$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.cer File: E5E46B40DA4B39812590F66F8D9A48EB7BF80663.cer (raw, json) Hash identifier: YXYe8RfR5+Cq5WV2s6/n8vVBZfx/hFXc6TCS0XNWZlU= Subject key identifier: E5:E4:6B:40:DA:4B:39:81:25:90:F6:6F:8D:9A:48:EB:7B:F8:06:63 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1924EE149509FBF621F682AE5BA06945E56FC18A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.mft caRepository: rsync://rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:01:13 +0000 Certificate not after: Sun 02 May 2027 00:06:13 +0000 Subordinate resources: IP: 103.8.56.0/22 IP: 110.93.12.0/22 IP: 202.43.116.0/23 IP: 2001:df0:2ab::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:24:ee:14:95:09:fb:f6:21:f6:82:ae:5b:a0:69:45:e5:6f:c1:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:01:13 2026 GMT Not After : May 2 00:06:13 2027 GMT Subject: CN=E5E46B40DA4B39812590F66F8D9A48EB7BF80663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e9:5d:5b:a7:6d:1b:d3:00:22:fd:5c:be:4b: 34:43:7b:8b:93:a7:d2:10:a4:d0:95:db:27:3b:c6: 24:de:d5:78:23:10:49:0a:5c:f6:f0:da:51:73:f9: 81:8c:85:a8:90:4b:82:25:69:7e:8c:64:2e:61:48: f7:87:94:2f:ab:1a:ff:a5:c4:6e:09:8d:79:3f:b0: 2e:1a:41:66:e8:2e:b3:4f:cb:9e:f5:db:cb:14:7f: f6:13:fa:2d:72:01:81:29:7b:33:93:a4:23:51:3a: ed:ec:52:22:64:22:6b:70:a7:7b:d9:bd:19:3b:af: 0b:68:49:80:68:00:20:6f:f4:3a:81:aa:64:b7:d8: e5:c9:c0:3d:31:7e:b3:8f:16:74:36:4d:c6:6a:54: 61:1f:0c:d7:21:83:21:0c:d4:02:54:bb:b7:10:d6: c8:0e:ac:1a:2f:5a:33:ce:7c:9a:ac:f9:d0:6b:01: 6e:6f:ba:b9:f9:d8:78:cb:5e:f5:ee:ac:bd:f9:5c: f1:dd:43:95:00:ef:bc:6e:14:29:dc:04:d5:ec:01: f6:e4:0a:07:49:6c:3e:af:64:11:fb:28:af:23:65: 81:dd:3c:16:03:8d:15:e6:e7:e9:dc:71:54:3f:29: db:62:1a:6b:9d:8c:db:84:08:51:d3:e3:38:47:77: 94:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E5:E4:6B:40:DA:4B:39:81:25:90:F6:6F:8D:9A:48:EB:7B:F8:06:63 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/E5E46B40DA4B39812590F66F8D9A48EB7BF80663.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.8.56.0/22 110.93.12.0/22 202.43.116.0/23 IPv6: 2001:df0:2ab::/48 Signature Algorithm: sha256WithRSAEncryption 5a:50:32:31:13:a9:d5:ea:28:64:a2:84:d3:f6:bb:62:ca:74: 62:ff:d5:d5:26:da:1e:51:8d:27:80:59:7c:d8:31:ee:f6:76: 9b:72:fe:77:80:a1:e7:41:b2:eb:ac:08:9a:36:fb:6c:48:48: 52:87:09:f6:10:c7:46:40:8a:18:44:d8:42:c7:b8:44:51:a1: 78:3b:87:30:32:1e:a6:e8:07:5b:1a:5c:6e:95:ca:ec:d5:41: 26:c8:7f:67:10:4a:27:93:6c:ac:3b:3e:78:0a:86:f5:7b:79: c1:7e:88:79:e5:ee:28:39:1e:f2:2d:49:84:c2:6d:26:35:04: ca:8b:6f:d8:a8:b1:ec:0b:1c:cd:08:80:72:e6:f0:c5:8f:05: 78:2c:c8:01:a7:a0:8b:17:31:65:4d:72:42:9d:df:bc:3a:65: 8b:d1:8f:75:29:a6:05:55:e2:06:77:fd:a5:0c:70:ce:a8:53: 34:96:29:d4:46:cc:a3:b4:e3:97:c7:76:16:cd:00:c4:30:3b: bd:2e:a4:f4:27:6f:ef:14:c3:cb:11:6f:a2:75:f7:65:81:32: 6d:d8:90:4d:eb:5d:ab:53:56:64:11:b6:af:8c:ab:77:f6:c3: 87:81:e7:17:79:10:65:84:19:c0:dd:2e:7a:87:24:a5:28:50: 12:c4:f9:71 -----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgIUGSTuFJUJ+/Yh9oKuW6BpReVvwYowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMDExM1oX DTI3MDUwMjAwMDYxM1owMzExMC8GA1UEAxMoRTVFNDZCNDBEQTRCMzk4MTI1OTBG NjZGOEQ5QTQ4RUI3QkY4MDY2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPpXVunbRvTACL9XL5LNEN7i5On0hCk0JXbJzvGJN7VeCMQSQpc9vDaUXP5 gYyFqJBLgiVpfoxkLmFI94eUL6sa/6XEbgmNeT+wLhpBZugus0/LnvXbyxR/9hP6 LXIBgSl7M5OkI1E67exSImQia3Cne9m9GTuvC2hJgGgAIG/0OoGqZLfY5cnAPTF+ s48WdDZNxmpUYR8M1yGDIQzUAlS7txDWyA6sGi9aM858mqz50GsBbm+6ufnYeMte 9e6svflc8d1DlQDvvG4UKdwE1ewB9uQKB0lsPq9kEfsoryNlgd08FgONFebn6dxx VD8p22Iaa52M24QIUdPjOEd3lD0CAwEAAaOCAtYwggLSMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOXka0DaSzmBJZD2b42aSOt7+AZjMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzIwZDJiZGU0LTA1NmItNDVjNi04MGJmLWY1ZDRkMjc3MzM2Yi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8yMGQyYmRl NC0wNTZiLTQ1YzYtODBiZi1mNWQ0ZDI3NzMzNmIvMC9FNUU0NkI0MERBNEIzOTgx MjU5MEY2NkY4RDlBNDhFQjdCRjgwNjYzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATAS AwQCZwg4AwQCbl0MAwQByit0MA8EAgACMAkDBwAgAQ3wAqswDQYJKoZIhvcNAQEL BQADggEBAFpQMjETqdXqKGSihNP2u2LKdGL/1dUm2h5RjSeAWXzYMe72dpty/neA oedBsuusCJo2+2xISFKHCfYQx0ZAihhE2ELHuERRoXg7hzAyHqboB1saXG6VyuzV QSbIf2cQSieTbKw7PngKhvV7ecF+iHnl7ig5HvItSYTCbSY1BMqLb9iosewLHM0I gHLm8MWPBXgsyAGnoIsXMWVNckKd37w6ZYvRj3UppgVV4gZ3/aUMcM6oUzSWKdRG zKO045fHdhbNAMQwO70upPQnb+8Uw8sRb6J192WBMm3YkE3rXatTVmQRtq+Mq3f2 w4eB5xd5EGWEGcDdLnqHJKUoUBLE+XE= -----END CERTIFICATE-----Generated at Tue May 12 22:03:49 2026 by rpki-client