$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E035D5F5D70206748D3C087B30BFBCD15ECF196D.cer File: E035D5F5D70206748D3C087B30BFBCD15ECF196D.cer (raw, json) Hash identifier: 5JGpvsZ2yc94W9USQAglrvbWM8kXt6oQBVvAEpU7Fss= Subject key identifier: E0:35:D5:F5:D7:02:06:74:8D:3C:08:7B:30:BF:BC:D1:5E:CF:19:6D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3A4D0CBFBCAC3958C7C35FD72AEAD2E96D576011 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:10:22 +0000 Certificate not after: Sun 02 May 2027 01:15:22 +0000 Subordinate resources: IP: 103.174.120.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:4d:0c:bf:bc:ac:39:58:c7:c3:5f:d7:2a:ea:d2:e9:6d:57:60:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:10:22 2026 GMT Not After : May 2 01:15:22 2027 GMT Subject: CN=E035D5F5D70206748D3C087B30BFBCD15ECF196D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c7:3c:53:e7:52:16:48:c1:a7:80:75:83:fa: 24:54:c9:11:51:4a:49:e4:ad:c2:84:16:9d:7e:26: b8:2f:a8:c8:5e:65:b6:d5:ad:0b:00:ee:3f:c8:95: 14:45:ea:7d:8e:54:5c:52:0c:a8:30:df:fe:b4:7f: a9:e6:98:4b:10:8e:9c:42:68:26:c1:02:1b:98:71: 0f:96:83:ae:dc:0d:85:fa:b6:1a:94:4b:2a:6d:fc: 69:f5:34:f3:50:b8:80:a9:a6:7a:73:18:53:d9:c2: eb:f5:e8:e2:df:39:b0:79:bf:71:0a:4d:3e:a4:85: 22:83:07:aa:e5:49:4c:c6:14:ec:2b:50:bc:f2:47: 6f:ba:b4:ac:b9:8c:20:ab:6c:23:e7:ca:f4:5c:6a: 77:38:97:a9:78:37:47:f9:8e:34:72:db:40:21:a9: f2:c4:4e:5b:7d:69:19:4e:0f:41:36:b3:21:2e:86: d8:8f:83:63:ec:97:78:d4:fd:b4:c7:a8:2d:b3:be: f6:4f:d7:9c:ab:5b:87:08:88:94:84:11:1e:34:4f: ec:32:1a:55:b8:ee:55:cc:ac:6f:d8:9b:9a:37:0d: 6b:67:96:f8:a8:76:1f:ce:98:27:a3:64:af:55:cb: 5b:27:63:04:d7:5e:a9:c4:d2:cb:32:dc:90:6e:5e: 0b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E0:35:D5:F5:D7:02:06:74:8D:3C:08:7B:30:BF:BC:D1:5E:CF:19:6D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.120.0/23 Signature Algorithm: sha256WithRSAEncryption 46:0d:fc:2c:06:36:fd:48:ec:e8:91:be:19:6e:0d:62:c1:1d: 48:9c:cd:a0:ed:77:20:5a:33:db:f3:10:56:21:97:9e:3d:34: 90:95:49:09:23:a6:c8:10:e0:b3:e9:67:64:30:c9:87:0b:dc: bf:22:25:1a:b5:ee:7b:3f:56:2c:6b:1c:a4:0e:e8:36:7f:19: 5a:eb:65:eb:a9:70:fc:f4:ce:63:34:9f:a2:09:a8:0e:7a:64: d2:ea:cb:2f:c4:3c:bf:f2:f2:3b:c1:be:9f:18:b4:1f:ba:08: b4:f2:8f:10:18:da:2f:20:d5:ba:d9:9b:90:1c:42:7e:a8:1f: 85:7d:8b:19:06:ab:a7:e1:5d:75:8b:ee:3d:64:0f:1b:a5:7a: 46:68:ca:45:2c:93:1f:a1:ad:e2:71:ee:89:2e:c4:6a:23:e8: 88:01:f6:c6:1f:9b:e7:9c:13:8d:b8:fc:c7:d2:6a:bb:5d:cb: 56:23:a4:a1:5d:85:17:e3:b3:36:65:e7:73:2e:05:b4:58:2c: e1:1f:da:fb:2d:7c:b7:43:56:26:a3:8e:1f:14:27:e3:07:71: 0c:50:28:9f:8f:87:a1:e4:30:bf:15:ac:27:b1:95:e9:d0:f1: 38:71:56:4a:84:af:66:b7:21:ef:7a:12:0f:ae:21:ac:42:54: a9:4b:50:48 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUOk0Mv7ysOVjHw1/XKurS6W1XYBEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTAyMloX DTI3MDUwMjAxMTUyMlowMzExMC8GA1UEAxMoRTAzNUQ1RjVENzAyMDY3NDhEM0Mw ODdCMzBCRkJDRDE1RUNGMTk2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOzHPFPnUhZIwaeAdYP6JFTJEVFKSeStwoQWnX4muC+oyF5lttWtCwDuP8iV FEXqfY5UXFIMqDDf/rR/qeaYSxCOnEJoJsECG5hxD5aDrtwNhfq2GpRLKm38afU0 81C4gKmmenMYU9nC6/Xo4t85sHm/cQpNPqSFIoMHquVJTMYU7CtQvPJHb7q0rLmM IKtsI+fK9FxqdziXqXg3R/mONHLbQCGp8sROW31pGU4PQTazIS6G2I+DY+yXeNT9 tMeoLbO+9k/XnKtbhwiIlIQRHjRP7DIaVbjuVcysb9ibmjcNa2eW+Kh2H86YJ6Nk r1XLWydjBNdeqcTSyzLckG5eC78CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOA11fXXAgZ0jTwIezC/vNFezxltMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg2YjIwNTE1LThkN2MtNDQ1Yy1iZmY3LWJhYmQ1MjY1NzgwZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84NmIyMDUx NS04ZDdjLTQ0NWMtYmZmNy1iYWJkNTI2NTc4MGYvMC9FMDM1RDVGNUQ3MDIwNjc0 OEQzQzA4N0IzMEJGQkNEMTVFQ0YxOTZELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ654MA0GCSqGSIb3DQEBCwUAA4IBAQBGDfwsBjb9SOzokb4Zbg1iwR1InM2g 7XcgWjPb8xBWIZeePTSQlUkJI6bIEOCz6WdkMMmHC9y/IiUate57P1YsaxykDug2 fxla62XrqXD89M5jNJ+iCagOemTS6ssvxDy/8vI7wb6fGLQfugi08o8QGNovINW6 2ZuQHEJ+qB+FfYsZBqun4V11i+49ZA8bpXpGaMpFLJMfoa3ice6JLsRqI+iIAfbG H5vnnBONuPzH0mq7XctWI6ShXYUX47M2ZedzLgW0WCzhH9r7LXy3Q1Ymo44fFCfj B3EMUCifj4eh5DC/FawnsZXp0PE4cVZKhK9mtyHvehIPriGsQlSpS1BI -----END CERTIFICATE-----Generated at Tue May 12 22:47:46 2026 by rpki-client