$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.cer File: E9A8A6B9E08D026673630DC1A26DBE73DFA16132.cer (raw, json) Hash identifier: DaW/6Olp0ETrBgpa8Z6ix0FQyTNFXZrRhcEG+0V0CP8= Subject key identifier: E9:A8:A6:B9:E0:8D:02:66:73:63:0D:C1:A2:6D:BE:73:DF:A1:61:32 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 77CDF523F78F82FD6BDE8B295855685D90EBC500 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:59:56 +0000 Certificate not after: Sun 02 May 2027 01:04:56 +0000 Subordinate resources: IP: 103.160.37.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:cd:f5:23:f7:8f:82:fd:6b:de:8b:29:58:55:68:5d:90:eb:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:59:56 2026 GMT Not After : May 2 01:04:56 2027 GMT Subject: CN=E9A8A6B9E08D026673630DC1A26DBE73DFA16132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0c:d3:b3:e0:ed:4b:e4:f1:e0:18:a8:ee:ee: e2:43:a7:92:fc:3a:3a:0d:89:ae:b3:fa:81:c1:5e: fc:20:4d:d1:2a:09:ed:b9:1f:f6:c5:9b:e5:6a:bd: 5a:cc:fb:ec:e3:5c:4e:21:bb:6f:5a:2f:10:ce:2b: ed:d3:3a:5e:eb:eb:67:ee:b3:0e:ae:dc:85:57:6a: fc:dc:df:6f:16:04:e8:1d:bd:a9:7d:be:3d:47:e6: d4:4c:58:1a:a4:1f:ad:32:de:90:3e:de:7d:1c:aa: 1a:00:d9:ca:db:70:68:11:c8:c8:76:c0:37:92:23: 4e:8d:68:bd:49:3a:07:84:98:f4:d3:c6:d4:74:b7: 5c:64:6e:13:7e:44:3d:8a:52:c8:4b:1f:02:f6:c2: f8:01:68:28:59:da:11:3e:63:5d:51:a3:a6:2a:f0: 04:b1:37:95:81:52:8e:4b:bb:49:ba:3b:c1:45:2b: 73:5a:65:8a:d1:62:86:d5:5b:1b:80:ac:8c:25:f2: 9f:12:a5:98:94:b8:0c:6a:80:76:bd:b3:24:c7:a5: 19:25:c4:61:f0:36:7d:4b:82:dd:03:53:57:a4:c1: 9d:ed:31:4d:cc:67:90:14:7d:77:ed:e6:d8:38:d8: f9:39:82:7a:f3:be:73:f5:dc:3b:8d:b6:53:64:67: a1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:A8:A6:B9:E0:8D:02:66:73:63:0D:C1:A2:6D:BE:73:DF:A1:61:32 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.37.0/24 Signature Algorithm: sha256WithRSAEncryption 89:f0:d1:53:a3:ad:76:c5:f0:6e:7f:ea:b3:09:d1:b1:69:d9: 3b:c8:f1:9d:5a:22:ac:31:10:e2:e3:e6:d7:f1:4f:94:71:5f: 38:24:67:b4:4a:0a:12:af:7d:3a:62:50:5b:08:f3:41:e6:0f: 4c:bc:9c:5b:a7:eb:d6:9b:ba:7b:61:c4:ad:80:ea:97:87:3a: a8:5a:fe:4f:d8:ff:dd:82:08:fd:b2:08:ce:de:c1:2c:50:fb: a9:f3:19:3e:c4:ad:c3:43:84:9d:4b:db:0f:e0:66:ea:85:25: 64:9c:fe:90:4f:6d:13:41:56:b9:59:ca:a3:73:4c:9f:4f:d9: 00:ce:5e:a3:e5:91:1b:a9:89:2c:bb:41:36:04:82:e3:84:53: 91:49:a1:4b:f8:e3:56:8e:c3:a8:7f:f6:88:8b:88:77:e5:ad: 99:61:99:16:13:4c:64:0b:64:53:00:73:bc:b0:62:2f:19:8a: 35:ea:ed:df:05:53:94:68:73:c4:7a:c9:22:b2:84:bb:40:03: 80:05:63:4c:7e:af:78:48:76:8b:00:04:df:24:81:be:46:20: 4f:33:09:49:33:bb:56:08:60:20:51:63:5f:44:fc:07:18:db: 68:34:85:50:30:e3:f6:48:a8:3e:9f:ce:b2:15:bb:8e:a3:89: 8c:b0:97:7c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUd831I/ePgv1r3ospWFVoXZDrxQAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwNTk1NloX DTI3MDUwMjAxMDQ1NlowMzExMC8GA1UEAxMoRTlBOEE2QjlFMDhEMDI2NjczNjMw REMxQTI2REJFNzNERkExNjEzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcM07Pg7Uvk8eAYqO7u4kOnkvw6Og2JrrP6gcFe/CBN0SoJ7bkf9sWb5Wq9 Wsz77ONcTiG7b1ovEM4r7dM6XuvrZ+6zDq7chVdq/NzfbxYE6B29qX2+PUfm1ExY GqQfrTLekD7efRyqGgDZyttwaBHIyHbAN5IjTo1ovUk6B4SY9NPG1HS3XGRuE35E PYpSyEsfAvbC+AFoKFnaET5jXVGjpirwBLE3lYFSjku7Sbo7wUUrc1plitFihtVb G4CsjCXynxKlmJS4DGqAdr2zJMelGSXEYfA2fUuC3QNTV6TBne0xTcxnkBR9d+3m 2DjY+TmCevO+c/XcO422U2RnoeECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOmoprngjQJmc2MNwaJtvnPfoWEyMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv Lzc4NDZmZWQ3LWY4OGUtNDhlYS1hNmQxLTZmNzU2YmNmOGRiNi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83ODQ2ZmVk Ny1mODhlLTQ4ZWEtYTZkMS02Zjc1NmJjZjhkYjYvMC9FOUE4QTZCOUUwOEQwMjY2 NzM2MzBEQzFBMjZEQkU3M0RGQTE2MTMyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ6AlMA0GCSqGSIb3DQEBCwUAA4IBAQCJ8NFTo612xfBuf+qzCdGxadk7yPGd WiKsMRDi4+bX8U+UcV84JGe0SgoSr306YlBbCPNB5g9MvJxbp+vWm7p7YcStgOqX hzqoWv5P2P/dggj9sgjO3sEsUPup8xk+xK3DQ4SdS9sP4GbqhSVknP6QT20TQVa5 Wcqjc0yfT9kAzl6j5ZEbqYksu0E2BILjhFORSaFL+ONWjsOof/aIi4h35a2ZYZkW E0xkC2RTAHO8sGIvGYo16u3fBVOUaHPEeskisoS7QAOABWNMfq94SHaLAATfJIG+ RiBPMwlJM7tWCGAgUWNfRPwHGNtoNIVQMOP2SKg+n86yFbuOo4mMsJd8 -----END CERTIFICATE-----Generated at Tue May 12 22:16:50 2026 by rpki-client