$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.cer File: 1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.cer (raw, json) Hash identifier: QupbVX8W79zgElVBjhTft5qqzOeJkp/5D7MITm8fgYI= Subject key identifier: 1E:DE:11:80:AE:9C:99:2B:64:85:CD:65:9C:5D:7E:1B:F2:70:AB:7A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 57C280B7BCA1D9F5A31E9348EC49DF8738E54B72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:21:24 +0000 Certificate not after: Sun 02 May 2027 00:26:24 +0000 Subordinate resources: IP: 103.109.210.0/24 IP: 2001:df4:4b00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:c2:80:b7:bc:a1:d9:f5:a3:1e:93:48:ec:49:df:87:38:e5:4b:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:21:24 2026 GMT Not After : May 2 00:26:24 2027 GMT Subject: CN=1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a6:98:7d:1b:ed:b5:b2:4f:ac:57:a5:df:09: be:c2:c8:1c:1d:3e:67:f7:9b:76:b7:2c:ef:e6:ef: 02:ae:ee:5f:37:1d:ff:b3:a6:6d:17:7f:3c:a5:95: bf:94:32:87:5b:84:26:91:71:b3:0b:af:a2:6e:5e: 70:d4:6b:b5:8c:26:a3:3b:a0:2d:63:d7:84:28:4a: 29:62:e1:b3:d9:c5:5c:75:83:c9:77:e8:22:64:8d: 86:18:37:a3:d0:cc:90:02:b2:20:46:76:7d:aa:74: 1f:c7:c3:75:29:d5:38:af:35:d3:8f:74:83:f1:6a: 26:74:00:30:c2:13:fc:9a:a1:cd:c5:92:22:96:e2: d9:a9:1b:7f:e1:02:f0:af:3f:81:fb:c1:8b:bd:8e: 55:bd:6a:b0:8c:13:01:16:de:b3:81:a1:25:98:18: 35:6c:85:7c:cb:d5:96:86:37:62:c8:83:77:d7:b7: bc:08:40:48:c4:95:ce:61:2d:f4:a7:2b:bf:64:64: e9:74:11:f8:b9:a4:99:e6:17:08:39:8a:40:e5:31: a0:73:7c:b7:4f:67:05:c5:e3:1e:4f:11:1c:3e:3b: 09:a0:31:d5:d4:be:df:66:4e:3b:35:b0:a4:f9:ca: bd:26:53:c9:78:15:75:05:2e:eb:b2:60:43:dc:36: 57:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1E:DE:11:80:AE:9C:99:2B:64:85:CD:65:9C:5D:7E:1B:F2:70:AB:7A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/1EDE1180AE9C992B6485CD659C5D7E1BF270AB7A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.109.210.0/24 IPv6: 2001:df4:4b00::/48 Signature Algorithm: sha256WithRSAEncryption 09:27:c7:26:d8:a4:f6:85:a4:8a:2e:5a:9f:81:d9:8f:d7:02: 8f:4b:36:19:5f:d1:cb:0f:73:58:ed:88:19:eb:25:df:65:e4: e3:38:53:82:f7:03:83:c1:c6:82:cc:34:17:f9:8c:48:01:58: 2e:97:46:6f:eb:d1:e9:1c:39:31:00:a4:1f:d2:02:04:e2:79: a4:ae:44:f7:42:be:63:34:7f:fd:12:b2:75:f2:62:db:2b:51: be:77:dc:63:99:d5:cc:ec:7c:0a:ba:b7:fd:d3:e8:78:ab:9d: 39:c2:a6:05:e1:c7:e7:58:76:c0:39:de:b4:69:17:23:3e:a2: d1:79:0e:11:6a:ea:5a:2f:af:28:db:82:4f:b2:85:50:4b:45: f8:ac:7c:4e:e5:06:da:07:92:73:1d:86:d0:52:57:62:2f:54: 74:2b:d8:b4:d9:7e:3b:40:31:23:ce:fb:d5:f4:c4:4c:84:0b: 25:2e:79:e9:b5:8c:9b:bc:46:c3:fd:7b:f5:13:19:68:96:12: fd:f6:ef:3e:ba:14:3b:cb:8a:73:c6:3e:35:d3:bf:9c:24:d7: e5:bf:7d:a0:99:9f:8c:ed:78:7c:43:c2:54:31:76:c6:5d:eb: ba:39:1c:f1:bb:e0:19:99:d6:cd:2a:ff:ea:7b:65:43:8b:ce: 76:4d:6b:48 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUV8KAt7yh2fWjHpNI7EnfhzjlS3IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjEyNFoX DTI3MDUwMjAwMjYyNFowMzExMC8GA1UEAxMoMUVERTExODBBRTlDOTkyQjY0ODVD RDY1OUM1RDdFMUJGMjcwQUI3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJWmmH0b7bWyT6xXpd8JvsLIHB0+Z/ebdrcs7+bvAq7uXzcd/7OmbRd/PKWV v5Qyh1uEJpFxswuvom5ecNRrtYwmozugLWPXhChKKWLhs9nFXHWDyXfoImSNhhg3 o9DMkAKyIEZ2fap0H8fDdSnVOK810490g/FqJnQAMMIT/JqhzcWSIpbi2akbf+EC 8K8/gfvBi72OVb1qsIwTARbes4GhJZgYNWyFfMvVloY3YsiDd9e3vAhASMSVzmEt 9Kcrv2Rk6XQR+LmkmeYXCDmKQOUxoHN8t09nBcXjHk8RHD47CaAx1dS+32ZOOzWw pPnKvSZTyXgVdQUu67JgQ9w2V0kCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB7eEYCunJkrZIXNZZxdfhvycKt6MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzNkZjA2OGJkLThlM2EtNDY5NS04OWVkLTNiMzI1MGY4NzVjOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zZGYwNjhi ZC04ZTNhLTQ2OTUtODllZC0zYjMyNTBmODc1YzkvMC8xRURFMTE4MEFFOUM5OTJC NjQ4NUNENjU5QzVEN0UxQkYyNzBBQjdBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ23SMA8EAgACMAkDBwAgAQ30SwAwDQYJKoZIhvcNAQELBQADggEBAAknxybY pPaFpIouWp+B2Y/XAo9LNhlf0csPc1jtiBnrJd9l5OM4U4L3A4PBxoLMNBf5jEgB WC6XRm/r0ekcOTEApB/SAgTieaSuRPdCvmM0f/0SsnXyYtsrUb533GOZ1czsfAq6 t/3T6HirnTnCpgXhx+dYdsA53rRpFyM+otF5DhFq6lovryjbgk+yhVBLRfisfE7l BtoHknMdhtBSV2IvVHQr2LTZfjtAMSPO+9X0xEyECyUueem1jJu8RsP9e/UTGWiW Ev327z66FDvLinPGPjXTv5wk1+W/faCZn4zteHxDwlQxdsZd67o5HPG74BmZ1s0q /+p7ZUOLznZNa0g= -----END CERTIFICATE-----Generated at Tue May 12 22:03:56 2026 by rpki-client