$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E2807BC52478D8B3952B24F68408B7477218FD9C.cer File: E2807BC52478D8B3952B24F68408B7477218FD9C.cer (raw, json) Hash identifier: akir0nFBgkAgma1wFWCUABFFYJ2p538L8nOgvEJ0r7U= Subject key identifier: E2:80:7B:C5:24:78:D8:B3:95:2B:24:F6:84:08:B7:47:72:18:FD:9C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 607A9CE4C6B66E17A69A2404225E3CF7C6B25CB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/E2807BC52478D8B3952B24F68408B7477218FD9C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:02:18 +0000 Certificate not after: Sun 02 May 2027 01:07:18 +0000 Subordinate resources: IP: 103.87.60.0/22 IP: 2400:d140::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:7a:9c:e4:c6:b6:6e:17:a6:9a:24:04:22:5e:3c:f7:c6:b2:5c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:02:18 2026 GMT Not After : May 2 01:07:18 2027 GMT Subject: CN=E2807BC52478D8B3952B24F68408B7477218FD9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:40:e8:a1:43:00:7b:0a:52:12:68:29:61:c4: c1:a4:4b:02:a1:58:7e:c9:6d:db:3b:92:eb:73:65: 3c:9c:eb:d0:73:38:71:b4:4a:ab:10:f6:71:07:33: 99:88:59:a4:79:a4:15:36:9b:3c:be:1c:3c:a9:44: f9:29:89:e5:49:36:0b:60:52:bc:67:43:54:55:c6: 65:3e:ea:bc:80:36:5a:47:a9:f8:02:f7:99:81:c9: 35:d7:aa:a5:6b:fb:5c:99:a4:46:64:4c:34:80:b0: 86:d9:5a:1c:15:11:4c:7b:b0:14:6f:3a:cf:6e:f2: 29:4a:65:5d:a3:70:34:7e:78:1d:23:0f:8e:83:12: e3:da:c7:7c:6a:98:25:e7:69:b6:af:02:bc:23:3c: 9a:79:3a:6f:37:91:b9:78:b0:e4:9e:31:d4:84:71: d4:3b:33:0f:c5:aa:25:c2:54:e9:00:ba:d5:ce:f4: 59:88:1e:b5:11:23:77:57:95:46:1d:da:ee:46:2b: 6f:57:60:f9:86:12:b3:0c:cb:c0:b6:13:79:f9:c5: bc:4d:79:8a:b0:5a:12:51:79:c5:07:c0:18:20:82: 91:b5:af:44:17:2f:a1:0d:f5:21:07:db:8a:cd:5c: d8:cb:63:1a:35:d7:b4:35:02:51:e3:de:7a:9a:5d: a1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E2:80:7B:C5:24:78:D8:B3:95:2B:24:F6:84:08:B7:47:72:18:FD:9C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/E2807BC52478D8B3952B24F68408B7477218FD9C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.87.60.0/22 IPv6: 2400:d140::/32 Signature Algorithm: sha256WithRSAEncryption 3b:03:6a:7c:41:3f:82:21:28:da:4b:9d:09:58:84:f6:67:fb: bc:9a:48:85:1e:18:b9:f7:27:cf:55:d5:fe:f9:e6:ea:20:e1: 72:e2:26:7f:83:d4:e3:5f:7e:29:39:13:c8:c9:59:92:1b:ad: f3:c9:4c:94:cc:cf:fb:15:af:0e:f6:8d:0d:2c:c3:8f:62:fe: 56:a3:87:7e:90:ab:8e:6c:ba:cf:6a:b6:49:3a:25:c5:44:d2: 3d:cf:e6:73:51:fc:cc:c8:97:12:75:6b:70:55:b6:fa:3d:3c: c2:38:e1:9e:4b:de:d2:c8:58:52:77:79:54:1f:fe:ee:3a:75: 73:36:b1:b6:2b:39:d7:dc:3e:74:47:3a:eb:95:5e:c3:58:7a: 01:34:72:2d:db:b2:66:0d:e9:2d:14:c6:db:78:77:64:c7:d6: ab:86:b8:fa:b8:19:17:1c:ea:1f:78:63:5f:a7:a7:51:24:49: 39:52:94:58:48:30:55:a2:12:e4:6b:eb:f9:ad:e7:01:49:d2: 53:7d:17:87:4c:4a:9f:c5:23:95:22:3c:53:fe:cd:47:2f:ea: eb:dd:eb:e5:8e:2b:fb:f6:87:94:bf:bd:70:fb:1a:5c:17:ae: 3f:9d:66:c7:5e:09:f4:f6:a1:f6:50:ee:94:fa:2d:7e:1e:7a: dd:b2:ac:17 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUYHqc5Ma2bhemmiQEIl4898ayXLEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMDIxOFoX DTI3MDUwMjAxMDcxOFowMzExMC8GA1UEAxMoRTI4MDdCQzUyNDc4RDhCMzk1MkIy NEY2ODQwOEI3NDc3MjE4RkQ5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALlA6KFDAHsKUhJoKWHEwaRLAqFYfslt2zuS63NlPJzr0HM4cbRKqxD2cQcz mYhZpHmkFTabPL4cPKlE+SmJ5Uk2C2BSvGdDVFXGZT7qvIA2Wkep+AL3mYHJNdeq pWv7XJmkRmRMNICwhtlaHBURTHuwFG86z27yKUplXaNwNH54HSMPjoMS49rHfGqY Jedptq8CvCM8mnk6bzeRuXiw5J4x1IRx1DszD8WqJcJU6QC61c70WYgetREjd1eV Rh3a7kYrb1dg+YYSswzLwLYTefnFvE15irBaElF5xQfAGCCCkbWvRBcvoQ31IQfb is1c2MtjGjXXtDUCUePeeppdoXsCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOKAe8UkeNizlSsk9oQIt0dyGP2cMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdiYTBiM2YxLTk3NGYtNDIwNS1iZGNlLTBmOWY1YjcyNTBkYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83YmEwYjNm MS05NzRmLTQyMDUtYmRjZS0wZjlmNWI3MjUwZGMvMC9FMjgwN0JDNTI0NzhEOEIz OTUyQjI0RjY4NDA4Qjc0NzcyMThGRDlDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ1c8MA0EAgACMAcDBQAkANFAMA0GCSqGSIb3DQEBCwUAA4IBAQA7A2p8QT+C ISjaS50JWIT2Z/u8mkiFHhi59yfPVdX++ebqIOFy4iZ/g9TjX34pORPIyVmSG63z yUyUzM/7Fa8O9o0NLMOPYv5Wo4d+kKuObLrParZJOiXFRNI9z+ZzUfzMyJcSdWtw Vbb6PTzCOOGeS97SyFhSd3lUH/7uOnVzNrG2KznX3D50RzrrlV7DWHoBNHIt27Jm DektFMbbeHdkx9arhrj6uBkXHOofeGNfp6dRJEk5UpRYSDBVohLka+v5recBSdJT fReHTEqfxSOVIjxT/s1HL+rr3evljiv79oeUv71w+xpcF64/nWbHXgn09qH2UO6U +i1+HnrdsqwX -----END CERTIFICATE-----Generated at Tue May 12 22:03:08 2026 by rpki-client