$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer File: E0DE22F577B4244ECB332B87B5831D4AD7DA8007.cer (raw, json) Hash identifier: dHF/0EQ5/szJvpuCyke9Fp4RbNZgrDu8BTIhSIuzjPw= Subject key identifier: E0:DE:22:F5:77:B4:24:4E:CB:33:2B:87:B5:83:1D:4A:D7:DA:80:07 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 60F676EC6F5B3D17323E1C3B1C2B49BE8BBB95A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft caRepository: rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:24:32 +0000 Certificate not after: Sun 02 May 2027 02:29:32 +0000 Subordinate resources: IP: 103.153.2.0/23 IP: 2001:df4:2680::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f6:76:ec:6f:5b:3d:17:32:3e:1c:3b:1c:2b:49:be:8b:bb:95:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:24:32 2026 GMT Not After : May 2 02:29:32 2027 GMT Subject: CN=E0DE22F577B4244ECB332B87B5831D4AD7DA8007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:43:7a:18:78:75:7d:e6:4b:fe:7f:2d:cd:7a: d6:01:ee:ff:74:59:8b:d7:36:21:b3:b2:52:e4:30: ce:72:51:8b:bd:9b:76:78:a7:39:ed:62:d8:0c:f8: 79:81:30:72:e8:ad:5e:be:41:ce:6c:34:b7:cf:79: b5:98:11:ee:db:92:b8:83:a3:27:c2:47:4c:0b:e4: 8e:f5:1a:69:c7:cc:69:8c:78:01:82:11:9b:ee:15: 62:b8:38:af:06:20:aa:32:05:16:b0:f8:0a:95:e1: 80:4e:2b:a2:5c:b1:97:70:2d:cf:57:36:bd:e9:e9: 75:75:6a:2b:bc:4b:91:52:9e:cf:ef:84:af:a1:22: 45:b1:5c:5c:60:66:fb:7a:78:84:8d:4b:75:df:d6: 78:7d:6d:4c:b4:52:d9:42:44:b4:a4:f1:e8:42:b5: a2:b7:94:72:2b:de:df:6e:cf:b4:6b:a3:87:9d:e8: 61:5a:cd:32:75:9b:7b:7e:67:4f:c0:d0:74:c8:3a: b3:fc:db:35:8f:86:97:12:32:e8:9c:b5:64:e2:a7: ed:47:c8:55:97:77:0d:8a:f2:a6:40:b6:39:d8:92: ba:b3:cd:f9:ec:35:34:6c:52:81:f0:07:21:dd:6c: d7:e7:77:5f:a9:4e:0c:0b:82:36:3e:52:c4:5b:ed: 84:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E0:DE:22:F5:77:B4:24:4E:CB:33:2B:87:B5:83:1D:4A:D7:DA:80:07 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E0DE22F577B4244ECB332B87B5831D4AD7DA8007.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.2.0/23 IPv6: 2001:df4:2680::/48 Signature Algorithm: sha256WithRSAEncryption 71:ef:b2:3b:00:0c:12:48:82:7e:30:2b:ef:0c:f2:13:63:4f: ce:b0:1b:1d:b2:2e:72:1b:7a:5b:a8:d8:b0:21:ef:9c:bd:1a: 8d:cb:1c:c8:0b:89:cc:d4:4f:4c:cf:0e:40:81:dd:7d:21:b2: 8f:2d:52:93:75:eb:9f:20:f2:96:5f:93:a3:2a:04:16:52:c6: 66:21:49:ad:61:13:98:1c:3f:c6:ca:64:60:82:05:82:c8:5a: 26:0a:e6:09:35:4f:58:12:88:a3:19:fa:d6:3a:2e:74:8e:42: 6f:87:14:d5:57:88:48:81:d7:19:15:47:57:2c:74:a2:ee:4a: c4:09:04:fc:81:5b:a0:d9:b3:32:3c:b9:68:f8:58:5d:b4:84: 76:ae:83:47:4d:23:9d:a1:b3:3a:7f:a2:3a:63:95:3b:4c:a1: 1e:02:a1:9e:86:44:c7:a7:23:4d:1e:21:09:c1:1a:bf:3a:e6: 75:73:c6:dc:f6:2f:57:5c:a4:e2:56:94:9c:eb:5c:d7:a3:1e: 3d:b6:31:60:20:50:fd:10:0f:3b:03:29:fe:c3:e4:79:3e:db: 7d:d2:45:32:17:12:30:17:2f:f5:ec:71:89:84:08:45:5f:70: e4:ff:64:ba:fc:9e:62:80:74:34:cc:7c:e4:dc:73:00:97:17: e0:40:bc:e2 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUYPZ27G9bPRcyPhw7HCtJvou7laYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjQzMloX DTI3MDUwMjAyMjkzMlowMzExMC8GA1UEAxMoRTBERTIyRjU3N0I0MjQ0RUNCMzMy Qjg3QjU4MzFENEFEN0RBODAwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIpDehh4dX3mS/5/Lc161gHu/3RZi9c2IbOyUuQwznJRi72bdninOe1i2Az4 eYEwcuitXr5Bzmw0t895tZgR7tuSuIOjJ8JHTAvkjvUaacfMaYx4AYIRm+4VYrg4 rwYgqjIFFrD4CpXhgE4rolyxl3Atz1c2venpdXVqK7xLkVKez++Er6EiRbFcXGBm +3p4hI1Ldd/WeH1tTLRS2UJEtKTx6EK1oreUcive327PtGujh53oYVrNMnWbe35n T8DQdMg6s/zbNY+GlxIy6Jy1ZOKn7UfIVZd3DYrypkC2OdiSurPN+ew1NGxSgfAH Id1s1+d3X6lODAuCNj5SxFvthJUCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFODeIvV3tCROyzMrh7WDHUrX2oAHMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ViYzFhYjcxLTkxZDAtNGYwYi1iYjI5LWNiYjdkMzVlNzRiYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lYmMxYWI3 MS05MWQwLTRmMGItYmIyOS1jYmI3ZDM1ZTc0YmEvMC9FMERFMjJGNTc3QjQyNDRF Q0IzMzJCODdCNTgzMUQ0QUQ3REE4MDA3Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ5kCMA8EAgACMAkDBwAgAQ30JoAwDQYJKoZIhvcNAQELBQADggEBAHHvsjsA DBJIgn4wK+8M8hNjT86wGx2yLnIbeluo2LAh75y9Go3LHMgLiczUT0zPDkCB3X0h so8tUpN1658g8pZfk6MqBBZSxmYhSa1hE5gcP8bKZGCCBYLIWiYK5gk1T1gSiKMZ +tY6LnSOQm+HFNVXiEiB1xkVR1csdKLuSsQJBPyBW6DZszI8uWj4WF20hHaug0dN I52hszp/ojpjlTtMoR4CoZ6GRMenI00eIQnBGr865nVzxtz2L1dcpOJWlJzrXNej Hj22MWAgUP0QDzsDKf7D5Hk+233SRTIXEjAXL/XscYmECEVfcOT/ZLr8nmKAdDTM fOTccwCXF+BAvOI= -----END CERTIFICATE-----Generated at Tue May 12 22:02:35 2026 by rpki-client