$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.cer File: 0E746D06BBB2B42B9F3E3A274069EDD4026E0981.cer (raw, json) Hash identifier: 9enIHJiDHRfwNclUj0xHf9H23HBiDbqCfQ1Edih63U4= Subject key identifier: 0E:74:6D:06:BB:B2:B4:2B:9F:3E:3A:27:40:69:ED:D4:02:6E:09:81 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 20AB08C17E742548E3C583A92B8996C5637F6AB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:36:39 +0000 Certificate not after: Sun 02 May 2027 02:41:39 +0000 Subordinate resources: IP: 103.185.110.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ab:08:c1:7e:74:25:48:e3:c5:83:a9:2b:89:96:c5:63:7f:6a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:36:39 2026 GMT Not After : May 2 02:41:39 2027 GMT Subject: CN=0E746D06BBB2B42B9F3E3A274069EDD4026E0981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9a:6c:d4:ff:f6:a4:8d:eb:71:52:52:9d:f4: fa:4d:9d:97:0d:6f:cb:e0:75:38:76:83:8d:aa:0e: 47:4b:69:07:28:b7:fb:43:d1:c1:12:b3:c9:31:56: a0:7d:b9:d0:e5:36:fc:4d:f6:b6:1d:73:9a:f9:89: cb:8c:7e:ca:e3:0a:84:c1:3c:e1:f1:0d:79:91:26: 79:c4:d5:97:f0:d5:f6:d5:26:23:cb:f4:57:ea:2e: 28:03:40:8c:d9:1e:c1:be:0b:50:61:cc:d5:0c:57: 28:1b:02:cf:d6:12:cf:e7:2e:89:36:0d:d5:12:58: 4a:cc:04:10:f7:e2:15:64:4b:42:5f:05:da:e1:49: 5c:6c:f2:10:d0:e9:36:b6:6a:20:0c:1b:24:73:35: 26:2d:66:69:09:55:57:2f:28:d6:96:ce:9d:a9:4e: 86:96:dc:68:59:07:ee:b4:16:ac:6c:28:87:e1:d2: 60:5a:8b:21:46:4e:da:6b:83:49:2c:7d:1c:5a:5d: 4e:0f:e7:23:f8:01:cd:f1:9d:fc:0c:51:33:86:93: 3a:94:43:fc:8e:18:cf:d9:9a:76:b6:7b:04:66:e1: e7:2e:a9:94:f1:e0:eb:e6:e5:c1:ca:21:55:62:21: 42:99:5b:ec:bb:71:eb:77:aa:ca:e0:71:78:d7:61: da:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0E:74:6D:06:BB:B2:B4:2B:9F:3E:3A:27:40:69:ED:D4:02:6E:09:81 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.185.110.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:fb:72:03:70:37:30:56:bb:50:34:1a:3f:a9:26:63:4f:1d: 65:99:99:84:bf:eb:20:37:85:6b:c1:f2:5d:2d:9d:b9:75:82: 43:af:71:33:ab:55:25:68:1a:2c:43:ae:5f:d5:a4:6f:87:1a: 51:59:5d:79:78:49:01:07:54:2e:09:df:42:d2:7b:36:7e:cd: 6c:db:66:54:85:ee:58:a7:54:34:c6:5c:d1:b8:74:6a:d5:40: 14:e7:31:a8:79:a6:eb:3c:07:1b:c8:84:4b:01:a5:76:14:cb: 5d:8c:a9:4d:f9:47:19:dd:69:14:40:ff:f1:2f:40:3b:5f:24: d5:af:30:6a:6e:92:71:fd:e3:ed:a2:47:4a:b5:3a:b4:3e:5b: 3d:83:f8:d5:2d:45:0e:ed:c2:2b:6d:e4:5e:2a:ff:e7:a4:fe: 38:17:ba:3d:1c:49:42:5a:f6:7e:0f:cf:18:81:19:20:ea:f8: 04:de:22:fe:3b:0f:84:29:e5:5f:7d:c4:34:82:76:f2:f3:78: 41:c8:10:9f:38:29:47:9c:61:10:71:1f:f0:5c:36:89:03:f6: 26:01:c0:3f:c0:81:b1:fd:b6:9e:ee:91:05:e7:e5:a0:80:3a: bf:40:4c:5c:e0:a1:8f:b4:36:a6:49:5e:56:58:b4:07:cb:35: 5a:84:c4:7f -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUIKsIwX50JUjjxYOpK4mWxWN/arUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzYzOVoX DTI3MDUwMjAyNDEzOVowMzExMC8GA1UEAxMoMEU3NDZEMDZCQkIyQjQyQjlGM0Uz QTI3NDA2OUVERDQwMjZFMDk4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALGabNT/9qSN63FSUp30+k2dlw1vy+B1OHaDjaoOR0tpByi3+0PRwRKzyTFW oH250OU2/E32th1zmvmJy4x+yuMKhME84fENeZEmecTVl/DV9tUmI8v0V+ouKANA jNkewb4LUGHM1QxXKBsCz9YSz+cuiTYN1RJYSswEEPfiFWRLQl8F2uFJXGzyENDp NrZqIAwbJHM1Ji1maQlVVy8o1pbOnalOhpbcaFkH7rQWrGwoh+HSYFqLIUZO2muD SSx9HFpdTg/nI/gBzfGd/AxRM4aTOpRD/I4Yz9madrZ7BGbh5y6plPHg6+blwcoh VWIhQplb7Ltx63eqyuBxeNdh2o8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFA50bQa7srQrnz46J0Bp7dQCbgmBMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y1NmQwYjc4LTdlODEtNGE4Yy1hODc1LTk1NTIyYjQ2NzkzOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mNTZkMGI3 OC03ZTgxLTRhOGMtYTg3NS05NTUyMmI0Njc5MzgvMC8wRTc0NkQwNkJCQjJCNDJC OUYzRTNBMjc0MDY5RURENDAyNkUwOTgxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ7luMA0GCSqGSIb3DQEBCwUAA4IBAQAc+3IDcDcwVrtQNBo/qSZjTx1lmZmE v+sgN4VrwfJdLZ25dYJDr3Ezq1UlaBosQ65f1aRvhxpRWV15eEkBB1QuCd9C0ns2 fs1s22ZUhe5Yp1Q0xlzRuHRq1UAU5zGoeabrPAcbyIRLAaV2FMtdjKlN+UcZ3WkU QP/xL0A7XyTVrzBqbpJx/ePtokdKtTq0Pls9g/jVLUUO7cIrbeReKv/npP44F7o9 HElCWvZ+D88YgRkg6vgE3iL+Ow+EKeVffcQ0gnby83hByBCfOClHnGEQcR/wXDaJ A/YmAcA/wIGx/bae7pEF5+WggDq/QExc4KGPtDamSV5WWLQHyzVahMR/ -----END CERTIFICATE-----Generated at Wed May 13 00:34:06 2026 by rpki-client