$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EE63715AC09A5BF6E591CC15D636C202B7055A01.cer File: EE63715AC09A5BF6E591CC15D636C202B7055A01.cer (raw, json) Hash identifier: tVajFKJ4CIXFRMp39rBMHJQiHIV2zmCcUpXKDFPT9h8= Subject key identifier: EE:63:71:5A:C0:9A:5B:F6:E5:91:CC:15:D6:36:C2:02:B7:05:5A:01 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 428CE7ADDAC3A038EE7FCBF278E81DDF88B3F3DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/EE63715AC09A5BF6E591CC15D636C202B7055A01.mft caRepository: rsync://rpki-rsync.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:15:59 +0000 Certificate not after: Sun 02 May 2027 00:20:59 +0000 Subordinate resources: IP: 103.18.114.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:8c:e7:ad:da:c3:a0:38:ee:7f:cb:f2:78:e8:1d:df:88:b3:f3:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 00:15:59 2026 GMT Not After : May 2 00:20:59 2027 GMT Subject: CN=EE63715AC09A5BF6E591CC15D636C202B7055A01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:09:d6:37:bc:13:ba:11:d4:f2:7f:f2:09:10: b2:7e:f3:5c:1a:10:51:d9:e1:e7:9c:34:36:6e:51: 95:97:7c:d4:7a:10:f7:cf:3b:34:c7:db:77:b8:2c: 3b:84:47:e1:db:eb:04:18:9f:ef:1f:24:fd:7b:46: 5c:9e:ea:85:12:5d:b4:6a:49:9f:b2:61:8e:88:cd: bd:d6:57:b1:42:71:01:13:66:26:db:2d:b6:1d:f6: 01:30:3f:54:af:c2:12:8f:56:fe:df:84:09:b4:f8: 85:cc:59:ad:a6:06:c2:d0:4d:a6:94:9e:88:2e:96: 2c:d9:29:d1:84:73:69:9c:c2:c5:f7:f3:b1:73:9b: ee:36:95:95:e8:ed:eb:37:07:93:69:fa:7e:79:50: 0a:89:c0:0f:23:78:68:40:7f:db:2f:32:25:48:33: 48:2a:f7:84:c2:36:5b:a0:f5:d2:27:de:ef:92:b8: d2:80:e0:61:75:53:26:c4:75:7c:93:98:32:3e:1b: 1b:08:0b:bd:a3:ef:51:a8:bb:9a:24:b0:da:9c:c4: 7b:0f:ec:e4:99:55:60:84:13:ac:13:3b:af:8e:bc: d8:9d:2e:f7:0e:99:be:cf:53:9e:cb:14:0f:ef:c2: b1:cd:f0:18:d3:dd:b6:a6:d4:81:24:d0:80:59:52: 96:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EE:63:71:5A:C0:9A:5B:F6:E5:91:CC:15:D6:36:C2:02:B7:05:5A:01 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/EE63715AC09A5BF6E591CC15D636C202B7055A01.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.18.114.0/23 Signature Algorithm: sha256WithRSAEncryption 29:bb:e0:81:8d:d8:78:e5:ec:c2:95:e4:82:9a:be:61:ed:6c: 4f:70:ee:f8:cc:0e:d7:bb:4b:5b:e3:33:f0:dd:5f:bd:d8:d4: ef:b4:92:0b:50:5c:a2:9d:a5:eb:ae:54:ba:da:37:74:2e:a2: fe:37:29:0b:65:f3:16:40:25:1a:bd:0a:7e:53:96:5f:50:44: 4d:79:19:ad:07:0a:ed:4c:19:90:f5:9d:cd:54:3f:a2:9f:d0: d3:7e:00:92:ad:dc:3e:f6:ce:49:43:2b:ef:ab:37:6a:cd:1d: 65:a0:85:e3:d8:91:ab:6c:b2:2c:33:4a:12:b1:63:cd:6c:5e: 25:81:b3:da:83:86:de:5d:1b:7d:77:82:73:c2:46:05:4c:3d: e3:0b:85:cf:98:90:f9:d4:f7:f8:66:4e:42:3d:0f:ee:be:32: a4:e4:c1:82:b5:4e:e1:e7:61:c9:b7:8c:7e:d4:38:2e:8f:f3: 6e:28:db:b8:b1:9e:ad:8d:c8:6f:99:a4:02:3d:0d:c8:24:7a: 80:ab:80:79:5f:fb:41:5d:e7:b2:a0:7d:8a:c2:9b:50:e3:20: ac:30:75:6f:45:d3:3b:df:76:14:c5:bb:8e:3d:01:fa:fc:ce: cb:85:00:b3:67:a1:80:1b:fd:cc:3f:de:76:c6:67:8e:9d:00: b5:d0:40:71 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUQoznrdrDoDjuf8vyeOgd34iz894wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAwMTU1OVoX DTI3MDUwMjAwMjA1OVowMzExMC8GA1UEAxMoRUU2MzcxNUFDMDlBNUJGNkU1OTFD QzE1RDYzNkMyMDJCNzA1NUEwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJcJ1je8E7oR1PJ/8gkQsn7zXBoQUdnh55w0Nm5RlZd81HoQ9887NMfbd7gs O4RH4dvrBBif7x8k/XtGXJ7qhRJdtGpJn7JhjojNvdZXsUJxARNmJtstth32ATA/ VK/CEo9W/t+ECbT4hcxZraYGwtBNppSeiC6WLNkp0YRzaZzCxffzsXOb7jaVlejt 6zcHk2n6fnlQConADyN4aEB/2y8yJUgzSCr3hMI2W6D10ife75K40oDgYXVTJsR1 fJOYMj4bGwgLvaPvUai7miSw2pzEew/s5JlVYIQTrBM7r4682J0u9w6Zvs9TnssU D+/Csc3wGNPdtqbUgSTQgFlSluMCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO5jcVrAmlv25ZHMFdY2wgK3BVoBMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzM2MGI5YTg3LTgwNTgtNDY2Zi1iNGE5LWE3NzdiNDY4MWFlMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zNjBiOWE4 Ny04MDU4LTQ2NmYtYjRhOS1hNzc3YjQ2ODFhZTEvMC9FRTYzNzE1QUMwOUE1QkY2 RTU5MUNDMTVENjM2QzIwMkI3MDU1QTAxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZxJyMA0GCSqGSIb3DQEBCwUAA4IBAQApu+CBjdh45ezCleSCmr5h7WxPcO74 zA7Xu0tb4zPw3V+92NTvtJILUFyinaXrrlS62jd0LqL+NykLZfMWQCUavQp+U5Zf UERNeRmtBwrtTBmQ9Z3NVD+in9DTfgCSrdw+9s5JQyvvqzdqzR1loIXj2JGrbLIs M0oSsWPNbF4lgbPag4beXRt9d4JzwkYFTD3jC4XPmJD51Pf4Zk5CPQ/uvjKk5MGC tU7h52HJt4x+1Dguj/NuKNu4sZ6tjchvmaQCPQ3IJHqAq4B5X/tBXeeyoH2KwptQ 4yCsMHVvRdM733YUxbuOPQH6/M7LhQCzZ6GAG/3MP952xmeOnQC10EBx -----END CERTIFICATE-----Generated at Tue May 12 22:15:44 2026 by rpki-client