$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer File: E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer (raw, json) Hash identifier: e8LFB7VB2j6XypPaj6Yqh9b/fgREwD/60yyFPvhMmTA= Subject key identifier: E3:0A:78:29:4D:1A:6B:6A:63:D2:7E:37:DD:6F:C6:E7:B8:0F:9E:D2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 759F755C5B990CE99D2AE5B8972C96287617B043 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft caRepository: rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:36:41 +0000 Certificate not after: Sun 02 May 2027 00:41:41 +0000 Subordinate resources: IP: 103.170.100.0/23 IP: 2407:c6c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:9f:75:5c:5b:99:0c:e9:9d:2a:e5:b8:97:2c:96:28:76:17:b0:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:36:41 2026 GMT Not After : May 2 00:41:41 2027 GMT Subject: CN=E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:59:64:5c:74:5d:57:fa:0f:22:97:92:49:6d: 25:0d:32:4d:ec:7d:f6:a1:16:22:aa:83:8d:16:5e: 8d:7d:0e:26:59:1f:8e:50:d5:65:77:f9:a6:94:01: 9f:84:3b:7c:67:e8:1a:e6:06:67:ed:11:7f:8b:36: 2c:93:33:1a:8d:d3:41:6e:d9:61:95:90:83:0e:20: 4e:f8:17:9a:76:cd:23:f6:98:21:41:5b:3d:13:d8: 75:f9:bc:df:41:da:cb:a2:03:dd:56:57:ec:fa:ba: cd:f7:18:bc:1c:91:05:b8:d0:48:46:21:58:a4:f2: 08:ed:6c:69:7f:d2:60:c1:c1:0b:f6:1c:f0:aa:65: cf:69:08:1c:57:c6:46:33:ad:3a:73:65:f3:3f:9a: 85:ab:09:11:2d:9f:f9:d0:52:16:cb:f8:e6:18:40: 54:97:30:d0:20:c7:6e:ed:24:2f:98:5a:8e:a3:2f: 03:d0:df:9a:a4:ce:18:5b:97:6e:fe:35:d1:34:e9: 9d:89:d1:d7:8a:34:6b:2f:d3:99:ea:cf:99:3a:35: ce:c2:f9:1d:c8:17:6a:18:5c:51:25:d7:d5:a3:8c: fe:c8:06:55:f2:9c:95:e5:fa:a6:8f:6f:d5:9f:6b: d5:5b:30:15:89:5c:27:d3:58:c3:aa:34:25:43:c9: c8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E3:0A:78:29:4D:1A:6B:6A:63:D2:7E:37:DD:6F:C6:E7:B8:0F:9E:D2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.100.0/23 IPv6: 2407:c6c0::/32 Signature Algorithm: sha256WithRSAEncryption 17:a2:c0:c8:54:4b:9f:76:ee:13:4f:ea:6e:3d:31:fe:3b:bf: f8:fa:e3:73:63:ca:07:93:1d:f6:03:c4:41:b0:e3:1b:8f:07: 35:be:f7:76:1f:be:88:21:6f:1b:7b:27:e4:17:5b:f9:15:ba: 70:f9:b2:30:8d:59:e3:bb:6a:39:57:d8:57:fb:2d:20:ec:7d: b7:2c:f0:b4:4c:8f:79:da:2a:59:a2:ef:ab:78:a3:71:fb:d3: e1:f3:cc:45:ac:88:89:39:7e:af:66:ab:68:a9:ea:46:0e:44: ec:6c:ba:9a:c0:b5:24:87:fb:55:e3:58:9f:4b:18:e5:95:84: b4:10:11:20:fd:77:74:d6:84:a2:3d:f7:29:78:be:4d:db:05: da:fa:f9:62:7c:d6:47:22:ca:0d:9e:2a:33:b3:e7:98:12:81: 2f:3c:27:e4:4f:2a:a9:22:4f:fe:4b:a6:bf:4b:bc:71:2e:a7: 32:4b:3d:16:ca:10:8c:77:99:0b:05:52:87:e8:9d:7c:a9:d9: 0d:0e:c4:70:0f:eb:19:0d:7f:2e:1a:df:36:16:de:89:a2:d0: e3:32:8d:e7:82:b3:ad:3e:c9:02:cd:14:89:82:b8:fe:fd:80: 66:0a:d6:74:d4:72:d6:e7:e3:52:fb:1c:ad:8c:db:9d:fa:ef: cd:72:45:ed -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUdZ91XFuZDOmdKuW4lyyWKHYXsEMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzY0MVoX DTI3MDUwMjAwNDE0MVowMzExMC8GA1UEAxMoRTMwQTc4Mjk0RDFBNkI2QTYzRDI3 RTM3REQ2RkM2RTdCODBGOUVEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAORZZFx0XVf6DyKXkkltJQ0yTex99qEWIqqDjRZejX0OJlkfjlDVZXf5ppQB n4Q7fGfoGuYGZ+0Rf4s2LJMzGo3TQW7ZYZWQgw4gTvgXmnbNI/aYIUFbPRPYdfm8 30Hay6ID3VZX7Pq6zfcYvByRBbjQSEYhWKTyCO1saX/SYMHBC/Yc8Kplz2kIHFfG RjOtOnNl8z+ahasJES2f+dBSFsv45hhAVJcw0CDHbu0kL5hajqMvA9DfmqTOGFuX bv410TTpnYnR14o0ay/TmerPmTo1zsL5HcgXahhcUSXX1aOM/sgGVfKcleX6po9v 1Z9r1VswFYlcJ9NYw6o0JUPJyE0CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOMKeClNGmtqY9J+N91vxue4D57SMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzU2MWNmNzc3LThhZGYtNGVmMS04ZDZmLTk4NjJjNTU2MjBlYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81NjFjZjc3 Ny04YWRmLTRlZjEtOGQ2Zi05ODYyYzU1NjIwZWEvMC9FMzBBNzgyOTREMUE2QjZB NjNEMjdFMzdERDZGQzZFN0I4MEY5RUQyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ6pkMA0EAgACMAcDBQAkB8bAMA0GCSqGSIb3DQEBCwUAA4IBAQAXosDIVEuf du4TT+puPTH+O7/4+uNzY8oHkx32A8RBsOMbjwc1vvd2H76IIW8beyfkF1v5Fbpw +bIwjVnju2o5V9hX+y0g7H23LPC0TI952ipZou+reKNx+9Ph88xFrIiJOX6vZqto qepGDkTsbLqawLUkh/tV41ifSxjllYS0EBEg/Xd01oSiPfcpeL5N2wXa+vlifNZH IsoNniozs+eYEoEvPCfkTyqpIk/+S6a/S7xxLqcySz0WyhCMd5kLBVKH6J18qdkN DsRwD+sZDX8uGt82Ft6JotDjMo3ngrOtPskCzRSJgrj+/YBmCtZ01HLW5+NS+xyt jNud+u/NckXt -----END CERTIFICATE-----Generated at Tue May 12 22:16:09 2026 by rpki-client