$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E23AA0021573342645A2DFB669071A3FC460F128.cer File: E23AA0021573342645A2DFB669071A3FC460F128.cer (raw, json) Hash identifier: XcmpoowkipLstQTu9rNX4vIYX0Q8PW4HIu8MXh13zj8= Subject key identifier: E2:3A:A0:02:15:73:34:26:45:A2:DF:B6:69:07:1A:3F:C4:60:F1:28 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 49FDEC7209E6DE89D77D63ACB023D3133E66286C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft caRepository: rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:06:13 +0000 Certificate not after: Sun 02 May 2027 00:11:13 +0000 Subordinate resources: IP: 103.101.194.0/23 IP: 103.103.180.0/23 IP: 2001:df2:ab00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:fd:ec:72:09:e6:de:89:d7:7d:63:ac:b0:23:d3:13:3e:66:28:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:06:13 2026 GMT Not After : May 2 00:11:13 2027 GMT Subject: CN=E23AA0021573342645A2DFB669071A3FC460F128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:be:38:65:4a:54:17:bd:20:c7:34:5c:ac:b0: ea:b8:37:a3:c6:6e:d4:2c:e6:24:ad:d6:ca:06:52: 29:d0:60:3a:7b:84:3c:18:49:f8:16:3c:03:aa:a0: 3c:63:2f:de:92:38:30:78:04:13:87:ac:2f:9e:a3: d0:39:77:ed:e9:2d:0f:1b:4b:00:33:0d:d1:04:f4: 60:00:8e:d1:40:b4:1f:18:5f:f1:5e:84:5d:5f:fb: ae:1d:1a:9b:a4:42:36:21:b8:9f:ec:d6:34:fc:4c: ef:36:ee:1a:11:43:47:ef:d3:07:b0:29:ef:4e:05: 6a:19:39:d6:71:2e:2f:5c:f9:bf:6b:90:65:a7:bb: 94:19:e4:ee:b2:7f:ef:bd:6a:db:2d:bb:51:ab:17: 7b:c4:7b:e5:37:a2:35:b2:cc:a5:52:40:a1:83:72: cf:12:96:c8:a0:6b:ae:f1:80:62:de:48:e2:4f:5e: 0f:64:24:a6:29:5d:be:79:26:f9:46:41:ca:9a:d4: dd:2e:4d:17:8d:57:87:c9:3d:67:e0:31:d5:48:00: 5b:a1:bc:54:0c:d8:ac:e0:b6:42:05:ec:2a:0e:4a: 8b:96:39:f5:6d:e7:08:f8:fd:5e:14:a3:b9:2e:c5: 07:05:65:d1:75:e6:35:65:45:4f:cf:f9:48:f5:df: 5e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E2:3A:A0:02:15:73:34:26:45:A2:DF:B6:69:07:1A:3F:C4:60:F1:28 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/E23AA0021573342645A2DFB669071A3FC460F128.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.101.194.0/23 103.103.180.0/23 IPv6: 2001:df2:ab00::/48 Signature Algorithm: sha256WithRSAEncryption 23:08:03:53:41:9c:da:32:81:1d:8a:40:bd:6a:c4:18:75:96: 03:25:cb:64:d0:91:3e:eb:b6:3a:b0:63:7b:fb:3e:94:89:20: 5f:2a:7e:ea:75:0e:d3:99:8b:fd:15:aa:a2:65:bc:42:d3:fb: 78:4a:97:06:1a:15:2e:8d:86:79:fd:b8:51:c3:e4:aa:62:a9: 40:ab:82:61:62:be:e6:f0:91:66:e4:4b:53:fb:22:a2:99:97: 7f:a2:25:2c:6f:ce:ca:c5:14:02:5b:6a:70:0f:ab:23:ba:0d: 5b:99:99:56:1f:90:8a:39:e2:39:ad:0c:0d:6c:72:87:1b:4b: 0f:66:40:00:a4:cc:87:df:96:54:fe:d5:55:39:bf:81:4c:fb: a7:8b:65:1b:8d:73:c0:29:5c:b7:22:e6:60:7a:10:45:07:41: 71:3e:e2:cb:26:bc:63:47:c7:ba:ad:f6:82:a6:51:7d:69:2f: 59:c0:14:76:65:43:13:e3:db:33:48:d2:5d:da:fe:44:78:dd: 9e:61:b2:b3:1f:9e:2d:57:9e:85:a7:d6:cf:82:11:1b:3c:20: 37:b7:37:00:5a:5f:20:3e:ee:f0:76:ea:a3:a3:87:14:ed:95: 19:31:19:62:e4:4c:92:74:28:f5:6a:2d:38:b0:91:34:cd:e4: 0d:c6:1b:91 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUSf3scgnm3onXfWOssCPTEz5mKGwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDYxM1oX DTI3MDUwMjAwMTExM1owMzExMC8GA1UEAxMoRTIzQUEwMDIxNTczMzQyNjQ1QTJE RkI2NjkwNzFBM0ZDNDYwRjEyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALu+OGVKVBe9IMc0XKyw6rg3o8Zu1CzmJK3WygZSKdBgOnuEPBhJ+BY8A6qg PGMv3pI4MHgEE4esL56j0Dl37ektDxtLADMN0QT0YACO0UC0Hxhf8V6EXV/7rh0a m6RCNiG4n+zWNPxM7zbuGhFDR+/TB7Ap704Fahk51nEuL1z5v2uQZae7lBnk7rJ/ 771q2y27UasXe8R75TeiNbLMpVJAoYNyzxKWyKBrrvGAYt5I4k9eD2Qkpildvnkm +UZByprU3S5NF41Xh8k9Z+Ax1UgAW6G8VAzYrOC2QgXsKg5Ki5Y59W3nCPj9XhSj uS7FBwVl0XXmNWVFT8/5SPXfXn8CAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOI6oAIVczQmRaLftmkHGj/EYPEoMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzI4ZDBmY2E4LTVjMmQtNGUzNS1iZDdkLWI0NDhhYTc1ZjJiZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yOGQwZmNh OC01YzJkLTRlMzUtYmQ3ZC1iNDQ4YWE3NWYyYmUvMC9FMjNBQTAwMjE1NzMzNDI2 NDVBMkRGQjY2OTA3MUEzRkM0NjBGMTI4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQBZ2XCAwQBZ2e0MA8EAgACMAkDBwAgAQ3yqwAwDQYJKoZIhvcNAQELBQADggEB ACMIA1NBnNoygR2KQL1qxBh1lgMly2TQkT7rtjqwY3v7PpSJIF8qfup1DtOZi/0V qqJlvELT+3hKlwYaFS6Nhnn9uFHD5KpiqUCrgmFivubwkWbkS1P7IqKZl3+iJSxv zsrFFAJbanAPqyO6DVuZmVYfkIo54jmtDA1scocbSw9mQACkzIffllT+1VU5v4FM +6eLZRuNc8ApXLci5mB6EEUHQXE+4ssmvGNHx7qt9oKmUX1pL1nAFHZlQxPj2zNI 0l3a/kR43Z5hsrMfni1XnoWn1s+CERs8IDe3NwBaXyA+7vB26qOjhxTtlRkxGWLk TJJ0KPVqLTiwkTTN5A3GG5E= -----END CERTIFICATE-----Generated at Tue May 12 22:03:52 2026 by rpki-client