$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E11BC799C5570984811084A60CCD598C70E1CF4A.cer File: E11BC799C5570984811084A60CCD598C70E1CF4A.cer (raw, json) Hash identifier: 8LlWcKexWf3xd1V3qkF6FkIWj6P/itRsrS5sStF4TZY= Subject key identifier: E1:1B:C7:99:C5:57:09:84:81:10:84:A6:0C:CD:59:8C:70:E1:CF:4A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 60BA61361536F821E5E322362EE6519819020E3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/E11BC799C5570984811084A60CCD598C70E1CF4A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:14:22 +0000 Certificate not after: Sun 02 May 2027 02:19:22 +0000 Subordinate resources: IP: 103.145.226.0/23 IP: 2001:df2:2f80::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ba:61:36:15:36:f8:21:e5:e3:22:36:2e:e6:51:98:19:02:0e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:14:22 2026 GMT Not After : May 2 02:19:22 2027 GMT Subject: CN=E11BC799C5570984811084A60CCD598C70E1CF4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:61:09:de:58:11:c5:f7:23:ee:b8:34:01:8f: a4:7d:9f:ce:b7:fb:54:4f:ab:07:a5:db:a2:e0:6a: 86:3a:3a:a7:48:33:e5:bd:e0:02:23:30:5a:d3:f4: b1:b2:bf:4a:87:8d:fb:a7:36:e5:82:c1:af:c9:5f: 73:76:11:58:ae:49:4d:6a:80:43:9e:be:87:bb:2f: cc:8f:d7:2a:47:55:e5:b6:ba:ac:41:da:a9:a6:c6: 9b:b0:cf:ed:c3:a9:4c:ef:0f:74:c0:52:d7:3c:5a: 47:2b:c9:0a:9d:d0:5c:31:a7:50:e1:4c:31:b8:25: 34:60:85:7d:ab:17:19:b1:9f:7e:3c:e3:c7:cd:ff: 43:d1:41:79:d1:fc:0e:a2:81:20:3f:48:d0:50:3c: 73:c3:45:3b:bb:0d:91:98:64:34:63:18:44:36:33: 65:2a:24:b6:24:da:64:2b:73:ff:d4:93:72:8e:a6: e9:a6:e3:ff:2b:7b:f6:43:d1:71:20:47:0b:1a:9c: f5:89:f1:a6:d4:3f:f3:5a:be:b7:6b:fc:16:cb:f3: 57:24:87:d0:7f:e4:48:de:31:31:22:cf:78:eb:d7: ea:c6:1c:61:ec:78:be:6e:96:0c:38:72:82:c3:a7: 6d:42:55:20:e7:6d:ba:e1:7e:ce:e1:7e:28:c7:ab: 82:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E1:1B:C7:99:C5:57:09:84:81:10:84:A6:0C:CD:59:8C:70:E1:CF:4A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/E11BC799C5570984811084A60CCD598C70E1CF4A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.226.0/23 IPv6: 2001:df2:2f80::/48 Signature Algorithm: sha256WithRSAEncryption 0a:f1:44:81:4d:ce:28:7d:40:23:3b:25:ef:55:5e:42:d8:46: 97:fc:ca:0f:48:f6:cd:22:19:70:ca:a4:28:25:f7:a5:d8:27: 23:ca:e0:4e:b4:25:cb:7c:ae:c7:88:37:d5:f6:c0:a3:e3:cd: 86:ab:97:31:b6:3f:a9:61:bc:36:26:13:15:10:a1:87:3b:8e: a6:71:d6:24:80:bb:3e:8c:10:7e:45:c0:87:40:b7:5f:57:75: 3c:5e:5f:61:2d:ac:16:dc:d1:0c:f7:35:24:9e:ea:6d:0d:22: 3c:e1:2d:f7:86:b8:c1:da:be:0a:93:9f:ce:d7:95:37:ab:08: be:34:49:b9:69:05:85:a3:51:86:f4:6c:78:3d:bb:ff:03:e1: 10:2b:4f:25:3c:3a:7b:9f:a7:e3:cf:10:89:06:a4:0a:2d:97: 48:2d:b5:78:15:dd:07:cf:2f:96:85:38:4f:90:c8:c5:9e:0e: 36:a5:2a:55:ff:4e:a1:1c:26:1a:e3:c2:d1:a2:54:b7:3c:d9: 7a:a0:74:95:df:21:b9:93:97:29:77:12:ee:ad:b4:70:f4:87: 64:33:db:16:7a:00:b4:23:26:3f:85:46:22:36:20:8a:7a:06: 19:7a:2f:69:2e:bc:7c:b6:3d:f5:28:cf:a8:c7:a4:0e:7f:65: 75:3e:37:c0 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUYLphNhU2+CHl4yI2LuZRmBkCDjswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTQyMloX DTI3MDUwMjAyMTkyMlowMzExMC8GA1UEAxMoRTExQkM3OTlDNTU3MDk4NDgxMTA4 NEE2MENDRDU5OEM3MEUxQ0Y0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANFhCd5YEcX3I+64NAGPpH2fzrf7VE+rB6XbouBqhjo6p0gz5b3gAiMwWtP0 sbK/SoeN+6c25YLBr8lfc3YRWK5JTWqAQ56+h7svzI/XKkdV5ba6rEHaqabGm7DP 7cOpTO8PdMBS1zxaRyvJCp3QXDGnUOFMMbglNGCFfasXGbGffjzjx83/Q9FBedH8 DqKBID9I0FA8c8NFO7sNkZhkNGMYRDYzZSoktiTaZCtz/9STco6m6abj/yt79kPR cSBHCxqc9YnxptQ/81q+t2v8FsvzVySH0H/kSN4xMSLPeOvX6sYcYex4vm6WDDhy gsOnbUJVIOdtuuF+zuF+KMergtUCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOEbx5nFVwmEgRCEpgzNWYxw4c9KMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2U0MDAyOWM3LTc0MmMtNGRhOC1iMmVlLWQ2MjlhZTc4YmYwMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lNDAwMjlj Ny03NDJjLTRkYTgtYjJlZS1kNjI5YWU3OGJmMDEvMC9FMTFCQzc5OUM1NTcwOTg0 ODExMDg0QTYwQ0NENTk4QzcwRTFDRjRBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ5HiMA8EAgACMAkDBwAgAQ3yL4AwDQYJKoZIhvcNAQELBQADggEBAArxRIFN zih9QCM7Je9VXkLYRpf8yg9I9s0iGXDKpCgl96XYJyPK4E60Jct8rseIN9X2wKPj zYarlzG2P6lhvDYmExUQoYc7jqZx1iSAuz6MEH5FwIdAt19XdTxeX2EtrBbc0Qz3 NSSe6m0NIjzhLfeGuMHavgqTn87XlTerCL40SblpBYWjUYb0bHg9u/8D4RArTyU8 Onufp+PPEIkGpAotl0gttXgV3QfPL5aFOE+QyMWeDjalKlX/TqEcJhrjwtGiVLc8 2XqgdJXfIbmTlyl3Eu6ttHD0h2Qz2xZ6ALQjJj+FRiI2IIp6Bhl6L2kuvHy2PfUo z6jHpA5/ZXU+N8A= -----END CERTIFICATE-----Generated at Tue May 12 22:16:49 2026 by rpki-client