$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E13177CE4E5C1407466936B4193E0B11E39AA6F8.cer File: E13177CE4E5C1407466936B4193E0B11E39AA6F8.cer (raw, json) Hash identifier: 9qos92bQV9/S287C+4x1Gi7jgkcaIjX5c/XB2Js5HHI= Subject key identifier: E1:31:77:CE:4E:5C:14:07:46:69:36:B4:19:3E:0B:11:E3:9A:A6:F8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 493081CE9E29B080C2671CEF51C876DF2491B53B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:09:56 +0000 Certificate not after: Sun 02 May 2027 01:14:56 +0000 Subordinate resources: IP: 103.166.240.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:30:81:ce:9e:29:b0:80:c2:67:1c:ef:51:c8:76:df:24:91:b5:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:09:56 2026 GMT Not After : May 2 01:14:56 2027 GMT Subject: CN=E13177CE4E5C1407466936B4193E0B11E39AA6F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:42:b9:06:e2:19:a5:e6:5d:af:ab:9f:dd:42: 13:d9:b1:4c:c8:75:ed:f2:2d:b6:d4:98:9c:b9:d3: 28:4e:b5:80:fe:54:19:df:a5:7a:82:27:b6:9d:fa: 00:81:81:19:d1:55:11:38:1e:e7:b1:3e:71:c4:22: ca:67:15:06:01:90:cc:1f:ed:06:19:21:d9:30:77: 27:b3:f2:29:b6:10:46:00:2b:c8:0c:50:1f:87:96: 59:47:67:cf:12:e9:e4:39:d9:9a:a0:ad:00:e3:dc: 6f:d7:9a:fd:ab:fb:d0:15:f1:f2:57:2d:33:8b:4a: f9:a7:24:07:7d:82:11:81:0d:d5:7e:fa:e7:62:7e: 62:81:38:8f:80:48:30:77:66:05:bc:0e:d1:cd:82: d1:ff:8b:38:34:fe:ac:bc:3e:41:01:20:2f:3b:4f: 99:4e:1f:d3:3b:94:0b:3d:67:e5:bf:30:6e:28:51: ca:57:86:5a:05:07:52:ab:f3:ee:94:fe:bb:be:bb: 1e:9f:b9:a3:9f:38:2c:44:37:5f:5d:22:ec:a0:7e: 43:fc:61:9f:64:a2:8b:2e:04:82:72:fd:03:b4:39: 6a:42:2b:12:b1:2c:a9:9f:71:50:d5:92:98:a5:50: 01:5d:96:7d:ec:af:ef:06:7b:ac:3a:5b:05:cb:cb: 17:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E1:31:77:CE:4E:5C:14:07:46:69:36:B4:19:3E:0B:11:E3:9A:A6:F8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/E13177CE4E5C1407466936B4193E0B11E39AA6F8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.240.0/23 Signature Algorithm: sha256WithRSAEncryption 89:b0:64:46:bb:34:e3:bd:f4:6d:28:1e:87:52:98:e1:7d:11: 48:b5:1a:14:98:f2:6f:aa:24:df:ee:8a:29:75:81:a5:f8:db: fd:e7:0d:e7:27:ff:73:cc:dc:22:1e:6b:63:d7:66:60:08:e5: a5:e0:d0:d0:e5:db:72:09:f5:96:4b:76:a2:fd:ea:18:c5:5d: a1:08:fa:b8:f3:19:bb:12:f1:89:00:90:07:4d:9b:95:98:3f: 1c:94:66:24:67:fa:fc:8c:65:ea:2e:40:46:f1:c1:09:42:0f: 80:dc:18:55:b4:37:7e:45:a9:34:ef:c1:cb:38:ff:3d:4b:02: 50:8c:4f:8a:17:cc:ea:c9:74:50:95:49:ea:66:72:e5:73:56: fc:40:be:7c:09:7d:ad:fd:e8:5b:d1:0e:04:6b:2d:43:ee:ed: cf:97:3d:90:8c:ed:8d:bd:5c:49:e5:24:7b:06:f0:69:c7:6a: ae:a2:2c:ba:3f:98:00:93:7c:95:de:2b:59:55:1b:2a:b5:9f: 2f:40:fe:39:41:28:b1:48:d1:04:40:07:c5:9f:fe:5e:01:b6: 86:22:77:70:a3:ed:3d:91:2c:80:a9:b0:30:40:3f:c4:d7:a0: 88:06:e6:99:a4:8e:5e:9f:97:fc:35:fc:da:02:4d:31:8c:a2: d9:ef:4e:5a -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUSTCBzp4psIDCZxzvUch23ySRtTswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDk1NloX DTI3MDUwMjAxMTQ1NlowMzExMC8GA1UEAxMoRTEzMTc3Q0U0RTVDMTQwNzQ2Njkz NkI0MTkzRTBCMTFFMzlBQTZGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANFCuQbiGaXmXa+rn91CE9mxTMh17fItttSYnLnTKE61gP5UGd+leoIntp36 AIGBGdFVETge57E+ccQiymcVBgGQzB/tBhkh2TB3J7PyKbYQRgAryAxQH4eWWUdn zxLp5DnZmqCtAOPcb9ea/av70BXx8lctM4tK+ackB32CEYEN1X7652J+YoE4j4BI MHdmBbwO0c2C0f+LODT+rLw+QQEgLztPmU4f0zuUCz1n5b8wbihRyleGWgUHUqvz 7pT+u767Hp+5o584LEQ3X10i7KB+Q/xhn2Siiy4EgnL9A7Q5akIrErEsqZ9xUNWS mKVQAV2Wfeyv7wZ7rDpbBcvLF10CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOExd85OXBQHRmk2tBk+CxHjmqb4MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg1ZjkwMDJkLTkyNjctNGY4Yi04NTlhLWRmYTdkODkxNDNiNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84NWY5MDAy ZC05MjY3LTRmOGItODU5YS1kZmE3ZDg5MTQzYjQvMC9FMTMxNzdDRTRFNUMxNDA3 NDY2OTM2QjQxOTNFMEIxMUUzOUFBNkY4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6bwMA0GCSqGSIb3DQEBCwUAA4IBAQCJsGRGuzTjvfRtKB6HUpjhfRFItRoU mPJvqiTf7oopdYGl+Nv95w3nJ/9zzNwiHmtj12ZgCOWl4NDQ5dtyCfWWS3ai/eoY xV2hCPq48xm7EvGJAJAHTZuVmD8clGYkZ/r8jGXqLkBG8cEJQg+A3BhVtDd+Rak0 78HLOP89SwJQjE+KF8zqyXRQlUnqZnLlc1b8QL58CX2t/ehb0Q4Eay1D7u3Plz2Q jO2NvVxJ5SR7BvBpx2quoiy6P5gAk3yV3itZVRsqtZ8vQP45QSixSNEEQAfFn/5e AbaGIndwo+09kSyAqbAwQD/E16CIBuaZpI5en5f8NfzaAk0xjKLZ705a -----END CERTIFICATE-----Generated at Wed May 13 02:20:23 2026 by rpki-client