$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.cer File: E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.cer (raw, json) Hash identifier: /MkoKhnJy1qPdFI3hCEK1UqUkTTXrCIoOtjwZdw+hmo= Subject key identifier: E9:DD:F9:8F:B3:21:D5:A9:77:AD:47:B0:C4:1C:D4:FE:29:A3:79:3A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 111E5D70F71869997427709E1F0BD8FCBE195197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:52:19 +0000 Certificate not after: Sat 01 May 2027 23:57:19 +0000 Subordinate resources: IP: 103.156.110.0/24 IP: 2001:df4:ea80::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:1e:5d:70:f7:18:69:99:74:27:70:9e:1f:0b:d8:fc:be:19:51:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:52:19 2026 GMT Not After : May 1 23:57:19 2027 GMT Subject: CN=E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3a:ab:eb:fa:5d:49:38:81:2a:5d:b6:ac:56: b8:67:71:ae:9a:c4:a0:83:e2:91:47:8b:2d:19:c0: a0:20:bb:8a:d0:f3:0d:30:cc:67:bf:84:fb:d6:66: 37:5f:c3:9c:b9:29:b2:0a:a8:79:dc:af:1e:e0:6c: ed:21:10:a3:b0:09:e0:83:aa:98:92:d9:a1:5f:8f: f6:75:29:72:87:77:2d:f8:4e:30:4e:27:b4:25:85: b1:a2:eb:06:ea:d1:4e:d8:40:d1:d3:ce:8c:0f:eb: 0f:f9:f5:c0:66:da:68:f3:12:7d:68:01:d5:0b:ed: 73:d7:dd:58:10:ec:16:cd:1f:cc:81:11:f9:bd:21: 04:91:08:65:bc:4f:0e:a1:3c:d2:8c:d6:41:9d:a1: 9b:4b:7f:fe:1d:1f:33:d0:63:ae:c2:e9:b8:43:60: f8:cd:38:79:8b:90:2f:8d:39:a1:2e:7e:12:2a:25: af:2c:51:f2:aa:51:1a:99:da:89:a5:c6:6a:30:70: f7:2d:ae:76:e0:80:23:d4:45:e5:dd:d6:a9:44:b9: 3b:61:a4:89:08:30:c0:2a:c9:11:d9:b2:31:63:a9: 00:e5:6a:5d:05:c8:e3:26:27:36:cb:ee:f5:47:b9: f9:54:a0:f7:58:a2:1d:01:ee:58:95:61:3a:42:8c: e5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:DD:F9:8F:B3:21:D5:A9:77:AD:47:B0:C4:1C:D4:FE:29:A3:79:3A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/E9DDF98FB321D5A977AD47B0C41CD4FE29A3793A.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.110.0/24 IPv6: 2001:df4:ea80::/48 Signature Algorithm: sha256WithRSAEncryption 90:d6:e9:5b:ae:1c:fb:00:37:5f:59:67:ca:18:13:69:33:37: b7:4f:33:48:df:5e:c2:fa:09:67:df:8b:a5:52:82:ae:33:f5: ca:c8:7d:69:3e:b5:16:6e:43:d8:08:71:8f:9a:0a:10:95:cd: 45:2a:95:49:94:69:fd:ed:c6:57:e0:6b:1a:0d:ef:4a:1a:af: d8:e4:18:80:6c:b2:06:2b:5b:4a:3c:1b:8d:44:79:8d:b9:08: ff:53:d4:84:75:9b:a9:89:61:1d:4b:c8:0f:d9:6e:04:17:d5: 87:3f:13:63:2c:26:55:59:4e:8c:b2:21:c8:07:1f:44:e4:b9: c3:2b:db:62:0e:39:98:8a:c5:22:a7:79:18:a7:38:e3:d8:35: 9e:a5:be:bb:39:cd:21:c8:7e:ac:d7:44:0f:67:d5:16:7e:fb: 17:3e:79:62:b8:c0:30:0b:f1:ee:92:a8:74:55:81:45:18:f8: 33:37:1c:15:ba:93:37:60:e6:cd:f9:e4:ea:67:5c:3a:6b:34: c3:21:1c:a8:e4:f8:3d:a4:83:54:15:13:76:49:3a:e8:29:31: d9:4e:d8:0c:7e:61:ee:1a:b4:06:cc:0a:e7:f4:9f:f6:4b:36: b9:f6:25:9c:f9:70:c5:72:eb:08:57:53:7f:f5:24:78:2a:01: 65:2e:45:91 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUER5dcPcYaZl0J3CeHwvY/L4ZUZcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTIxOVoX DTI3MDUwMTIzNTcxOVowMzExMC8GA1UEAxMoRTlEREY5OEZCMzIxRDVBOTc3QUQ0 N0IwQzQxQ0Q0RkUyOUEzNzkzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMA6q+v6XUk4gSpdtqxWuGdxrprEoIPikUeLLRnAoCC7itDzDTDMZ7+E+9Zm N1/DnLkpsgqoedyvHuBs7SEQo7AJ4IOqmJLZoV+P9nUpcod3LfhOME4ntCWFsaLr BurRTthA0dPOjA/rD/n1wGbaaPMSfWgB1Qvtc9fdWBDsFs0fzIER+b0hBJEIZbxP DqE80ozWQZ2hm0t//h0fM9BjrsLpuENg+M04eYuQL405oS5+EiolryxR8qpRGpna iaXGajBw9y2uduCAI9RF5d3WqUS5O2GkiQgwwCrJEdmyMWOpAOVqXQXI4yYnNsvu 9Ue5+VSg91iiHQHuWJVhOkKM5a8CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOnd+Y+zIdWpd61HsMQc1P4po3k6MB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzE0MzNhMWM2LTBmNzAtNGM5OC05NmIwLWNhYjU4MTI2YWI5NC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xNDMzYTFj Ni0wZjcwLTRjOTgtOTZiMC1jYWI1ODEyNmFiOTQvMC9FOURERjk4RkIzMjFENUE5 NzdBRDQ3QjBDNDFDRDRGRTI5QTM3OTNBLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQAZ5xuMA8EAgACMAkDBwAgAQ306oAwDQYJKoZIhvcNAQELBQADggEBAJDW6Vuu HPsAN19ZZ8oYE2kzN7dPM0jfXsL6CWffi6VSgq4z9crIfWk+tRZuQ9gIcY+aChCV zUUqlUmUaf3txlfgaxoN70oar9jkGIBssgYrW0o8G41EeY25CP9T1IR1m6mJYR1L yA/ZbgQX1Yc/E2MsJlVZToyyIcgHH0TkucMr22IOOZiKxSKneRinOOPYNZ6lvrs5 zSHIfqzXRA9n1RZ++xc+eWK4wDAL8e6SqHRVgUUY+DM3HBW6kzdg5s355OpnXDpr NMMhHKjk+D2kg1QVE3ZJOugpMdlO2Ax+Ye4atAbMCuf0n/ZLNrn2JZz5cMVy6whX U3/1JHgqAWUuRZE= -----END CERTIFICATE-----Generated at Tue May 12 22:09:58 2026 by rpki-client