$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.cer File: E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.cer (raw, json) Hash identifier: g7nr0G1r3UIkaH4vcSDyNF833Ikm2O2D5+pM57GRlFA= Subject key identifier: E0:AE:9F:AD:9E:25:90:82:B0:6C:CB:B9:4A:F4:78:F6:B8:61:25:F9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6256939E1C46F5B53C3960E76D24F0D558CABF03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft caRepository: rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:40:35 +0000 Certificate not after: Sun 02 May 2027 01:45:35 +0000 Subordinate resources: IP: 103.139.207.0/24 IP: 103.195.28.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:56:93:9e:1c:46:f5:b5:3c:39:60:e7:6d:24:f0:d5:58:ca:bf:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:40:35 2026 GMT Not After : May 2 01:45:35 2027 GMT Subject: CN=E0AE9FAD9E259082B06CCBB94AF478F6B86125F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c6:f6:aa:2a:3c:7f:87:a5:a3:7f:a5:f9:5f: 3c:8c:7f:a3:45:5a:53:f9:b5:1e:ea:81:45:0f:7b: 99:de:37:15:b1:f5:b7:d3:f1:3b:59:45:d2:69:2c: d5:00:23:0a:22:8b:25:5d:7c:b7:bd:8e:9e:ca:dd: 88:49:4b:e1:de:0c:15:38:8e:be:b9:df:98:3f:06: f3:fd:82:4e:4f:42:96:04:38:a2:d4:c6:f4:a4:4c: 19:28:64:0e:8b:4e:f2:11:83:cc:df:8d:a3:c8:b9: a7:62:b7:1a:6a:a1:2d:ed:25:67:49:1d:7d:83:e5: 45:4b:cb:2a:19:cd:29:a0:59:2a:dc:c1:a1:5f:bd: 95:af:59:0e:28:4c:cb:e3:05:ef:6b:a7:e3:ca:38: 3b:76:50:4a:5e:be:6f:f8:62:0e:f0:5e:c8:4b:96: 7a:bf:1a:4a:0e:3b:ba:23:b1:c8:ea:cf:a6:8a:82: a2:49:53:09:b7:2c:1d:11:87:d6:8e:62:52:18:b4: d6:7f:d9:4e:51:20:7f:e4:a9:39:41:86:a5:82:88: 59:f3:7a:c3:b9:59:79:53:c0:38:a3:09:a7:eb:c8: 6a:b7:15:3b:4f:55:68:d7:89:d9:3b:4d:c2:a4:ad: 99:02:c9:ed:38:39:52:7e:e9:d8:83:35:47:82:04: 98:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E0:AE:9F:AD:9E:25:90:82:B0:6C:CB:B9:4A:F4:78:F6:B8:61:25:F9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/E0AE9FAD9E259082B06CCBB94AF478F6B86125F9.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.207.0/24 103.195.28.0/24 Signature Algorithm: sha256WithRSAEncryption 22:df:42:67:e2:95:43:74:eb:3c:0a:84:04:11:df:b7:48:68: 01:b4:24:05:d2:78:94:0c:44:e2:d9:37:22:b7:a3:57:a7:95: 56:8b:ad:95:25:ad:65:01:fb:ea:33:f8:56:11:12:4d:05:13: fd:50:6e:87:79:61:fe:a5:06:b0:1c:5b:84:df:73:e1:e3:36: 73:6b:0f:a0:56:9c:d0:1b:34:11:63:d5:7e:49:63:7d:76:20: 10:66:3c:91:60:84:99:3a:34:7d:54:fc:8e:25:f4:b8:d8:82: fd:ab:5b:56:a3:4e:05:79:57:8a:fa:37:e6:75:05:83:ff:ed: bc:f8:31:be:a5:96:00:9d:fc:67:05:68:9a:32:e8:83:f7:c1: 70:08:6f:44:ee:e3:27:5a:e3:1c:20:de:a5:88:f4:29:68:b4: 06:26:b9:db:d3:0a:93:14:08:e0:7d:a8:2c:8b:9e:c4:07:83: 57:84:ca:c6:77:05:90:1c:d3:f5:f3:05:e8:0c:d4:ed:c9:d5: ac:ae:f8:12:cc:b7:39:4c:b8:62:38:47:8c:8b:fa:a6:37:99: 74:d1:3f:ad:7a:90:ed:1f:12:42:2e:7f:99:50:23:30:57:d4: e6:54:eb:c6:51:e1:be:1d:e5:62:1c:f2:b4:f6:93:1e:12:4c: b6:81:83:e4 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUYlaTnhxG9bU8OWDnbSTw1VjKvwMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNDAzNVoX DTI3MDUwMjAxNDUzNVowMzExMC8GA1UEAxMoRTBBRTlGQUQ5RTI1OTA4MkIwNkND QkI5NEFGNDc4RjZCODYxMjVGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTG9qoqPH+HpaN/pflfPIx/o0VaU/m1HuqBRQ97md43FbH1t9PxO1lF0mks 1QAjCiKLJV18t72OnsrdiElL4d4MFTiOvrnfmD8G8/2CTk9ClgQ4otTG9KRMGShk DotO8hGDzN+No8i5p2K3GmqhLe0lZ0kdfYPlRUvLKhnNKaBZKtzBoV+9la9ZDihM y+MF72un48o4O3ZQSl6+b/hiDvBeyEuWer8aSg47uiOxyOrPpoqCoklTCbcsHRGH 1o5iUhi01n/ZTlEgf+SpOUGGpYKIWfN6w7lZeVPAOKMJp+vIarcVO09VaNeJ2TtN wqStmQLJ7Tg5Un7p2IM1R4IEmIMCAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOCun62eJZCCsGzLuUr0ePa4YSX5MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2I0OTEyYzliLWRjZTQtNDBlNi05NTg4LWQ3Y2E4YzM3ZWY0ZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iNDkxMmM5 Yi1kY2U0LTQwZTYtOTU4OC1kN2NhOGMzN2VmNGQvMC9FMEFFOUZBRDlFMjU5MDgy QjA2Q0NCQjk0QUY0NzhGNkI4NjEyNUY5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQAZ4vPAwQAZ8McMA0GCSqGSIb3DQEBCwUAA4IBAQAi30Jn4pVDdOs8CoQEEd+3 SGgBtCQF0niUDETi2Tcit6NXp5VWi62VJa1lAfvqM/hWERJNBRP9UG6HeWH+pQaw HFuE33Ph4zZzaw+gVpzQGzQRY9V+SWN9diAQZjyRYISZOjR9VPyOJfS42IL9q1tW o04FeVeK+jfmdQWD/+28+DG+pZYAnfxnBWiaMuiD98FwCG9E7uMnWuMcIN6liPQp aLQGJrnb0wqTFAjgfagsi57EB4NXhMrGdwWQHNP18wXoDNTtydWsrvgSzLc5TLhi OEeMi/qmN5l00T+tepDtHxJCLn+ZUCMwV9TmVOvGUeG+HeViHPK09pMeEky2gYPk -----END CERTIFICATE-----Generated at Tue May 12 22:03:08 2026 by rpki-client