$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E87EEEAA35D76955AEB555F946ED794035B56B72.cer File: E87EEEAA35D76955AEB555F946ED794035B56B72.cer (raw, json) Hash identifier: cRNhxh80O1F65TmvvqYowEc4vppaJrWMoAl3yj7xzeM= Subject key identifier: E8:7E:EE:AA:35:D7:69:55:AE:B5:55:F9:46:ED:79:40:35:B5:6B:72 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 364A762C2B20C087BE97B927A283D760C9E9FA4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.mft caRepository: rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:21:53 +0000 Certificate not after: Sun 02 May 2027 01:26:53 +0000 Subordinate resources: IP: 103.249.18.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:4a:76:2c:2b:20:c0:87:be:97:b9:27:a2:83:d7:60:c9:e9:fa:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:21:53 2026 GMT Not After : May 2 01:26:53 2027 GMT Subject: CN=E87EEEAA35D76955AEB555F946ED794035B56B72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d5:c0:15:1e:a6:09:61:57:eb:d8:95:57:a9: bb:c5:9c:81:19:ad:c3:ee:d2:f1:70:b1:9c:fe:67: 17:b9:e1:57:2a:e6:0e:70:42:40:28:24:cd:00:31: 7d:62:0c:98:13:df:68:28:2e:49:7f:f1:8e:2c:d1: 5e:ad:54:28:1b:de:77:c6:6b:63:b5:8c:2b:bd:18: e5:51:f6:af:33:a5:df:d0:79:33:8e:76:32:75:d2: 0e:a8:86:c0:5b:9e:6b:43:f8:93:f4:16:81:58:78: 33:43:91:28:f6:7e:6e:f9:55:f9:5f:eb:51:8a:4e: 4e:b8:98:4f:89:df:ba:87:8b:78:48:50:c0:c2:af: d1:6d:94:50:0d:6d:08:94:2a:03:56:ea:0a:7b:a1: ed:d1:b8:00:5a:27:31:95:71:2b:64:d0:2e:7c:d7: 30:ee:e0:8f:7a:79:94:a2:13:1f:ca:fe:df:94:f8: 61:98:05:55:f1:7e:a1:5c:3d:b5:e2:64:52:fd:fc: 50:4b:75:c6:5f:f5:d5:0b:28:04:45:52:dc:1a:24: d5:dd:2d:0c:bc:1b:88:3f:02:58:8b:98:3c:8b:9e: 32:da:9b:4e:b6:2d:c9:80:36:e2:95:2a:8d:4f:24: 83:ca:be:41:bc:5c:d1:e0:5e:19:e1:9b:82:48:1c: 7c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E8:7E:EE:AA:35:D7:69:55:AE:B5:55:F9:46:ED:79:40:35:B5:6B:72 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/E87EEEAA35D76955AEB555F946ED794035B56B72.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.249.18.0/23 Signature Algorithm: sha256WithRSAEncryption 78:ce:47:91:0e:44:9d:b0:66:43:21:e4:80:87:03:e3:f9:67: a6:62:cf:d7:84:48:47:fb:7d:e7:52:20:5e:79:71:d5:51:fe: 4d:c1:5e:37:c7:c3:fd:74:1f:53:84:81:c0:83:d8:60:07:6c: 55:f9:e1:df:52:cb:fa:ed:6a:65:23:db:cc:7b:02:b2:f8:63: 80:d5:ac:9e:6b:4f:56:f2:c8:ca:79:5e:f8:84:21:a2:07:89: 88:41:a0:e6:fc:4e:65:c2:ac:9f:b2:65:7b:7e:c9:61:67:f6: 04:70:47:fb:40:fd:e5:b2:31:c0:c6:1a:c2:b9:c6:7d:33:e3: 6e:8b:0d:9d:71:0c:f9:8c:7b:24:5d:9b:9d:b5:88:93:53:96: 56:46:94:b9:e8:61:f4:99:9a:4f:27:e8:a1:b0:25:1d:9e:b9: d5:47:2c:33:54:36:ff:fb:90:2f:c4:a3:e7:9d:7b:4a:32:df: 3c:1e:5f:76:c8:b1:18:67:14:c5:e5:1c:5e:a4:ff:e7:9b:dd: 50:d7:24:27:4d:44:1e:3b:a5:ae:db:78:db:88:6c:24:1e:7b: a8:74:c4:8d:8f:c0:5e:1f:b7:ec:b3:85:a5:2a:e5:3f:4f:32: 89:e0:99:49:42:02:f3:48:ca:f4:2f:c0:08:a6:b5:80:19:13: 43:14:7a:85 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUNkp2LCsgwIe+l7knooPXYMnp+k0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjE1M1oX DTI3MDUwMjAxMjY1M1owMzExMC8GA1UEAxMoRTg3RUVFQUEzNUQ3Njk1NUFFQjU1 NUY5NDZFRDc5NDAzNUI1NkI3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJTVwBUepglhV+vYlVepu8WcgRmtw+7S8XCxnP5nF7nhVyrmDnBCQCgkzQAx fWIMmBPfaCguSX/xjizRXq1UKBved8ZrY7WMK70Y5VH2rzOl39B5M452MnXSDqiG wFuea0P4k/QWgVh4M0ORKPZ+bvlV+V/rUYpOTriYT4nfuoeLeEhQwMKv0W2UUA1t CJQqA1bqCnuh7dG4AFonMZVxK2TQLnzXMO7gj3p5lKITH8r+35T4YZgFVfF+oVw9 teJkUv38UEt1xl/11QsoBEVS3Bok1d0tDLwbiD8CWIuYPIueMtqbTrYtyYA24pUq jU8kg8q+Qbxc0eBeGeGbgkgcfDUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOh+7qo112lVrrVV+UbteUA1tWtyMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzk5MTA0YzUwLTQwZmYtNGFhZi1hMjA5LWJlMzFjZWRhNjc5Yi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85OTEwNGM1 MC00MGZmLTRhYWYtYTIwOS1iZTMxY2VkYTY3OWIvMC9FODdFRUVBQTM1RDc2OTU1 QUVCNTU1Rjk0NkVENzk0MDM1QjU2QjcyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ/kSMA0GCSqGSIb3DQEBCwUAA4IBAQB4zkeRDkSdsGZDIeSAhwPj+WemYs/X hEhH+33nUiBeeXHVUf5NwV43x8P9dB9ThIHAg9hgB2xV+eHfUsv67WplI9vMewKy +GOA1ayea09W8sjKeV74hCGiB4mIQaDm/E5lwqyfsmV7fslhZ/YEcEf7QP3lsjHA xhrCucZ9M+Nuiw2dcQz5jHskXZudtYiTU5ZWRpS56GH0mZpPJ+ihsCUdnrnVRywz VDb/+5AvxKPnnXtKMt88Hl92yLEYZxTF5RxepP/nm91Q1yQnTUQeO6Wu23jbiGwk HnuodMSNj8BeH7fss4WlKuU/TzKJ4JlJQgLzSMr0L8AIprWAGRNDFHqF -----END CERTIFICATE-----Generated at Wed May 13 02:20:17 2026 by rpki-client