$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer File: 2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer (raw, json) Hash identifier: RmmiUp52DrWhweewYQUPU85VbilOakrgH8t5aEG9PKg= Subject key identifier: 2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 44D0E68AEDEC3DA5A73E497F25BB15380B3F8DCE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:49:50 +0000 Certificate not after: Sun 02 May 2027 00:54:50 +0000 Subordinate resources: IP: 103.30.56.0/22 IP: 202.72.192.0/20 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d0:e6:8a:ed:ec:3d:a5:a7:3e:49:7f:25:bb:15:38:0b:3f:8d:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:49:50 2026 GMT Not After : May 2 00:54:50 2027 GMT Subject: CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:30:19:20:fa:69:c3:ad:89:89:d2:31:ab:f7: 68:be:74:e7:ff:d7:cc:00:e8:b0:f7:7a:df:00:88: 9f:b4:28:85:ed:b5:b0:c8:1c:b3:ab:3d:63:09:27: 2b:99:a1:63:69:f0:5c:3e:67:e4:96:0c:db:db:97: 21:51:dc:77:e6:fe:e2:c8:55:79:ef:d1:0d:a4:e4: 49:45:c8:1b:5f:2c:c5:e6:d1:e3:ad:3c:5c:e6:fa: fc:73:f9:07:65:82:87:c4:56:e5:02:89:03:6d:9c: 6d:3c:07:85:bf:34:6e:9a:21:53:46:cd:40:54:a2: 55:23:d2:68:ff:24:20:ef:d1:5a:7f:cb:f2:57:3b: d1:eb:0f:29:fc:fd:d2:57:f5:77:a2:33:7b:31:95: 05:02:f4:ed:9e:c8:b6:65:cc:21:a0:7b:63:ff:df: 6b:f8:01:29:51:06:ac:84:0c:47:06:50:ab:a1:67: e8:cc:0f:46:6d:14:21:68:46:79:5b:da:48:e3:04: eb:ec:6c:ba:39:19:21:9c:85:2f:6d:9a:7a:bb:ae: 3f:98:b5:3e:68:b7:4d:a9:ea:4f:a8:8d:fa:87:f8: c0:79:a3:7c:be:30:84:c1:ba:e7:c9:80:c2:8e:e5: 8e:75:35:a3:3e:e4:31:a2:24:a7:b7:86:b8:56:d5: 9f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.30.56.0/22 202.72.192.0/20 Signature Algorithm: sha256WithRSAEncryption 8d:22:28:f4:6f:87:a7:37:9c:1d:c9:1d:55:cd:57:f0:e7:fd: af:24:2c:b0:f9:70:2f:f9:5b:2a:74:e1:3d:0b:dd:03:30:79: a4:e2:13:e5:4a:b5:ed:08:44:87:cc:fc:30:96:af:92:6a:18: 52:fc:d4:87:fa:72:14:3b:57:86:06:51:bd:c7:97:ad:42:b1: 89:ce:98:30:33:d1:71:46:39:be:2c:c6:f8:03:f6:f2:e3:95: 04:95:17:a7:59:93:b0:ea:7e:fb:30:00:e1:ff:9b:4c:fb:ea: fe:70:a1:e9:b5:0e:7a:87:13:45:cc:75:1f:66:9d:5d:01:81: 58:1e:8c:af:54:ec:d2:6b:80:23:22:34:9d:05:ad:3b:4f:ea: 00:94:0e:63:77:58:65:6d:49:5e:8a:74:c4:3b:8c:c2:22:4b: 8b:25:40:c5:8c:02:e2:51:4a:a0:80:7c:70:f7:ef:ff:60:27: d8:62:6a:da:1f:7d:78:86:2a:1b:21:b8:a6:c5:0a:4c:96:eb: a2:6b:83:66:75:e9:34:d3:2b:0d:53:28:9d:41:09:a4:11:bd: 16:46:f1:85:4e:bf:a6:04:ec:0a:2c:b1:9d:95:39:b9:3f:28: 4c:42:c5:75:36:c3:2f:1c:09:be:f9:fc:9a:b9:89:b8:9e:9c: 6a:b1:84:76 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIURNDmiu3sPaWnPkl/JbsVOAs/jc4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDk1MFoX DTI3MDUwMjAwNTQ1MFowMzExMC8GA1UEAxMoMkU3QUIxMzM1QzRFMDdDNkQzNDYx MERBNUI5MjBDNDk2RjZCNjFEMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMcwGSD6acOtiYnSMav3aL505//XzADosPd63wCIn7Qohe21sMgcs6s9Ywkn K5mhY2nwXD5n5JYM29uXIVHcd+b+4shVee/RDaTkSUXIG18sxebR4608XOb6/HP5 B2WCh8RW5QKJA22cbTwHhb80bpohU0bNQFSiVSPSaP8kIO/RWn/L8lc70esPKfz9 0lf1d6IzezGVBQL07Z7ItmXMIaB7Y//fa/gBKVEGrIQMRwZQq6Fn6MwPRm0UIWhG eVvaSOME6+xsujkZIZyFL22aeruuP5i1Pmi3TanqT6iN+of4wHmjfL4whMG658mA wo7ljnU1oz7kMaIkp7eGuFbVnw8CAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC56sTNcTgfG00YQ2luSDElva2HQMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzY5YWNiNGE4LTc4MDQtNDUyNi04NGQyLTg2OWI5MWE2NzE5ZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby82OWFjYjRh OC03ODA0LTQ1MjYtODRkMi04NjliOTFhNjcxOWQvMC8yRTdBQjEzMzVDNEUwN0M2 RDM0NjEwREE1QjkyMEM0OTZGNkI2MUQwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQCZx44AwQEykjAMA0GCSqGSIb3DQEBCwUAA4IBAQCNIij0b4enN5wdyR1VzVfw 5/2vJCyw+XAv+VsqdOE9C90DMHmk4hPlSrXtCESHzPwwlq+SahhS/NSH+nIUO1eG BlG9x5etQrGJzpgwM9FxRjm+LMb4A/by45UElRenWZOw6n77MADh/5tM++r+cKHp tQ56hxNFzHUfZp1dAYFYHoyvVOzSa4AjIjSdBa07T+oAlA5jd1hlbUleinTEO4zC IkuLJUDFjALiUUqggHxw9+//YCfYYmraH314hiobIbimxQpMluuia4Nmdek00ysN UyidQQmkEb0WRvGFTr+mBOwKLLGdlTm5PyhMQsV1NsMvHAm++fyauYm4npxqsYR2 -----END CERTIFICATE-----Generated at Tue May 12 22:03:48 2026 by rpki-client