$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E34636B91D55DEC107F8443633FC4A24F1F386CD.cer File: E34636B91D55DEC107F8443633FC4A24F1F386CD.cer (raw, json) Hash identifier: eYJtLkMJ0Y3//0p24aKlsZVe5bh97kP6mzx0tGJntqY= Subject key identifier: E3:46:36:B9:1D:55:DE:C1:07:F8:44:36:33:FC:4A:24:F1:F3:86:CD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6CF1F0C735339E942C810D77219A99D0C0671F59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/E34636B91D55DEC107F8443633FC4A24F1F386CD.mft caRepository: rsync://rpki-rsync.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:57:53 +0000 Certificate not after: Sun 02 May 2027 00:02:53 +0000 Subordinate resources: IP: 103.163.36.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 13:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:f1:f0:c7:35:33:9e:94:2c:81:0d:77:21:9a:99:d0:c0:67:1f:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:57:53 2026 GMT Not After : May 2 00:02:53 2027 GMT Subject: CN=E34636B91D55DEC107F8443633FC4A24F1F386CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:72:35:44:93:59:ec:25:90:df:4c:3f:b4:0b: 29:22:e9:d7:8f:b1:b9:a2:44:15:15:b4:5b:b3:7d: df:0c:3d:d1:92:1e:9d:60:e9:64:d4:03:9a:87:d2: 49:78:66:f5:b8:73:22:f4:d1:bd:a8:99:cf:5b:14: 9f:8f:90:ae:97:99:93:fd:89:0f:89:ef:e4:13:8f: 0a:03:5a:cb:a1:85:90:37:b4:7e:6a:c9:db:eb:1d: 9f:00:b2:c1:bd:45:93:e3:a6:7f:b7:f0:e7:db:34: 96:60:85:ba:d3:c8:08:93:b7:a9:d4:4d:e2:51:9b: 15:d8:0f:6e:fc:48:3a:ea:73:49:4f:77:c4:e9:dd: 92:8c:93:27:3c:d3:38:0a:20:20:25:cb:2d:e0:fb: 5a:37:5a:e6:b4:95:53:99:cc:48:23:2a:0f:a6:af: a4:08:7d:54:c7:23:dc:4f:f9:5b:ae:8a:3e:7b:c5: 9a:df:fc:9c:bb:18:1d:d8:f9:93:d0:61:67:b5:d5: ec:09:e8:87:2a:a0:56:1b:22:d5:e3:29:b3:c8:dc: db:9c:7e:cf:68:eb:ef:e1:43:57:c6:8e:c2:90:f1: 38:e2:49:92:c2:44:4e:ca:79:26:c0:0f:c7:49:58: 73:65:35:04:a6:4b:23:f5:88:04:4b:e7:a0:32:a2: 2d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E3:46:36:B9:1D:55:DE:C1:07:F8:44:36:33:FC:4A:24:F1:F3:86:CD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/E34636B91D55DEC107F8443633FC4A24F1F386CD.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.163.36.0/23 Signature Algorithm: sha256WithRSAEncryption 94:94:f8:88:4f:b1:e4:a5:2e:dd:41:90:63:37:5c:d7:70:87: b3:21:7c:36:9b:6a:4e:46:fb:bd:66:5c:0a:7d:24:03:5d:b3: 2e:22:91:5e:88:75:ff:63:83:74:01:d9:96:7d:7c:e3:1d:23: 59:26:3f:40:1f:60:f4:bf:80:05:c1:59:9b:48:1f:9c:98:2c: 7c:4a:c6:67:d1:2b:89:e5:81:b4:ab:b7:15:34:ee:ab:38:f8: 3b:b6:ee:ef:68:07:9e:3f:a8:cc:1a:00:c5:20:17:eb:63:e2: d2:d9:4b:7e:7d:b0:38:c9:94:16:8a:5c:ec:e3:c4:5d:79:67: a8:b6:05:af:78:b8:42:ee:28:63:2f:b8:1f:59:67:4a:26:1d: 57:66:2a:dc:fb:c8:06:7f:b7:db:21:b7:5f:cc:80:b7:45:52: c8:25:b1:59:06:a5:75:5e:76:35:ce:47:46:86:f8:55:57:80: be:d6:f3:a6:41:5d:dd:e8:46:23:5f:03:c0:fb:f8:d2:57:0c: 2b:48:c2:ae:6f:30:20:35:2c:cf:d9:89:3a:53:3e:20:c5:bf: 43:57:80:69:ee:d5:94:02:87:b2:3d:ca:19:4d:7b:1a:82:00: d2:c0:58:44:f0:17:5a:3c:4e:9b:4c:54:50:a9:19:f2:41:1b: 4f:7b:eb:49 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUbPHwxzUznpQsgQ13IZqZ0MBnH1kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNTc1M1oX DTI3MDUwMjAwMDI1M1owMzExMC8GA1UEAxMoRTM0NjM2QjkxRDU1REVDMTA3Rjg0 NDM2MzNGQzRBMjRGMUYzODZDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKtyNUSTWewlkN9MP7QLKSLp14+xuaJEFRW0W7N93ww90ZIenWDpZNQDmofS SXhm9bhzIvTRvaiZz1sUn4+QrpeZk/2JD4nv5BOPCgNay6GFkDe0fmrJ2+sdnwCy wb1Fk+Omf7fw59s0lmCFutPICJO3qdRN4lGbFdgPbvxIOupzSU93xOndkoyTJzzT OAogICXLLeD7Wjda5rSVU5nMSCMqD6avpAh9VMcj3E/5W66KPnvFmt/8nLsYHdj5 k9BhZ7XV7AnohyqgVhsi1eMps8jc25x+z2jr7+FDV8aOwpDxOOJJksJETsp5JsAP x0lYc2U1BKZLI/WIBEvnoDKiLUcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFONGNrkdVd7BB/hENjP8SiTx84bNMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzFiOTBhZGE2LWI3MjEtNGI1Zi05MGNhLWU4ZjRiOTc3ZDU2MS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xYjkwYWRh Ni1iNzIxLTRiNWYtOTBjYS1lOGY0Yjk3N2Q1NjEvMC9FMzQ2MzZCOTFENTVERUMx MDdGODQ0MzYzM0ZDNEEyNEYxRjM4NkNELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6MkMA0GCSqGSIb3DQEBCwUAA4IBAQCUlPiIT7HkpS7dQZBjN1zXcIezIXw2 m2pORvu9ZlwKfSQDXbMuIpFeiHX/Y4N0AdmWfXzjHSNZJj9AH2D0v4AFwVmbSB+c mCx8SsZn0SuJ5YG0q7cVNO6rOPg7tu7vaAeeP6jMGgDFIBfrY+LS2Ut+fbA4yZQW ilzs48RdeWeotgWveLhC7ihjL7gfWWdKJh1XZirc+8gGf7fbIbdfzIC3RVLIJbFZ BqV1XnY1zkdGhvhVV4C+1vOmQV3d6EYjXwPA+/jSVwwrSMKubzAgNSzP2Yk6Uz4g xb9DV4Bp7tWUAoeyPcoZTXsaggDSwFhE8BdaPE6bTFRQqRnyQRtPe+tJ -----END CERTIFICATE-----Generated at Tue May 5 17:51:12 2026 by rpki-client