$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.cer File: EB1DCD321031C0290E00088B308F6E37F658F0F0.cer (raw, json) Hash identifier: xyQqOC4qJ3yc/lmlfDquvdZR2Ur1DPgqLo6XHptRJ0w= Subject key identifier: EB:1D:CD:32:10:31:C0:29:0E:00:08:8B:30:8F:6E:37:F6:58:F0:F0 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 4CC8FF05F239F6FA8F933B362BDF443239A9CE22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft caRepository: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:03:05 +0000 Certificate not after: Sun 02 May 2027 01:08:05 +0000 Subordinate resources: IP: 157.66.125.0/24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:c8:ff:05:f2:39:f6:fa:8f:93:3b:36:2b:df:44:32:39:a9:ce:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:03:05 2026 GMT Not After : May 2 01:08:05 2027 GMT Subject: CN=EB1DCD321031C0290E00088B308F6E37F658F0F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:34:bf:d3:1c:b8:26:72:0d:99:29:22:bf:62: af:75:d7:b9:b2:d2:fb:23:9d:16:58:54:0e:8f:89: 33:00:46:0d:1e:18:28:38:c0:e2:f2:48:9e:05:b1: d4:e8:8b:95:de:ec:a4:f6:9a:ac:05:a7:83:fd:65: 06:7f:8d:97:b9:b7:da:ef:06:30:a3:4c:65:11:28: f3:a5:5b:2c:e0:0d:a5:41:10:ac:28:7c:c6:f9:e6: e1:01:f8:c7:89:77:2d:fd:62:44:99:ca:64:cd:88: 50:b5:c7:41:2a:b7:f4:22:9e:62:69:d3:5f:7f:68: ed:46:5b:5e:5b:e4:3d:00:04:c8:f2:d8:15:de:ed: 47:44:74:b7:42:2d:2e:55:81:e5:35:b8:42:bd:72: 92:cc:05:31:e2:09:e1:af:3b:83:10:7a:45:76:13: 5c:05:0f:51:96:f2:42:45:66:02:4a:30:26:db:ff: e8:6d:58:1e:7f:5c:e8:d5:43:1c:d7:be:c7:65:79: b8:99:a5:bc:b2:cc:3f:84:55:e6:70:b7:6d:69:da: cd:22:5f:e9:23:1b:33:bc:33:96:ab:b8:02:81:fb: 92:fc:40:d2:23:95:15:ac:a3:47:de:20:33:d1:24: b6:41:21:1f:14:e6:b1:40:45:a3:ec:f3:a7:7c:a1: 26:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:1D:CD:32:10:31:C0:29:0E:00:08:8B:30:8F:6E:37:F6:58:F0:F0 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.125.0/24 Signature Algorithm: sha256WithRSAEncryption 72:e6:b4:e9:1e:fc:2d:f0:7d:cf:9f:1a:5d:b0:f9:dd:9f:68: 14:63:64:3a:4b:ad:08:9f:cb:71:23:53:e8:d5:53:66:20:2b: 4e:f2:9d:0a:d6:1f:d5:9d:f9:fd:47:c2:32:58:e1:fc:b2:6a: 3a:48:4c:36:44:b2:0b:55:0c:58:e4:df:e9:5b:e7:cd:ab:6d: 62:17:8a:c5:50:bf:af:f8:67:e4:9d:d9:8d:4e:3f:bf:d6:0d: 7c:5a:2a:6f:b5:4d:44:20:d8:25:e7:cf:6f:06:75:dc:37:06: cc:4e:ec:12:e4:ae:91:d6:e4:cd:3b:60:d2:04:9c:15:d5:53: 60:3e:93:22:3a:6f:45:11:c9:f7:c4:d2:02:81:80:69:6e:9b: 14:49:ce:51:7d:27:68:a7:64:f6:4f:9d:45:e9:26:37:d2:c6: 39:5d:e0:5d:e4:95:c9:6b:ab:1b:91:83:41:a4:a7:e4:94:65: 40:87:c0:d8:24:6e:f1:28:b8:37:3f:78:06:55:7e:0b:ef:11: 25:e3:86:5a:39:5a:4b:7d:e3:9c:ec:00:f8:d0:f3:82:56:f2: f2:be:f9:11:f1:3c:bb:8e:fe:cd:d1:a2:ca:8b:f2:47:78:43: 6e:38:ca:72:c8:11:ea:15:c4:8a:01:3c:f6:26:15:fc:8b:c6: 8f:c0:07:1c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUTMj/BfI59vqPkzs2K99EMjmpziIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxMDMwNVoX DTI3MDUwMjAxMDgwNVowMzExMC8GA1UEAxMoRUIxRENEMzIxMDMxQzAyOTBFMDAw ODhCMzA4RjZFMzdGNjU4RjBGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALI0v9McuCZyDZkpIr9ir3XXubLS+yOdFlhUDo+JMwBGDR4YKDjA4vJIngWx 1OiLld7spPaarAWng/1lBn+Nl7m32u8GMKNMZREo86VbLOANpUEQrCh8xvnm4QH4 x4l3Lf1iRJnKZM2IULXHQSq39CKeYmnTX39o7UZbXlvkPQAEyPLYFd7tR0R0t0It LlWB5TW4Qr1ykswFMeIJ4a87gxB6RXYTXAUPUZbyQkVmAkowJtv/6G1YHn9c6NVD HNe+x2V5uJmlvLLMP4RV5nC3bWnazSJf6SMbM7wzlqu4AoH7kvxA0iOVFayjR94g M9EktkEhHxTmsUBFo+zzp3yhJnsCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOsdzTIQMcApDgAIizCPbjf2WPDwMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzdjZjAxZWM2LThlODktNDAyYS05MGM3LTUwYzZmMTRjZDI0Mi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby83Y2YwMWVj Ni04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMC9FQjFEQ0QzMjEwMzFDMDI5 MEUwMDA4OEIzMDhGNkUzN0Y2NThGMEYwLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAnUJ9MA0GCSqGSIb3DQEBCwUAA4IBAQBy5rTpHvwt8H3PnxpdsPndn2gUY2Q6 S60In8txI1Po1VNmICtO8p0K1h/Vnfn9R8IyWOH8smo6SEw2RLILVQxY5N/pW+fN q21iF4rFUL+v+GfkndmNTj+/1g18WipvtU1EINgl589vBnXcNwbMTuwS5K6R1uTN O2DSBJwV1VNgPpMiOm9FEcn3xNICgYBpbpsUSc5RfSdop2T2T51F6SY30sY5XeBd 5JXJa6sbkYNBpKfklGVAh8DYJG7xKLg3P3gGVX4L7xEl44ZaOVpLfeOc7AD40POC VvLyvvkR8Ty7jv7N0aLKi/JHeENuOMpyyBHqFcSKATz2JhX8i8aPwAcc -----END CERTIFICATE-----Generated at Tue May 12 22:47:30 2026 by rpki-client