$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer File: EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer (raw, json) Hash identifier: JkQvwDlKhFWlIx/v4E4YsDUy70T/ehb35MiZSYp2XEo= Subject key identifier: EA:1F:A0:A5:CF:DA:8B:5A:6F:64:2F:58:87:FD:67:22:D7:53:10:0D Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 0C759E5A868EB5F9A1DCDE1D92C9B0AA9A11A8A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft caRepository: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 00:30:06 +0000 Certificate not after: Sun 02 May 2027 00:35:06 +0000 Subordinate resources: IP: 160.187.196.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:75:9e:5a:86:8e:b5:f9:a1:dc:de:1d:92:c9:b0:aa:9a:11:a8:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 00:30:06 2026 GMT Not After : May 2 00:35:06 2027 GMT Subject: CN=EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f3:60:fb:7d:d5:97:6a:02:7a:52:5f:91:b3: c4:e7:0d:42:90:ca:f7:90:16:76:9c:92:a7:dd:93: 4f:0b:e6:63:11:11:3c:76:4a:5b:3c:ab:47:4e:1e: d0:36:bc:34:7f:19:45:8c:13:4c:56:5f:b0:b7:53: ce:19:71:b6:82:7a:44:fb:fc:4d:19:ee:29:da:82: 74:85:f8:44:e8:4f:39:3b:0a:6d:e1:bd:11:ed:a2: 5a:ef:28:3a:52:16:89:95:00:89:3c:96:fe:7d:2d: c6:ec:47:da:17:c6:17:13:d2:d3:3f:37:a8:9e:82: 0e:d4:33:45:eb:3e:92:bc:67:95:90:6a:1e:36:0f: d5:20:2a:87:d6:a3:62:da:be:35:d4:c9:1a:49:69: 59:4e:04:f7:24:61:3a:95:8f:18:5f:9a:4d:f1:c9: e8:1f:7c:2f:87:99:01:bc:35:29:61:ad:71:35:28: 72:16:25:cc:00:cd:0a:7d:0a:ef:ac:f6:31:78:83: 8d:19:5c:6b:d8:3f:09:5e:6f:e0:70:48:d6:bf:6a: 0d:90:f0:f1:61:77:28:82:1b:27:1b:75:4a:f2:88: 75:9d:be:19:ea:ee:9e:5e:47:92:3e:cc:23:0c:69: 71:81:ef:62:03:58:10:bc:69:39:f2:6b:f8:eb:72: 7d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EA:1F:A0:A5:CF:DA:8B:5A:6F:64:2F:58:87:FD:67:22:D7:53:10:0D X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.196.0/24 Signature Algorithm: sha256WithRSAEncryption 42:ad:cd:c0:70:54:df:cb:a7:3c:2d:55:2f:8e:73:ce:c7:49: 55:b3:6c:66:3c:71:b0:cf:6d:2e:8e:d3:f9:e8:70:57:bd:5a: 25:88:ce:a8:2a:bd:0d:90:5f:34:7b:3b:cb:9f:7f:a0:06:ef: 28:3e:dd:9d:f2:a0:67:10:55:29:35:b2:fd:dc:00:f1:1e:3f: 3c:69:49:6b:18:28:2b:ae:04:79:c3:0b:da:0d:41:80:18:9a: 7a:a6:f9:93:09:13:2d:9d:fb:7e:b0:1c:d0:63:06:fb:90:58: 90:da:e0:20:61:1e:43:7d:bf:c0:bc:3b:ba:1d:e2:a9:60:ea: c4:46:75:e6:ed:3d:9b:30:48:97:de:a6:73:5d:c9:8f:f5:5e: c0:9c:89:12:51:2f:6b:7b:4b:a9:ae:13:20:e9:72:26:42:0b: c0:03:61:11:a8:96:9e:32:63:f0:82:1b:c9:ba:81:a3:ee:50: f0:21:19:36:6d:71:e8:1d:85:16:83:9c:65:20:40:ee:eb:21: 5e:ff:a2:d0:f5:e1:2a:74:cd:7f:69:f8:0f:04:ad:0c:73:eb: 07:b7:41:36:b7:63:3a:cc:3e:59:1b:2c:7d:1e:09:0f:bc:7f: ab:8f:31:a5:bb:65:cc:64:a7:b9:56:63:f2:52:8a:10:f8:da: d0:b1:92:64 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUDHWeWoaOtfmh3N4dksmwqpoRqKMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAwMzAwNloX DTI3MDUwMjAwMzUwNlowMzExMC8GA1UEAxMoRUExRkEwQTVDRkRBOEI1QTZGNjQy RjU4ODdGRDY3MjJENzUzMTAwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKXzYPt91ZdqAnpSX5GzxOcNQpDK95AWdpySp92TTwvmYxERPHZKWzyrR04e 0Da8NH8ZRYwTTFZfsLdTzhlxtoJ6RPv8TRnuKdqCdIX4ROhPOTsKbeG9Ee2iWu8o OlIWiZUAiTyW/n0txuxH2hfGFxPS0z83qJ6CDtQzRes+krxnlZBqHjYP1SAqh9aj Ytq+NdTJGklpWU4E9yRhOpWPGF+aTfHJ6B98L4eZAbw1KWGtcTUochYlzADNCn0K 76z2MXiDjRlca9g/CV5v4HBI1r9qDZDw8WF3KIIbJxt1SvKIdZ2+Gerunl5Hkj7M IwxpcYHvYgNYELxpOfJr+Otyfd8CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOofoKXP2otab2QvWIf9ZyLXUxANMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzRjNThmYjdjLTY3YjgtNGJjZS05NmQ5LWJlOTEyZTNmNzNkZC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80YzU4ZmI3 Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMC9FQTFGQTBBNUNGREE4QjVB NkY2NDJGNTg4N0ZENjcyMkQ3NTMxMDBELm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoLvEMA0GCSqGSIb3DQEBCwUAA4IBAQBCrc3AcFTfy6c8LVUvjnPOx0lVs2xm PHGwz20ujtP56HBXvVoliM6oKr0NkF80ezvLn3+gBu8oPt2d8qBnEFUpNbL93ADx Hj88aUlrGCgrrgR5wwvaDUGAGJp6pvmTCRMtnft+sBzQYwb7kFiQ2uAgYR5Dfb/A vDu6HeKpYOrERnXm7T2bMEiX3qZzXcmP9V7AnIkSUS9re0uprhMg6XImQgvAA2ER qJaeMmPwghvJuoGj7lDwIRk2bXHoHYUWg5xlIEDu6yFe/6LQ9eEqdM1/afgPBK0M c+sHt0E2t2M6zD5ZGyx9HgkPvH+rjzGlu2XMZKe5VmPyUooQ+NrQsZJk -----END CERTIFICATE-----Generated at Tue May 12 22:04:05 2026 by rpki-client