$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2E714C194A9AD07684B017C191F12805054E1FC8.cer File: 2E714C194A9AD07684B017C191F12805054E1FC8.cer (raw, json) Hash identifier: eUJ/Fz/gnb5tBTZSsc0ibw2HpO5dtP/EYZP5lYD9org= Subject key identifier: 2E:71:4C:19:4A:9A:D0:76:84:B0:17:C1:91:F1:28:05:05:4E:1F:C8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4F15C03DC711511036EE4C8CDEF1AF7263C8C5B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:20:32 +0000 Certificate not after: Sun 02 May 2027 00:25:32 +0000 Subordinate resources: IP: 103.160.193.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:15:c0:3d:c7:11:51:10:36:ee:4c:8c:de:f1:af:72:63:c8:c5:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:20:32 2026 GMT Not After : May 2 00:25:32 2027 GMT Subject: CN=2E714C194A9AD07684B017C191F12805054E1FC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:84:85:f3:21:fc:c0:8e:d3:ea:fd:a2:de:7b: ff:24:eb:da:6f:11:f4:cc:62:6e:d8:6d:b3:71:aa: db:df:89:47:79:ed:9c:9c:a9:a7:37:00:96:94:d0: 05:3b:72:64:77:81:67:11:3a:54:75:70:6f:9c:20: 27:f1:e9:c2:e2:c4:5d:3a:82:56:e0:45:ff:4c:40: c1:5a:fc:82:1f:b6:15:96:a6:ba:1c:c4:7c:88:d9: 04:ee:05:6b:bd:83:34:14:d7:65:ef:8e:1c:c6:b2: 76:95:e2:3d:0f:2f:05:98:eb:54:67:69:6f:c3:41: 18:ec:4c:cc:62:53:59:2d:49:8b:0f:ef:44:1d:f3: 36:f6:31:dd:50:8c:8b:65:03:1e:da:e5:7d:9b:06: ba:33:ce:6e:fb:0d:df:0d:71:df:4b:ee:b5:36:2f: 7b:7f:e7:d4:4d:e0:59:c3:c6:96:dc:75:e9:87:3c: 5a:19:22:d4:d9:11:05:c1:68:16:03:67:23:dc:20: 60:c9:50:cf:2a:ad:46:ab:96:a2:3c:4b:b2:77:de: 1a:65:cf:e5:0e:31:5e:9d:5d:41:b8:42:a1:d9:bb: ff:e2:e6:64:c6:58:a4:3e:5f:a1:ed:61:4b:a9:ab: ac:8a:3e:b0:e9:10:5f:96:54:12:18:68:71:00:59: c6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:71:4C:19:4A:9A:D0:76:84:B0:17:C1:91:F1:28:05:05:4E:1F:C8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/2E714C194A9AD07684B017C191F12805054E1FC8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.193.0/24 Signature Algorithm: sha256WithRSAEncryption 31:14:17:07:26:7a:d4:2f:4f:9f:ed:0f:44:f7:15:0c:2a:ca: b4:5c:3e:9b:1a:48:25:be:5d:ec:08:c0:76:aa:30:8d:94:58: ca:c2:31:63:dc:99:83:b1:2d:b6:ae:8f:95:12:1a:6d:36:c5: b5:12:b4:2d:8d:f0:a6:cf:4b:cb:9e:59:e3:2f:60:07:fe:30: 2f:7e:19:95:1d:77:86:86:a0:05:70:d8:ed:c0:ce:77:84:97: 05:d4:5a:3e:e7:5b:3a:6f:d0:ac:2f:d1:77:a0:89:13:a8:81: 56:58:03:8a:d8:ab:d9:1a:3e:20:0b:ad:a2:ab:d2:87:3c:9e: 21:3a:b7:17:c2:68:8c:a5:9e:ed:ca:52:5a:9b:41:b8:46:1b: a1:7a:39:5f:66:a0:ef:68:4c:46:24:74:88:44:87:ba:13:f4: 64:34:6a:ac:ef:a1:38:ef:b0:51:ba:80:9a:3a:59:34:bf:92: 48:97:7f:b7:79:0b:1a:fb:82:1e:91:01:7a:74:a7:ef:4b:19: df:cf:e7:0b:80:fc:56:23:5a:df:1b:be:20:50:a8:93:09:7f: 4e:17:c3:2c:9e:cd:24:7d:d6:55:3c:e8:bd:e6:cb:08:87:e4: 4a:8d:79:fe:87:83:a3:13:33:ae:d9:20:61:30:67:3c:cc:19: f8:82:a8:53 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUTxXAPccRURA27kyM3vGvcmPIxbUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjAzMloX DTI3MDUwMjAwMjUzMlowMzExMC8GA1UEAxMoMkU3MTRDMTk0QTlBRDA3Njg0QjAx N0MxOTFGMTI4MDUwNTRFMUZDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALuEhfMh/MCO0+r9ot57/yTr2m8R9Mxibthts3Gq29+JR3ntnJyppzcAlpTQ BTtyZHeBZxE6VHVwb5wgJ/HpwuLEXTqCVuBF/0xAwVr8gh+2FZamuhzEfIjZBO4F a72DNBTXZe+OHMaydpXiPQ8vBZjrVGdpb8NBGOxMzGJTWS1Jiw/vRB3zNvYx3VCM i2UDHtrlfZsGujPObvsN3w1x30vutTYve3/n1E3gWcPGltx16Yc8Whki1NkRBcFo FgNnI9wgYMlQzyqtRquWojxLsnfeGmXP5Q4xXp1dQbhCodm7/+LmZMZYpD5foe1h S6mrrIo+sOkQX5ZUEhhocQBZxkcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC5xTBlKmtB2hLAXwZHxKAUFTh/IMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzNjYjNiMDBiLWFkN2ItNDg0OS1iMGIyLWUyNDlhMmZhNjA0YS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zY2IzYjAw Yi1hZDdiLTQ4NDktYjBiMi1lMjQ5YTJmYTYwNGEvMC8yRTcxNEMxOTRBOUFEMDc2 ODRCMDE3QzE5MUYxMjgwNTA1NEUxRkM4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6DBMA0GCSqGSIb3DQEBCwUAA4IBAQAxFBcHJnrUL0+f7Q9E9xUMKsq0XD6b Gkglvl3sCMB2qjCNlFjKwjFj3JmDsS22ro+VEhptNsW1ErQtjfCmz0vLnlnjL2AH /jAvfhmVHXeGhqAFcNjtwM53hJcF1Fo+51s6b9CsL9F3oIkTqIFWWAOK2KvZGj4g C62iq9KHPJ4hOrcXwmiMpZ7tylJam0G4RhuhejlfZqDvaExGJHSIRIe6E/RkNGqs 76E477BRuoCaOlk0v5JIl3+3eQsa+4IekQF6dKfvSxnfz+cLgPxWI1rfG74gUKiT CX9OF8Msns0kfdZVPOi95ssIh+RKjXn+h4OjEzOu2SBhMGc8zBn4gqhT -----END CERTIFICATE-----Generated at Tue May 12 22:02:35 2026 by rpki-client