$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E98212FB2801E9D8F979B478187B22C73E005B8C.cer File: E98212FB2801E9D8F979B478187B22C73E005B8C.cer (raw, json) Hash identifier: dSHPXLtn+LjcqH0E3/ufXu+P7t8pwBVpkeNadeNkt5M= Subject key identifier: E9:82:12:FB:28:01:E9:D8:F9:79:B4:78:18:7B:22:C7:3E:00:5B:8C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 209F40861F4D4321722B565841225BD37E116131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/E98212FB2801E9D8F979B478187B22C73E005B8C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:49:17 +0000 Certificate not after: Sat 01 May 2027 23:54:17 +0000 Subordinate resources: IP: 103.102.152.0/22 IP: 2001:df2:e300::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:9f:40:86:1f:4d:43:21:72:2b:56:58:41:22:5b:d3:7e:11:61:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:49:17 2026 GMT Not After : May 1 23:54:17 2027 GMT Subject: CN=E98212FB2801E9D8F979B478187B22C73E005B8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:be:98:60:f3:dc:f0:72:cc:fa:e3:5c:3d:99: bf:35:06:4b:da:51:e5:13:ae:cb:6a:1e:f3:c9:d7: ec:95:24:8d:3f:aa:83:3c:86:78:bd:c3:52:c4:96: 91:c3:a6:99:e5:fa:30:93:20:75:37:83:7d:90:78: ab:24:9a:d3:74:7a:42:fe:42:17:5f:53:af:d2:8a: 97:cb:51:bb:5d:56:2d:ec:58:1a:bb:43:5f:1f:67: 58:dd:99:fd:a0:b6:02:9c:c4:53:45:4d:bf:89:27: 92:98:f2:b5:6e:b9:5a:2c:c1:fc:07:76:83:96:12: f9:76:4d:31:2e:8a:01:07:e7:ff:49:cd:37:30:5e: 93:e2:bf:93:7d:21:4b:8d:58:f9:c6:4c:40:24:94: 70:b9:92:ed:ea:1b:f3:00:27:69:1d:da:3c:20:3f: cb:d5:52:7d:90:b7:57:d0:78:9c:6f:64:96:f9:7f: 4a:3f:2e:0d:79:5c:f3:5c:55:41:0e:2f:36:2b:e4: a0:1b:02:c0:a1:72:6b:51:32:0a:65:c7:1e:df:d5: 6c:dd:21:d8:af:25:32:0b:82:4a:f0:db:e0:ca:9b: 0b:eb:0e:21:5f:fc:cc:a8:33:22:49:6b:59:ae:24: 18:d5:71:75:a7:f4:5b:c3:ce:ad:8e:7d:3c:5f:69: 1a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:82:12:FB:28:01:E9:D8:F9:79:B4:78:18:7B:22:C7:3E:00:5B:8C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/E98212FB2801E9D8F979B478187B22C73E005B8C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.152.0/22 IPv6: 2001:df2:e300::/48 Signature Algorithm: sha256WithRSAEncryption 46:46:21:46:90:9f:e2:14:64:28:ec:65:ce:35:d3:93:2e:29: bd:03:be:b2:8e:ad:a2:ba:be:3f:24:46:1b:10:b7:41:47:e0: 7c:a9:c4:f4:03:c4:16:39:83:82:7f:08:55:2f:0f:16:28:9a: a5:d1:1f:27:9f:3e:bf:59:2b:f8:8e:d4:d9:36:23:f6:f0:21: a5:2b:8e:07:39:8a:31:b7:7a:5f:65:83:9b:f0:a7:ff:2b:3e: 0e:67:71:32:59:46:90:ed:65:16:9d:62:60:fe:41:5f:b1:72: 47:8d:78:6f:4c:59:91:ad:d6:6b:21:7b:78:75:cd:3e:f0:03: 07:90:8c:e5:7a:53:90:84:11:4a:34:5c:e6:91:06:35:e1:a1: 58:ef:bb:7a:24:ac:09:f8:33:65:90:0b:6a:63:21:94:26:08: 71:8a:26:e5:b0:9a:fa:e0:c6:00:43:b2:c0:c2:e3:ed:38:2b: f1:f4:f2:88:0f:63:b0:63:51:b0:61:7a:ea:b6:a2:01:56:01: 2e:ab:a0:ef:7b:8e:6e:6e:27:a5:2b:0f:78:b4:95:a5:d0:0e: 77:9e:c7:5b:eb:63:bb:52:4f:06:cc:ff:65:33:b8:e7:64:64: 6e:e0:76:d8:bb:47:f7:52:8a:b5:dd:d8:c5:0f:35:83:eb:be: ab:f9:51:16 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUIJ9Ahh9NQyFyK1ZYQSJb034RYTEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDkxN1oX DTI3MDUwMTIzNTQxN1owMzExMC8GA1UEAxMoRTk4MjEyRkIyODAxRTlEOEY5NzlC NDc4MTg3QjIyQzczRTAwNUI4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPS+mGDz3PByzPrjXD2ZvzUGS9pR5ROuy2oe88nX7JUkjT+qgzyGeL3DUsSW kcOmmeX6MJMgdTeDfZB4qySa03R6Qv5CF19Tr9KKl8tRu11WLexYGrtDXx9nWN2Z /aC2ApzEU0VNv4knkpjytW65WizB/Ad2g5YS+XZNMS6KAQfn/0nNNzBek+K/k30h S41Y+cZMQCSUcLmS7eob8wAnaR3aPCA/y9VSfZC3V9B4nG9klvl/Sj8uDXlc81xV QQ4vNivkoBsCwKFya1EyCmXHHt/VbN0h2K8lMguCSvDb4MqbC+sOIV/8zKgzIklr Wa4kGNVxdaf0W8POrY59PF9pGuMCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOmCEvsoAenY+Xm0eBh7Isc+AFuMMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzBmMmI2ZWQyLWNjNTgtNDVjNS1iZDg4LWNiOTU1MDcxNmEwNC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wZjJiNmVk Mi1jYzU4LTQ1YzUtYmQ4OC1jYjk1NTA3MTZhMDQvMC9FOTgyMTJGQjI4MDFFOUQ4 Rjk3OUI0NzgxODdCMjJDNzNFMDA1QjhDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZ2aYMA8EAgACMAkDBwAgAQ3y4wAwDQYJKoZIhvcNAQELBQADggEBAEZGIUaQ n+IUZCjsZc4105MuKb0DvrKOraK6vj8kRhsQt0FH4HypxPQDxBY5g4J/CFUvDxYo mqXRHyefPr9ZK/iO1Nk2I/bwIaUrjgc5ijG3el9lg5vwp/8rPg5ncTJZRpDtZRad YmD+QV+xckeNeG9MWZGt1mshe3h1zT7wAweQjOV6U5CEEUo0XOaRBjXhoVjvu3ok rAn4M2WQC2pjIZQmCHGKJuWwmvrgxgBDssDC4+04K/H08ogPY7BjUbBheuq2ogFW AS6roO97jm5uJ6UrD3i0laXQDneex1vrY7tSTwbM/2UzuOdkZG7gdti7R/dSirXd 2MUPNYPrvqv5URY= -----END CERTIFICATE-----Generated at Tue May 12 22:15:52 2026 by rpki-client