$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EE15C88D8235D1E822A2C24C8BA979901AE67A45.cer File: EE15C88D8235D1E822A2C24C8BA979901AE67A45.cer (raw, json) Hash identifier: EBUIG3KN7jhuIF4qJKuVhcLCgrpUGX3RMp2bJB+KW2E= Subject key identifier: EE:15:C8:8D:82:35:D1:E8:22:A2:C2:4C:8B:A9:79:90:1A:E6:7A:45 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2077E1B5F2121A6AC9D6757C1552450D1B8A5882 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/EE15C88D8235D1E822A2C24C8BA979901AE67A45.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:38:34 +0000 Certificate not after: Sun 02 May 2027 02:43:34 +0000 Subordinate resources: IP: 103.23.100.0/22 IP: 2001:df0:260::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:77:e1:b5:f2:12:1a:6a:c9:d6:75:7c:15:52:45:0d:1b:8a:58:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:38:34 2026 GMT Not After : May 2 02:43:34 2027 GMT Subject: CN=EE15C88D8235D1E822A2C24C8BA979901AE67A45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ae:7b:e7:da:27:28:8c:31:21:3b:e0:3c:c3: 67:37:70:bd:9c:08:fe:ed:f6:1c:e4:6b:44:e0:0f: 31:1a:6f:27:ee:f4:7a:3e:4e:91:7e:70:71:39:44: 00:ff:0e:ac:58:77:dc:a3:51:ad:a2:9c:12:2a:fc: a2:33:8e:3c:6c:14:13:1c:92:a2:a3:97:c3:a7:e4: f5:57:2d:3e:5a:d5:dd:a3:ce:34:5e:06:ee:94:1e: 63:a2:eb:4d:bf:cf:1a:71:62:9d:fa:d5:fc:74:f1: 07:1d:39:f0:13:63:60:cd:ec:3e:90:18:a0:33:2f: ba:d2:e6:70:7f:e9:39:57:20:bb:e2:8f:e4:9a:b5: 1d:26:a9:58:e4:4b:79:7b:e2:16:7e:7b:bd:0c:82: e0:9e:7d:ec:60:a6:10:c0:0c:33:8b:c8:41:ba:7a: 59:92:a5:0d:d5:62:54:52:3d:49:60:ca:a8:72:ed: 8c:cb:d2:20:ed:fa:05:1c:6f:8e:66:93:a2:f7:ce: 7e:f7:b5:ce:ce:2b:d0:fd:9f:30:24:9f:0c:6e:0f: 36:a6:7b:6e:1a:bd:9a:e3:7f:94:57:e0:d8:c0:45: 90:e4:d6:7d:f0:0b:57:be:ce:2c:f0:97:1e:06:90: e3:46:2b:90:91:8b:dd:47:32:a3:66:33:6a:63:4b: da:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EE:15:C8:8D:82:35:D1:E8:22:A2:C2:4C:8B:A9:79:90:1A:E6:7A:45 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/EE15C88D8235D1E822A2C24C8BA979901AE67A45.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.23.100.0/22 IPv6: 2001:df0:260::/48 Signature Algorithm: sha256WithRSAEncryption 3f:f9:a5:24:2a:9c:f2:ce:60:d2:ec:e8:e2:df:bf:04:58:33: 69:a6:57:6d:f3:d6:76:f4:ce:8f:04:c9:c4:2e:40:b1:00:10: 6a:c0:54:fc:f7:aa:54:c4:28:06:40:0a:77:ca:39:59:32:94: fe:7b:5f:f8:61:2f:4d:51:fd:ab:11:56:08:33:4f:5f:66:be: 13:be:bf:82:19:9d:64:e0:2e:56:38:e0:bd:91:3f:2a:b7:9a: 99:f0:5a:0f:9f:d2:fe:fb:12:0b:df:cc:41:72:3b:f9:12:d3: cd:87:ef:89:5f:15:a0:e4:80:4e:8d:58:63:ad:7c:b3:55:07: c2:7c:f3:bb:7e:25:de:81:4f:d8:73:2e:c0:27:57:95:91:f7: 31:d3:38:93:b3:34:a8:41:3d:4c:b4:79:86:00:72:28:c5:15: 49:a5:af:ae:b1:f8:6e:44:81:e1:7d:db:5a:53:e1:b2:3a:c7: 29:0c:c1:cf:59:99:5a:10:70:59:21:9b:c3:09:ec:08:b0:55: a0:0c:f7:04:b0:40:48:38:80:20:de:99:57:40:c3:d5:bf:ba: 5e:47:6e:31:67:b2:0a:b1:d5:47:a6:97:db:ca:d0:97:7b:45: 20:aa:85:a6:2c:f2:0a:13:47:2a:31:31:40:49:4d:04:85:78: f1:43:32:e6 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUIHfhtfISGmrJ1nV8FVJFDRuKWIIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzgzNFoX DTI3MDUwMjAyNDMzNFowMzExMC8GA1UEAxMoRUUxNUM4OEQ4MjM1RDFFODIyQTJD MjRDOEJBOTc5OTAxQUU2N0E0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALKue+faJyiMMSE74DzDZzdwvZwI/u32HORrROAPMRpvJ+70ej5OkX5wcTlE AP8OrFh33KNRraKcEir8ojOOPGwUExySoqOXw6fk9VctPlrV3aPONF4G7pQeY6Lr Tb/PGnFinfrV/HTxBx058BNjYM3sPpAYoDMvutLmcH/pOVcgu+KP5Jq1HSapWORL eXviFn57vQyC4J597GCmEMAMM4vIQbp6WZKlDdViVFI9SWDKqHLtjMvSIO36BRxv jmaTovfOfve1zs4r0P2fMCSfDG4PNqZ7bhq9muN/lFfg2MBFkOTWffALV77OLPCX HgaQ40YrkJGL3Ucyo2YzamNL2v8CAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO4VyI2CNdHoIqLCTIupeZAa5npFMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y3MTgwNzA0LTZiNjQtNGE0MC04ZjNkLWZmZGZkNWUzN2RlZi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mNzE4MDcw NC02YjY0LTRhNDAtOGYzZC1mZmRmZDVlMzdkZWYvMC9FRTE1Qzg4RDgyMzVEMUU4 MjJBMkMyNEM4QkE5Nzk5MDFBRTY3QTQ1Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQCZxdkMA8EAgACMAkDBwAgAQ3wAmAwDQYJKoZIhvcNAQELBQADggEBAD/5pSQq nPLOYNLs6OLfvwRYM2mmV23z1nb0zo8EycQuQLEAEGrAVPz3qlTEKAZACnfKOVky lP57X/hhL01R/asRVggzT19mvhO+v4IZnWTgLlY44L2RPyq3mpnwWg+f0v77Egvf zEFyO/kS082H74lfFaDkgE6NWGOtfLNVB8J887t+Jd6BT9hzLsAnV5WR9zHTOJOz NKhBPUy0eYYAcijFFUmlr66x+G5EgeF921pT4bI6xykMwc9ZmVoQcFkhm8MJ7Aiw VaAM9wSwQEg4gCDemVdAw9W/ul5HbjFnsgqx1Ueml9vK0Jd7RSCqhaYs8goTRyox MUBJTQSFePFDMuY= -----END CERTIFICATE-----Generated at Wed May 13 02:59:15 2026 by rpki-client