$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.cer File: 4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.cer (raw, json) Hash identifier: B8jDT9kQeJ0J0uiVZQx7S+s1foNIHUEvNn1QVVdSzXo= Subject key identifier: 4E:B1:60:AE:98:58:8B:60:D5:AE:42:91:EF:D8:D1:D4:E4:1D:EA:0C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 19B48B7A1E247AD5EBB159D111A0782F6A2ACDCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:48:54 +0000 Certificate not after: Sun 02 May 2027 01:53:54 +0000 Subordinate resources: IP: 103.174.90.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:b4:8b:7a:1e:24:7a:d5:eb:b1:59:d1:11:a0:78:2f:6a:2a:cd:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:48:54 2026 GMT Not After : May 2 01:53:54 2027 GMT Subject: CN=4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3b:2f:bd:fc:a3:9d:91:ef:d1:16:9f:94:4f: 58:8a:9e:2e:fc:01:3f:15:60:0f:08:66:20:88:8b: 7d:28:4f:fc:b2:89:7d:49:ae:80:5c:b3:40:04:65: b9:8a:97:c1:e5:38:9b:86:b5:a4:72:59:95:d4:65: ec:73:d0:ee:e4:f4:d0:cb:bc:eb:87:68:f1:b0:69: 9d:17:bd:9d:df:31:53:3a:4e:95:33:df:66:e0:77: 57:87:a7:09:e2:0a:f0:d3:23:83:2d:68:45:cc:c1: 71:9e:30:f9:b0:1a:a7:1d:27:f3:e8:38:e4:ab:59: 4a:4e:66:4e:3a:f9:12:d8:94:67:c7:47:61:83:fe: 8b:2d:0e:6b:b0:ad:1c:e0:3e:30:0f:1c:c8:8e:67: 26:d7:c3:ac:81:09:c3:dc:2f:0b:1c:62:98:34:51: 49:f5:9f:b6:b6:05:b5:2d:dd:c4:06:04:f7:3f:6b: 69:e0:1a:5e:1a:45:3b:1f:df:d6:8d:59:ed:4e:29: 3a:22:00:7c:ab:43:e6:44:6d:dd:47:51:41:c8:ad: 16:73:d8:33:c2:18:75:2c:94:d6:47:6b:c3:ed:c5: 5e:ea:12:58:bd:fc:96:84:68:36:91:a1:3c:96:10: ef:d1:e0:42:e4:4b:cc:85:54:0e:63:d0:7b:b6:cd: 48:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4E:B1:60:AE:98:58:8B:60:D5:AE:42:91:EF:D8:D1:D4:E4:1D:EA:0C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.90.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:ca:04:da:89:0c:26:8b:30:1b:2f:f6:78:5d:48:ae:83:32: 8a:7c:f5:72:e4:ad:8d:58:15:8c:b7:a4:6e:a1:00:0c:e6:8b: 9c:d7:4f:75:0a:53:a5:d5:ec:59:63:60:9a:8e:20:7b:66:ac: 13:bd:6f:aa:62:13:6a:4f:e6:05:e9:6d:c8:e6:67:f5:c0:e1: 12:d2:a4:a8:ba:a5:64:bd:55:a0:16:49:e2:f1:06:09:6a:0c: b4:cd:4c:62:89:a9:de:16:cc:a5:1f:ca:d5:f3:c0:13:9b:90: bb:c8:03:83:6b:14:35:92:97:af:95:d6:09:ef:83:e6:9a:b3: cd:06:9d:47:b9:60:45:f8:77:54:27:4f:d4:4c:57:ed:14:6d: 69:f8:af:a6:07:68:40:dc:06:ad:bb:d7:f9:81:52:f6:30:f7: 48:08:5c:d1:53:35:f8:ae:5c:3e:8d:ab:bf:c7:65:6c:af:a5: 48:5c:40:cd:60:59:37:02:70:42:54:f4:88:a3:ca:43:f2:aa: 2b:d7:7e:00:8a:df:91:c9:b6:35:1a:b9:64:36:5a:98:7d:20: 66:30:4f:ff:e9:9b:a4:da:a4:4a:4e:39:84:21:e5:a6:ac:ef: 3d:84:cb:92:fd:66:f5:56:42:32:e8:cc:0f:a9:d7:56:8c:50: b9:4b:0e:b0 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUGbSLeh4ketXrsVnREaB4L2oqzcowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDg1NFoX DTI3MDUwMjAxNTM1NFowMzExMC8GA1UEAxMoNEVCMTYwQUU5ODU4OEI2MEQ1QUU0 MjkxRUZEOEQxRDRFNDFERUEwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANc7L738o52R79EWn5RPWIqeLvwBPxVgDwhmIIiLfShP/LKJfUmugFyzQARl uYqXweU4m4a1pHJZldRl7HPQ7uT00Mu864do8bBpnRe9nd8xUzpOlTPfZuB3V4en CeIK8NMjgy1oRczBcZ4w+bAapx0n8+g45KtZSk5mTjr5EtiUZ8dHYYP+iy0Oa7Ct HOA+MA8cyI5nJtfDrIEJw9wvCxximDRRSfWftrYFtS3dxAYE9z9raeAaXhpFOx/f 1o1Z7U4pOiIAfKtD5kRt3UdRQcitFnPYM8IYdSyU1kdrw+3FXuoSWL38loRoNpGh PJYQ79HgQuRLzIVUDmPQe7bNSDUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE6xYK6YWItg1a5Cke/Y0dTkHeoMMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2MzNTBmMDc4LWM1MzUtNGY4ZS05NjBmLTMyYzE2MjNhYTRiMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jMzUwZjA3 OC1jNTM1LTRmOGUtOTYwZi0zMmMxNjIzYWE0YjEvMC80RUIxNjBBRTk4NTg4QjYw RDVBRTQyOTFFRkQ4RDFENEU0MURFQTBDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ65aMA0GCSqGSIb3DQEBCwUAA4IBAQCfygTaiQwmizAbL/Z4XUiugzKKfPVy 5K2NWBWMt6RuoQAM5ouc1091ClOl1exZY2CajiB7ZqwTvW+qYhNqT+YF6W3I5mf1 wOES0qSouqVkvVWgFkni8QYJagy0zUxiianeFsylH8rV88ATm5C7yAODaxQ1kpev ldYJ74PmmrPNBp1HuWBF+HdUJ0/UTFftFG1p+K+mB2hA3Aatu9f5gVL2MPdICFzR UzX4rlw+jau/x2Vsr6VIXEDNYFk3AnBCVPSIo8pD8qor134Ait+RybY1GrlkNlqY fSBmME//6Zuk2qRKTjmEIeWmrO89hMuS/Wb1VkIy6MwPqddWjFC5Sw6w -----END CERTIFICATE-----Generated at Wed May 13 02:36:43 2026 by rpki-client