$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.cer File: E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.cer (raw, json) Hash identifier: DVjgqSJcRbt1kIgbHhAn/ANdkhHXjAAweheGZPAVruA= Subject key identifier: E6:EF:A0:C9:87:EB:7B:DE:DC:D6:52:0F:CF:EA:A6:C6:F7:BF:D4:7A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 25A17CE1061180224CDA86544A601BB537CEA352 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:35:50 +0000 Certificate not after: Sun 02 May 2027 00:40:50 +0000 Subordinate resources: IP: 103.91.137.0/24 IP: 103.218.183.0/24 IP: 2001:df2:7b40::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a1:7c:e1:06:11:80:22:4c:da:86:54:4a:60:1b:b5:37:ce:a3:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:35:50 2026 GMT Not After : May 2 00:40:50 2027 GMT Subject: CN=E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4d:90:11:42:71:30:47:b0:61:06:3f:e2:1b: 55:1b:c2:17:0e:e4:f9:81:9d:48:b9:28:62:af:bf: 9b:7d:01:51:55:06:ab:a0:c4:f2:5e:a4:0b:8d:35: dc:e0:be:65:5f:72:39:07:fa:b2:c8:a9:09:24:cf: 38:41:ee:d6:38:bd:ca:8c:9f:ff:ce:11:68:b0:f4: 04:d9:f4:d6:a8:2c:08:e2:04:45:5e:e9:74:a7:fe: 06:84:81:f1:53:23:03:22:f8:14:88:95:bd:95:43: 07:e0:61:c8:61:eb:67:86:ab:fb:2a:5d:24:60:4d: 73:b2:e6:c5:e6:a6:57:a0:1c:ef:27:f6:0c:10:f2: 66:6b:5c:64:9d:7e:c8:bd:62:63:18:bc:df:5b:e0: 8a:6a:59:d0:3f:42:ca:b3:79:0b:36:1a:a0:33:79: 8f:76:da:40:34:8e:1f:1d:4c:97:2e:2d:f7:22:77: 13:3f:c0:6d:88:df:2b:a4:cf:bb:5a:af:30:b1:88: ed:e9:3f:7d:59:5f:e2:b3:93:67:0d:c6:28:e6:db: a5:ad:14:d1:4c:8b:fb:c8:39:a0:70:de:57:d4:47: 6d:f8:6a:e6:22:a0:3b:6d:27:5c:c2:1c:82:6b:5e: a5:bc:0c:db:56:07:16:c3:d8:b3:b0:cc:ad:c7:09: 7c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E6:EF:A0:C9:87:EB:7B:DE:DC:D6:52:0F:CF:EA:A6:C6:F7:BF:D4:7A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/E6EFA0C987EB7BDEDCD6520FCFEAA6C6F7BFD47A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.91.137.0/24 103.218.183.0/24 IPv6: 2001:df2:7b40::/48 Signature Algorithm: sha256WithRSAEncryption 4f:6e:9e:2a:1c:65:f2:e4:f8:65:e4:a8:27:e2:a1:e6:3e:37: 64:36:3d:7d:f2:df:75:40:62:f9:c2:44:a3:2c:41:21:7d:20: 56:f2:b0:40:cb:24:e8:e9:11:5a:a0:11:dc:de:47:ce:4c:3c: a1:99:7d:8f:93:8b:0d:71:8d:33:b9:2f:86:95:cb:aa:25:c0: 13:9d:18:d0:f9:c3:fa:90:fe:f0:6f:58:b8:c3:be:3a:dc:4d: e1:88:a9:2e:6f:8b:73:f0:39:1c:05:da:c8:20:ab:7c:35:00: d2:37:50:2a:41:44:4b:a0:55:ea:78:8e:a9:82:ff:ea:49:9f: e2:13:9f:98:c4:28:bc:25:6a:a5:18:d8:92:a8:eb:7e:91:28: 07:2b:3a:52:22:e7:05:32:5a:02:39:93:f0:be:64:2c:de:37: 27:be:6e:92:ec:6f:42:88:67:13:0d:b5:f3:bb:a4:0b:63:61: 7d:2d:d6:a6:7c:a2:c7:c5:92:fd:8f:db:f7:5d:ef:5d:59:d6: d2:5a:4d:05:10:b1:15:eb:9f:76:5a:a0:81:de:6f:61:03:f5: 7f:35:3b:12:46:e5:e4:af:29:67:a0:6d:91:6f:68:f7:88:cb: cf:9f:83:e2:b8:af:4d:23:19:75:f7:27:82:50:87:77:f3:59: 25:58:36:f6 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUJaF84QYRgCJM2oZUSmAbtTfOo1IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMzU1MFoX DTI3MDUwMjAwNDA1MFowMzExMC8GA1UEAxMoRTZFRkEwQzk4N0VCN0JERURDRDY1 MjBGQ0ZFQUE2QzZGN0JGRDQ3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM1NkBFCcTBHsGEGP+IbVRvCFw7k+YGdSLkoYq+/m30BUVUGq6DE8l6kC401 3OC+ZV9yOQf6ssipCSTPOEHu1ji9yoyf/84RaLD0BNn01qgsCOIERV7pdKf+BoSB 8VMjAyL4FIiVvZVDB+BhyGHrZ4ar+ypdJGBNc7LmxeamV6Ac7yf2DBDyZmtcZJ1+ yL1iYxi831vgimpZ0D9CyrN5CzYaoDN5j3baQDSOHx1Mly4t9yJ3Ez/AbYjfK6TP u1qvMLGI7ek/fVlf4rOTZw3GKObbpa0U0UyL+8g5oHDeV9RHbfhq5iKgO20nXMIc gmtepbwM21YHFsPYs7DMrccJfBECAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFObvoMmH63ve3NZSD8/qpsb3v9R6MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzU1MmJlYWUxLTM0ODAtNGU5Mi1hM2E5LTVhNTRmYmJhY2QyZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81NTJiZWFl MS0zNDgwLTRlOTItYTNhOS01YTU0ZmJiYWNkMmQvMC9FNkVGQTBDOTg3RUI3QkRF RENENjUyMEZDRkVBQTZDNkY3QkZENDdBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQAZ1uJAwQAZ9q3MA8EAgACMAkDBwAgAQ3ye0AwDQYJKoZIhvcNAQELBQADggEB AE9uniocZfLk+GXkqCfioeY+N2Q2PX3y33VAYvnCRKMsQSF9IFbysEDLJOjpEVqg EdzeR85MPKGZfY+Tiw1xjTO5L4aVy6olwBOdGND5w/qQ/vBvWLjDvjrcTeGIqS5v i3PwORwF2sggq3w1ANI3UCpBREugVep4jqmC/+pJn+ITn5jEKLwlaqUY2JKo636R KAcrOlIi5wUyWgI5k/C+ZCzeNye+bpLsb0KIZxMNtfO7pAtjYX0t1qZ8osfFkv2P 2/dd711Z1tJaTQUQsRXrn3ZaoIHeb2ED9X81OxJG5eSvKWegbZFvaPeIy8+fg+K4 r00jGXX3J4JQh3fzWSVYNvY= -----END CERTIFICATE-----Generated at Tue May 12 22:10:19 2026 by rpki-client