$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer File: E9F2A418990B480D204FA0D037A5ABB3AEC360E9.cer (raw, json) Hash identifier: NY+pxk+cTIyn/2HtAK/VypzXQLQ+4cp1+egG0pv7Rmc= Subject key identifier: E9:F2:A4:18:99:0B:48:0D:20:4F:A0:D0:37:A5:AB:B3:AE:C3:60:E9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 63F4CD9E31E2F37BFEF69487A24B6FDD11D6671D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft caRepository: rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:17:25 +0000 Certificate not after: Sun 02 May 2027 02:22:25 +0000 Subordinate resources: IP: 103.191.116.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:f4:cd:9e:31:e2:f3:7b:fe:f6:94:87:a2:4b:6f:dd:11:d6:67:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:17:25 2026 GMT Not After : May 2 02:22:25 2027 GMT Subject: CN=E9F2A418990B480D204FA0D037A5ABB3AEC360E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2c:76:5c:dd:f1:0b:4e:a8:9d:91:b5:ea:ec: 3a:7e:79:ac:3a:d0:88:31:41:82:a3:80:51:b6:5d: 58:7e:74:cf:59:f0:73:c5:66:f0:b0:ef:e7:80:d3: 23:0f:6b:f7:ee:f7:6f:21:f9:d2:72:a8:c8:eb:96: c2:d3:49:cf:11:d2:97:60:fa:1d:4d:a0:23:78:b6: 40:96:ac:2f:65:89:f4:ca:30:e0:4b:d8:e3:1a:ff: e1:c3:9b:1d:8c:5a:13:4a:7d:86:1c:bf:5e:e1:37: 9e:54:cc:12:a6:9c:37:c7:17:a4:34:42:1c:45:3a: b0:e2:ff:30:38:7a:0e:85:ca:dc:d1:16:8f:ce:b3: 63:79:4e:b8:a8:26:9f:99:a2:de:37:bb:25:c0:64: 8f:e2:1b:d0:18:69:de:cd:ef:ff:b8:85:39:d2:9b: 82:ed:35:82:c8:0f:3f:46:dc:2f:e8:37:cd:e0:8c: ee:b7:20:d1:9d:2d:51:86:83:0c:26:c9:82:8f:13: 95:0d:3b:2a:b9:d8:a0:59:ba:99:b7:ad:14:c1:22: 88:99:fd:4d:93:25:76:90:0c:c8:aa:29:66:ea:c2: 7c:cc:f9:59:53:de:5b:a5:fd:7c:bb:20:6d:90:ca: ae:77:ef:a8:f9:1e:60:f1:71:8f:b8:3c:b1:fc:a0: 07:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:F2:A4:18:99:0B:48:0D:20:4F:A0:D0:37:A5:AB:B3:AE:C3:60:E9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/E9F2A418990B480D204FA0D037A5ABB3AEC360E9.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.116.0/23 Signature Algorithm: sha256WithRSAEncryption 38:39:97:4f:14:fd:8b:6a:b4:b0:99:a0:53:55:5a:e9:fb:f1: 84:65:dd:5c:95:60:2e:e4:df:cc:f6:ce:4a:58:94:d3:16:68: b9:f2:16:71:c3:06:59:05:6b:3e:90:cd:70:cc:7b:b7:24:fb: 64:62:43:42:29:a1:4f:e6:b0:5b:b9:c9:5b:bd:7a:34:a6:7a: 67:d7:d9:12:b7:f4:6f:21:f2:75:a7:1b:51:dd:23:81:08:9b: 94:f0:4b:03:6c:5b:2f:2c:b8:4b:79:35:07:a0:79:6f:e3:e9: 09:7d:dd:a8:d3:d6:27:23:08:82:de:c0:a3:3c:da:33:72:e3: 17:77:a6:93:d9:29:c5:4c:3a:b0:a1:2f:56:48:51:f0:fa:e9: a2:9a:70:a6:e8:16:77:56:c1:1e:98:c9:e4:3d:ab:af:92:17: f0:55:47:bd:e7:91:b1:f4:e8:e4:1f:02:75:e3:15:3f:4e:4d: 2c:df:14:87:29:dc:08:ad:c9:a6:77:4b:51:04:7f:d0:81:3c: 12:71:62:af:5f:62:9a:8b:04:f9:78:66:e9:71:10:9f:03:dd: e1:ac:ec:67:44:78:2b:22:75:6d:97:b5:c5:bc:ca:56:5a:8e: 6a:6a:fa:72:14:fa:9c:a2:f8:67:2f:1e:16:d7:fa:6f:88:72: a6:12:32:f6 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUY/TNnjHi83v+9pSHoktv3RHWZx0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMTcyNVoX DTI3MDUwMjAyMjIyNVowMzExMC8GA1UEAxMoRTlGMkE0MTg5OTBCNDgwRDIwNEZB MEQwMzdBNUFCQjNBRUMzNjBFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALosdlzd8QtOqJ2RtersOn55rDrQiDFBgqOAUbZdWH50z1nwc8Vm8LDv54DT Iw9r9+73byH50nKoyOuWwtNJzxHSl2D6HU2gI3i2QJasL2WJ9Mow4EvY4xr/4cOb HYxaE0p9hhy/XuE3nlTMEqacN8cXpDRCHEU6sOL/MDh6DoXK3NEWj86zY3lOuKgm n5mi3je7JcBkj+Ib0Bhp3s3v/7iFOdKbgu01gsgPP0bcL+g3zeCM7rcg0Z0tUYaD DCbJgo8TlQ07KrnYoFm6mbetFMEiiJn9TZMldpAMyKopZurCfMz5WVPeW6X9fLsg bZDKrnfvqPkeYPFxj7g8sfygBw0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOnypBiZC0gNIE+g0Delq7Ouw2DpMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2U2YWRhZTJhLTQ3YjYtNGFlNS05YzNmLTNlOGNiOTJhMzk4Ny8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lNmFkYWUy YS00N2I2LTRhZTUtOWMzZi0zZThjYjkyYTM5ODcvMC9FOUYyQTQxODk5MEI0ODBE MjA0RkEwRDAzN0E1QUJCM0FFQzM2MEU5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ790MA0GCSqGSIb3DQEBCwUAA4IBAQA4OZdPFP2LarSwmaBTVVrp+/GEZd1c lWAu5N/M9s5KWJTTFmi58hZxwwZZBWs+kM1wzHu3JPtkYkNCKaFP5rBbuclbvXo0 pnpn19kSt/RvIfJ1pxtR3SOBCJuU8EsDbFsvLLhLeTUHoHlv4+kJfd2o09YnIwiC 3sCjPNozcuMXd6aT2SnFTDqwoS9WSFHw+umimnCm6BZ3VsEemMnkPauvkhfwVUe9 55Gx9OjkHwJ14xU/Tk0s3xSHKdwIrcmmd0tRBH/QgTwScWKvX2KaiwT5eGbpcRCf A93hrOxnRHgrInVtl7XFvMpWWo5qavpyFPqcovhnLx4W1/pviHKmEjL2 -----END CERTIFICATE-----Generated at Tue May 12 22:16:19 2026 by rpki-client