$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E1476FC7E4095A3095E47FBC4834D7ECE111F313.cer File: E1476FC7E4095A3095E47FBC4834D7ECE111F313.cer (raw, json) Hash identifier: +fKYdq8QX1JaBhk0iwX0MByaprD6Ph1IhypDsa/+18A= Subject key identifier: E1:47:6F:C7:E4:09:5A:30:95:E4:7F:BC:48:34:D7:EC:E1:11:F3:13 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4FA9D8600FCD6AD85B0813CE5C966417FA8C5290 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:00:39 +0000 Certificate not after: Sun 02 May 2027 02:05:39 +0000 Subordinate resources: IP: 103.180.162.0/24 IP: 103.230.246.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a9:d8:60:0f:cd:6a:d8:5b:08:13:ce:5c:96:64:17:fa:8c:52:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:00:39 2026 GMT Not After : May 2 02:05:39 2027 GMT Subject: CN=E1476FC7E4095A3095E47FBC4834D7ECE111F313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e7:b4:14:c9:6e:b9:4a:f7:2f:cb:2c:d6:89: 9e:d1:2b:1b:43:b0:3d:9f:31:9a:8e:1f:bf:2d:6d: ca:3f:5c:70:2e:68:c3:41:65:d3:25:81:04:31:5c: 14:48:2d:de:bf:36:6a:a1:8a:eb:69:67:69:70:20: f6:20:16:71:c7:1d:3c:b6:2a:f3:ea:55:99:66:13: b2:55:9f:13:5f:25:1e:70:8c:68:f1:4c:99:4d:3e: 5a:13:2c:c9:7b:8d:d8:e5:c5:65:d2:e7:33:3a:c2: 6d:c8:d8:e1:b5:f1:78:cc:54:59:35:12:b4:ec:c6: fc:62:35:3d:c0:ed:dd:92:9f:d8:ee:24:bd:e7:57: 4b:f9:48:bf:ee:a8:7c:47:0c:1b:6b:ee:5b:ed:6c: e1:04:1e:a7:ae:36:7d:f2:ca:5b:c6:58:f7:c6:e2: af:c0:96:ac:fc:b2:c0:a0:2e:bc:ac:1c:0d:cc:45: 10:97:91:61:77:fe:39:5f:33:eb:8a:44:22:84:3d: 3d:e2:81:cd:0f:26:ab:f5:1d:90:03:25:1f:26:e0: 79:f0:12:57:0b:5d:84:dc:9b:46:1f:93:0b:d6:21: 5c:87:34:17:0c:03:9e:a1:88:e6:e4:6c:4d:58:ce: 91:ee:91:7e:3c:cc:31:bc:30:9b:ed:25:a6:45:7d: fd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E1:47:6F:C7:E4:09:5A:30:95:E4:7F:BC:48:34:D7:EC:E1:11:F3:13 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/E1476FC7E4095A3095E47FBC4834D7ECE111F313.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.162.0/24 103.230.246.0/24 Signature Algorithm: sha256WithRSAEncryption 46:70:a2:31:e0:aa:be:47:51:2b:af:5f:3d:7d:16:ac:e7:05: 07:cf:7f:2b:bf:8e:b8:c1:d6:24:41:2c:2f:fa:de:92:fe:b6: 01:ed:e5:18:0e:f7:4e:49:47:f3:3d:40:e7:6f:a1:f8:7c:95: d9:d7:8c:aa:aa:1c:2f:6f:be:48:3f:23:61:80:8f:24:5f:98: 3a:75:ea:81:d7:08:ea:fa:7b:9e:9c:e2:06:70:4a:e5:ac:30: a6:a8:3c:10:e4:5e:23:46:05:81:45:9f:88:38:bd:cf:98:b8: 66:2e:e6:36:c6:22:f0:41:b3:74:5c:ea:9d:27:80:59:5e:8d: 52:7f:20:26:a6:c1:8b:26:fd:c2:94:c8:a6:c1:22:7e:3e:6a: 5b:6a:18:e6:7f:82:ea:9d:70:4b:9d:10:e5:f4:8f:6b:40:61: 3b:6e:ff:57:34:9e:23:45:84:92:a6:6a:32:01:93:b6:9c:4c: ab:8e:3d:ff:7f:e1:bc:be:41:d0:21:f9:2d:d1:2a:88:25:de: 8e:51:74:f7:65:1e:49:dd:4f:d7:94:6b:73:44:e7:63:91:9d: 35:68:56:1d:b2:04:15:c6:31:8c:bd:05:69:1f:a8:e2:e1:6e: ec:a9:24:80:49:da:47:20:28:f3:25:4c:88:8d:fd:0d:63:dd: ed:cd:9b:6b -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUT6nYYA/NathbCBPOXJZkF/qMUpAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDAzOVoX DTI3MDUwMjAyMDUzOVowMzExMC8GA1UEAxMoRTE0NzZGQzdFNDA5NUEzMDk1RTQ3 RkJDNDgzNEQ3RUNFMTExRjMxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOTntBTJbrlK9y/LLNaJntErG0OwPZ8xmo4fvy1tyj9ccC5ow0Fl0yWBBDFc FEgt3r82aqGK62lnaXAg9iAWcccdPLYq8+pVmWYTslWfE18lHnCMaPFMmU0+WhMs yXuN2OXFZdLnMzrCbcjY4bXxeMxUWTUStOzG/GI1PcDt3ZKf2O4kvedXS/lIv+6o fEcMG2vuW+1s4QQep642ffLKW8ZY98bir8CWrPyywKAuvKwcDcxFEJeRYXf+OV8z 64pEIoQ9PeKBzQ8mq/UdkAMlHybgefASVwtdhNybRh+TC9YhXIc0FwwDnqGI5uRs TVjOke6RfjzMMbwwm+0lpkV9/QkCAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOFHb8fkCVowleR/vEg01+zhEfMTMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q3MGQ2MjlhLTk2ZWQtNDUxYS04Nzg3LTM0MTIyMjgyYTcwNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kNzBkNjI5 YS05NmVkLTQ1MWEtODc4Ny0zNDEyMjI4MmE3MDYvMC9FMTQ3NkZDN0U0MDk1QTMw OTVFNDdGQkM0ODM0RDdFQ0UxMTFGMzEzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQAZ7SiAwQAZ+b2MA0GCSqGSIb3DQEBCwUAA4IBAQBGcKIx4Kq+R1Err189fRas 5wUHz38rv464wdYkQSwv+t6S/rYB7eUYDvdOSUfzPUDnb6H4fJXZ14yqqhwvb75I PyNhgI8kX5g6deqB1wjq+nuenOIGcErlrDCmqDwQ5F4jRgWBRZ+IOL3PmLhmLuY2 xiLwQbN0XOqdJ4BZXo1SfyAmpsGLJv3ClMimwSJ+Pmpbahjmf4LqnXBLnRDl9I9r QGE7bv9XNJ4jRYSSpmoyAZO2nEyrjj3/f+G8vkHQIfkt0SqIJd6OUXT3ZR5J3U/X lGtzROdjkZ01aFYdsgQVxjGMvQVpH6ji4W7sqSSASdpHICjzJUyIjf0NY93tzZtr -----END CERTIFICATE-----Generated at Tue May 12 22:38:48 2026 by rpki-client