$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer File: 1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.cer (raw, json) Hash identifier: FWazjLIno87fbaN5f77kjvPFetHXC+mfDgsO6/BytZk= Subject key identifier: 1E:40:4A:F6:CF:F0:85:E2:0B:EE:4C:7B:E2:A5:F2:BF:28:0F:3B:A8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6B00C0EC440B13AD15FEDA2F103A86805EA184E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:49:01 +0000 Certificate not after: Sat 01 May 2027 23:54:01 +0000 Subordinate resources: IP: 103.134.18.0/23 IP: 2001:df7:b700::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:00:c0:ec:44:0b:13:ad:15:fe:da:2f:10:3a:86:80:5e:a1:84:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:49:01 2026 GMT Not After : May 1 23:54:01 2027 GMT Subject: CN=1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:26:41:70:64:0a:a9:61:64:57:b0:c4:3e:58: 45:83:12:4d:d9:b6:41:db:67:01:41:78:3d:49:52: 04:cb:c0:dd:97:1c:2a:1d:f6:8e:0a:7b:c4:80:2f: 84:e3:9b:38:80:e2:7c:af:63:04:bb:77:ac:00:c0: 7d:d7:b2:0e:4f:44:88:db:d1:7a:43:20:60:16:61: 5b:74:a6:91:bc:40:8c:43:7e:07:6a:6a:99:0f:83: 07:e7:49:b8:ca:f1:4d:b1:af:d2:19:7b:57:40:1e: d2:74:c8:f4:a9:d8:95:a0:b6:14:e1:77:f0:b6:7a: cd:3e:39:0f:45:87:ce:8e:76:97:fb:43:07:43:eb: 1d:0a:8f:17:73:9c:bd:0e:c5:c3:e4:d2:5a:cb:27: 44:cb:49:58:90:71:c2:50:c5:87:09:bd:ff:f6:90: 3c:7c:ed:16:12:74:63:46:0f:d4:d6:fb:d1:9c:f3: 4e:03:17:e3:85:d1:9a:34:78:fc:75:d4:f2:88:e3: 86:32:f7:71:60:c6:85:d2:ef:7c:28:d8:27:8b:84: 68:52:87:99:7e:67:31:57:2a:0f:1b:48:ec:c4:6a: 81:4f:f0:44:cb:86:01:9b:20:14:e0:14:de:95:a5: e5:e9:f6:38:f5:3a:9e:1e:d6:73:69:61:80:0a:da: 89:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1E:40:4A:F6:CF:F0:85:E2:0B:EE:4C:7B:E2:A5:F2:BF:28:0F:3B:A8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/1E404AF6CFF085E20BEE4C7BE2A5F2BF280F3BA8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.18.0/23 IPv6: 2001:df7:b700::/48 Signature Algorithm: sha256WithRSAEncryption 4e:22:fc:cc:ec:17:b9:95:58:86:83:f0:30:34:92:b6:e6:8b: a4:88:8d:19:c9:ae:6a:d4:ae:82:fe:56:84:7d:8e:10:b1:ac: fb:ee:87:93:37:b1:4f:9c:cb:32:f4:2d:ed:28:6e:7c:7a:fb: a9:b7:11:82:29:72:f0:f3:6f:22:08:48:13:f1:49:02:28:b0: 57:23:0f:2d:32:47:0d:10:db:65:24:20:01:80:c9:b1:44:1a: ea:92:bf:78:10:46:96:a2:6c:3e:ad:37:2e:50:eb:f4:de:ac: a2:97:25:dc:45:b2:6d:3b:a6:f0:e7:8c:b7:8a:d9:6a:72:74: 8f:ed:a7:36:21:08:fe:3a:3c:c0:71:eb:f5:78:f8:c0:00:25: 7a:92:39:d9:4e:5a:dc:06:2a:b8:61:7c:97:cd:44:0e:20:2a: ab:ea:65:ed:6d:46:18:95:24:e3:b4:f7:c2:f9:be:fa:a3:e8: da:0c:ca:09:8e:eb:ff:6f:ae:71:20:91:bd:e4:2c:be:af:4d: 39:45:29:a9:35:a5:c6:4a:38:aa:3a:ca:87:ed:23:73:6b:40: c6:4c:1d:2c:1d:14:07:3a:55:5b:01:9f:d6:ea:97:3c:aa:55: c0:70:0c:32:be:88:a5:d2:f5:3e:89:60:63:57:be:72:4f:eb: 84:bb:76:88 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUawDA7EQLE60V/tovEDqGgF6hhOQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDkwMVoX DTI3MDUwMTIzNTQwMVowMzExMC8GA1UEAxMoMUU0MDRBRjZDRkYwODVFMjBCRUU0 QzdCRTJBNUYyQkYyODBGM0JBODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUmQXBkCqlhZFewxD5YRYMSTdm2QdtnAUF4PUlSBMvA3ZccKh32jgp7xIAv hOObOIDifK9jBLt3rADAfdeyDk9EiNvRekMgYBZhW3SmkbxAjEN+B2pqmQ+DB+dJ uMrxTbGv0hl7V0Ae0nTI9KnYlaC2FOF38LZ6zT45D0WHzo52l/tDB0PrHQqPF3Oc vQ7Fw+TSWssnRMtJWJBxwlDFhwm9//aQPHztFhJ0Y0YP1Nb70ZzzTgMX44XRmjR4 /HXU8ojjhjL3cWDGhdLvfCjYJ4uEaFKHmX5nMVcqDxtI7MRqgU/wRMuGAZsgFOAU 3pWl5en2OPU6nh7Wc2lhgAraiesCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB5ASvbP8IXiC+5Me+Kl8r8oDzuoMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzBmMDAyMjhmLTZlMjUtNGM5Ni05Y2U1LTJkNTAyMjlhMWQxOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wZjAwMjI4 Zi02ZTI1LTRjOTYtOWNlNS0yZDUwMjI5YTFkMTgvMC8xRTQwNEFGNkNGRjA4NUUy MEJFRTRDN0JFMkE1RjJCRjI4MEYzQkE4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ4YSMA8EAgACMAkDBwAgAQ33twAwDQYJKoZIhvcNAQELBQADggEBAE4i/Mzs F7mVWIaD8DA0krbmi6SIjRnJrmrUroL+VoR9jhCxrPvuh5M3sU+cyzL0Le0obnx6 +6m3EYIpcvDzbyIISBPxSQIosFcjDy0yRw0Q22UkIAGAybFEGuqSv3gQRpaibD6t Ny5Q6/TerKKXJdxFsm07pvDnjLeK2WpydI/tpzYhCP46PMBx6/V4+MAAJXqSOdlO WtwGKrhhfJfNRA4gKqvqZe1tRhiVJOO098L5vvqj6NoMygmO6/9vrnEgkb3kLL6v TTlFKak1pcZKOKo6yoftI3NrQMZMHSwdFAc6VVsBn9bqlzyqVcBwDDK+iKXS9T6J YGNXvnJP64S7dog= -----END CERTIFICATE-----Generated at Tue May 12 22:09:50 2026 by rpki-client