$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.cer File: E4FD11A334BDCA34C2EAB964DCA226B6942B929D.cer (raw, json) Hash identifier: a0KQOpRxm5BEqxveNbpatBS75Y8GgjbipgtB8YfBMP4= Subject key identifier: E4:FD:11:A3:34:BD:CA:34:C2:EA:B9:64:DC:A2:26:B6:94:2B:92:9D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 234F06E87541E58E36D1C0984ED228E25F893B7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:13:47 +0000 Certificate not after: Sun 02 May 2027 02:18:47 +0000 Subordinate resources: IP: 103.29.170.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:4f:06:e8:75:41:e5:8e:36:d1:c0:98:4e:d2:28:e2:5f:89:3b:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:13:47 2026 GMT Not After : May 2 02:18:47 2027 GMT Subject: CN=E4FD11A334BDCA34C2EAB964DCA226B6942B929D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:21:04:14:ad:fe:ff:52:61:06:fd:16:35:f5: 66:46:db:3e:47:21:1e:0c:14:c3:af:53:5a:2e:07: 45:8b:cd:45:23:28:73:07:4e:13:e9:f1:4a:dc:dc: 7b:20:22:eb:04:6e:f8:86:4f:7f:9e:91:92:d5:7b: 19:79:04:2f:e6:c8:67:af:aa:cc:9f:0a:d8:bf:5e: 4b:54:5e:60:8b:23:28:88:c8:8f:ff:cd:82:62:21: 99:a1:1f:6e:9f:41:91:d8:6e:66:af:00:49:da:d4: 1d:31:33:9f:9a:e9:57:e8:55:eb:b7:a6:e1:62:2f: 96:4a:2d:a2:a0:46:d4:c8:e6:5d:35:2a:95:34:d2: 7f:d2:56:cc:1d:68:35:5c:95:83:92:96:d3:0e:54: 85:0d:de:6d:6a:64:70:ff:90:03:da:76:6c:c1:b1: 17:89:95:54:d3:c2:b2:70:7b:20:32:6b:36:97:71: 09:98:78:57:ab:dd:4b:c1:07:c3:a5:af:e5:65:6b: ba:4e:7c:f5:12:70:9e:fa:46:3a:87:de:43:7b:4a: 92:43:f8:03:9f:13:65:9c:38:64:27:ff:5a:ad:74: 40:76:de:4b:df:8c:57:70:fc:ea:52:df:ac:53:d3: 83:7d:30:b7:b9:d7:e6:b7:6b:eb:a7:11:45:73:78: ca:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E4:FD:11:A3:34:BD:CA:34:C2:EA:B9:64:DC:A2:26:B6:94:2B:92:9D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.29.170.0/23 Signature Algorithm: sha256WithRSAEncryption 40:74:1d:43:84:0f:f7:d2:4c:35:ad:ef:a1:c3:55:02:20:75: d3:81:e4:3c:f3:d3:79:21:00:24:63:80:b7:44:2d:bd:7c:71: 70:65:b7:42:8d:29:de:d2:53:78:4e:dd:2a:1b:53:d3:48:0f: 71:17:4a:fd:9f:99:4e:86:5c:95:d6:f9:f7:64:97:67:8c:66: 3d:cf:31:6e:56:7e:e2:a8:b8:0d:82:8f:1d:a5:52:f5:29:25: f5:de:38:da:cf:0f:dd:78:2d:f3:ec:64:d0:46:7d:26:5f:5f: de:62:14:1b:10:e5:2f:5e:3f:15:cc:3a:2b:32:2d:75:ae:0f: 5b:b5:dd:77:83:de:ee:97:47:02:ea:a9:84:3a:c6:34:ff:b7: d6:a5:da:af:ab:6e:69:6d:18:f6:d4:b9:3d:4a:22:51:42:57: 95:77:0e:67:57:7e:55:67:86:20:28:4a:8d:27:df:95:3f:3f: d0:83:f6:e4:91:fc:e0:f0:90:74:b7:20:55:1d:05:b3:80:0a: 7c:3e:f1:ee:ed:31:fb:0a:28:35:1b:3e:a9:1e:81:0b:2f:d8: 2a:47:66:47:46:41:37:18:61:1b:b0:e7:50:6b:ca:cb:8d:ab: 4b:c9:a3:c1:a3:0a:33:2e:25:f4:58:3b:69:f2:07:27:bf:92: 69:7d:c7:ca -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUI08G6HVB5Y420cCYTtIo4l+JO3owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTM0N1oX DTI3MDUwMjAyMTg0N1owMzExMC8GA1UEAxMoRTRGRDExQTMzNEJEQ0EzNEMyRUFC OTY0RENBMjI2QjY5NDJCOTI5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOshBBSt/v9SYQb9FjX1ZkbbPkchHgwUw69TWi4HRYvNRSMocwdOE+nxStzc eyAi6wRu+IZPf56RktV7GXkEL+bIZ6+qzJ8K2L9eS1ReYIsjKIjIj//NgmIhmaEf bp9BkdhuZq8ASdrUHTEzn5rpV+hV67em4WIvlkotoqBG1MjmXTUqlTTSf9JWzB1o NVyVg5KW0w5UhQ3ebWpkcP+QA9p2bMGxF4mVVNPCsnB7IDJrNpdxCZh4V6vdS8EH w6Wv5WVruk589RJwnvpGOofeQ3tKkkP4A58TZZw4ZCf/Wq10QHbeS9+MV3D86lLf rFPTg30wt7nX5rdr66cRRXN4yoMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOT9EaM0vco0wuq5ZNyiJraUK5KdMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2UzODA5Mzg0LTliMWMtNGY1YS1hYTZiLTlkZTNiNTJhOWMwNS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lMzgwOTM4 NC05YjFjLTRmNWEtYWE2Yi05ZGUzYjUyYTljMDUvMC9FNEZEMTFBMzM0QkRDQTM0 QzJFQUI5NjREQ0EyMjZCNjk0MkI5MjlELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZx2qMA0GCSqGSIb3DQEBCwUAA4IBAQBAdB1DhA/30kw1re+hw1UCIHXTgeQ8 89N5IQAkY4C3RC29fHFwZbdCjSne0lN4Tt0qG1PTSA9xF0r9n5lOhlyV1vn3ZJdn jGY9zzFuVn7iqLgNgo8dpVL1KSX13jjazw/deC3z7GTQRn0mX1/eYhQbEOUvXj8V zDorMi11rg9btd13g97ul0cC6qmEOsY0/7fWpdqvq25pbRj21Lk9SiJRQleVdw5n V35VZ4YgKEqNJ9+VPz/Qg/bkkfzg8JB0tyBVHQWzgAp8PvHu7TH7Cig1Gz6pHoEL L9gqR2ZHRkE3GGEbsOdQa8rLjatLyaPBowozLiX0WDtp8gcnv5JpfcfK -----END CERTIFICATE-----Generated at Tue May 12 22:15:51 2026 by rpki-client