$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer File: E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer (raw, json) Hash identifier: IVvoPCjVNTgbvtfq8tOVq9xMES74/98PfAlZB5mLUXY= Subject key identifier: E8:6D:81:60:0C:2E:0C:40:8A:83:A1:0F:E1:73:4F:7C:B8:00:49:B5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 676308CDED1AC8EB84337163F67A9F3470D100CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft caRepository: rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:20:42 +0000 Certificate not after: Sun 02 May 2027 01:25:42 +0000 Subordinate resources: IP: 103.52.170.0/23 IP: 103.127.144.0/23 IP: 2001:df3:c00::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:63:08:cd:ed:1a:c8:eb:84:33:71:63:f6:7a:9f:34:70:d1:00:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:20:42 2026 GMT Not After : May 2 01:25:42 2027 GMT Subject: CN=E86D81600C2E0C408A83A10FE1734F7CB80049B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3d:0e:67:e5:de:ec:4f:17:ed:61:ee:cd:4c: 9e:8b:e7:3c:a3:0c:7a:e9:e8:b9:a0:cc:58:1e:69: bf:41:7e:22:3e:ac:c8:37:a4:75:b9:95:4b:b9:cb: 9c:2d:4c:49:f5:1d:ed:49:67:52:f6:15:c5:7b:3e: df:1d:15:90:31:db:61:67:ff:1d:82:9c:59:6e:2c: a0:0f:3c:d5:98:68:65:6e:e5:d7:49:a5:1a:fd:07: c3:71:32:88:66:37:72:08:18:89:98:a1:b7:b9:34: 42:0f:c7:d0:45:59:05:92:9c:f7:b9:26:8a:d5:eb: 44:86:fb:71:75:39:1e:c5:d7:2f:5b:df:ee:dd:61: 79:e6:57:05:34:34:ee:cd:35:b7:db:16:73:0a:e9: ba:be:21:8b:dc:13:d0:74:6e:cc:7f:47:6a:a5:fc: 97:8c:c2:7d:13:02:45:06:4b:c2:6b:38:2f:a1:f3: 28:6f:aa:bf:ca:b7:7c:d9:56:5f:02:44:79:68:58: 5a:49:43:e5:d6:81:a2:a6:6a:fa:35:f1:89:c9:f9: 94:bf:1e:0e:64:58:82:25:65:9b:ad:c1:b7:94:98: 71:cd:58:df:dd:2d:46:46:62:09:8f:fb:18:80:92: f7:36:50:32:31:d5:cd:1f:54:ed:6f:47:29:ad:17: fc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E8:6D:81:60:0C:2E:0C:40:8A:83:A1:0F:E1:73:4F:7C:B8:00:49:B5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.52.170.0/23 103.127.144.0/23 IPv6: 2001:df3:c00::/48 Signature Algorithm: sha256WithRSAEncryption 44:06:6f:74:00:66:48:b2:4f:fa:e6:08:f2:65:ff:d7:bc:39: 6c:a9:4d:a0:e6:1c:1e:7e:2b:22:f2:87:0e:d0:39:73:dc:30: 2d:d7:55:de:1e:84:30:8f:9c:0e:fe:98:1f:76:9e:ad:35:ca: 7f:77:07:55:5a:c8:37:3b:86:59:13:c1:aa:a1:cc:d8:3d:ab: d0:1e:74:2d:98:27:0a:bc:37:5e:e6:c7:7a:8e:4a:e2:dc:81: 1d:ab:47:44:3a:5c:c2:e9:6b:e8:9d:f7:53:25:ee:f6:2a:67: 61:05:55:fe:e5:f9:ba:0c:c8:35:c3:ed:f5:c6:74:b9:94:92: ce:f5:eb:70:30:1e:d8:1b:cb:e1:c3:bd:89:db:a6:67:31:90: b2:83:df:3d:5f:eb:c5:52:25:e9:6b:7a:68:3f:97:fc:49:a1: 08:57:09:66:d5:de:a3:bf:df:74:22:ec:37:d4:e5:76:0c:43: e4:7d:f3:50:a2:5a:57:8d:9d:1d:04:fa:cc:e7:19:34:ab:18: 41:a5:39:c9:72:8c:ae:ae:a1:48:3e:24:4b:43:9f:71:3d:dc: 9d:fb:30:c1:a5:0f:0c:8e:24:dc:5f:28:f4:b9:37:c4:d4:e9: 68:fc:b5:f1:5a:56:f0:35:1b:c4:80:b7:70:6f:be:89:0f:47: 5d:88:0a:5f -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUZ2MIze0ayOuEM3Fj9nqfNHDRAMswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjA0MloX DTI3MDUwMjAxMjU0MlowMzExMC8GA1UEAxMoRTg2RDgxNjAwQzJFMEM0MDhBODNB MTBGRTE3MzRGN0NCODAwNDlCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMs9Dmfl3uxPF+1h7s1MnovnPKMMeunouaDMWB5pv0F+Ij6syDekdbmVS7nL nC1MSfUd7UlnUvYVxXs+3x0VkDHbYWf/HYKcWW4soA881ZhoZW7l10mlGv0Hw3Ey iGY3cggYiZiht7k0Qg/H0EVZBZKc97kmitXrRIb7cXU5HsXXL1vf7t1heeZXBTQ0 7s01t9sWcwrpur4hi9wT0HRuzH9HaqX8l4zCfRMCRQZLwms4L6HzKG+qv8q3fNlW XwJEeWhYWklD5daBoqZq+jXxicn5lL8eDmRYgiVlm63Bt5SYcc1Y390tRkZiCY/7 GICS9zZQMjHVzR9U7W9HKa0X/K0CAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOhtgWAMLgxAioOhD+FzT3y4AEm1MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzk2YmIzMzNjLTk4MmItNGZjZS1hYzgxLWJjMDY5MjI5ZTI0My8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85NmJiMzMz Yy05ODJiLTRmY2UtYWM4MS1iYzA2OTIyOWUyNDMvMC9FODZEODE2MDBDMkUwQzQw OEE4M0ExMEZFMTczNEY3Q0I4MDA0OUI1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAM AwQBZzSqAwQBZ3+QMA8EAgACMAkDBwAgAQ3zDAAwDQYJKoZIhvcNAQELBQADggEB AEQGb3QAZkiyT/rmCPJl/9e8OWypTaDmHB5+KyLyhw7QOXPcMC3XVd4ehDCPnA7+ mB92nq01yn93B1VayDc7hlkTwaqhzNg9q9AedC2YJwq8N17mx3qOSuLcgR2rR0Q6 XMLpa+id91Ml7vYqZ2EFVf7l+boMyDXD7fXGdLmUks7163AwHtgby+HDvYnbpmcx kLKD3z1f68VSJelremg/l/xJoQhXCWbV3qO/33Qi7DfU5XYMQ+R981CiWleNnR0E +sznGTSrGEGlOclyjK6uoUg+JEtDn3E93J37MMGlDwyOJNxfKPS5N8TU6Wj8tfFa VvA1G8SAt3BvvokPR12ICl8= -----END CERTIFICATE-----Generated at Wed May 13 00:44:24 2026 by rpki-client