$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.cer File: E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.cer (raw, json) Hash identifier: IVo3aG9l+YVl+Owu0BvoFLaKzfi+F96Uw2kKXwvq2rM= Subject key identifier: E1:AE:51:C8:B4:FB:85:A0:C6:F6:81:26:6B:78:AE:B4:E2:06:B0:5B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4BE394FB50D38D05D9820D27D5F5DFAE40B22E14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:01:41 +0000 Certificate not after: Sun 02 May 2027 02:06:41 +0000 Subordinate resources: IP: 103.160.201.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e3:94:fb:50:d3:8d:05:d9:82:0d:27:d5:f5:df:ae:40:b2:2e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:01:41 2026 GMT Not After : May 2 02:06:41 2027 GMT Subject: CN=E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a2:1d:5d:6d:cf:95:93:76:f7:46:97:9f:09: 8e:e5:14:51:c3:1e:a2:6e:16:8d:da:57:38:a8:d5: 2f:de:45:39:c1:09:71:f8:3e:18:9a:5c:fa:8d:16: 20:94:b3:8d:de:b4:20:2c:8f:cc:76:4a:2b:52:5b: 19:1e:dc:c3:78:65:e3:12:2d:b5:c4:eb:a1:f7:d4: 3e:bf:dc:68:f5:b0:22:c4:3f:8b:23:5f:fc:83:5b: 1c:39:54:a5:48:7a:cd:6e:34:03:37:ea:d9:1a:98: a6:8b:9a:61:1e:23:18:81:35:bd:70:50:10:dd:20: 7b:54:87:0e:59:66:c9:e8:3c:94:00:51:44:05:54: 39:2d:3c:fa:43:88:67:4d:7d:f9:ba:0f:74:85:df: ef:2a:82:cc:98:96:b3:3d:a0:90:51:17:68:cc:23: 9d:d3:a7:f0:af:40:73:b3:a7:8f:82:a2:70:b4:01: a2:d0:95:8d:c2:d4:87:53:34:07:3f:6d:93:82:a4: 5d:fb:f4:9f:bb:ea:2d:79:e2:51:ef:00:6d:67:83: 0d:42:b3:0a:8d:e3:e4:32:d0:e0:8e:77:3b:4e:7f: f3:ac:61:6c:69:54:bf:86:08:4a:1a:20:d4:c1:bc: 14:24:15:9b:46:02:24:07:98:da:9e:72:6a:fb:1e: 75:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E1:AE:51:C8:B4:FB:85:A0:C6:F6:81:26:6B:78:AE:B4:E2:06:B0:5B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/E1AE51C8B4FB85A0C6F681266B78AEB4E206B05B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.201.0/24 Signature Algorithm: sha256WithRSAEncryption 20:d1:5b:60:49:f6:2c:0f:54:9c:5e:a8:20:7c:f0:98:94:27: 92:f8:79:95:e3:d1:91:85:4d:e3:d4:95:e6:3d:ac:7b:46:79: 66:17:4d:f1:c0:71:cf:91:dd:d7:98:5b:66:c3:20:10:0f:b1: f9:28:2e:f4:33:98:e3:d0:40:4d:3a:f0:c3:b0:c8:21:4d:2e: 6c:74:65:4c:3d:54:9a:e4:f7:ed:fe:71:f8:8e:26:24:b2:95: 11:f1:c3:cb:de:d8:32:9b:c6:8e:df:5c:24:67:61:a4:55:05: 78:fd:f5:31:cb:f0:01:c0:1f:39:e1:64:e1:6c:9d:f7:d4:f6: ba:dc:7d:97:48:07:7b:0f:70:f1:7d:98:a7:0c:74:60:4f:3c: 5c:99:75:d5:00:77:8a:a0:43:1f:b6:d5:c4:84:bd:96:81:9a: 3e:98:c5:4c:b1:af:d7:2c:97:91:74:4a:b9:43:af:28:fb:30: d1:7c:89:22:51:d2:c2:95:f8:4a:a3:56:a3:72:a9:08:72:0e: 06:5b:76:22:42:c0:0c:71:d4:17:d1:af:e0:cc:9b:00:ee:84: 24:7f:2e:5e:be:f6:54:52:e4:2f:a8:c1:3a:44:58:25:bf:80: c9:d1:d9:91:ba:10:67:8b:d3:63:9d:1e:8f:8f:c0:7d:88:9e: 3b:05:2b:22 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUS+OU+1DTjQXZgg0n1fXfrkCyLhQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDE0MVoX DTI3MDUwMjAyMDY0MVowMzExMC8GA1UEAxMoRTFBRTUxQzhCNEZCODVBMEM2RjY4 MTI2NkI3OEFFQjRFMjA2QjA1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALyiHV1tz5WTdvdGl58JjuUUUcMeom4WjdpXOKjVL95FOcEJcfg+GJpc+o0W IJSzjd60ICyPzHZKK1JbGR7cw3hl4xIttcTroffUPr/caPWwIsQ/iyNf/INbHDlU pUh6zW40Azfq2RqYpouaYR4jGIE1vXBQEN0ge1SHDllmyeg8lABRRAVUOS08+kOI Z019+boPdIXf7yqCzJiWsz2gkFEXaMwjndOn8K9Ac7Onj4KicLQBotCVjcLUh1M0 Bz9tk4KkXfv0n7vqLXniUe8AbWeDDUKzCo3j5DLQ4I53O05/86xhbGlUv4YIShog 1MG8FCQVm0YCJAeY2p5yavsedTcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOGuUci0+4WgxvaBJmt4rrTiBrBbMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Q4MzQ5Y2Q0LWMwNzktNDFmZi1hYTllLTM2ZjNkNDQ4MjY0NS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kODM0OWNk NC1jMDc5LTQxZmYtYWE5ZS0zNmYzZDQ0ODI2NDUvMC9FMUFFNTFDOEI0RkI4NUEw QzZGNjgxMjY2Qjc4QUVCNEUyMDZCMDVCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6DJMA0GCSqGSIb3DQEBCwUAA4IBAQAg0VtgSfYsD1ScXqggfPCYlCeS+HmV 49GRhU3j1JXmPax7RnlmF03xwHHPkd3XmFtmwyAQD7H5KC70M5jj0EBNOvDDsMgh TS5sdGVMPVSa5Pft/nH4jiYkspUR8cPL3tgym8aO31wkZ2GkVQV4/fUxy/ABwB85 4WThbJ331Pa63H2XSAd7D3DxfZinDHRgTzxcmXXVAHeKoEMfttXEhL2WgZo+mMVM sa/XLJeRdEq5Q68o+zDRfIkiUdLClfhKo1ajcqkIcg4GW3YiQsAMcdQX0a/gzJsA 7oQkfy5evvZUUuQvqME6RFglv4DJ0dmRuhBni9NjnR6Pj8B9iJ47BSsi -----END CERTIFICATE-----Generated at Wed May 13 02:12:43 2026 by rpki-client