d:19:9d:05:45:b6:e4:56:92:0e:12:ca:67: 4d:cb:e9:64:3b:13:0e:c4:3f:9a:5c:50:0c:3b:14: f8:e9:24:ea:4e:76:f5:af:69:a0:ef:17:f2:d5:c4: 02:20:3b:4a:c2:ec:2a:7c:19:c2:e7:40:55:e0:00: 92:b8:d3:c6:e6:dc:3c:44:d0:d7:7e:de:79:5c:e2: 61:f6:57:75:b7:3e:de:a6:53:2f:93:b6:73:f8:dd: 41:11:30:69:1c:d7:b6:ce:26:c8:22:9b:c2:21:2d: 70:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A7:EC:36:E8:9B:E7:B4:88:74:14:23:63:CB:DE:6A:F2:22:73:C5:59 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/A7EC36E89BE7B48874142363CBDE6AF22273C559.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.239.22.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:0d:af:f5:ef:57:94:96:1a:d3:e7:5b:c0:55:a4:fb:91:d6: e6:f1:74:56:c6:dd:63:2b:43:02:c5:ec:e0:22:f8:af:10:73: 51:9e:bb:59:c9:d0:bb:b1:68:17:41:60:83:ef:5d:b7:ae:a8: ae:47:45:1f:bf:b9:c7:14:ab:b1:bf:ab:32:a3:97:89:13:0a: ef:97:31:60:91:5d:8e:b0:9d:34:af:ba:5c:48:cb:65:7a:80: b8:88:ef:af:9b:34:2a:4c:67:06:40:05:d4:27:9f:e5:31:bc: b0:33:3c:9b:e4:59:8d:43:bd:d2:c0:50:5a:ff:79:82:42:69: cf:55:6f:48:12:3d:49:f6:d9:81:f1:8c:50:ac:57:d9:fa:99: 8b:d6:bb:07:3c:cf:a4:61:a4:f5:6f:32:86:ad:6a:f7:a6:ba: 60:ed:d7:18:67:0a:37:e6:33:85:34:8c:6f:c2:1d:d3:35:cb: f5:d8:0b:30:f1:b7:23:ea:c5:54:b4:a9:8b:92:45:a3:37:2a: 16:c1:23:e2:0e:dd:51:17:fc:c3:22:1c:6d:8b:2d:12:12:ef: 1f:f7:31:ba:f5:c8:c0:df:13:23:4e:68:25:73:84:78:2b:31: 0f:f0:3e:1d:05:1b:0f:71:3b:de:84:17:d8:70:24:98:0e:28: 44:11:e3:56 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUEHidphoDnFRLAWwoEBtqDSvTkIQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzQzMVoX DTI3MDUwMjAyMzkzMVowMzExMC8GA1UEAxMoQTdFQzM2RTg5QkU3QjQ4ODc0MTQy MzYzQ0JERTZBRjIyMjczQzU1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANhqeAzzykG6KtsaGR6pQKnPLZt0dlA0jBxdioJa/K7cAHu01gXOhuF8kJ2/ 2TtXAvSnATgVd7/mHQ1GAfPoj1dSbI4JXdMBTSGxz9v+whAlwKFuvS39Crn7MdCi ++xZ6Dt0hG8KTcUnQ+DK9u2KCeR09NkkWAXFSdeIXxr+M2UVfZ6UqccVykaN1STM c3PWys5QzLBf7IRtGZ0FRbbkVpIOEspnTcvpZDsTDsQ/mlxQDDsU+Okk6k529a9p oO8X8tXEAiA7SsLsKnwZwudAVeAAkrjTxubcPETQ137eeVziYfZXdbc+3qZTL5O2 c/jdQREwaRzXts4myCKbwiEtcCECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKfsNuib57SIdBQjY8veavIic8VZMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2YzOTgwNjNlLTU3YTEtNDBmMi04NTI3LTRkMGE2OWM1ZDY0Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mMzk4MDYz ZS01N2ExLTQwZjItODUyNy00ZDBhNjljNWQ2NDcvMC9BN0VDMzZFODlCRTdCNDg4 NzQxNDIzNjNDQkRFNkFGMjIyNzNDNTU5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ+8WMA0GCSqGSIb3DQEBCwUAA4IBAQCdDa/171eUlhrT51vAVaT7kdbm8XRW xt1jK0MCxezgIvivEHNRnrtZydC7sWgXQWCD7123rqiuR0Ufv7nHFKuxv6syo5eJ EwrvlzFgkV2OsJ00r7pcSMtleoC4iO+vmzQqTGcGQAXUJ5/lMbywMzyb5FmNQ73S wFBa/3mCQmnPVW9IEj1J9tmB8YxQrFfZ+pmL1rsHPM+kYaT1bzKGrWr3prpg7dcY Zwo35jOFNIxvwh3TNcv12Asw8bcj6sVUtKmLkkWjNyoWwSPiDt1RF/zDIhxtiy0S Eu8f9zG69cjA3xMjTmglc4R4KzEP8D4dBRsPcTvehBfYcCSYDihEEeNW -----END CERTIFICATE-----Generated at Tue May 5 22:08:56 2026 by rpki-client