$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E9E6271C170F0B74B97B8446B07AA5AB428648F1.cer File: E9E6271C170F0B74B97B8446B07AA5AB428648F1.cer (raw, json) Hash identifier: ska3mkWCiZ3RXUYnQYktB1RrkO/am3xxTFtb2YVkUDM= Subject key identifier: E9:E6:27:1C:17:0F:0B:74:B9:7B:84:46:B0:7A:A5:AB:42:86:48:F1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3AFF09B294ECB0FF93D1A76814F511BFC1B9191C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:50:12 +0000 Certificate not after: Sat 01 May 2027 23:55:12 +0000 Subordinate resources: IP: 103.39.72.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ff:09:b2:94:ec:b0:ff:93:d1:a7:68:14:f5:11:bf:c1:b9:19:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:50:12 2026 GMT Not After : May 1 23:55:12 2027 GMT Subject: CN=E9E6271C170F0B74B97B8446B07AA5AB428648F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:10:0d:e2:1b:45:db:d4:ea:3a:40:63:67:21: ee:cf:7d:2c:a3:24:c7:ea:c0:7b:96:11:73:0b:0e: d9:5c:94:b0:11:7f:4f:9f:d9:4e:eb:2c:ea:f6:29: 84:52:37:73:c3:ef:f1:30:42:19:c2:26:63:13:1f: 57:b6:18:73:04:b8:b3:e9:e3:82:98:df:27:22:c9: 99:00:b9:1c:02:0d:0e:56:8d:a1:f5:f7:80:f0:d7: 54:06:b9:37:09:5b:2b:90:e5:0b:6b:4b:b8:6c:65: 61:bd:53:16:82:ec:3f:27:8f:48:a6:e4:8c:2c:52: 76:3d:19:c9:17:4e:52:d2:9a:21:bf:e6:76:9b:6f: 3f:93:eb:12:e2:08:aa:16:b8:4f:2a:23:23:70:dc: 86:3f:ed:a7:51:e6:77:1b:20:72:ec:6b:d9:c3:ae: 7e:1b:c6:88:9a:8a:c1:c0:28:dc:81:e3:33:7f:5c: 87:4a:65:ed:ea:f3:c3:f7:47:0c:a9:91:66:66:da: bf:a1:bf:bd:3d:9c:11:53:00:ef:66:2c:53:c0:4c: c2:94:26:99:51:5f:09:91:b4:41:91:31:53:ae:ec: 3f:40:4d:d7:70:a3:3b:da:de:79:f2:03:26:5e:7d: 60:6c:23:73:42:e1:da:20:24:d8:92:68:df:d3:29: 01:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:E6:27:1C:17:0F:0B:74:B9:7B:84:46:B0:7A:A5:AB:42:86:48:F1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/E9E6271C170F0B74B97B8446B07AA5AB428648F1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.39.72.0/23 Signature Algorithm: sha256WithRSAEncryption 82:89:5a:2e:6d:6e:9c:5c:cf:78:fc:44:5e:19:60:bc:4e:0a: bd:7f:a0:dc:c5:98:82:f3:f8:66:dc:d9:63:43:e2:96:22:3a: 98:5b:c9:bf:04:fd:d5:26:07:14:af:0d:b8:22:05:92:4f:a8: 29:74:9f:83:57:18:ff:60:86:61:a8:a3:9b:89:35:c6:78:66: ca:34:4a:2c:ef:fb:ff:7f:1b:57:5e:9a:e6:e0:46:f1:04:68: 72:ca:31:35:8d:79:69:df:17:13:15:d1:fe:cb:68:7e:f1:01: 3a:d1:38:8f:10:b5:69:33:0c:f4:56:3e:e5:25:71:94:85:43: 1f:eb:82:a4:28:ca:b7:7b:0b:3a:b1:b3:9d:e5:14:88:73:9a: 89:9d:10:89:ac:8c:d5:0e:d8:68:66:a6:ae:3b:9e:c0:e0:e4: d2:7a:d1:7d:a2:78:de:32:12:3d:07:3c:57:b6:c7:25:a5:4d: 94:48:4d:eb:85:18:0b:94:60:c5:dc:11:0a:c6:29:9c:1e:60: 0d:e8:82:b6:52:3b:88:b7:6b:5b:a9:28:2f:c3:c7:ee:6f:b1: 76:bf:a7:3d:ac:4d:6d:06:e3:9a:e7:63:ff:df:b5:af:fd:d8: 11:d2:5b:7a:2c:f8:84:0a:fd:d6:92:3a:a1:47:e5:be:39:23: 15:63:0b:fe -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUOv8JspTssP+T0adoFPURv8G5GRwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTAxMloX DTI3MDUwMTIzNTUxMlowMzExMC8GA1UEAxMoRTlFNjI3MUMxNzBGMEI3NEI5N0I4 NDQ2QjA3QUE1QUI0Mjg2NDhGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKYQDeIbRdvU6jpAY2ch7s99LKMkx+rAe5YRcwsO2VyUsBF/T5/ZTuss6vYp hFI3c8Pv8TBCGcImYxMfV7YYcwS4s+njgpjfJyLJmQC5HAINDlaNofX3gPDXVAa5 NwlbK5DlC2tLuGxlYb1TFoLsPyePSKbkjCxSdj0ZyRdOUtKaIb/mdptvP5PrEuII qha4TyojI3Dchj/tp1Hmdxsgcuxr2cOufhvGiJqKwcAo3IHjM39ch0pl7erzw/dH DKmRZmbav6G/vT2cEVMA72YsU8BMwpQmmVFfCZG0QZExU67sP0BN13CjO9reefID Jl59YGwjc0Lh2iAk2JJo39MpAc0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOnmJxwXDwt0uXuERrB6patChkjxMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzEwYzczYWY1LWEyYzAtNDI0ZC04NjJlLTExMmM1OGI3MjcwZS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xMGM3M2Fm NS1hMmMwLTQyNGQtODYyZS0xMTJjNThiNzI3MGUvMC9FOUU2MjcxQzE3MEYwQjc0 Qjk3Qjg0NDZCMDdBQTVBQjQyODY0OEYxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZydIMA0GCSqGSIb3DQEBCwUAA4IBAQCCiVoubW6cXM94/EReGWC8Tgq9f6Dc xZiC8/hm3NljQ+KWIjqYW8m/BP3VJgcUrw24IgWST6gpdJ+DVxj/YIZhqKObiTXG eGbKNEos7/v/fxtXXprm4EbxBGhyyjE1jXlp3xcTFdH+y2h+8QE60TiPELVpMwz0 Vj7lJXGUhUMf64KkKMq3ews6sbOd5RSIc5qJnRCJrIzVDthoZqauO57A4OTSetF9 onjeMhI9BzxXtsclpU2USE3rhRgLlGDF3BEKximcHmAN6IK2UjuIt2tbqSgvw8fu b7F2v6c9rE1tBuOa52P/37Wv/dgR0lt6LPiECv3WkjqhR+W+OSMVYwv+ -----END CERTIFICATE-----Generated at Wed May 13 01:35:49 2026 by rpki-client