$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E48354BE9F141988ABFB54173029C4000CF9B18B.cer File: E48354BE9F141988ABFB54173029C4000CF9B18B.cer (raw, json) Hash identifier: ufF5uyoJbHWmzujsvbr02JsHSqFWCtZHPORDWMXO2F8= Subject key identifier: E4:83:54:BE:9F:14:19:88:AB:FB:54:17:30:29:C4:00:0C:F9:B1:8B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5BDBBE9846BD5FA1A63C334AC27D73CEF2532F79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.mft caRepository: rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:11:53 +0000 Certificate not after: Sun 02 May 2027 01:16:53 +0000 Subordinate resources: IP: 103.125.104.0/22 IP: 2403:f1c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:db:be:98:46:bd:5f:a1:a6:3c:33:4a:c2:7d:73:ce:f2:53:2f:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:11:53 2026 GMT Not After : May 2 01:16:53 2027 GMT Subject: CN=E48354BE9F141988ABFB54173029C4000CF9B18B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f8:7e:7f:36:9a:7d:ad:ae:a5:66:db:83:e0: d5:b8:b8:db:6a:6a:5d:44:97:af:bc:f7:85:56:85: 16:ba:ad:59:7e:a3:29:d2:85:ff:7d:df:14:dc:ec: ad:b9:3c:e8:20:9c:28:5d:37:f5:81:fe:7f:88:0d: a3:1e:06:b7:07:ca:85:18:54:b3:77:c4:5d:67:ea: 36:d7:74:35:6b:b2:4b:21:9f:bf:cb:a1:de:2c:a4: 20:87:35:c4:4a:a6:12:82:47:1b:57:db:30:cf:fc: bb:7b:61:49:51:af:2a:50:5f:0a:e5:da:90:38:c8: e4:97:99:90:15:71:77:d9:4a:fc:29:22:8a:0d:d6: f5:a6:4a:8c:26:6f:07:d1:6a:f1:01:a2:24:c8:90: 4b:16:9b:4c:90:e4:5e:ad:8e:7c:31:fb:b6:db:37: ba:c7:e4:e1:33:69:87:65:82:b7:b4:a8:2d:8d:58: 26:4d:c7:23:54:54:8d:e3:dc:6f:8f:20:4c:08:1f: 9c:70:06:8d:14:1e:f1:71:ba:e8:54:6c:48:00:e6: ce:f8:24:f0:62:b7:56:ca:c5:79:14:ca:6f:f4:6f: 0d:71:86:93:4a:fd:60:16:1e:2a:59:68:95:8f:d8: b3:d1:b2:b8:2b:3f:e0:92:be:bc:2d:c0:9d:92:a9: af:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E4:83:54:BE:9F:14:19:88:AB:FB:54:17:30:29:C4:00:0C:F9:B1:8B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/E48354BE9F141988ABFB54173029C4000CF9B18B.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.125.104.0/22 IPv6: 2403:f1c0::/32 Signature Algorithm: sha256WithRSAEncryption 1e:57:12:b1:a3:a8:44:c6:d8:b7:20:bd:25:e2:ce:4f:28:c1: 84:22:96:67:a4:10:ae:a9:be:ed:14:ea:0e:87:6b:2b:7f:a0: e9:4c:27:af:57:05:6b:89:9b:7b:ca:65:07:9b:82:dd:71:5e: 87:00:01:b5:4e:fa:6c:1f:f1:ec:cf:ab:67:56:a8:2d:d9:3e: 2b:ee:89:25:7c:1d:ee:17:c5:8d:74:c8:92:e1:a8:6c:8d:9a: 65:9c:41:04:68:2a:e7:7d:54:fc:2b:aa:d9:59:77:b3:c9:4a: 2c:9c:70:5e:cc:a3:12:34:02:29:e2:fb:a0:97:dc:1e:d9:6e: 0e:53:45:27:69:15:f3:58:1e:e7:c0:cd:a7:26:3c:d5:d2:60: 9a:e4:a7:e0:1c:64:2b:e1:33:c9:74:89:98:e0:0d:08:2e:4c: ec:79:26:46:5f:f2:3a:e7:e7:8f:0f:44:23:33:51:0b:98:74: 3f:9c:5b:28:9e:76:38:29:6b:a7:ed:13:44:3a:17:b3:61:fe: ac:81:c0:8f:98:4c:b1:58:26:28:6c:04:32:0e:18:7e:5d:25: d5:64:39:d0:e7:0b:28:d8:f4:4c:b4:cc:c5:f4:92:43:62:6a: ab:06:c3:29:f9:5c:7b:66:14:f0:ab:9f:aa:4c:a6:41:d7:c7: c1:3f:c5:8a -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUW9u+mEa9X6GmPDNKwn1zzvJTL3kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMTE1M1oX DTI3MDUwMjAxMTY1M1owMzExMC8GA1UEAxMoRTQ4MzU0QkU5RjE0MTk4OEFCRkI1 NDE3MzAyOUM0MDAwQ0Y5QjE4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKL4fn82mn2trqVm24Pg1bi422pqXUSXr7z3hVaFFrqtWX6jKdKF/33fFNzs rbk86CCcKF039YH+f4gNox4GtwfKhRhUs3fEXWfqNtd0NWuySyGfv8uh3iykIIc1 xEqmEoJHG1fbMM/8u3thSVGvKlBfCuXakDjI5JeZkBVxd9lK/Ckiig3W9aZKjCZv B9Fq8QGiJMiQSxabTJDkXq2OfDH7tts3usfk4TNph2WCt7SoLY1YJk3HI1RUjePc b48gTAgfnHAGjRQe8XG66FRsSADmzvgk8GK3VsrFeRTKb/RvDXGGk0r9YBYeKllo lY/Ys9GyuCs/4JK+vC3AnZKpr60CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOSDVL6fFBmIq/tUFzApxAAM+bGLMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzg4Y2FjMTYxLWY4ODAtNDIwNi04ZDJjLWRhYTYwNGZlMDkwMi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84OGNhYzE2 MS1mODgwLTQyMDYtOGQyYy1kYWE2MDRmZTA5MDIvMC9FNDgzNTRCRTlGMTQxOTg4 QUJGQjU0MTczMDI5QzQwMDBDRjlCMThCLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ31oMA0EAgACMAcDBQAkA/HAMA0GCSqGSIb3DQEBCwUAA4IBAQAeVxKxo6hE xti3IL0l4s5PKMGEIpZnpBCuqb7tFOoOh2srf6DpTCevVwVriZt7ymUHm4LdcV6H AAG1TvpsH/Hsz6tnVqgt2T4r7oklfB3uF8WNdMiS4ahsjZplnEEEaCrnfVT8K6rZ WXezyUosnHBezKMSNAIp4vugl9we2W4OU0UnaRXzWB7nwM2nJjzV0mCa5KfgHGQr 4TPJdImY4A0ILkzseSZGX/I65+ePD0QjM1ELmHQ/nFsonnY4KWun7RNEOhezYf6s gcCPmEyxWCYobAQyDhh+XSXVZDnQ5wso2PRMtMzF9JJDYmqrBsMp+Vx7ZhTwq5+q TKZB18fBP8WK -----END CERTIFICATE-----Generated at Tue May 12 22:33:06 2026 by rpki-client