$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E4082D8524B052029D62D695437D63F939A1F80E.cer File: E4082D8524B052029D62D695437D63F939A1F80E.cer (raw, json) Hash identifier: +b70Yd3RAovg+ytbsGgfJ5iPjulqxTTMNhca+EIeaho= Subject key identifier: E4:08:2D:85:24:B0:52:02:9D:62:D6:95:43:7D:63:F9:39:A1:F8:0E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 669F5A839370784BEB9368B49275C03ED6D99188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:59:33 +0000 Certificate not after: Sun 02 May 2027 00:04:33 +0000 Subordinate resources: IP: 103.41.250.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:9f:5a:83:93:70:78:4b:eb:93:68:b4:92:75:c0:3e:d6:d9:91:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:59:33 2026 GMT Not After : May 2 00:04:33 2027 GMT Subject: CN=E4082D8524B052029D62D695437D63F939A1F80E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:88:65:f1:22:61:76:4a:e6:b8:44:ae:aa:a7: 85:3c:fe:13:0b:4b:85:16:13:7f:20:7d:37:45:50: ce:e0:c5:5e:5a:21:9d:da:d0:b2:3d:98:65:aa:3a: d9:97:20:5a:2d:6c:68:5b:a7:a4:90:25:52:c8:60: 0a:6a:fa:62:4a:b6:6c:4e:3c:a1:73:42:e9:27:c1: d0:ee:04:b6:cd:6d:b7:d5:a0:8e:58:9f:a4:54:81: 13:4b:91:eb:26:03:cc:b2:19:32:57:fb:82:07:2b: d0:0e:ef:1e:d6:02:d1:bd:b0:c3:05:36:81:8d:bc: de:2a:67:5b:e2:30:29:1b:0e:31:2e:0b:de:7c:4d: 70:a3:7f:8e:4e:9b:a3:be:02:e1:2b:fb:30:ae:73: e9:94:90:a6:87:ab:fa:3b:fd:41:4f:82:dd:00:c2: 21:37:1c:74:01:42:7e:69:c4:60:7d:3b:22:89:1b: 71:cf:02:1a:a7:80:b0:d4:0f:f2:59:a7:e5:a2:31: 69:b4:95:5b:e3:3a:b5:f6:42:2e:92:fb:94:59:c8: 61:96:c0:f4:70:85:75:6f:a4:46:77:dd:9d:43:54: 9e:39:5c:bc:c3:9c:ce:ea:f3:cd:12:70:f3:d7:df: 93:7d:97:0b:1b:20:63:d2:83:bd:06:45:e5:7c:a7: db:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E4:08:2D:85:24:B0:52:02:9D:62:D6:95:43:7D:63:F9:39:A1:F8:0E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1e3b67e8-a973-40fe-ba03-f95e86cbda9f/0/E4082D8524B052029D62D695437D63F939A1F80E.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.41.250.0/23 Signature Algorithm: sha256WithRSAEncryption 31:17:62:7f:34:6e:49:4c:d1:ce:6d:e9:1d:85:86:5f:d1:f7: e2:f4:e8:af:cf:b8:e8:76:9c:cb:2d:af:99:dd:55:c9:77:4a: c0:b9:66:a9:27:ad:27:54:a8:eb:43:b2:70:05:43:e7:30:6d: 11:3c:70:c7:fe:8f:f7:1c:69:81:0a:bf:da:a4:96:64:c1:85: 68:8a:bb:64:91:9c:c3:ab:ef:8d:18:ae:0f:11:41:46:54:e7: 8e:52:9d:85:0e:03:75:cb:6d:90:68:d4:74:be:03:af:7c:4c: 39:c9:77:71:3a:da:69:b0:a5:e5:d2:56:7f:09:63:27:33:a6: b5:a2:c2:9d:38:40:cf:b3:44:5f:8c:f8:9a:dc:5e:ef:65:79: c2:8d:db:d9:ee:78:9e:56:45:15:9a:83:ee:d3:31:3f:f0:29: 55:20:3f:a4:4a:c7:46:89:50:60:b2:1d:53:e3:21:be:a4:09: 82:ac:dd:a4:37:50:4e:fa:a4:7b:88:1e:9a:d3:90:64:cd:70: 6d:ee:65:2c:e6:11:64:1e:c1:57:ad:ed:fc:ce:0f:81:26:cb: e9:50:92:a6:e5:6a:05:4f:af:78:bb:c3:a1:00:a5:45:c3:78: 3e:f0:f7:7e:14:09:d7:8d:68:2c:4a:1c:d9:ae:5c:f0:99:9c: 33:92:03:6c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUZp9ag5NweEvrk2i0knXAPtbZkYgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTkzM1oX DTI3MDUwMjAwMDQzM1owMzExMC8GA1UEAxMoRTQwODJEODUyNEIwNTIwMjlENjJE Njk1NDM3RDYzRjkzOUExRjgwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAISIZfEiYXZK5rhErqqnhTz+EwtLhRYTfyB9N0VQzuDFXlohndrQsj2YZao6 2ZcgWi1saFunpJAlUshgCmr6Ykq2bE48oXNC6SfB0O4Ets1tt9WgjlifpFSBE0uR 6yYDzLIZMlf7ggcr0A7vHtYC0b2wwwU2gY283ipnW+IwKRsOMS4L3nxNcKN/jk6b o74C4Sv7MK5z6ZSQpoer+jv9QU+C3QDCITccdAFCfmnEYH07Iokbcc8CGqeAsNQP 8lmn5aIxabSVW+M6tfZCLpL7lFnIYZbA9HCFdW+kRnfdnUNUnjlcvMOczurzzRJw 89ffk32XCxsgY9KDvQZF5Xyn26sCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOQILYUksFICnWLWlUN9Y/k5ofgOMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzFlM2I2N2U4LWE5NzMtNDBmZS1iYTAzLWY5NWU4NmNiZGE5Zi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xZTNiNjdl OC1hOTczLTQwZmUtYmEwMy1mOTVlODZjYmRhOWYvMC9FNDA4MkQ4NTI0QjA1MjAy OUQ2MkQ2OTU0MzdENjNGOTM5QTFGODBFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZyn6MA0GCSqGSIb3DQEBCwUAA4IBAQAxF2J/NG5JTNHObekdhYZf0ffi9Oiv z7jodpzLLa+Z3VXJd0rAuWapJ60nVKjrQ7JwBUPnMG0RPHDH/o/3HGmBCr/apJZk wYVoirtkkZzDq++NGK4PEUFGVOeOUp2FDgN1y22QaNR0vgOvfEw5yXdxOtppsKXl 0lZ/CWMnM6a1osKdOEDPs0RfjPia3F7vZXnCjdvZ7nieVkUVmoPu0zE/8ClVID+k SsdGiVBgsh1T4yG+pAmCrN2kN1BO+qR7iB6a05BkzXBt7mUs5hFkHsFXre38zg+B JsvpUJKm5WoFT694u8OhAKVFw3g+8Pd+FAnXjWgsShzZrlzwmZwzkgNs -----END CERTIFICATE-----Generated at Tue May 12 22:03:12 2026 by rpki-client