$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.cer File: 2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.cer (raw, json) Hash identifier: z56zfGT2batDhszYN2WyRg7/CrLkaNAHv4B1ubfRfGY= Subject key identifier: 2E:6D:1F:78:4F:D9:72:18:83:D0:85:BA:15:F2:1C:AD:F4:D9:D5:E9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2961F236BB563D0C883BB09257D432681235DC70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.mft caRepository: rsync://rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:56:32 +0000 Certificate not after: Sun 02 May 2027 02:01:32 +0000 Subordinate resources: IP: 103.166.34.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 05:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:61:f2:36:bb:56:3d:0c:88:3b:b0:92:57:d4:32:68:12:35:dc:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 01:56:32 2026 GMT Not After : May 2 02:01:32 2027 GMT Subject: CN=2E6D1F784FD9721883D085BA15F21CADF4D9D5E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c6:31:33:40:36:00:0e:49:4a:9b:c7:06:b3: 9d:6b:2c:76:2c:3d:3b:f8:ef:27:41:33:d7:04:7f: 9a:e3:43:93:cc:66:e0:3a:2b:04:f9:25:57:06:52: 6e:6e:a5:56:6e:f6:54:39:14:7e:50:35:97:48:6e: 33:60:37:a2:49:23:f1:3f:66:76:43:82:68:7b:a4: ee:9e:5b:02:eb:32:ae:ce:2f:2a:eb:46:5b:39:18: 41:0a:20:f6:d5:b2:30:4a:14:14:92:1c:c8:7a:dc: fb:9d:8d:ca:49:ec:e8:ab:40:30:f6:3d:10:30:82: e9:e1:c7:d9:50:27:93:ea:f8:c6:f1:47:80:dd:91: 54:01:5d:bf:49:09:8b:65:0b:ca:6c:d9:b4:45:0e: f6:d3:64:f1:af:ac:24:79:38:d3:b6:86:6f:7d:ac: 3b:47:54:f9:2b:0f:b0:4f:84:00:c8:48:58:4f:77: a3:23:05:68:1f:ea:bb:51:fc:e0:4d:eb:17:28:15: e9:67:7b:01:34:b0:71:1a:6a:52:7e:66:92:92:f2: f7:4d:6d:b8:f8:cd:9d:fc:d0:d1:77:bd:cc:e1:46: 96:8e:09:13:44:1c:45:9e:62:95:89:63:d1:3b:fb: 42:58:79:c0:1c:2f:40:74:23:ff:18:bb:26:59:ae: 9f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:6D:1F:78:4F:D9:72:18:83:D0:85:BA:15:F2:1C:AD:F4:D9:D5:E9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.34.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:55:f7:2a:3e:f1:b9:93:97:0c:40:17:99:5b:8c:42:35:a7: 99:17:23:9d:0a:7b:94:9c:34:86:34:ce:3e:d0:e1:97:16:f2: 70:af:ec:41:7f:20:94:cf:7c:b7:4b:bb:3b:78:21:d4:45:2f: 42:e8:42:77:86:65:60:bc:91:e5:3c:eb:5a:d5:2c:9e:12:96: 2f:f8:60:93:ee:c1:d8:81:1d:6d:f8:f0:89:7f:c8:da:58:e2: db:18:1c:76:5b:99:73:41:20:cd:38:0f:a3:35:7e:3f:61:51: 81:d5:b4:92:18:bd:79:34:e3:76:36:99:7b:f0:b3:09:7d:e7: b9:b4:c0:de:fa:51:13:94:eb:e6:1e:c1:05:3d:d1:c1:fa:d1: ed:33:ee:5d:9d:83:92:38:f1:78:9f:aa:93:a0:a6:0a:b6:e8: 21:1f:55:13:7f:fe:01:41:c9:36:73:b0:61:18:3a:e4:76:a6: f1:a0:dd:22:7b:04:48:12:9d:7d:4a:0d:37:56:37:1f:cc:3f: 65:1c:d9:f4:e9:e1:a1:16:1b:cc:7a:7d:a7:e3:12:2b:ff:ac: bf:f1:c8:c9:0e:eb:fc:a8:1d:ec:94:4a:ae:0a:a6:2b:d2:49: e8:d6:a6:14:9a:79:f9:15:4d:14:c8:83:83:5e:bc:ba:14:94: b8:f7:0f:cd -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUKWHyNrtWPQyIO7CSV9QyaBI13HAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAxNTYzMloX DTI3MDUwMjAyMDEzMlowMzExMC8GA1UEAxMoMkU2RDFGNzg0RkQ5NzIxODgzRDA4 NUJBMTVGMjFDQURGNEQ5RDVFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKLGMTNANgAOSUqbxwaznWssdiw9O/jvJ0Ez1wR/muNDk8xm4DorBPklVwZS bm6lVm72VDkUflA1l0huM2A3okkj8T9mdkOCaHuk7p5bAusyrs4vKutGWzkYQQog 9tWyMEoUFJIcyHrc+52Nykns6KtAMPY9EDCC6eHH2VAnk+r4xvFHgN2RVAFdv0kJ i2ULymzZtEUO9tNk8a+sJHk407aGb32sO0dU+SsPsE+EAMhIWE93oyMFaB/qu1H8 4E3rFygV6Wd7ATSwcRpqUn5mkpLy901tuPjNnfzQ0Xe9zOFGlo4JE0QcRZ5ilYlj 0Tv7Qlh5wBwvQHQj/xi7Jlmun1ECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC5tH3hP2XIYg9CFuhXyHK302dXpMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2QwNDRmOTE4LTkzMzItNDI1Ny1iNTEwLTM4MWM4NTkwZmY1NC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kMDQ0Zjkx OC05MzMyLTQyNTctYjUxMC0zODFjODU5MGZmNTQvMC8yRTZEMUY3ODRGRDk3MjE4 ODNEMDg1QkExNUYyMUNBREY0RDlENUU5Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6YiMA0GCSqGSIb3DQEBCwUAA4IBAQBNVfcqPvG5k5cMQBeZW4xCNaeZFyOd CnuUnDSGNM4+0OGXFvJwr+xBfyCUz3y3S7s7eCHURS9C6EJ3hmVgvJHlPOta1Sye EpYv+GCT7sHYgR1t+PCJf8jaWOLbGBx2W5lzQSDNOA+jNX4/YVGB1bSSGL15NON2 Npl78LMJfee5tMDe+lETlOvmHsEFPdHB+tHtM+5dnYOSOPF4n6qToKYKtughH1UT f/4BQck2c7BhGDrkdqbxoN0iewRIEp19Sg03VjcfzD9lHNn06eGhFhvMen2n4xIr /6y/8cjJDuv8qB3slEquCqYr0kno1qYUmnn5FU0UyIODXry6FJS49w/N -----END CERTIFICATE-----Generated at Fri May 8 07:29:35 2026 by rpki-client