$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.cer File: EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.cer (raw, json) Hash identifier: b0NHijkzNNzfN8SWQ9cTVtVTsGByoM0UApipoPwdy8A= Subject key identifier: EE:6D:4D:4B:3B:79:AA:5A:B8:BE:ED:98:3C:15:50:3C:9A:34:36:63 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 10D5EF384080D7AF64D6E194D02AEBB8DEA1308D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:56:44 +0000 Certificate not after: Sun 02 May 2027 00:01:44 +0000 Subordinate resources: IP: 103.169.0.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d5:ef:38:40:80:d7:af:64:d6:e1:94:d0:2a:eb:b8:de:a1:30:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:56:44 2026 GMT Not After : May 2 00:01:44 2027 GMT Subject: CN=EE6D4D4B3B79AA5AB8BEED983C15503C9A343663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a3:e9:0f:19:34:70:79:40:54:26:eb:e3:96: 91:60:2c:db:43:46:c5:06:8f:31:15:fc:d9:66:bd: a9:dd:7a:b4:67:e6:1e:a8:80:34:ad:d7:c9:69:c7: 4b:f0:a8:1f:69:7e:85:c7:88:a0:87:4d:c8:64:03: 72:09:ee:44:9b:eb:97:1b:95:f9:54:3d:4a:6a:98: 60:b4:ac:be:39:66:b2:ba:44:ac:64:06:d1:76:74: 8b:7f:7a:69:95:48:e2:e8:87:bf:f6:b3:4b:7e:13: 37:96:d5:79:f1:9e:26:8d:25:f7:3e:d2:8a:85:0b: fc:1d:b2:5b:ee:69:33:9e:34:e6:15:43:d6:b0:1b: b0:c1:aa:06:69:25:1a:66:23:4f:ad:c6:2e:84:cb: 56:95:b9:56:2f:cb:95:0e:85:fc:2a:24:5b:27:0d: 3e:31:19:45:19:57:2a:b3:30:b7:3a:76:9e:e9:d2: 19:d4:ce:12:ab:37:bc:45:47:a0:6c:9f:00:c8:06: 09:7a:3c:35:ee:48:24:c0:f9:93:dd:34:fe:94:8e: 94:ee:d3:b6:ed:4b:9c:a7:0f:c5:7d:39:52:63:73: 35:f2:95:3b:27:83:b4:ed:26:82:b0:d7:fc:be:78: ee:42:f9:3d:a7:1e:0b:01:b1:68:45:03:a7:7d:ee: 43:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EE:6D:4D:4B:3B:79:AA:5A:B8:BE:ED:98:3C:15:50:3C:9A:34:36:63 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/EE6D4D4B3B79AA5AB8BEED983C15503C9A343663.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.0.0/23 Signature Algorithm: sha256WithRSAEncryption 08:5d:bc:27:cc:65:3d:00:cb:97:71:55:8d:97:5d:de:f8:85: 89:dc:8b:d4:14:9d:f6:81:ec:83:8f:f8:c1:e5:8d:c8:e2:3c: 5e:d5:54:1b:78:b5:ad:6f:04:b2:8b:f8:f0:e5:18:18:fa:31: 6d:c8:0a:26:c7:10:a2:fa:f9:93:63:ab:5e:8f:71:d5:b3:e1: c2:2a:f0:2e:d9:35:67:91:ca:c1:3f:80:02:0f:38:81:0e:cf: f4:32:bc:a3:2e:5b:db:8e:87:3d:2e:9c:9a:36:39:ed:97:8c: 9a:e4:64:a4:cd:d9:fa:d6:e8:a2:c6:cb:dd:2e:1c:31:75:45: b9:fe:b9:4e:f1:a3:de:f8:62:0e:cb:ad:0d:8f:29:99:19:9b: c5:04:b7:9f:e2:c3:d3:0e:29:0a:17:a3:a3:87:94:07:9b:86: 0c:10:23:5a:1d:44:fd:bd:48:91:e6:54:80:59:05:76:79:1d: 30:1c:4a:44:4f:8d:c9:04:64:8a:d2:ca:08:67:14:52:60:f5: 09:3a:a2:39:30:1f:2e:f1:96:0a:1b:cb:94:bb:57:41:05:82: 3b:ed:e7:c1:73:d3:7f:23:46:ad:b2:b2:cb:d5:cb:78:a4:86: 47:2f:d7:21:b3:14:7a:bf:fd:aa:d5:9a:82:fd:dd:ac:a4:e8: 90:a0:d7:e3 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUENXvOECA169k1uGU0CrruN6hMI0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTY0NFoX DTI3MDUwMjAwMDE0NFowMzExMC8GA1UEAxMoRUU2RDRENEIzQjc5QUE1QUI4QkVF RDk4M0MxNTUwM0M5QTM0MzY2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJej6Q8ZNHB5QFQm6+OWkWAs20NGxQaPMRX82Wa9qd16tGfmHqiANK3XyWnH S/CoH2l+hceIoIdNyGQDcgnuRJvrlxuV+VQ9SmqYYLSsvjlmsrpErGQG0XZ0i396 aZVI4uiHv/azS34TN5bVefGeJo0l9z7SioUL/B2yW+5pM5405hVD1rAbsMGqBmkl GmYjT63GLoTLVpW5Vi/LlQ6F/CokWycNPjEZRRlXKrMwtzp2nunSGdTOEqs3vEVH oGyfAMgGCXo8Ne5IJMD5k900/pSOlO7Ttu1LnKcPxX05UmNzNfKVOyeDtO0mgrDX /L547kL5PaceCwGxaEUDp33uQw0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO5tTUs7eapauL7tmDwVUDyaNDZjMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzFhM2NjMmMxLTE0NmMtNDhhOS1iMDAzLTdiZDgzODIyMDg0ZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xYTNjYzJj MS0xNDZjLTQ4YTktYjAwMy03YmQ4MzgyMjA4NGQvMC9FRTZENEQ0QjNCNzlBQTVB QjhCRUVEOTgzQzE1NTAzQzlBMzQzNjYzLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6kAMA0GCSqGSIb3DQEBCwUAA4IBAQAIXbwnzGU9AMuXcVWNl13e+IWJ3IvU FJ32geyDj/jB5Y3I4jxe1VQbeLWtbwSyi/jw5RgY+jFtyAomxxCi+vmTY6tej3HV s+HCKvAu2TVnkcrBP4ACDziBDs/0MryjLlvbjoc9LpyaNjntl4ya5GSkzdn61uii xsvdLhwxdUW5/rlO8aPe+GIOy60NjymZGZvFBLef4sPTDikKF6Ojh5QHm4YMECNa HUT9vUiR5lSAWQV2eR0wHEpET43JBGSK0soIZxRSYPUJOqI5MB8u8ZYKG8uUu1dB BYI77efBc9N/I0atsrLL1ct4pIZHL9chsxR6v/2q1ZqC/d2spOiQoNfj -----END CERTIFICATE-----Generated at Tue May 12 22:10:31 2026 by rpki-client