$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E037136E2AAC9F6693BBACBC3C65801649522C3C.cer File: E037136E2AAC9F6693BBACBC3C65801649522C3C.cer (raw, json) Hash identifier: M3on62NdRwKcmkMW7CBmH7hzUgYUfRBkF+CQkGkxdm0= Subject key identifier: E0:37:13:6E:2A:AC:9F:66:93:BB:AC:BC:3C:65:80:16:49:52:2C:3C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1033F1852B7E0D066E42EE5E2D3DC429733CD002 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/E037136E2AAC9F6693BBACBC3C65801649522C3C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:37:49 +0000 Certificate not after: Sun 02 May 2027 00:42:49 +0000 Subordinate resources: IP: 103.131.28.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:33:f1:85:2b:7e:0d:06:6e:42:ee:5e:2d:3d:c4:29:73:3c:d0:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:37:49 2026 GMT Not After : May 2 00:42:49 2027 GMT Subject: CN=E037136E2AAC9F6693BBACBC3C65801649522C3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c7:98:93:8a:1b:ec:12:9a:dc:42:05:21:8d: 82:9e:52:4f:db:ac:28:fe:50:b8:cd:0e:61:51:18: 4a:8a:1b:9e:b6:14:b8:ab:88:4f:9b:4d:fa:2b:0f: b3:f4:63:07:59:ca:06:0f:c8:76:16:d5:c3:40:bc: db:84:73:0f:17:cf:42:d3:c7:21:88:39:e4:9b:ae: c5:5b:a8:40:2a:21:6a:b7:f0:77:d1:61:1e:f3:76: b0:21:8d:d1:2f:b9:f7:e5:b9:7d:31:77:2e:5e:1d: f7:31:5d:14:e6:05:62:ce:fc:10:fb:62:dd:a4:b4: fc:6e:89:d4:08:bd:6d:ae:36:ff:49:5a:af:b4:d6: 5f:49:ed:fb:8e:d9:78:55:d5:6b:cc:ba:87:10:ae: 2b:6f:c4:ce:94:8f:18:06:04:3c:db:b8:0f:54:67: 3c:54:51:d8:a7:7f:e0:c2:dd:ac:99:04:46:08:51: a8:cc:e7:b2:8f:e4:15:84:26:9f:86:37:4f:aa:28: 97:3d:30:09:ed:4f:f5:49:90:aa:53:ab:83:47:c0: e9:ce:eb:91:25:66:b3:0a:f6:f6:f0:fa:6e:73:fd: 39:3c:74:b6:53:5e:e8:2e:49:e7:23:c8:37:4c:42: cf:b3:ae:a5:a7:84:12:30:69:2a:d3:c9:ba:f0:3d: 80:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E0:37:13:6E:2A:AC:9F:66:93:BB:AC:BC:3C:65:80:16:49:52:2C:3C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/E037136E2AAC9F6693BBACBC3C65801649522C3C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.131.28.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:3c:f9:15:ec:66:b3:40:fe:b7:c8:a9:74:5b:f1:2b:94:70: f6:f4:20:f8:12:6a:cd:80:1f:a4:a4:cb:1c:ae:da:55:9c:09: b5:21:45:1b:66:84:1e:a7:aa:70:e8:6a:a3:a2:94:7a:a2:db: 41:91:cf:2a:ea:e0:ca:43:a6:37:31:a8:d8:59:c2:c5:ee:f0: b5:6b:33:53:89:68:1c:57:b1:aa:28:ae:36:26:ae:fa:90:d2: 5f:c1:35:5a:fa:b3:11:04:10:90:91:32:73:8f:23:92:97:1a: 71:47:d6:b0:7f:8c:79:b5:88:1f:23:a6:70:8a:a8:c9:ef:18: 26:26:48:d5:38:f0:74:c1:3a:04:47:9f:f8:f0:c9:4b:2d:bb: e2:62:8b:8d:9e:e9:4a:8c:a2:79:cc:5d:93:eb:a6:9e:8c:9b: 9d:b3:a3:1b:06:19:aa:76:52:70:80:c1:d8:47:20:fe:0b:e1: c5:ad:f4:4f:37:41:68:de:94:e3:cd:11:10:05:c1:3c:38:dc: 70:1c:b5:fa:a4:44:38:62:7a:c9:5c:1a:dd:56:a5:07:a9:ae: 30:ee:57:a3:8a:03:da:ef:a6:80:27:3f:ee:52:2f:54:ae:d7: 1e:c6:26:49:d1:2d:65:16:a2:d5:fe:83:22:be:60:3a:a2:fd: ed:89:67:16 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUEDPxhSt+DQZuQu5eLT3EKXM80AIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzc0OVoX DTI3MDUwMjAwNDI0OVowMzExMC8GA1UEAxMoRTAzNzEzNkUyQUFDOUY2NjkzQkJB Q0JDM0M2NTgwMTY0OTUyMkMzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOPHmJOKG+wSmtxCBSGNgp5ST9usKP5QuM0OYVEYSoobnrYUuKuIT5tN+isP s/RjB1nKBg/IdhbVw0C824RzDxfPQtPHIYg55JuuxVuoQCoharfwd9FhHvN2sCGN 0S+59+W5fTF3Ll4d9zFdFOYFYs78EPti3aS0/G6J1Ai9ba42/0lar7TWX0nt+47Z eFXVa8y6hxCuK2/EzpSPGAYEPNu4D1RnPFRR2Kd/4MLdrJkERghRqMznso/kFYQm n4Y3T6oolz0wCe1P9UmQqlOrg0fA6c7rkSVmswr29vD6bnP9OTx0tlNe6C5J5yPI N0xCz7OupaeEEjBpKtPJuvA9gDcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOA3E24qrJ9mk7usvDxlgBZJUiw8MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzU3Y2QxZDJkLTczNjQtNDgxYi05NzhlLTBhODU0YTljZmY0Zi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81N2NkMWQy ZC03MzY0LTQ4MWItOTc4ZS0wYTg1NGE5Y2ZmNGYvMC9FMDM3MTM2RTJBQUM5RjY2 OTNCQkFDQkMzQzY1ODAxNjQ5NTIyQzNDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ4McMA0GCSqGSIb3DQEBCwUAA4IBAQCLPPkV7GazQP63yKl0W/ErlHD29CD4 EmrNgB+kpMscrtpVnAm1IUUbZoQep6pw6GqjopR6ottBkc8q6uDKQ6Y3MajYWcLF 7vC1azNTiWgcV7GqKK42Jq76kNJfwTVa+rMRBBCQkTJzjyOSlxpxR9awf4x5tYgf I6ZwiqjJ7xgmJkjVOPB0wToER5/48MlLLbviYouNnulKjKJ5zF2T66aejJuds6Mb BhmqdlJwgMHYRyD+C+HFrfRPN0Fo3pTjzREQBcE8ONxwHLX6pEQ4YnrJXBrdVqUH qa4w7lejigPa76aAJz/uUi9UrtcexiZJ0S1lFqLV/oMivmA6ov3tiWcW -----END CERTIFICATE-----Generated at Tue May 12 22:32:24 2026 by rpki-client