$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer File: E029C9E3702797CC6083E1D4D891799F0F5AA144.cer (raw, json) Hash identifier: xDzN4jiCu7VmRePPg4/J5oX+KaX8ETJlPS5WiIv4GHM= Subject key identifier: E0:29:C9:E3:70:27:97:CC:60:83:E1:D4:D8:91:79:9F:0F:5A:A1:44 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1E16056A5527012C338CA2CAA88A411E331E37B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:25:26 +0000 Certificate not after: Sun 02 May 2027 02:30:26 +0000 Subordinate resources: IP: 103.109.206.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:16:05:6a:55:27:01:2c:33:8c:a2:ca:a8:8a:41:1e:33:1e:37:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:25:26 2026 GMT Not After : May 2 02:30:26 2027 GMT Subject: CN=E029C9E3702797CC6083E1D4D891799F0F5AA144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:63:b0:95:e4:3b:c1:b9:fe:62:8a:7e:f1:41: 00:ed:a7:bb:b4:ed:4c:54:84:df:ed:a1:7e:e8:cd: 66:8d:e9:36:21:28:d7:ad:0c:72:03:0e:7c:b1:3b: 1c:09:14:52:c6:52:97:88:b2:d4:f3:02:5b:3a:55: c8:e5:59:b9:cb:90:a5:b2:3c:85:17:d7:d2:36:78: 66:9a:c0:10:71:7e:28:f8:60:13:2a:b9:5d:4e:2a: 02:23:33:d2:98:d0:87:61:7a:33:bc:2a:c5:33:1f: 7a:9b:67:ef:3e:0a:cb:a6:d4:24:a0:03:c1:41:fc: 8a:f5:58:47:42:bd:cd:47:d5:4c:be:aa:27:86:64: 71:c7:40:67:9b:ee:42:bd:d5:2c:58:e2:00:4e:7b: c0:fa:f2:68:59:4d:22:71:79:f5:bf:5a:ac:26:46: 74:1e:a0:cc:25:a3:b7:ea:ea:2f:bd:4e:e5:f5:7a: f3:b0:0d:f5:7e:2e:bb:52:6b:57:c4:c7:98:03:ef: 3f:d2:48:6f:0e:84:85:fb:e8:20:e4:7a:0a:a7:19: 9e:f6:df:0f:ad:f2:fd:b4:a6:28:43:cb:da:d9:78: 21:a0:89:a7:e9:5f:53:86:1f:07:89:af:f8:c5:2e: 18:e4:c7:7f:07:57:94:bc:67:14:0a:27:84:bb:e6: 69:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E0:29:C9:E3:70:27:97:CC:60:83:E1:D4:D8:91:79:9F:0F:5A:A1:44 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.109.206.0/23 Signature Algorithm: sha256WithRSAEncryption 56:f9:39:91:95:61:04:fa:ef:a1:4c:7c:f3:42:64:a1:3d:9e: 6d:f1:73:62:83:bc:70:bc:06:47:3f:0a:53:fd:43:39:65:31: 67:42:fd:69:a9:c4:4d:e4:7c:eb:bd:fe:c8:b8:d6:9d:fb:89: b7:d3:3d:ec:f8:7f:d9:0a:c5:3d:e7:ea:c7:f0:0e:10:ab:bc: c8:3c:ed:a2:52:fc:69:2a:cb:07:9e:33:b5:2e:b4:e1:42:5f: 2d:65:bd:cb:d6:77:53:e6:61:96:b2:3c:f5:2c:25:01:5c:c1: b7:29:14:f5:5b:7f:e0:6e:e0:52:2e:90:83:19:15:12:6f:84: bd:a4:22:55:1b:10:2b:56:11:89:7b:13:04:7c:d6:85:c3:bc: 1f:4e:22:eb:16:f7:7b:dd:d4:bc:2a:c4:4a:5c:a9:5e:0a:06: 19:1f:b2:7c:d0:f0:dd:e5:6c:aa:ed:f1:69:11:8a:ce:e0:2b: 0e:99:2b:f5:ab:ed:96:e2:0b:98:20:ef:02:82:b1:45:fe:39: d5:05:ad:77:a1:bd:ee:33:0b:0e:ef:10:e6:e3:93:4f:6a:e1: 73:1f:fb:34:a6:c0:96:88:2f:25:ee:87:00:4d:b6:6c:b2:8f: 41:29:69:e8:88:13:58:3e:05:e2:59:6f:4a:9d:c7:e4:18:cd: eb:78:a3:4e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUHhYFalUnASwzjKLKqIpBHjMeN7kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjUyNloX DTI3MDUwMjAyMzAyNlowMzExMC8GA1UEAxMoRTAyOUM5RTM3MDI3OTdDQzYwODNF MUQ0RDg5MTc5OUYwRjVBQTE0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALNjsJXkO8G5/mKKfvFBAO2nu7TtTFSE3+2hfujNZo3pNiEo160McgMOfLE7 HAkUUsZSl4iy1PMCWzpVyOVZucuQpbI8hRfX0jZ4ZprAEHF+KPhgEyq5XU4qAiMz 0pjQh2F6M7wqxTMfeptn7z4Ky6bUJKADwUH8ivVYR0K9zUfVTL6qJ4ZkccdAZ5vu Qr3VLFjiAE57wPryaFlNInF59b9arCZGdB6gzCWjt+rqL71O5fV687AN9X4uu1Jr V8THmAPvP9JIbw6EhfvoIOR6CqcZnvbfD63y/bSmKEPL2tl4IaCJp+lfU4YfB4mv +MUuGOTHfwdXlLxnFAonhLvmadkCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOApyeNwJ5fMYIPh1NiReZ8PWqFEMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2VjODg5MmViLWRkYzAtNGNiNi05NTdjLWI2NTNmMjhiYmYzOS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lYzg4OTJl Yi1kZGMwLTRjYjYtOTU3Yy1iNjUzZjI4YmJmMzkvMC9FMDI5QzlFMzcwMjc5N0ND NjA4M0UxRDREODkxNzk5RjBGNUFBMTQ0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ23OMA0GCSqGSIb3DQEBCwUAA4IBAQBW+TmRlWEE+u+hTHzzQmShPZ5t8XNi g7xwvAZHPwpT/UM5ZTFnQv1pqcRN5Hzrvf7IuNad+4m30z3s+H/ZCsU95+rH8A4Q q7zIPO2iUvxpKssHnjO1LrThQl8tZb3L1ndT5mGWsjz1LCUBXMG3KRT1W3/gbuBS LpCDGRUSb4S9pCJVGxArVhGJexMEfNaFw7wfTiLrFvd73dS8KsRKXKleCgYZH7J8 0PDd5Wyq7fFpEYrO4CsOmSv1q+2W4guYIO8CgrFF/jnVBa13ob3uMwsO7xDm45NP auFzH/s0psCWiC8l7ocATbZsso9BKWnoiBNYPgXiWW9KncfkGM3reKNO -----END CERTIFICATE-----Generated at Tue May 12 22:16:18 2026 by rpki-client