$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer File: 2E069E30CF7B24CDD77C206550B0BDBDB01683AF.cer (raw, json) Hash identifier: V7wr88yr1+Xg+IFnWhjYLUJJspJpE48IpkxJbxJFOhY= Subject key identifier: 2E:06:9E:30:CF:7B:24:CD:D7:7C:20:65:50:B0:BD:BD:B0:16:83:AF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7B61B3D15F7CA1F216558E651CCEBB12D80AC75A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:15:14 +0000 Certificate not after: Sun 02 May 2027 00:20:14 +0000 Subordinate resources: IP: 103.76.91.0/24 IP: 2001:df2:7fc0::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:61:b3:d1:5f:7c:a1:f2:16:55:8e:65:1c:ce:bb:12:d8:0a:c7:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:15:14 2026 GMT Not After : May 2 00:20:14 2027 GMT Subject: CN=2E069E30CF7B24CDD77C206550B0BDBDB01683AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a7:c6:0b:13:cc:b7:91:8b:7b:95:1b:e3:d6: d1:e2:a6:c2:b0:12:be:a2:33:76:c1:af:65:a5:c1: 78:e0:8e:16:b6:79:a7:a7:c2:a3:4c:95:af:6b:1d: 07:cd:5c:66:ab:74:1c:70:58:4a:42:e6:f7:6f:2f: 5e:e8:82:a1:8f:c5:00:d6:a7:ff:22:aa:e2:04:27: c4:ec:8d:44:ba:e7:da:a0:c1:07:5d:ec:44:1d:4b: e7:35:ec:b8:c3:f9:df:1d:5d:d7:92:02:d7:69:7e: 21:3a:a9:1f:8b:83:25:5d:39:11:3d:ec:e6:75:9d: 27:5d:a1:89:10:fe:92:05:7c:ee:29:af:8c:24:56: 0b:f7:bb:d7:90:ca:d4:fc:98:18:79:d1:86:7e:09: 78:0f:b5:38:8f:f9:5a:8c:5a:a8:ef:b8:60:9c:7a: c0:13:37:02:dc:7f:2a:6f:4f:1e:9e:48:1d:48:57: 38:1a:d3:72:34:35:3e:0e:ad:71:85:41:85:6f:b0: 14:6b:c0:c1:b7:6b:84:16:2c:47:62:e0:26:2a:d4: ec:76:22:c5:0a:7b:8b:b2:10:22:1d:9d:dd:ff:39: 7f:df:45:89:a6:53:64:44:6a:07:8a:6c:69:7c:b8: 96:ed:fc:25:d5:ea:f8:42:97:e8:2b:c2:8b:e6:34: d0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:06:9E:30:CF:7B:24:CD:D7:7C:20:65:50:B0:BD:BD:B0:16:83:AF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/2E069E30CF7B24CDD77C206550B0BDBDB01683AF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.76.91.0/24 IPv6: 2001:df2:7fc0::/48 Signature Algorithm: sha256WithRSAEncryption 45:7e:63:27:69:5b:df:87:20:fb:29:4e:ce:e7:f2:56:0a:00: e5:57:e0:bb:cc:8b:0a:cc:0e:98:94:6c:83:6b:48:ea:36:db: 9b:fe:ba:d8:2e:3c:16:22:ae:0f:e7:b1:c5:77:a0:b7:4a:b1: a1:c6:9d:f7:f1:81:9e:94:42:43:4f:8a:1f:fd:92:96:d1:d1: 56:6c:fe:9b:2c:8e:22:8b:88:c9:bf:83:bb:3d:f7:89:1f:f9: 14:ec:9b:48:76:b5:87:d5:72:71:bf:19:8d:a9:5e:3c:8d:bd: 0b:8b:1d:fa:2a:bc:c7:64:24:01:6a:6d:d0:a2:db:c7:98:20: 66:e2:b9:99:25:52:28:b7:95:6e:e3:07:8e:ec:21:ed:06:c0: c2:ff:5c:64:40:8f:b2:55:1e:95:f7:38:be:71:1e:0a:cd:ac: 61:61:28:7f:a7:99:4f:89:c5:4b:09:42:e5:e4:f6:1d:8c:00: 77:03:33:ff:6c:50:2a:b7:8f:84:f6:58:5a:7d:2e:af:69:36: 1d:dc:ae:0b:1f:9f:d5:84:97:ed:32:cb:87:69:05:23:a9:5c: 12:0d:b4:4c:e8:a1:30:75:43:e3:31:6c:92:9e:49:ed:e4:d3: 86:80:90:49:c1:34:95:55:46:49:0b:d0:da:17:fc:26:0d:ae: fa:f0:ad:86 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUe2Gz0V98ofIWVY5lHM67EtgKx1owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTUxNFoX DTI3MDUwMjAwMjAxNFowMzExMC8GA1UEAxMoMkUwNjlFMzBDRjdCMjRDREQ3N0My MDY1NTBCMEJEQkRCMDE2ODNBRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJinxgsTzLeRi3uVG+PW0eKmwrASvqIzdsGvZaXBeOCOFrZ5p6fCo0yVr2sd B81cZqt0HHBYSkLm928vXuiCoY/FANan/yKq4gQnxOyNRLrn2qDBB13sRB1L5zXs uMP53x1d15IC12l+ITqpH4uDJV05ET3s5nWdJ12hiRD+kgV87imvjCRWC/e715DK 1PyYGHnRhn4JeA+1OI/5WoxaqO+4YJx6wBM3Atx/Km9PHp5IHUhXOBrTcjQ1Pg6t cYVBhW+wFGvAwbdrhBYsR2LgJirU7HYixQp7i7IQIh2d3f85f99FiaZTZERqB4ps aXy4lu38JdXq+EKX6CvCi+Y00DkCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC4GnjDPeyTN13wgZVCwvb2wFoOvMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM1MjFlNWVlLTU4ODItNDk0My1iNDA4LTQzYzM3NTgyZmIwYi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zNTIxZTVl ZS01ODgyLTQ5NDMtYjQwOC00M2MzNzU4MmZiMGIvMC8yRTA2OUUzMENGN0IyNENE RDc3QzIwNjU1MEIwQkRCREIwMTY4M0FGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ0xbMA8EAgACMAkDBwAgAQ3yf8AwDQYJKoZIhvcNAQELBQADggEBAEV+Yydp W9+HIPspTs7n8lYKAOVX4LvMiwrMDpiUbINrSOo225v+utguPBYirg/nscV3oLdK saHGnffxgZ6UQkNPih/9kpbR0VZs/pssjiKLiMm/g7s994kf+RTsm0h2tYfVcnG/ GY2pXjyNvQuLHfoqvMdkJAFqbdCi28eYIGbiuZklUii3lW7jB47sIe0GwML/XGRA j7JVHpX3OL5xHgrNrGFhKH+nmU+JxUsJQuXk9h2MAHcDM/9sUCq3j4T2WFp9Lq9p Nh3crgsfn9WEl+0yy4dpBSOpXBINtEzooTB1Q+MxbJKeSe3k04aAkEnBNJVVRkkL 0NoX/CYNrvrwrYY= -----END CERTIFICATE-----Generated at Tue May 12 22:10:18 2026 by rpki-client