$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer File: E9EEF08AA8356D769BA16B981FE69DB5DE203409.cer (raw, json) Hash identifier: 7aLSvlcmmELmwojgnmU9sgkyqRtxUAgK14asq0ZRxPs= Subject key identifier: E9:EE:F0:8A:A8:35:6D:76:9B:A1:6B:98:1F:E6:9D:B5:DE:20:34:09 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1394AECDC906C729F87BE686CB4090E987ED3287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft caRepository: rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:26:49 +0000 Certificate not after: Sun 02 May 2027 01:31:49 +0000 Subordinate resources: IP: 103.174.13.0/24 IP: 103.178.83.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:94:ae:cd:c9:06:c7:29:f8:7b:e6:86:cb:40:90:e9:87:ed:32:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:26:49 2026 GMT Not After : May 2 01:31:49 2027 GMT Subject: CN=E9EEF08AA8356D769BA16B981FE69DB5DE203409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fc:d2:0e:11:15:f8:fa:6c:80:19:37:f2:54: d4:95:1f:2e:1b:00:36:4f:61:bc:5f:f2:71:8f:ef: 62:10:f7:39:9c:20:eb:a9:b3:c1:42:3e:aa:aa:14: 45:5d:e3:cc:2b:79:15:cf:c1:f8:22:ac:08:f4:0e: 05:33:81:97:b6:75:e1:ca:5f:ad:58:10:06:7d:a3: a3:ef:98:8b:8b:27:61:39:33:35:d3:14:79:fc:a4: 79:6e:43:91:86:fe:d5:5d:3b:f9:0c:a4:44:b3:10: 72:60:84:85:43:e9:88:a7:e5:2f:fa:f7:fb:26:f4: 8d:54:07:a8:51:79:40:ad:62:c0:3e:f1:0e:a9:8e: b2:4e:4b:b7:87:5c:bb:f6:e4:4c:83:68:1a:85:1c: 5a:a4:60:e4:a1:25:5e:a2:08:72:46:a9:df:fc:34: 30:83:28:63:18:23:43:90:28:9f:43:30:bb:6f:d5: 20:66:15:da:ef:92:cc:ae:09:13:8c:c9:a3:79:36: 01:8e:ef:71:2e:fa:c1:7f:83:93:4b:d4:ff:88:96: e2:d0:bf:c8:2b:40:78:8b:29:db:37:42:e4:47:90: ec:ee:70:6b:fa:d2:c5:e0:1e:10:96:33:3d:d7:fa: dd:58:ce:3b:18:c8:c2:d2:9e:6d:51:c2:02:74:b7: 3a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:EE:F0:8A:A8:35:6D:76:9B:A1:6B:98:1F:E6:9D:B5:DE:20:34:09 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/E9EEF08AA8356D769BA16B981FE69DB5DE203409.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.13.0/24 103.178.83.0/24 Signature Algorithm: sha256WithRSAEncryption 25:5b:cf:8d:6e:19:0c:ea:59:9f:3c:95:7c:ed:62:9c:31:ee: 12:93:19:4b:99:75:e4:fd:31:23:c2:93:25:5d:bd:02:ad:9f: a4:00:ed:d0:05:96:bd:0b:f9:4b:77:ca:e2:b5:db:df:43:98: d8:a0:a0:a0:ab:cb:d3:40:b8:7f:1a:e8:ef:48:39:8e:2b:5c: 52:29:08:62:5e:6e:3d:cc:f0:f9:b3:aa:ae:ca:43:65:3a:1d: 31:d6:8b:45:2b:d3:6f:bb:6c:04:5e:19:9f:61:8d:00:eb:42: 1f:18:d3:39:0b:f8:a6:ae:63:47:e3:54:71:ad:eb:96:2b:9f: b6:1b:0d:50:85:70:ae:fd:a4:0a:61:71:27:93:b7:b9:a7:1b: 40:f8:9c:f6:c6:9a:6b:de:f6:69:2a:05:70:43:52:cf:26:bf: 9f:ef:4b:af:29:4a:3d:dc:88:d1:9a:9f:b3:18:bc:19:22:eb: 14:55:c7:77:30:2f:41:05:b3:49:76:3d:05:6e:01:2a:9e:d7: c7:dd:7d:55:19:f6:52:e9:44:c5:ae:1c:1f:5e:a8:5d:f2:87: 90:7b:6e:26:3f:9a:b0:b8:88:01:77:57:39:09:cf:57:c3:e1: 7b:d5:bc:68:9d:4d:ed:1e:9f:6b:69:2d:ae:9f:31:07:0c:e6: 5f:cd:7e:48 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUE5SuzckGxyn4e+aGy0CQ6YftMocwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxMjY0OVoX DTI3MDUwMjAxMzE0OVowMzExMC8GA1UEAxMoRTlFRUYwOEFBODM1NkQ3NjlCQTE2 Qjk4MUZFNjlEQjVERTIwMzQwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANb80g4RFfj6bIAZN/JU1JUfLhsANk9hvF/ycY/vYhD3OZwg66mzwUI+qqoU RV3jzCt5Fc/B+CKsCPQOBTOBl7Z14cpfrVgQBn2jo++Yi4snYTkzNdMUefykeW5D kYb+1V07+QykRLMQcmCEhUPpiKflL/r3+yb0jVQHqFF5QK1iwD7xDqmOsk5Lt4dc u/bkTINoGoUcWqRg5KElXqIIckap3/w0MIMoYxgjQ5Aon0Mwu2/VIGYV2u+SzK4J E4zJo3k2AY7vcS76wX+Dk0vU/4iW4tC/yCtAeIsp2zdC5EeQ7O5wa/rSxeAeEJYz Pdf63VjOOxjIwtKebVHCAnS3OrECAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOnu8IqoNW12m6FrmB/mnbXeIDQJMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzlmZGUxZjBlLTIzMWYtNDRjZS05MGMzLTMyYWNkZjlkMjZjMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85ZmRlMWYw ZS0yMzFmLTQ0Y2UtOTBjMy0zMmFjZGY5ZDI2YzAvMC9FOUVFRjA4QUE4MzU2RDc2 OUJBMTZCOTgxRkU2OURCNURFMjAzNDA5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM AwQAZ64NAwQAZ7JTMA0GCSqGSIb3DQEBCwUAA4IBAQAlW8+NbhkM6lmfPJV87WKc Me4SkxlLmXXk/TEjwpMlXb0CrZ+kAO3QBZa9C/lLd8ritdvfQ5jYoKCgq8vTQLh/ GujvSDmOK1xSKQhiXm49zPD5s6quykNlOh0x1otFK9Nvu2wEXhmfYY0A60IfGNM5 C/imrmNH41RxreuWK5+2Gw1QhXCu/aQKYXEnk7e5pxtA+Jz2xppr3vZpKgVwQ1LP Jr+f70uvKUo93IjRmp+zGLwZIusUVcd3MC9BBbNJdj0FbgEqntfH3X1VGfZS6UTF rhwfXqhd8oeQe24mP5qwuIgBd1c5Cc9Xw+F71bxonU3tHp9raS2unzEHDOZfzX5I -----END CERTIFICATE-----Generated at Tue May 12 22:47:51 2026 by rpki-client