$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.cer File: E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.cer (raw, json) Hash identifier: 7eV81ctI+Wr9L91/u0dxAAbU3Q3DrD2Sx0ouTDilwN8= Subject key identifier: E4:62:22:C6:A7:E7:CD:E9:21:08:B0:C0:DC:8B:DC:74:B2:B6:1F:C0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2046C42AA6D49E356A90D89A88C1D44A5247EDF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:29:51 +0000 Certificate not after: Sun 02 May 2027 01:34:51 +0000 Subordinate resources: IP: 103.84.4.0/22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:46:c4:2a:a6:d4:9e:35:6a:90:d8:9a:88:c1:d4:4a:52:47:ed:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:29:51 2026 GMT Not After : May 2 01:34:51 2027 GMT Subject: CN=E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1b:a8:87:5a:a6:7f:30:74:c1:fa:d8:a9:a2: 1c:c1:21:0a:4e:a2:84:c6:5c:cc:08:68:ba:89:52: 07:e4:00:a5:f2:e1:91:61:7f:44:fe:96:5b:19:d3: fc:8e:3f:44:a1:ae:9c:fc:f4:a6:b1:4b:69:f0:64: db:19:bd:18:fb:31:f0:f2:06:90:bd:e0:38:c4:f2: e9:17:5c:b3:2a:89:30:93:82:a5:7d:b2:ee:86:68: 1f:c5:21:93:7b:ca:87:53:59:1c:a5:ba:ed:3d:e3: b7:7c:16:e7:10:7a:2e:d6:d4:7a:d8:ba:9b:82:ca: 7e:09:fd:c3:25:d0:6d:bc:1c:0c:02:eb:4a:3d:54: 76:b3:d2:a5:cb:00:78:59:e7:08:38:91:15:e7:20: 8c:6e:10:bc:67:86:56:c8:8f:ae:26:2b:b1:e8:b3: 4f:de:2d:ee:98:6b:bf:7a:74:23:c7:ff:34:de:71: 8b:42:a6:e6:c1:5b:52:f1:a4:06:bb:c4:4a:fb:92: e8:c8:bc:d3:b8:e7:20:01:ac:f2:ea:a0:c8:6d:c0: 40:99:2a:d2:48:83:27:d1:50:65:2d:77:27:43:c3: c2:25:2a:05:56:34:e7:7d:4b:ac:b2:72:91:3c:48: d5:2a:9e:27:43:08:7f:78:1d:c2:f3:91:e4:40:34: 0c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E4:62:22:C6:A7:E7:CD:E9:21:08:B0:C0:DC:8B:DC:74:B2:B6:1F:C0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/E46222C6A7E7CDE92108B0C0DC8BDC74B2B61FC0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.84.4.0/22 Signature Algorithm: sha256WithRSAEncryption 66:41:4c:21:22:7e:99:b5:86:1f:8b:47:da:79:8f:1b:9b:47: 34:c0:ba:8f:58:99:22:86:1e:55:22:2e:b8:93:6f:7e:7c:15: d8:15:17:8b:d8:c4:af:00:4f:46:90:a3:f3:f5:b8:61:68:0a: 99:02:be:0b:a2:ee:5e:4d:a8:18:e0:12:85:d6:d0:0d:b1:fc: b3:47:a3:4a:be:2b:03:1f:ae:78:12:0c:38:a9:9a:23:11:2b: e5:b9:72:4e:b4:fb:64:9c:00:71:82:1d:5e:f9:f7:5e:3d:3a: a3:3e:16:11:c1:b8:89:07:a2:84:6d:fc:ff:e1:e2:e4:e1:78: 75:dd:2e:09:27:43:3e:a4:f0:15:d3:25:54:66:82:f1:85:6e: 97:5f:f9:9c:62:68:98:69:d0:29:35:2b:4c:c9:ac:04:67:80: ab:6e:73:be:6d:25:c3:f8:6b:7b:48:4e:2f:e1:b9:86:67:f0: d4:d1:a7:6d:f1:b1:03:85:4e:da:21:96:dd:34:e3:32:3f:4e: e6:eb:93:62:a0:72:bc:a7:ab:e7:79:14:45:be:aa:f9:df:41: cc:4a:5b:20:1d:68:78:52:02:3c:b9:7e:2e:dc:3a:df:93:b2: 84:26:cd:44:ae:88:b0:fd:e2:3a:97:64:cb:dc:1d:b8:0f:ba: f1:0f:aa:d3 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUIEbEKqbUnjVqkNiaiMHUSlJH7fgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjk1MVoX DTI3MDUwMjAxMzQ1MVowMzExMC8GA1UEAxMoRTQ2MjIyQzZBN0U3Q0RFOTIxMDhC MEMwREM4QkRDNzRCMkI2MUZDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ0bqIdapn8wdMH62KmiHMEhCk6ihMZczAhouolSB+QApfLhkWF/RP6WWxnT /I4/RKGunPz0prFLafBk2xm9GPsx8PIGkL3gOMTy6RdcsyqJMJOCpX2y7oZoH8Uh k3vKh1NZHKW67T3jt3wW5xB6LtbUeti6m4LKfgn9wyXQbbwcDALrSj1UdrPSpcsA eFnnCDiRFecgjG4QvGeGVsiPriYrseizT94t7phrv3p0I8f/NN5xi0Km5sFbUvGk BrvESvuS6Mi807jnIAGs8uqgyG3AQJkq0kiDJ9FQZS13J0PDwiUqBVY0531LrLJy kTxI1SqeJ0MIf3gdwvOR5EA0DKcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFORiIsan583pIQiwwNyL3HSyth/AMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2E0ZmUxODExLWMwM2YtNDlkOC05MjE3LTEzZmYyMmEzMWViZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hNGZlMTgx MS1jMDNmLTQ5ZDgtOTIxNy0xM2ZmMjJhMzFlYmUvMC9FNDYyMjJDNkE3RTdDREU5 MjEwOEIwQzBEQzhCREM3NEIyQjYxRkMwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ1QEMA0GCSqGSIb3DQEBCwUAA4IBAQBmQUwhIn6ZtYYfi0faeY8bm0c0wLqP WJkihh5VIi64k29+fBXYFReL2MSvAE9GkKPz9bhhaAqZAr4Lou5eTagY4BKF1tAN sfyzR6NKvisDH654Egw4qZojESvluXJOtPtknABxgh1e+fdePTqjPhYRwbiJB6KE bfz/4eLk4Xh13S4JJ0M+pPAV0yVUZoLxhW6XX/mcYmiYadApNStMyawEZ4CrbnO+ bSXD+Gt7SE4v4bmGZ/DU0adt8bEDhU7aIZbdNOMyP07m65NioHK8p6vneRRFvqr5 30HMSlsgHWh4UgI8uX4u3Drfk7KEJs1Eroiw/eI6l2TL3B24D7rxD6rT -----END CERTIFICATE-----Generated at Tue May 12 22:16:46 2026 by rpki-client