$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer File: E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer (raw, json) Hash identifier: YlUl6ltQTDvGxR+0mKkWw48CwNxSF91DuwDtyeK5us8= Subject key identifier: E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3FBCA9A1752551E887813DC4B44EB94634B22E2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:31:41 +0000 Certificate not after: Sun 02 May 2027 00:36:41 +0000 Subordinate resources: IP: 103.3.208.0/22 IP: 103.234.120.0/22 IP: 114.79.0.0/18 IP: 115.178.160.0 -- 115.178.255.255 IP: 202.70.48.0/20 IP: 202.73.224.0/21 IP: 2407:a600::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:bc:a9:a1:75:25:51:e8:87:81:3d:c4:b4:4e:b9:46:34:b2:2e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:31:41 2026 GMT Not After : May 2 00:36:41 2027 GMT Subject: CN=E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:80:d2:e2:41:e9:a0:c0:e6:a9:a3:e6:b6:51: 7f:20:a4:27:b4:21:1f:34:d1:f2:4b:83:35:52:ac: 9e:ea:2d:9e:36:b4:2b:e2:1e:75:2a:79:29:e3:ef: 2d:35:01:8b:78:40:19:be:02:d7:14:73:aa:ed:5a: fd:14:cd:27:b9:e7:d0:c5:5e:9a:77:16:a4:4b:63: 9e:bb:c2:16:fb:2d:5e:53:b1:eb:28:77:86:01:ba: 8c:0e:70:05:20:28:b3:6d:aa:b0:93:42:c5:e8:87: 33:b5:5d:23:94:c8:11:b7:4c:24:11:b9:c7:e2:73: 70:81:db:8d:fa:c6:3f:b8:5d:84:10:ec:28:7a:38: d0:1f:23:14:53:38:b8:fe:cb:1e:13:9c:77:be:8d: 98:cc:6d:18:7c:84:27:47:1e:2a:e8:80:ed:54:a3: f3:1a:23:40:04:44:73:be:42:ef:ce:43:e4:bf:34: 3d:c2:cb:73:30:23:63:9e:a7:27:99:42:73:60:22: d2:bf:0c:93:da:27:34:59:e5:19:7c:aa:d9:bf:68: a8:a2:d6:53:9e:07:bd:8e:6e:53:96:87:36:2a:3d: d6:ff:ab:2e:ce:91:ae:a8:6b:e9:0f:4c:f8:ef:f2: 32:25:d5:0b:b7:01:b5:b3:66:f5:3f:64:7e:53:1b: 97:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.3.208.0/22 103.234.120.0/22 114.79.0.0/18 115.178.160.0-115.178.255.255 202.70.48.0/20 202.73.224.0/21 IPv6: 2407:a600::/32 Signature Algorithm: sha256WithRSAEncryption 2a:a1:a5:49:ec:8a:af:49:75:09:03:08:89:a7:0c:f3:2b:b1: 47:be:b7:1c:3c:51:42:f4:99:73:c4:1b:8b:d4:a2:e0:f8:56: 78:10:1f:98:2a:20:82:97:59:30:90:55:7f:38:94:ab:6d:47: 2a:f9:8b:9d:5f:65:51:e6:16:52:08:4f:22:e8:e4:36:99:8c: c7:5c:91:31:e5:e2:db:91:7d:79:5f:b5:c4:78:5d:6b:9f:82: 71:d5:6e:6e:8a:8c:07:14:63:b2:9e:bb:b7:9f:e9:b7:e2:48: db:26:33:c3:9d:34:87:a6:3c:15:3e:ea:bd:71:77:54:91:33: fc:2a:0f:c2:75:a0:0c:cd:d0:32:42:14:d3:0e:b0:68:bf:8f: 0d:e9:af:51:7b:1c:68:ac:bd:10:e5:27:ac:b5:7e:2e:58:cb: 53:2a:6b:d5:a0:7c:b2:5f:1a:8c:b2:0f:fe:b5:09:f4:99:72: c5:cb:06:f0:1f:bf:c6:f4:fe:b0:7c:68:f4:b5:c4:19:db:20: 00:3c:c8:e3:d6:a6:64:60:f6:52:bd:af:0f:5c:e9:a3:1b:ab: 9d:e9:68:09:63:67:4e:13:e3:ec:3d:b8:c8:52:c4:6d:7b:65: b4:4c:c4:3c:d7:8f:5a:9e:bf:d6:cf:5e:9c:4a:2e:00:82:6e: 08:a7:59:03 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUP7ypoXUlUeiHgT3EtE65RjSyLi0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzE0MVoX DTI3MDUwMjAwMzY0MVowMzExMC8GA1UEAxMoRTZFQzM1Q0ZDMjQ5M0EzQTc5RENE NTlEMUMxREJBRkIyRTc0Mjc5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKyA0uJB6aDA5qmj5rZRfyCkJ7QhHzTR8kuDNVKsnuotnja0K+IedSp5KePv LTUBi3hAGb4C1xRzqu1a/RTNJ7nn0MVemncWpEtjnrvCFvstXlOx6yh3hgG6jA5w BSAos22qsJNCxeiHM7VdI5TIEbdMJBG5x+JzcIHbjfrGP7hdhBDsKHo40B8jFFM4 uP7LHhOcd76NmMxtGHyEJ0ceKuiA7VSj8xojQAREc75C785D5L80PcLLczAjY56n J5lCc2Ai0r8Mk9onNFnlGXyq2b9oqKLWU54HvY5uU5aHNio91v+rLs6Rrqhr6Q9M +O/yMiXVC7cBtbNm9T9kflMbl+0CAwEAAaOCAu0wggLpMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFObsNc/CSTo6edzVnRwduvsudCeTMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzRmNWQzNjRhLWRhMGItNDU0MC05MzQ5LTU5MzBiZDcyNWNlMy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80ZjVkMzY0 YS1kYTBiLTQ1NDAtOTM0OS01OTMwYmQ3MjVjZTMvMC9FNkVDMzVDRkMyNDkzQTNB NzlEQ0Q1OUQxQzFEQkFGQjJFNzQyNzkzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAxBAIAATAr AwQCZwPQAwQCZ+p4AwQGck8AMAsDBAVzsqADAwBzsgMEBMpGMAMEA8pJ4DANBAIA AjAHAwUAJAemADANBgkqhkiG9w0BAQsFAAOCAQEAKqGlSeyKr0l1CQMIiacM8yux R763HDxRQvSZc8Qbi9Si4PhWeBAfmCoggpdZMJBVfziUq21HKvmLnV9lUeYWUghP IujkNpmMx1yRMeXi25F9eV+1xHhda5+CcdVuboqMBxRjsp67t5/pt+JI2yYzw500 h6Y8FT7qvXF3VJEz/CoPwnWgDM3QMkIU0w6waL+PDemvUXscaKy9EOUnrLV+LljL Uypr1aB8sl8ajLIP/rUJ9JlyxcsG8B+/xvT+sHxo9LXEGdsgADzI49amZGD2Ur2v D1zpoxurneloCWNnThPj7D24yFLEbXtltEzEPNePWp6/1s9enEouAIJuCKdZAw== -----END CERTIFICATE-----Generated at Tue May 12 22:38:47 2026 by rpki-client