$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.cer File: E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.cer (raw, json) Hash identifier: WONWLEFBt9S+GsnXsm4rINEQRSM1vJ899JZsAL+g8js= Subject key identifier: E8:A9:34:26:8F:45:DA:8A:6A:43:32:96:81:F0:D4:FE:AE:CF:F5:BC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5413ACDFD965634EAC4B63619D95661020C4E471 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:40:24 +0000 Certificate not after: Sun 02 May 2027 00:45:24 +0000 Subordinate resources: IP: 103.78.51.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:13:ac:df:d9:65:63:4e:ac:4b:63:61:9d:95:66:10:20:c4:e4:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:40:24 2026 GMT Not After : May 2 00:45:24 2027 GMT Subject: CN=E8A934268F45DA8A6A43329681F0D4FEAECFF5BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:39:4c:98:3e:fe:c2:cc:b1:8c:98:06:7c:ce: f1:23:fc:d1:ac:a3:48:82:d3:47:0e:8b:5b:5f:56: 17:81:6f:ff:d2:a9:a3:42:e4:83:4b:0b:23:47:7e: f1:6d:28:93:89:f4:bb:90:34:e2:a4:17:96:f6:4f: 0b:b4:d6:d1:6b:cc:a2:6b:93:25:af:61:d5:5b:15: 69:8c:0b:d0:44:27:38:12:33:72:7b:20:29:24:06: 5c:84:af:c0:7a:be:b7:3a:36:ea:61:72:e6:59:72: 76:12:76:7b:99:b3:6f:cd:b8:6a:b9:fd:55:a3:05: b1:85:1d:7f:2f:43:dd:a0:e7:4f:ee:07:d4:af:69: fd:2a:d0:4a:2e:c2:bb:68:7e:09:8c:66:3e:38:9d: 79:f6:99:ab:41:c2:40:e3:0d:8a:aa:7a:e3:4e:cc: 01:1f:07:ed:15:20:b9:55:f7:a2:9c:ca:ca:8d:9b: 42:88:00:7b:54:02:c4:87:9c:da:7e:64:08:00:6a: 21:4e:3f:60:68:38:4e:fb:26:bf:67:32:6b:fc:2b: 55:e7:ab:8a:7c:fb:ba:b3:7d:11:1e:36:f8:1a:ac: f3:65:86:0c:55:f1:14:3c:ac:e7:a2:7c:70:30:1d: 31:6c:b2:34:22:0a:66:72:21:20:b3:ab:99:0f:d9: 51:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E8:A9:34:26:8F:45:DA:8A:6A:43:32:96:81:F0:D4:FE:AE:CF:F5:BC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/E8A934268F45DA8A6A43329681F0D4FEAECFF5BC.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.78.51.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:61:07:05:fa:a2:47:94:e2:a0:2f:f1:dc:59:1d:cc:eb:4a: 2b:15:3b:64:02:e5:ef:3c:18:8f:c1:a5:12:01:7b:88:d2:b5: db:18:30:50:d1:a6:73:7c:67:4c:c0:03:a5:f9:86:2f:32:ce: 28:fb:90:85:15:b7:86:2d:08:a2:51:fa:5e:4f:33:f5:f6:95: c8:91:97:1d:b5:37:71:01:ab:c5:ca:6c:3c:b4:c1:c1:54:25: b9:f7:ca:0b:87:c7:a2:b9:48:ad:0f:2a:19:26:c4:f6:78:d1: 59:e7:c8:09:af:cd:29:0a:1a:af:88:78:da:11:06:46:c0:f0: 65:02:9f:06:df:c7:0d:ce:66:9c:72:fc:ae:7b:0d:42:75:1f: 6b:bf:32:8a:0e:f6:63:9b:f3:89:c6:a5:b3:4d:08:af:c6:3b: 14:87:72:cf:6d:6c:6d:df:49:be:40:e7:f2:b7:d3:88:7b:80: fb:39:de:58:c5:4d:01:61:4b:21:89:87:85:3f:11:88:90:d2: 9f:91:34:72:7c:f8:66:87:53:f4:6d:22:43:ca:34:a9:ca:3c: ce:f5:7b:65:26:8c:38:d3:57:4b:8e:07:86:0d:03:f2:a7:73: 04:dd:50:4e:3a:55:a8:de:c5:3d:fd:ed:02:fa:67:90:6d:43: af:87:bb:3f -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUVBOs39llY06sS2NhnZVmECDE5HEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDAyNFoX DTI3MDUwMjAwNDUyNFowMzExMC8GA1UEAxMoRThBOTM0MjY4RjQ1REE4QTZBNDMz Mjk2ODFGMEQ0RkVBRUNGRjVCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANk5TJg+/sLMsYyYBnzO8SP80ayjSILTRw6LW19WF4Fv/9Kpo0Lkg0sLI0d+ 8W0ok4n0u5A04qQXlvZPC7TW0WvMomuTJa9h1VsVaYwL0EQnOBIzcnsgKSQGXISv wHq+tzo26mFy5llydhJ2e5mzb824arn9VaMFsYUdfy9D3aDnT+4H1K9p/SrQSi7C u2h+CYxmPjidefaZq0HCQOMNiqp6407MAR8H7RUguVX3opzKyo2bQogAe1QCxIec 2n5kCABqIU4/YGg4Tvsmv2cya/wrVeerinz7urN9ER42+Bqs82WGDFXxFDys56J8 cDAdMWyyNCIKZnIhILOrmQ/ZUdECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOipNCaPRdqKakMyloHw1P6uz/W8MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzViNTIxYmQxLTFkYTItNGI4MC04NDE2LWYwNWRlMjkyMjE2ZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81YjUyMWJk MS0xZGEyLTRiODAtODQxNi1mMDVkZTI5MjIxNmUvMC9FOEE5MzQyNjhGNDVEQThB NkE0MzMyOTY4MUYwRDRGRUFFQ0ZGNUJDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ04zMA0GCSqGSIb3DQEBCwUAA4IBAQBsYQcF+qJHlOKgL/HcWR3M60orFTtk AuXvPBiPwaUSAXuI0rXbGDBQ0aZzfGdMwAOl+YYvMs4o+5CFFbeGLQiiUfpeTzP1 9pXIkZcdtTdxAavFymw8tMHBVCW598oLh8eiuUitDyoZJsT2eNFZ58gJr80pChqv iHjaEQZGwPBlAp8G38cNzmaccvyuew1CdR9rvzKKDvZjm/OJxqWzTQivxjsUh3LP bWxt30m+QOfyt9OIe4D7Od5YxU0BYUshiYeFPxGIkNKfkTRyfPhmh1P0bSJDyjSp yjzO9XtlJow401dLjgeGDQPyp3ME3VBOOlWo3sU9/e0C+meQbUOvh7s/ -----END CERTIFICATE-----Generated at Tue May 12 22:52:56 2026 by rpki-client