$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer File: E9ED07059EB01F61BF6A902EB0D95F92D005672C.cer (raw, json) Hash identifier: 4tohebkbSh66rxD/pTe9g5SlFVvLzmYGhwJS3jLdqr8= Subject key identifier: E9:ED:07:05:9E:B0:1F:61:BF:6A:90:2E:B0:D9:5F:92:D0:05:67:2C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 30CC0D59E43679B29602976A70BA9DEB1B7134AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft caRepository: rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:22:38 +0000 Certificate not after: Sun 02 May 2027 00:27:38 +0000 Subordinate resources: IP: 103.136.12.0/22 IP: 2404:89c0::/32 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:cc:0d:59:e4:36:79:b2:96:02:97:6a:70:ba:9d:eb:1b:71:34:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:22:38 2026 GMT Not After : May 2 00:27:38 2027 GMT Subject: CN=E9ED07059EB01F61BF6A902EB0D95F92D005672C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:dd:b0:c9:c7:7f:3d:7e:86:26:4b:38:eb:e9: 3e:a5:ca:6f:4d:dd:1e:19:ac:2a:88:f3:eb:9f:0c: ec:db:1c:f4:67:f6:b7:4e:d5:6f:21:04:f2:3e:cb: c6:90:d4:e6:f5:58:a0:3c:c5:a7:e8:68:a4:5e:55: f0:6c:3c:59:23:20:3e:c6:09:4f:e8:38:74:ee:10: 8c:60:63:87:3d:84:35:a6:41:44:7d:24:7d:10:54: d2:17:37:b0:b7:34:88:66:93:c0:4c:75:e5:47:47: 93:11:a2:0f:85:ff:85:e3:cc:a6:fb:81:4f:2b:44: 00:b8:5d:3a:2f:82:1a:f5:a8:34:ad:4e:ed:f8:88: 65:9f:57:2a:2a:02:0f:1f:e5:63:0c:bf:2d:e3:92: 6b:dc:58:ae:e9:7c:96:0a:c6:89:10:5d:93:3e:4e: c6:f5:08:4c:e7:49:4a:5f:c4:b5:c2:b8:c2:fb:14: e0:0c:eb:56:f8:bb:67:9f:c0:ae:b4:90:94:5b:c6: eb:c9:d7:0d:9f:b2:6c:d3:c7:5c:3f:c5:87:2d:5c: 2a:9f:a0:7e:c5:24:55:97:24:a1:83:58:c5:34:47: d0:be:1c:20:af:69:f6:c4:92:3d:47:0d:f8:10:22: 62:4f:36:6b:95:f8:fc:54:81:c0:a4:db:29:34:2d: 4f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:ED:07:05:9E:B0:1F:61:BF:6A:90:2E:B0:D9:5F:92:D0:05:67:2C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/E9ED07059EB01F61BF6A902EB0D95F92D005672C.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.12.0/22 IPv6: 2404:89c0::/32 Signature Algorithm: sha256WithRSAEncryption 89:a0:52:c8:a0:9c:b5:05:c1:5e:15:31:03:5f:0f:83:8b:e6: 60:a6:28:70:ec:c9:67:e6:b8:fe:a9:00:9c:24:52:77:2e:33: f6:92:a0:1e:dd:58:a1:ec:fa:96:9c:cb:94:fe:46:fe:fa:cf: 0c:58:00:73:b4:9a:f8:cc:3e:fb:c9:91:1b:ae:57:c3:07:53: 46:7b:26:83:76:df:48:7a:f7:9d:93:5b:5d:6e:83:ad:a2:5f: 50:fd:c6:ba:85:99:bf:c6:e7:05:0e:a8:68:ff:6c:cc:60:38: 71:eb:3e:56:3b:ba:71:aa:50:66:65:d9:8e:35:70:48:ad:da: 78:61:cb:15:6e:33:70:46:c8:da:d0:e3:99:5c:74:a1:eb:0b: d3:f5:b4:2a:16:66:cf:ba:42:2f:c7:fa:52:d5:5f:01:79:e9: 0a:eb:e0:26:37:92:c9:2a:67:72:7e:c2:d9:46:80:8b:a7:b5: 6f:d9:ca:17:f8:b0:4e:cf:89:64:e8:55:af:65:e1:ff:67:68: cd:4a:a7:f4:72:ad:2c:a1:89:d7:cd:59:7c:84:35:7d:61:38: 9f:0e:d5:94:d7:27:87:21:9e:ec:0a:68:ad:a2:4f:e3:90:c7: 04:b8:67:4e:6d:fb:03:95:01:1b:94:34:fc:d8:6b:d5:5e:a9: 0c:27:7f:d0 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUMMwNWeQ2ebKWApdqcLqd6xtxNKowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMjIzOFoX DTI3MDUwMjAwMjczOFowMzExMC8GA1UEAxMoRTlFRDA3MDU5RUIwMUY2MUJGNkE5 MDJFQjBEOTVGOTJEMDA1NjcyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJPdsMnHfz1+hiZLOOvpPqXKb03dHhmsKojz658M7Nsc9Gf2t07VbyEE8j7L xpDU5vVYoDzFp+hopF5V8Gw8WSMgPsYJT+g4dO4QjGBjhz2ENaZBRH0kfRBU0hc3 sLc0iGaTwEx15UdHkxGiD4X/hePMpvuBTytEALhdOi+CGvWoNK1O7fiIZZ9XKioC Dx/lYwy/LeOSa9xYrul8lgrGiRBdkz5OxvUITOdJSl/EtcK4wvsU4AzrVvi7Z5/A rrSQlFvG68nXDZ+ybNPHXD/Fhy1cKp+gfsUkVZckoYNYxTRH0L4cIK9p9sSSPUcN +BAiYk82a5X4/FSBwKTbKTQtT/8CAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOntBwWesB9hv2qQLrDZX5LQBWcsMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzQwMWIxYzFiLTY1NmMtNDg5ZC05ZWQzLWNjYzc3YzgzMDE4ZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80MDFiMWMx Yi02NTZjLTQ4OWQtOWVkMy1jY2M3N2M4MzAxOGQvMC9FOUVEMDcwNTlFQjAxRjYx QkY2QTkwMkVCMEQ5NUY5MkQwMDU2NzJDLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQCZ4gMMA0EAgACMAcDBQAkBInAMA0GCSqGSIb3DQEBCwUAA4IBAQCJoFLIoJy1 BcFeFTEDXw+Di+Zgpihw7Mln5rj+qQCcJFJ3LjP2kqAe3Vih7PqWnMuU/kb++s8M WABztJr4zD77yZEbrlfDB1NGeyaDdt9Ievedk1tdboOtol9Q/ca6hZm/xucFDqho /2zMYDhx6z5WO7pxqlBmZdmONXBIrdp4YcsVbjNwRsja0OOZXHSh6wvT9bQqFmbP ukIvx/pS1V8BeekK6+AmN5LJKmdyfsLZRoCLp7Vv2coX+LBOz4lk6FWvZeH/Z2jN Sqf0cq0soYnXzVl8hDV9YTifDtWU1yeHIZ7sCmitok/jkMcEuGdObfsDlQEblDT8 2GvVXqkMJ3/Q -----END CERTIFICATE-----Generated at Tue May 12 22:10:21 2026 by rpki-client