$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.cer File: E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.cer (raw, json) Hash identifier: beaLf6yVRrwOyxhwIi9CN15QuWxdPTuo6rSOgcv7eJg= Subject key identifier: E6:25:4E:6F:8E:3E:F1:F3:E2:83:D3:22:FC:37:D8:0F:E0:6C:FC:CF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 79BD4CCDCC7A330E879BF84011B45BF449F4BBFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:23:21 +0000 Certificate not after: Sun 02 May 2027 00:28:21 +0000 Subordinate resources: IP: 103.101.96.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:bd:4c:cd:cc:7a:33:0e:87:9b:f8:40:11:b4:5b:f4:49:f4:bb:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:23:21 2026 GMT Not After : May 2 00:28:21 2027 GMT Subject: CN=E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0a:42:b2:58:b7:9b:de:92:77:4e:0c:9a:4a: b9:a9:c5:f0:92:28:8f:19:e3:8b:23:5b:f3:44:26: 04:29:34:54:56:67:ef:c9:9b:6d:fd:32:45:2f:7e: 34:dd:48:3a:b4:62:de:c8:36:af:2f:77:71:b6:b7: 54:5e:12:b1:61:2c:68:fa:55:e1:70:1d:64:53:42: 50:2d:ab:08:1f:36:cb:8d:13:67:1d:59:61:54:59: 03:e5:a4:8c:84:7c:a0:d0:42:b1:aa:e7:01:7c:50: b2:4b:7f:8f:82:9a:b6:72:2f:c1:f7:c9:ab:22:05: 63:74:14:cf:e3:20:33:30:21:d0:1b:a0:ff:b4:59: 0a:d3:31:2e:51:99:10:bc:a7:59:88:bf:10:90:d9: a6:c6:f2:2d:67:20:1f:d6:71:64:9b:b2:89:13:3f: 25:d9:af:75:a1:2a:82:a2:a3:97:64:e6:8e:aa:ae: f8:ca:79:4e:bd:b1:83:b6:76:9e:7d:50:c7:9b:e6: 3a:af:fc:dc:e9:82:75:ff:30:93:1f:df:c9:dd:98: 55:51:1b:75:fa:01:79:01:66:4a:cf:33:b2:77:53: 39:dd:f0:9f:a2:52:ed:5e:5e:5e:38:21:9f:3f:ab: 25:ae:6e:6b:0f:3a:61:cd:10:c1:61:98:6a:85:79: d6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E6:25:4E:6F:8E:3E:F1:F3:E2:83:D3:22:FC:37:D8:0F:E0:6C:FC:CF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/E6254E6F8E3EF1F3E283D322FC37D80FE06CFCCF.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.101.96.0/23 Signature Algorithm: sha256WithRSAEncryption 14:04:39:e0:4d:77:f6:ec:41:f3:22:bd:d2:e6:10:30:58:0f: 29:17:37:8c:ad:37:48:36:18:01:d0:74:2b:03:cd:0d:97:ae: cd:91:de:4b:59:3d:ba:f9:c4:18:c3:0e:52:42:3c:d1:c2:e5: e9:b8:59:15:e0:96:ac:cd:57:1a:c9:bd:45:e7:98:4a:7a:43: 3c:3d:66:c5:46:93:79:81:65:6a:5c:52:24:46:83:85:44:e2: a0:3b:73:57:6b:04:47:94:f9:b9:e4:af:cb:31:e4:18:a3:e5: f4:85:95:e2:a3:03:d2:9a:32:e6:2e:f4:b0:f3:2b:69:f1:4e: 90:52:0d:15:db:ae:ba:67:11:78:44:83:21:51:c8:dd:47:2a: 4c:ac:5f:c3:3b:e8:93:5d:29:66:54:ec:9a:a2:5e:fa:04:07: b0:f5:63:b8:0c:4a:3b:3a:d3:6d:e4:6e:86:bb:c4:6e:99:e0: 19:6e:10:3c:80:fc:f6:b2:85:bc:f6:b9:5b:c6:d2:34:ef:4a: 6e:40:a2:31:80:1f:09:f5:eb:59:72:72:48:3c:19:a7:d9:6f: df:36:e9:25:fb:a2:a1:f7:be:05:c1:9a:6e:2c:06:f8:7b:a6: e7:ce:42:96:af:e5:f9:74:32:d3:b6:b6:51:cc:5f:04:55:66: da:27:34:de -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUeb1Mzcx6Mw6Hm/hAEbRb9En0u/0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjMyMVoX DTI3MDUwMjAwMjgyMVowMzExMC8GA1UEAxMoRTYyNTRFNkY4RTNFRjFGM0UyODNE MzIyRkMzN0Q4MEZFMDZDRkNDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcKQrJYt5vekndODJpKuanF8JIojxnjiyNb80QmBCk0VFZn78mbbf0yRS9+ NN1IOrRi3sg2ry93cba3VF4SsWEsaPpV4XAdZFNCUC2rCB82y40TZx1ZYVRZA+Wk jIR8oNBCsarnAXxQskt/j4KatnIvwffJqyIFY3QUz+MgMzAh0Bug/7RZCtMxLlGZ ELynWYi/EJDZpsbyLWcgH9ZxZJuyiRM/JdmvdaEqgqKjl2Tmjqqu+Mp5Tr2xg7Z2 nn1Qx5vmOq/83OmCdf8wkx/fyd2YVVEbdfoBeQFmSs8zsndTOd3wn6JS7V5eXjgh nz+rJa5uaw86Yc0QwWGYaoV51q0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOYlTm+OPvHz4oPTIvw32A/gbPzPMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQxNTdjOWFjLTUyZGItNGRiYS1hYzc3LTg0NWUyZGRkODg3OS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80MTU3Yzlh Yy01MmRiLTRkYmEtYWM3Ny04NDVlMmRkZDg4NzkvMC9FNjI1NEU2RjhFM0VGMUYz RTI4M0QzMjJGQzM3RDgwRkUwNkNGQ0NGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ2VgMA0GCSqGSIb3DQEBCwUAA4IBAQAUBDngTXf27EHzIr3S5hAwWA8pFzeM rTdINhgB0HQrA80Nl67Nkd5LWT26+cQYww5SQjzRwuXpuFkV4JaszVcayb1F55hK ekM8PWbFRpN5gWVqXFIkRoOFROKgO3NXawRHlPm55K/LMeQYo+X0hZXiowPSmjLm LvSw8ytp8U6QUg0V2666ZxF4RIMhUcjdRypMrF/DO+iTXSlmVOyaol76BAew9WO4 DEo7OtNt5G6Gu8RumeAZbhA8gPz2soW89rlbxtI070puQKIxgB8J9etZcnJIPBmn 2W/fNukl+6Kh974FwZpuLAb4e6bnzkKWr+X5dDLTtrZRzF8EVWbaJzTe -----END CERTIFICATE-----Generated at Tue May 12 22:10:01 2026 by rpki-client