$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E11351518FB1FA718E1626B5B8B0E9E0BA6C7778.cer File: E11351518FB1FA718E1626B5B8B0E9E0BA6C7778.cer (raw, json) Hash identifier: zRWpfeQbjgWXC1DRErASAlc/ixuA0zrUKYR+WvpHj9U= Subject key identifier: E1:13:51:51:8F:B1:FA:71:8E:16:26:B5:B8:B0:E9:E0:BA:6C:77:78 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1CD02A07A0D9A587190C6E9B3FDCC3F7AAA9DC06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/E11351518FB1FA718E1626B5B8B0E9E0BA6C7778.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:33:29 +0000 Certificate not after: Sun 02 May 2027 01:38:29 +0000 Subordinate resources: IP: 103.161.76.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d0:2a:07:a0:d9:a5:87:19:0c:6e:9b:3f:dc:c3:f7:aa:a9:dc:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:33:29 2026 GMT Not After : May 2 01:38:29 2027 GMT Subject: CN=E11351518FB1FA718E1626B5B8B0E9E0BA6C7778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:13:64:e6:d4:b7:17:66:44:47:57:f9:3c:75: a6:b5:59:ad:b4:71:bd:a4:85:23:ef:58:18:e8:fc: e6:14:03:de:ca:dd:7b:04:7f:19:09:29:c7:e6:fd: 19:e4:bd:44:4f:b9:54:0c:80:ec:e5:a9:f0:b2:73: 97:27:2f:25:d0:d0:e6:02:58:94:f4:9c:b2:da:3d: 1d:45:21:fe:d2:1f:2d:02:53:61:9a:a9:82:cc:01: b0:e6:02:bd:f3:9a:58:9f:0e:bf:f1:f2:02:dc:59: ec:0a:70:3b:b8:5f:9e:af:98:04:f8:f3:29:5b:07: 2a:61:b4:d4:6e:ac:e7:e6:f2:48:ae:b3:d1:78:91: fd:59:dc:49:dd:f7:e0:04:53:8d:a8:59:c6:3a:a8: 6f:f3:f6:79:ab:1c:de:a1:85:56:2e:63:53:ab:13: 0f:de:5c:82:44:9a:f3:60:10:af:0c:be:b2:bf:e6: 85:35:41:c7:b1:f3:76:b9:77:98:ef:be:b3:c8:3f: 46:57:d5:7a:d7:33:6e:22:4a:bb:06:46:3f:36:87: 37:51:27:d6:d8:44:1e:55:4b:73:3a:e6:f0:5d:f1: 73:97:b5:74:e2:90:0b:b8:c7:56:7f:47:44:4d:c6: ee:21:78:09:ec:99:25:12:19:1d:2d:f1:e4:88:94: 09:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E1:13:51:51:8F:B1:FA:71:8E:16:26:B5:B8:B0:E9:E0:BA:6C:77:78 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/E11351518FB1FA718E1626B5B8B0E9E0BA6C7778.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.76.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:73:27:85:09:14:88:11:cd:54:6c:23:22:16:be:6d:5e:3c: f3:6c:da:53:56:b0:7a:ea:27:a5:68:a6:a5:bb:de:cb:33:f3: 2d:1e:d6:ff:4c:de:14:07:52:4d:98:e6:4a:0d:9b:0f:88:53: 97:bd:07:f2:4c:f5:8a:07:98:22:d5:49:63:6c:bf:76:0a:b4: 6a:d4:f5:e2:7d:d1:a6:69:a8:48:57:e0:8b:83:7d:ee:a6:3b: 29:7f:71:d7:47:68:54:19:c6:ca:b2:4c:eb:3e:ed:43:86:68: da:32:d7:ca:86:d4:2a:e3:ff:73:17:df:cc:3f:b5:1f:65:36: 66:a1:28:36:ad:0d:8e:00:46:c9:e5:03:e9:b5:2f:76:49:7c: 60:8f:32:aa:90:72:3e:47:7f:35:79:a8:ba:44:a0:bc:15:4f: 32:e7:ce:f6:06:90:0b:74:e5:3a:77:e1:3c:65:db:33:91:65: 72:d8:3c:45:89:86:f1:61:fd:6c:4e:7b:b2:ea:b7:ab:fc:df: 43:ec:95:7e:04:d1:5c:f7:35:7a:c2:20:7d:71:d0:63:1a:c9: 20:d1:f0:d8:66:5b:43:ca:92:cc:df:c7:35:29:5f:e1:af:9f: 4a:5f:4f:42:93:08:2f:dd:a2:d2:a1:41:ac:4d:eb:ef:7b:7f: f3:0a:ad:1b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUHNAqB6DZpYcZDG6bP9zD96qp3AYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMzMyOVoX DTI3MDUwMjAxMzgyOVowMzExMC8GA1UEAxMoRTExMzUxNTE4RkIxRkE3MThFMTYy NkI1QjhCMEU5RTBCQTZDNzc3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMkTZObUtxdmREdX+Tx1prVZrbRxvaSFI+9YGOj85hQD3srdewR/GQkpx+b9 GeS9RE+5VAyA7OWp8LJzlycvJdDQ5gJYlPScsto9HUUh/tIfLQJTYZqpgswBsOYC vfOaWJ8Ov/HyAtxZ7ApwO7hfnq+YBPjzKVsHKmG01G6s5+bySK6z0XiR/VncSd33 4ARTjahZxjqob/P2easc3qGFVi5jU6sTD95cgkSa82AQrwy+sr/mhTVBx7Hzdrl3 mO++s8g/RlfVetczbiJKuwZGPzaHN1En1thEHlVLczrm8F3xc5e1dOKQC7jHVn9H RE3G7iF4CeyZJRIZHS3x5IiUCU8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOETUVGPsfpxjhYmtbiw6eC6bHd4MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E5MmRlODA1LWM4MGUtNGI1Yy05OWM2LWQ3M2Q5NzE1NGRiNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hOTJkZTgw NS1jODBlLTRiNWMtOTljNi1kNzNkOTcxNTRkYjUvMC9FMTEzNTE1MThGQjFGQTcx OEUxNjI2QjVCOEIwRTlFMEJBNkM3Nzc4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6FMMA0GCSqGSIb3DQEBCwUAA4IBAQCMcyeFCRSIEc1UbCMiFr5tXjzzbNpT VrB66ielaKalu97LM/MtHtb/TN4UB1JNmOZKDZsPiFOXvQfyTPWKB5gi1UljbL92 CrRq1PXifdGmaahIV+CLg33upjspf3HXR2hUGcbKskzrPu1DhmjaMtfKhtQq4/9z F9/MP7UfZTZmoSg2rQ2OAEbJ5QPptS92SXxgjzKqkHI+R381eai6RKC8FU8y5872 BpALdOU6d+E8ZdszkWVy2DxFiYbxYf1sTnuy6rer/N9D7JV+BNFc9zV6wiB9cdBj Gskg0fDYZltDypLM38c1KV/hr59KX09Ckwgv3aLSoUGsTevve3/zCq0b -----END CERTIFICATE-----Generated at Wed May 13 01:35:27 2026 by rpki-client