$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer File: 1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.cer (raw, json) Hash identifier: 7yOcH7qrGa8tsXFjdqVd4UOcH4xIPZDYQyi0ennyj0c= Subject key identifier: 1E:AA:93:7A:23:6D:4A:DA:36:D9:AC:DF:88:F3:B0:7C:1A:FF:E6:92 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5A51F3BB7AD44C724C85B139473A473C1E346963 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:31:58 +0000 Certificate not after: Sun 02 May 2027 00:36:58 +0000 Subordinate resources: IP: 103.53.20.0/24 IP: 103.74.143.0/24 IP: 103.74.164.0/24 IP: 202.70.136.0/24 IP: 2001:df0:ee00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:51:f3:bb:7a:d4:4c:72:4c:85:b1:39:47:3a:47:3c:1e:34:69:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:31:58 2026 GMT Not After : May 2 00:36:58 2027 GMT Subject: CN=1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:67:84:58:85:22:f3:31:7e:08:a4:a6:5e:9d: 42:cc:1f:67:55:a3:d1:fb:f7:bc:f3:7b:e4:78:66: 71:60:ad:4a:b5:96:4b:20:37:08:ec:eb:bc:f2:7d: 5c:da:2e:cb:d6:a8:66:db:5f:cb:08:72:73:cc:57: 1a:eb:cf:c5:e2:8a:e1:83:0d:cc:3f:ac:dd:8d:c4: b0:99:e2:0c:51:85:82:7e:a5:37:e4:03:f9:e6:55: 00:84:66:37:6c:d4:c0:97:23:8a:11:0a:58:ad:d6: dc:7b:b0:30:93:e4:fb:fa:f8:98:4a:42:c3:aa:b6: 59:b0:a7:e0:79:af:c7:6a:f4:46:a0:a8:66:a7:39: 16:57:c8:0f:3f:4d:f4:06:1c:f8:c3:01:35:c0:9d: 9b:9b:31:19:bf:8a:26:7c:73:9c:f6:7a:cd:25:dc: 63:90:75:12:b5:7d:58:03:46:9f:64:3e:6d:bf:95: 93:a8:46:35:2e:cf:16:3e:32:fe:75:34:99:42:90: 47:5e:5c:47:d0:f6:f1:7d:d8:83:b4:5b:2c:b3:df: bf:2a:b3:3e:fe:df:89:a8:97:87:0a:ac:9c:2d:55: d6:c1:ac:04:51:8a:fa:95:2d:08:71:da:ad:0e:ac: 90:cc:4d:14:92:19:44:de:54:f7:f2:18:31:94:2e: 60:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1E:AA:93:7A:23:6D:4A:DA:36:D9:AC:DF:88:F3:B0:7C:1A:FF:E6:92 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/1EAA937A236D4ADA36D9ACDF88F3B07C1AFFE692.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.53.20.0/24 103.74.143.0/24 103.74.164.0/24 202.70.136.0/24 IPv6: 2001:df0:ee00::/48 Signature Algorithm: sha256WithRSAEncryption 0f:e1:9a:9d:ab:ba:df:61:4d:71:2f:90:2d:c7:68:54:bd:87: ec:8c:f9:ba:71:bf:6a:d5:c1:08:ff:18:1e:07:6c:7e:9c:1d: 1b:f5:16:83:84:5c:b9:de:83:79:e2:94:d2:83:3d:01:ea:2f: 10:2d:b9:c7:5c:c5:a3:03:cd:0c:32:86:0a:0f:da:3e:3f:39: 52:9d:a6:eb:73:f5:b0:da:40:67:bc:d3:ff:f2:75:85:2f:a7: a1:c7:76:70:00:e2:cc:fd:9c:74:af:c0:19:e9:8f:5e:b0:b5: cb:f5:8d:1f:b7:62:33:de:2d:4d:f7:6a:a9:45:58:38:be:dc: 03:95:b1:3b:fa:75:d3:f6:74:3d:90:e8:8a:24:9d:23:5d:df: 7e:f2:d0:63:31:84:e7:33:51:36:ad:09:4a:e7:ef:5f:1c:72: 2a:78:87:f5:9f:1d:81:cf:f4:4e:57:28:9d:09:42:15:23:48: 0e:a0:f3:ef:7d:52:f3:10:aa:d1:bf:7b:a2:e6:8d:52:ec:1c: 26:d4:7f:a7:19:47:06:cf:97:35:88:c3:56:15:cc:74:81:32: 82:9c:17:57:ae:fe:3f:51:59:98:9e:1e:01:eb:fe:ac:93:62: ff:13:6a:a6:0f:3f:94:ea:92:02:99:b9:90:90:cd:19:d2:c6: 93:b9:3a:b0 -----BEGIN CERTIFICATE----- MIIF6TCCBNGgAwIBAgIUWlHzu3rUTHJMhbE5RzpHPB40aWMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzE1OFoX DTI3MDUwMjAwMzY1OFowMzExMC8GA1UEAxMoMUVBQTkzN0EyMzZENEFEQTM2RDlB Q0RGODhGM0IwN0MxQUZGRTY5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMxnhFiFIvMxfgikpl6dQswfZ1Wj0fv3vPN75HhmcWCtSrWWSyA3COzrvPJ9 XNouy9aoZttfywhyc8xXGuvPxeKK4YMNzD+s3Y3EsJniDFGFgn6lN+QD+eZVAIRm N2zUwJcjihEKWK3W3HuwMJPk+/r4mEpCw6q2WbCn4Hmvx2r0RqCoZqc5FlfIDz9N 9AYc+MMBNcCdm5sxGb+KJnxznPZ6zSXcY5B1ErV9WANGn2Q+bb+Vk6hGNS7PFj4y /nU0mUKQR15cR9D28X3Yg7RbLLPfvyqzPv7fiaiXhwqsnC1V1sGsBFGK+pUtCHHa rQ6skMxNFJIZRN5U9/IYMZQuYMUCAwEAAaOCAtwwggLYMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB6qk3ojbUraNtms34jzsHwa/+aSMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzRmODg1MWU1LWVlNWItNDFlMS05YWJjLTQ0MjY1MWQyNzI5NC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80Zjg4NTFl NS1lZTViLTQxZTEtOWFiYy00NDI2NTFkMjcyOTQvMC8xRUFBOTM3QTIzNkQ0QURB MzZEOUFDREY4OEYzQjA3QzFBRkZFNjkyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAY AwQAZzUUAwQAZ0qPAwQAZ0qkAwQAykaIMA8EAgACMAkDBwAgAQ3w7gAwDQYJKoZI hvcNAQELBQADggEBAA/hmp2rut9hTXEvkC3HaFS9h+yM+bpxv2rVwQj/GB4HbH6c HRv1FoOEXLneg3nilNKDPQHqLxAtucdcxaMDzQwyhgoP2j4/OVKdputz9bDaQGe8 0//ydYUvp6HHdnAA4sz9nHSvwBnpj16wtcv1jR+3YjPeLU33aqlFWDi+3AOVsTv6 ddP2dD2Q6IoknSNd337y0GMxhOczUTatCUrn718ccip4h/WfHYHP9E5XKJ0JQhUj SA6g8+99UvMQqtG/e6LmjVLsHCbUf6cZRwbPlzWIw1YVzHSBMoKcF1eu/j9RWZie HgHr/qyTYv8TaqYPP5TqkgKZuZCQzRnSxpO5OrA= -----END CERTIFICATE-----Generated at Tue May 12 22:47:37 2026 by rpki-client