$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E475B1418A0F3872FB12B08F2239396D720C124D.cer File: E475B1418A0F3872FB12B08F2239396D720C124D.cer (raw, json) Hash identifier: zwvakJtWgYNbNr2wLbZ/x//7p+zL/7LTvVfl7BXNiYQ= Subject key identifier: E4:75:B1:41:8A:0F:38:72:FB:12:B0:8F:22:39:39:6D:72:0C:12:4D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1EBDD0648A41B5BBE0CFE2C0AB0E1822F1BEB133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/E475B1418A0F3872FB12B08F2239396D720C124D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 22:59:33 +0000 Certificate not after: Sat 01 May 2027 23:04:33 +0000 Subordinate resources: IP: 103.81.60.0/22 IP: 2001:df7:3600::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:bd:d0:64:8a:41:b5:bb:e0:cf:e2:c0:ab:0e:18:22:f1:be:b1:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 22:59:33 2026 GMT Not After : May 1 23:04:33 2027 GMT Subject: CN=E475B1418A0F3872FB12B08F2239396D720C124D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:64:72:c2:7e:8a:c4:4c:b4:96:19:55:6b:d1: 2c:01:34:de:b4:53:47:00:54:9b:e0:5c:8f:b6:da: e9:36:2b:08:34:50:cb:d7:ff:dd:9b:e5:96:b5:18: f8:2c:71:47:53:c9:23:38:bf:d8:67:a5:de:bf:a3: ae:d1:4f:9b:23:54:03:c1:2e:ff:c1:0e:77:4d:54: 1c:12:9c:dc:70:40:43:80:76:1f:50:62:d0:95:1c: 90:4b:dc:e9:03:1d:48:82:84:f4:c5:5c:70:cd:0c: a7:2b:52:b3:57:d5:b6:64:ef:cb:70:79:c9:cf:b4: 0d:69:93:01:24:e4:fc:52:d0:37:f8:7a:fb:53:e8: 5e:ca:b1:8e:df:71:ff:8e:49:2e:ef:f0:56:dd:ed: 97:db:93:59:94:4e:cc:8a:d5:c2:b7:58:0c:c9:a8: a6:e3:56:52:5d:4d:22:b9:0d:55:05:a3:55:f9:50: 20:2d:74:13:bb:c3:0c:1a:59:c7:70:61:7a:0d:d1: f6:52:9e:8c:42:cc:03:a8:bf:ba:56:01:0c:6c:98: f3:c0:9f:7d:89:95:31:8a:0e:a2:68:6e:76:8a:65: 61:db:fd:93:29:24:16:ff:05:bf:dd:7d:47:95:6e: 5a:51:4c:54:02:ac:57:94:a0:11:32:59:3f:e3:7e: 61:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E4:75:B1:41:8A:0F:38:72:FB:12:B0:8F:22:39:39:6D:72:0C:12:4D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/E475B1418A0F3872FB12B08F2239396D720C124D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.81.60.0/22 IPv6: 2001:df7:3600::/48 Signature Algorithm: sha256WithRSAEncryption 88:04:5a:45:98:c0:85:c4:67:26:e2:57:17:91:a4:12:84:04: 2f:7f:14:9f:09:ff:93:51:d9:73:b7:83:0e:46:e0:7d:f5:eb: c6:27:7b:41:22:c5:16:27:b2:58:0f:c1:1f:a9:0a:ec:b2:1c: 9c:36:48:49:aa:1c:ae:39:17:55:ed:d0:51:0e:f6:09:da:be: 75:00:a8:6c:dd:b8:7b:0f:fd:b9:cd:ad:48:eb:d4:22:fc:44: 87:58:07:2b:59:d0:21:44:7d:5e:60:1f:10:87:25:f9:53:8e: 18:75:0e:04:f5:9e:98:ee:4f:8f:18:7a:31:ae:33:19:81:76: ef:ad:b0:28:2c:6b:6a:32:1e:c7:b3:22:f7:0a:c4:0d:18:f0: 1e:ad:2e:a3:db:fe:f7:a1:3e:f6:ae:71:6d:ce:31:ea:a0:ff: 41:67:16:76:61:d9:b5:2e:aa:5a:13:22:8d:7c:c5:da:b3:9d: 98:7d:dd:4b:bf:79:44:91:50:af:5c:a8:d4:64:d1:65:34:2b: 7d:79:dc:65:9e:ca:f6:ca:dd:44:a2:c6:24:a6:b7:ad:b4:d7: 30:45:39:8d:1f:59:fa:fe:80:d9:e9:98:15:e2:56:7f:ed:34: 5a:97:e1:da:e1:a8:4d:a0:a5:e1:63:d8:d5:96:7f:e4:30:f5: a3:03:d2:b6 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUHr3QZIpBtbvgz+LAqw4YIvG+sTMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIyNTkzM1oX DTI3MDUwMTIzMDQzM1owMzExMC8GA1UEAxMoRTQ3NUIxNDE4QTBGMzg3MkZCMTJC MDhGMjIzOTM5NkQ3MjBDMTI0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMVkcsJ+isRMtJYZVWvRLAE03rRTRwBUm+Bcj7ba6TYrCDRQy9f/3ZvllrUY +CxxR1PJIzi/2Gel3r+jrtFPmyNUA8Eu/8EOd01UHBKc3HBAQ4B2H1Bi0JUckEvc 6QMdSIKE9MVccM0MpytSs1fVtmTvy3B5yc+0DWmTASTk/FLQN/h6+1PoXsqxjt9x /45JLu/wVt3tl9uTWZROzIrVwrdYDMmopuNWUl1NIrkNVQWjVflQIC10E7vDDBpZ x3Bheg3R9lKejELMA6i/ulYBDGyY88CffYmVMYoOomhudoplYdv9kykkFv8Fv919 R5VuWlFMVAKsV5SgETJZP+N+YQECAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOR1sUGKDzhy+xKwjyI5OW1yDBJNMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzAxNTc2ZDRjLTE3NDUtNGExNi04ZWVmLWNlYzA4MWM4MjA0My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wMTU3NmQ0 Yy0xNzQ1LTRhMTYtOGVlZi1jZWMwODFjODIwNDMvMC9FNDc1QjE0MThBMEYzODcy RkIxMkIwOEYyMjM5Mzk2RDcyMEMxMjRELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZ1E8MA8EAgACMAkDBwAgAQ33NgAwDQYJKoZIhvcNAQELBQADggEBAIgEWkWY wIXEZybiVxeRpBKEBC9/FJ8J/5NR2XO3gw5G4H3168Yne0EixRYnslgPwR+pCuyy HJw2SEmqHK45F1Xt0FEO9gnavnUAqGzduHsP/bnNrUjr1CL8RIdYBytZ0CFEfV5g HxCHJflTjhh1DgT1npjuT48YejGuMxmBdu+tsCgsa2oyHsezIvcKxA0Y8B6tLqPb /vehPvaucW3OMeqg/0FnFnZh2bUuqloTIo18xdqznZh93Uu/eUSRUK9cqNRk0WU0 K3153GWeyvbK3USixiSmt6201zBFOY0fWfr+gNnpmBXiVn/tNFqX4drhqE2gpeFj 2NWWf+Qw9aMD0rY= -----END CERTIFICATE-----Generated at Tue May 12 22:15:54 2026 by rpki-client