$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.cer File: E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.cer (raw, json) Hash identifier: GyHhVLNesO8nSou+Tx9b+2XLYw6yYnPd08HdyvHUGfE= Subject key identifier: E9:8D:6B:64:1E:94:3F:7E:38:31:06:34:C5:FE:E8:AE:7C:8A:A6:EE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 176C8F84923FC221F056F5E1DF383770263B1178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft caRepository: rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:43:01 +0000 Certificate not after: Sun 02 May 2027 00:48:01 +0000 Subordinate resources: IP: 103.55.216.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:6c:8f:84:92:3f:c2:21:f0:56:f5:e1:df:38:37:70:26:3b:11:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:43:01 2026 GMT Not After : May 2 00:48:01 2027 GMT Subject: CN=E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ca:be:d4:96:aa:f1:2d:40:0a:c0:bf:34:79: fa:08:6f:40:ea:07:71:ea:84:25:6e:fb:d9:00:11: 36:42:46:8e:13:3a:87:ab:88:89:0e:79:73:0e:ec: 7c:79:fc:78:bf:84:d8:f1:7c:d0:ce:2b:08:a9:31: c6:e6:d4:d1:fd:4b:d0:80:19:86:48:cb:f0:60:01: 88:d6:a4:ad:0f:3b:6b:83:1c:71:25:ae:00:12:1f: 00:0c:9a:9f:68:1f:4a:34:df:5b:47:74:15:87:03: 50:36:b9:48:ef:aa:7e:24:be:5a:d6:20:92:d4:fc: 42:07:4f:3d:80:b0:34:b4:b3:48:f4:0a:27:0b:1f: 11:47:e0:45:94:7d:60:45:cc:4e:f0:aa:79:df:29: 9c:75:cb:e6:1a:2a:72:cb:9d:13:76:c8:82:8e:42: 93:81:71:cc:6f:57:9d:4f:51:73:25:aa:27:45:c8: 26:be:b9:91:c6:9f:c7:7d:66:a5:0a:3e:e9:1f:8c: 82:e7:9e:31:88:8e:40:b1:f3:76:ca:b4:9f:df:25: 35:9c:f9:23:d6:23:c9:a3:58:42:4d:79:56:10:c8: 54:d3:c9:7d:65:16:1e:5d:91:ec:b4:48:4e:e8:e4: 43:bd:0c:73:75:3d:d9:46:2e:0e:0a:75:1d:b3:e3: bd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:8D:6B:64:1E:94:3F:7E:38:31:06:34:C5:FE:E8:AE:7C:8A:A6:EE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/E98D6B641E943F7E38310634C5FEE8AE7C8AA6EE.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.55.216.0/24 Signature Algorithm: sha256WithRSAEncryption 64:d8:54:0d:b4:94:de:4f:bb:be:d5:dc:83:33:00:76:42:67: 2f:e8:6f:00:30:c1:a5:f8:e0:59:08:b0:eb:98:b4:c7:bf:d6: 66:96:46:70:b4:53:32:26:36:86:d8:67:63:d3:0a:bf:a3:b0: 77:37:16:42:c4:db:7a:a3:8a:6e:99:9a:f0:ef:af:1e:88:1a: 37:3b:06:39:7d:de:e8:04:ce:69:1d:5f:d7:18:73:d7:87:b3: 4c:be:dd:c3:77:00:d6:9c:78:68:8d:4a:ad:9d:7a:c9:80:50: e3:be:37:e2:ad:7d:1a:4c:d5:86:78:7d:81:c4:54:21:c8:83: 0d:77:49:93:af:7f:c5:26:86:a6:54:87:be:b9:83:d2:a5:cb: 3c:2b:77:b4:f5:03:7e:d8:35:81:82:92:5f:0f:df:13:23:2b: ae:e1:be:0c:7a:fc:1f:54:68:ef:d1:c5:b7:76:21:e2:bf:93: 2b:92:b6:12:b0:c5:bf:6d:20:1c:3e:f4:c9:8c:67:7e:f5:b9: bd:64:77:22:6b:b9:ec:14:78:84:2b:0e:e8:e4:3e:ad:1e:93: 03:35:64:9a:2e:10:36:59:e7:55:00:db:51:99:58:1b:a6:62: d3:c0:50:36:2d:e7:d0:74:13:f5:bd:d5:06:31:2d:df:c4:3a: 51:9e:ae:84 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUF2yPhJI/wiHwVvXh3zg3cCY7EXgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNDMwMVoX DTI3MDUwMjAwNDgwMVowMzExMC8GA1UEAxMoRTk4RDZCNjQxRTk0M0Y3RTM4MzEw NjM0QzVGRUU4QUU3QzhBQTZFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMLKvtSWqvEtQArAvzR5+ghvQOoHceqEJW772QARNkJGjhM6h6uIiQ55cw7s fHn8eL+E2PF80M4rCKkxxubU0f1L0IAZhkjL8GABiNakrQ87a4MccSWuABIfAAya n2gfSjTfW0d0FYcDUDa5SO+qfiS+WtYgktT8QgdPPYCwNLSzSPQKJwsfEUfgRZR9 YEXMTvCqed8pnHXL5hoqcsudE3bIgo5Ck4FxzG9XnU9RcyWqJ0XIJr65kcafx31m pQo+6R+MgueeMYiOQLHzdsq0n98lNZz5I9YjyaNYQk15VhDIVNPJfWUWHl2R7LRI TujkQ70Mc3U92UYuDgp1HbPjvSUCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOmNa2QelD9+ODEGNMX+6K58iqbuMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzVlNjFmODZlLTA3ZjAtNGM2MC1hZGMwLWZjNjg4MTZhYzg2Ni8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81ZTYxZjg2 ZS0wN2YwLTRjNjAtYWRjMC1mYzY4ODE2YWM4NjYvMC9FOThENkI2NDFFOTQzRjdF MzgzMTA2MzRDNUZFRThBRTdDOEFBNkVFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZzfYMA0GCSqGSIb3DQEBCwUAA4IBAQBk2FQNtJTeT7u+1dyDMwB2Qmcv6G8A MMGl+OBZCLDrmLTHv9ZmlkZwtFMyJjaG2Gdj0wq/o7B3NxZCxNt6o4pumZrw768e iBo3OwY5fd7oBM5pHV/XGHPXh7NMvt3DdwDWnHhojUqtnXrJgFDjvjfirX0aTNWG eH2BxFQhyIMNd0mTr3/FJoamVIe+uYPSpcs8K3e09QN+2DWBgpJfD98TIyuu4b4M evwfVGjv0cW3diHiv5MrkrYSsMW/bSAcPvTJjGd+9bm9ZHcia7nsFHiEKw7o5D6t HpMDNWSaLhA2WedVANtRmVgbpmLTwFA2LefQdBP1vdUGMS3fxDpRnq6E -----END CERTIFICATE-----Generated at Tue May 12 22:03:13 2026 by rpki-client