$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.cer File: 1EDD1B42D44367E3FCDD1648F66A1076C95105A6.cer (raw, json) Hash identifier: OLRCV1uEfjJoo9/9nuRr6Db1ucRWtiwm9AcOrGLHMio= Subject key identifier: 1E:DD:1B:42:D4:43:67:E3:FC:DD:16:48:F6:6A:10:76:C9:51:05:A6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 15F41E72F97631A7F34BD24A85AAE2FDE42E3D7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft caRepository: rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:11:03 +0000 Certificate not after: Sun 02 May 2027 00:16:03 +0000 Subordinate resources: IP: 103.106.172.0/22 IP: 2001:df3:af00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:f4:1e:72:f9:76:31:a7:f3:4b:d2:4a:85:aa:e2:fd:e4:2e:3d:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:11:03 2026 GMT Not After : May 2 00:16:03 2027 GMT Subject: CN=1EDD1B42D44367E3FCDD1648F66A1076C95105A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bf:e5:5a:7f:12:95:78:7d:a1:cd:6c:4c:6f: d2:79:e4:86:32:d3:df:33:af:38:48:0c:cf:50:a7: 60:2d:44:fb:1b:1f:d1:bf:5e:53:d4:7b:f4:d7:e1: 51:54:4e:1e:70:39:8f:d9:b2:d1:48:f3:1e:1e:57: 36:d6:6b:e6:fb:9a:61:85:18:b3:0d:41:6c:7f:bc: 73:3d:16:a1:8f:f8:14:bd:f6:0d:d6:73:61:d7:1a: 1a:4c:11:f7:7d:9b:c3:94:76:29:99:d3:a7:5b:2e: b8:46:38:d0:30:7c:ba:87:63:d1:35:83:e2:ae:fa: e6:90:73:b1:8a:3e:2c:ec:5b:65:46:13:96:e0:92: 29:75:b9:54:52:73:2b:ff:a2:fa:44:a1:2b:0d:35: 62:3c:99:86:0d:6c:75:59:b4:8d:73:43:7e:06:d1: 7c:8b:1b:2f:ef:dc:d7:84:df:62:5b:d3:40:9d:2e: 51:ca:60:20:6a:f6:f4:14:f1:02:54:a1:1c:b2:81: 56:a4:42:68:95:a0:f0:c1:35:83:b4:ab:6b:44:8b: 46:88:24:dc:56:44:90:06:29:f9:ab:8b:40:b1:0f: f9:10:ed:aa:33:39:a3:71:0f:21:2e:89:d3:80:23: f7:73:f1:fe:c7:cb:b3:ad:80:f2:ed:64:7c:4b:d0: ff:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1E:DD:1B:42:D4:43:67:E3:FC:DD:16:48:F6:6A:10:76:C9:51:05:A6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.106.172.0/22 IPv6: 2001:df3:af00::/48 Signature Algorithm: sha256WithRSAEncryption 61:fb:ef:b9:ed:48:9f:e1:b0:49:8e:21:26:1f:7e:42:e2:25: 52:15:5f:89:6a:94:5f:d7:7a:f5:bf:14:ed:6d:2c:d5:ca:db: b2:c5:2d:3d:25:27:e7:57:e2:54:c8:3a:40:6c:3a:25:07:e1: ff:c5:2e:f4:d0:02:e0:33:f8:8a:15:69:9b:4b:ac:3d:ec:f7: 4a:1c:d2:af:15:fe:07:b2:84:f9:72:17:80:f6:62:d4:0c:37: 90:88:4a:04:5a:a5:53:62:d9:f7:3f:f6:1b:b9:61:3b:b5:b2: 47:92:a5:f8:95:d4:a2:65:da:fe:ec:c5:0d:5b:e4:84:db:f9: 2e:21:b1:84:4f:3b:85:90:63:85:c9:f5:ed:fa:66:5b:cc:6b: c4:57:98:7e:f6:1b:76:a6:ce:cb:84:6a:49:29:5b:8b:99:30: e6:ca:0d:ac:52:df:d0:75:fb:1b:b2:0a:6a:86:18:83:e8:42: d1:a3:6f:75:92:7b:24:04:13:86:6d:ea:d7:27:e1:65:b6:7f: fe:dd:8e:37:88:41:d9:fb:23:08:35:a9:ec:7d:8a:1e:7f:19: 50:c3:ae:e4:6f:e3:56:e2:fa:ef:1d:e2:55:76:e7:09:8c:c7: ec:1b:41:85:d6:ac:f1:3d:03:69:90:e8:5d:8f:57:3e:b1:7a: cc:fa:11:a2 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUFfQecvl2MafzS9JKhari/eQuPX4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTEwM1oX DTI3MDUwMjAwMTYwM1owMzExMC8GA1UEAxMoMUVERDFCNDJENDQzNjdFM0ZDREQx NjQ4RjY2QTEwNzZDOTUxMDVBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOO/5Vp/EpV4faHNbExv0nnkhjLT3zOvOEgMz1CnYC1E+xsf0b9eU9R79Nfh UVROHnA5j9my0UjzHh5XNtZr5vuaYYUYsw1BbH+8cz0WoY/4FL32DdZzYdcaGkwR 932bw5R2KZnTp1suuEY40DB8uodj0TWD4q765pBzsYo+LOxbZUYTluCSKXW5VFJz K/+i+kShKw01YjyZhg1sdVm0jXNDfgbRfIsbL+/c14TfYlvTQJ0uUcpgIGr29BTx AlShHLKBVqRCaJWg8ME1g7Sra0SLRogk3FZEkAYp+auLQLEP+RDtqjM5o3EPIS6J 04Aj93Px/sfLs62A8u1kfEvQ/00CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB7dG0LUQ2fj/N0WSPZqEHbJUQWmMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzJmYmQ3Y2Y2LWY1NWEtNGI3OC1hNTg4LWQ5MjYxZjE1Zjc2My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yZmJkN2Nm Ni1mNTVhLTRiNzgtYTU4OC1kOTI2MWYxNWY3NjMvMC8xRUREMUI0MkQ0NDM2N0Uz RkNERDE2NDhGNjZBMTA3NkM5NTEwNUE2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZ2qsMA8EAgACMAkDBwAgAQ3zrwAwDQYJKoZIhvcNAQELBQADggEBAGH777nt SJ/hsEmOISYffkLiJVIVX4lqlF/XevW/FO1tLNXK27LFLT0lJ+dX4lTIOkBsOiUH 4f/FLvTQAuAz+IoVaZtLrD3s90oc0q8V/geyhPlyF4D2YtQMN5CISgRapVNi2fc/ 9hu5YTu1skeSpfiV1KJl2v7sxQ1b5ITb+S4hsYRPO4WQY4XJ9e36ZlvMa8RXmH72 G3amzsuEakkpW4uZMObKDaxS39B1+xuyCmqGGIPoQtGjb3WSeyQEE4Zt6tcn4WW2 f/7djjeIQdn7Iwg1qex9ih5/GVDDruRv41bi+u8d4lV25wmMx+wbQYXWrPE9A2mQ 6F2PVz6xesz6EaI= -----END CERTIFICATE-----Generated at Tue May 12 22:04:07 2026 by rpki-client