$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer File: E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer (raw, json) Hash identifier: RIW0MP8SLMmaGFo9J5SY8UgS4S9ERpAvqiNKjnBS5tM= Subject key identifier: E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7D5F58276526D58DE3771747E4B658AA79C63DBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.mft caRepository: rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:50:53 +0000 Certificate not after: Sun 02 May 2027 01:55:53 +0000 Subordinate resources: IP: 43.247.32.0/22 IP: 103.14.44.0/23 IP: 103.18.32.0/23 IP: 103.18.220.0/22 IP: 202.81.48.0/20 IP: 2404:f8c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:5f:58:27:65:26:d5:8d:e3:77:17:47:e4:b6:58:aa:79:c6:3d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:50:53 2026 GMT Not After : May 2 01:55:53 2027 GMT Subject: CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5c:23:dd:57:75:16:d3:7c:0b:24:ca:94:c8: 58:f0:2e:e2:9f:85:7a:71:f5:dc:2c:73:e4:a2:15: 28:67:d7:fe:21:5f:d1:ec:90:61:95:7f:c9:56:77: 1c:8a:1e:a4:61:5e:03:95:b5:07:09:96:f7:d8:0e: 4f:a0:bb:71:30:25:09:bc:70:cc:ef:4b:a1:6e:69: 67:8c:a8:95:42:2a:4d:28:d2:bf:83:be:64:19:75: 21:85:9c:24:bf:ca:d8:a4:5c:d7:a8:b9:f5:0a:a2: fe:29:a6:3a:61:b5:f7:22:7c:a4:ed:fa:2c:9e:a1: 3c:b1:f3:be:af:4f:e7:c2:dc:14:ad:4d:ff:79:b6: 54:bf:92:f2:42:1e:64:f0:fe:22:11:d8:c1:2e:89: cb:f9:ad:1a:13:91:ea:b3:75:6d:3e:12:9b:e2:a4: f7:a0:27:94:18:f7:fe:fc:86:c4:f7:39:94:eb:c8: 76:35:0b:a1:bc:44:0b:5e:87:02:7d:da:7e:49:a4: 5e:a7:65:99:06:2a:af:66:4b:7c:bb:a1:b0:40:83: 2c:eb:aa:e2:a7:f6:73:ed:40:64:b5:6c:97:e3:3e: 0f:31:8d:0e:d1:ab:64:eb:40:e3:a2:f2:be:f9:ed: 3d:7c:a3:13:aa:5e:c1:5d:1b:84:63:af:06:f0:b7: 04:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.32.0/22 103.14.44.0/23 103.18.32.0/23 103.18.220.0/22 202.81.48.0/20 IPv6: 2404:f8c0::/32 Signature Algorithm: sha256WithRSAEncryption 65:92:20:94:b8:fc:5b:de:39:01:65:ed:ae:00:e9:ef:2d:f7: 37:e5:94:58:63:2a:a5:55:d7:ef:5f:b5:a0:7c:dc:47:63:3b: 66:11:d6:83:66:e2:41:ec:45:51:28:ed:94:75:a2:86:2f:87: 1e:d5:02:8f:3c:65:ee:ae:b4:5f:24:c1:a4:c6:0b:18:40:fd: 81:02:6f:41:de:85:34:f8:2e:14:fc:43:6c:5e:43:26:39:e1: 1f:90:d2:5a:14:31:72:82:fa:fe:bc:e4:4e:9d:2e:aa:86:90: cd:e8:b6:b1:86:fa:4a:fc:b0:c4:92:e9:e3:ee:13:9d:5c:a2: 73:c0:ec:82:bd:a4:bc:82:ec:21:fd:87:ae:26:4b:14:f8:b8: f6:9e:18:60:8b:c2:f8:81:14:03:16:84:25:ad:1f:cc:a8:31: dd:e8:b2:da:e4:94:bb:81:7e:2d:97:bd:5b:9e:88:6d:2a:41: e0:30:9f:05:7c:d8:ab:7e:43:a9:52:40:10:a9:51:e7:bb:66: c6:65:72:3a:a5:41:eb:1a:05:ee:e6:f2:64:e4:b9:b4:26:e2: 37:dc:3f:ec:a8:e4:2a:43:53:86:ea:86:a2:7e:ac:71:b7:32: 9b:87:2e:a4:11:14:da:43:2b:58:d3:1e:9b:09:90:75:ac:41: 43:56:82:bb -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgIUfV9YJ2Um1Y3jdxdH5LZYqnnGPbswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTA1M1oX DTI3MDUwMjAxNTU1M1owMzExMC8GA1UEAxMoRTNDMTE2RDkxNjBCNkYyMUY3QjY0 N0Q2RkI4RUMxNDM2Q0FEODhENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANBcI91XdRbTfAskypTIWPAu4p+FenH13Cxz5KIVKGfX/iFf0eyQYZV/yVZ3 HIoepGFeA5W1BwmW99gOT6C7cTAlCbxwzO9LoW5pZ4yolUIqTSjSv4O+ZBl1IYWc JL/K2KRc16i59Qqi/immOmG19yJ8pO36LJ6hPLHzvq9P58LcFK1N/3m2VL+S8kIe ZPD+IhHYwS6Jy/mtGhOR6rN1bT4Sm+Kk96AnlBj3/vyGxPc5lOvIdjULobxEC16H An3afkmkXqdlmQYqr2ZLfLuhsECDLOuq4qf2c+1AZLVsl+M+DzGNDtGrZOtA46Ly vvntPXyjE6pewV0bhGOvBvC3BKUCAwEAAaOCAuAwggLcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOPBFtkWC28h97ZH1vuOwUNsrYjUMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2M2MjFmNzUzLWE4OGUtNGVkZi1hMzA2LWJkOTNkNWEzOGZlYS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jNjIxZjc1 My1hODhlLTRlZGYtYTMwNi1iZDkzZDVhMzhmZWEvMC9FM0MxMTZEOTE2MEI2RjIx RjdCNjQ3RDZGQjhFQzE0MzZDQUQ4OEQ0Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAe AwQCK/cgAwQBZw4sAwQBZxIgAwQCZxLcAwQEylEwMA0EAgACMAcDBQAkBPjAMA0G CSqGSIb3DQEBCwUAA4IBAQBlkiCUuPxb3jkBZe2uAOnvLfc35ZRYYyqlVdfvX7Wg fNxHYztmEdaDZuJB7EVRKO2UdaKGL4ce1QKPPGXurrRfJMGkxgsYQP2BAm9B3oU0 +C4U/ENsXkMmOeEfkNJaFDFygvr+vOROnS6qhpDN6LaxhvpK/LDEkunj7hOdXKJz wOyCvaS8guwh/YeuJksU+Lj2nhhgi8L4gRQDFoQlrR/MqDHd6LLa5JS7gX4tl71b nohtKkHgMJ8FfNirfkOpUkAQqVHnu2bGZXI6pUHrGgXu5vJk5Lm0JuI33D/sqOQq Q1OG6oaifqxxtzKbhy6kERTaQytY0x6bCZB1rEFDVoK7 -----END CERTIFICATE-----Generated at Tue May 12 22:03:22 2026 by rpki-client