$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer File: E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer (raw, json) Hash identifier: D3LSLDUQ6hThK2lI1rSoyDxaVhdGFW3nTXGEiDTGcU0= Subject key identifier: E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 21DD035B30929B4B6CCF41C548EF4892D89DB532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:59:42 +0000 Certificate not after: Sun 02 May 2027 01:04:42 +0000 Subordinate resources: IP: 27.123.0.0/21 IP: 103.18.28.0/22 IP: 150.107.248.0/22 IP: 202.43.114.0/23 IP: 2406:a300::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:dd:03:5b:30:92:9b:4b:6c:cf:41:c5:48:ef:48:92:d8:9d:b5:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:59:42 2026 GMT Not After : May 2 01:04:42 2027 GMT Subject: CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a6:cc:42:dc:8a:8c:d5:4e:4e:8e:bf:d8:e9: c2:e4:20:f3:5e:a4:dd:84:7e:78:3b:15:f9:19:35: bc:06:9f:cb:ba:f6:14:06:4b:8a:ab:b1:b9:d4:c9: 45:1c:5e:61:ab:ac:92:74:90:b7:8d:ad:6d:ea:f7: 88:7f:0a:27:3f:a8:8f:27:47:2f:70:19:9f:d3:60: 36:2e:f4:04:25:a4:54:fe:31:d6:37:e2:86:3a:9d: 46:af:85:ba:f5:49:7a:ef:d0:1c:24:f4:71:53:0b: fc:53:ca:e3:20:6a:c0:81:17:a5:44:cb:2a:9a:10: e2:4a:60:02:06:91:aa:e0:73:9a:3b:a5:f7:21:d7: 7f:d5:b6:9e:fc:36:9f:fc:d3:ec:c9:f0:fc:51:31: 25:78:d8:f6:43:15:ca:dd:cd:b8:76:d8:60:99:d2: 07:cb:bc:04:8c:7d:34:d3:fa:ef:e5:85:8d:f5:e7: 1e:ba:b2:ff:05:10:f7:d6:a3:09:65:44:76:bd:e4: 79:fa:14:c9:12:40:7e:25:19:b5:2f:ab:60:98:aa: d1:bc:b5:51:fa:5a:45:38:72:03:9a:6e:3b:a0:7c: 8d:7f:65:f5:64:6d:ab:bd:15:29:b9:09:3f:e8:b7: 92:02:98:29:d3:63:39:c7:9b:e6:c1:88:b5:dd:bb: 60:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.123.0.0/21 103.18.28.0/22 150.107.248.0/22 202.43.114.0/23 IPv6: 2406:a300::/32 Signature Algorithm: sha256WithRSAEncryption 69:c2:7e:84:d6:10:e8:ba:92:b1:d1:7c:36:5c:96:fe:9a:0f: 27:60:1f:e3:74:1e:40:19:8a:f1:ef:ad:c0:a1:63:29:cc:1f: 87:34:54:c4:ba:4a:c6:48:50:3c:e8:c0:09:03:2c:9d:55:27: fd:84:fc:ba:6e:09:69:63:27:02:b1:d0:f7:cc:f6:b5:40:c6: a8:8b:21:8f:f9:07:15:5b:32:09:a2:7d:a2:cf:82:dd:c9:74: 47:d4:e9:96:da:6d:2b:70:8f:52:66:9d:c6:4c:b2:27:bb:7d: 94:75:9a:1c:53:6e:f6:4a:08:61:6a:21:0f:58:73:f2:e0:0b: 6c:dc:c7:35:22:db:43:4f:19:ae:bb:45:3c:d3:2e:f4:da:3c: 58:ed:be:e4:03:1f:93:94:21:1f:2c:2c:6e:f4:95:fd:8f:a0: 84:9d:ee:25:ae:f3:39:c2:8a:7f:d4:2a:55:f8:ce:2b:dc:8b: a4:15:3b:c8:23:67:1d:0f:66:55:22:d0:4f:98:93:93:51:8c: 2b:e9:af:f6:ee:48:a3:b6:4d:10:e9:5b:f6:74:6c:8c:ab:3d: aa:f3:09:60:24:1c:1d:22:f7:a3:e7:31:ad:21:15:c9:91:d2: 60:62:74:43:1a:b3:6d:5d:87:86:c6:aa:27:e9:a8:0b:55:0a: 2e:c0:a4:a0 -----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgIUId0DWzCSm0tsz0HFSO9IktidtTIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTk0MloX DTI3MDUwMjAxMDQ0MlowMzExMC8GA1UEAxMoRTAwQzBBRDAxQ0JGNkVFOUI0MjU0 MzA1RTdCMzQwRDY0QzU5NzREMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWmzELciozVTk6Ov9jpwuQg816k3YR+eDsV+Rk1vAafy7r2FAZLiquxudTJ RRxeYausknSQt42tber3iH8KJz+ojydHL3AZn9NgNi70BCWkVP4x1jfihjqdRq+F uvVJeu/QHCT0cVML/FPK4yBqwIEXpUTLKpoQ4kpgAgaRquBzmjul9yHXf9W2nvw2 n/zT7Mnw/FExJXjY9kMVyt3NuHbYYJnSB8u8BIx9NNP67+WFjfXnHrqy/wUQ99aj CWVEdr3kefoUyRJAfiUZtS+rYJiq0by1UfpaRThyA5puO6B8jX9l9WRtq70VKbkJ P+i3kgKYKdNjOceb5sGItd27YHUCAwEAAaOCAtowggLWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOAMCtAcv27ptCVDBeezQNZMWXTQMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc3Y2Q2OGY0LTY5YTUtNDc1Zi1hZWU0LTNlZjRiOGQzMDJkZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83N2NkNjhm NC02OWE1LTQ3NWYtYWVlNC0zZWY0YjhkMzAyZGQvMC9FMDBDMEFEMDFDQkY2RUU5 QjQyNTQzMDVFN0IzNDBENjRDNTk3NEQwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAY AwQDG3sAAwQCZxIcAwQClmv4AwQByityMA0EAgACMAcDBQAkBqMAMA0GCSqGSIb3 DQEBCwUAA4IBAQBpwn6E1hDoupKx0Xw2XJb+mg8nYB/jdB5AGYrx763AoWMpzB+H NFTEukrGSFA86MAJAyydVSf9hPy6bglpYycCsdD3zPa1QMaoiyGP+QcVWzIJon2i z4LdyXRH1OmW2m0rcI9SZp3GTLInu32UdZocU272SghhaiEPWHPy4Ats3Mc1IttD Txmuu0U80y702jxY7b7kAx+TlCEfLCxu9JX9j6CEne4lrvM5wop/1CpV+M4r3Iuk FTvII2cdD2ZVItBPmJOTUYwr6a/27kijtk0Q6Vv2dGyMqz2q8wlgJBwdIvej5zGt IRXJkdJgYnRDGrNtXYeGxqon6agLVQouwKSg -----END CERTIFICATE-----Generated at Tue May 12 22:03:09 2026 by rpki-client