$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer File: EBA1F4874C4867D2CAA214867052E9413088CD22.cer (raw, json) Hash identifier: isJwMhaBJFqJ+h0lFfTdvJPZHfeSHpz7uLe5RLvidZo= Subject key identifier: EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 46E8E9CC34738C7B8F4FD548918721FC6A7FC792 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Manifest: rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft caRepository: rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 01:54:11 +0000 Certificate not after: Sun 02 May 2027 01:59:11 +0000 Subordinate resources: IP: 160.19.206.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:e8:e9:cc:34:73:8c:7b:8f:4f:d5:48:91:87:21:fc:6a:7f:c7:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 01:54:11 2026 GMT Not After : May 2 01:59:11 2027 GMT Subject: CN=EBA1F4874C4867D2CAA214867052E9413088CD22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:40:6b:8c:8a:53:5d:5e:4a:dc:75:8c:af:d3: 75:1a:ae:88:17:3f:21:ea:c4:43:75:e1:01:c3:2a: 94:74:32:26:8f:4f:cf:e4:16:a6:be:76:bd:d8:49: c8:c4:79:8b:96:81:74:cb:4e:01:3d:17:71:5e:7d: 32:a5:44:ca:7a:58:fc:e1:46:2b:2f:b7:f5:07:b1: 12:2d:9d:4c:5a:fd:16:e6:13:29:b5:e7:fe:09:ad: 4b:fa:89:93:60:27:d2:e1:6a:5f:85:64:52:5e:84: d0:39:7d:e3:d7:45:cb:88:e7:3f:69:db:27:08:45: 5e:da:91:88:12:4e:fb:0d:2f:fd:02:43:c9:80:30: fb:64:d7:c5:8a:f9:38:f6:83:dd:42:0b:5f:fb:60: f2:c1:0c:16:66:60:90:12:a8:9d:0c:ea:b4:9c:45: 6f:12:2a:61:ec:50:3f:7d:b8:88:b9:c9:26:ae:e2: 62:72:0f:eb:d6:0a:05:f1:a6:b0:68:9d:cb:ad:2a: 94:86:f0:7a:8d:7d:19:6d:f8:89:55:cb:f2:ae:e6: 57:cf:94:27:fb:0f:5e:20:46:c3:b5:00:40:e6:6f: 38:6b:60:bd:6d:47:a3:8f:82:a7:cb:05:86:67:01: 63:c8:5a:73:9f:2d:ab:57:c4:4d:af:cd:71:a7:e9: ab:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.206.0/23 Signature Algorithm: sha256WithRSAEncryption 81:9f:ce:a6:ef:b7:cf:80:c0:ca:c3:4c:44:9a:f4:15:82:39: 95:81:13:84:86:bf:75:bf:06:a8:8c:78:db:9c:b3:e0:cc:92: 7d:fe:30:3e:d6:98:bb:7f:b2:5c:0e:6d:19:05:52:14:30:d5: 0d:08:3f:64:f9:e9:c7:53:f1:95:6b:c2:f3:d1:f5:e7:4c:8f: 6d:cf:ee:33:97:9b:2b:a0:e5:5a:cc:24:52:39:81:58:fb:97: ea:28:f9:54:07:13:2d:64:ac:3b:3f:5a:bd:cc:2a:6c:ef:5a: 31:e0:89:a2:f7:a2:56:10:af:bc:72:50:f3:2d:21:f7:2e:41: 66:52:af:3a:46:50:12:bc:87:1d:5a:a9:db:3f:d7:d7:85:3b: 4e:f4:34:5a:0f:26:83:44:90:36:58:27:fc:88:f1:a2:d8:66: 1a:a2:84:ed:4b:e4:ba:a7:9f:be:81:33:63:0c:5c:71:c0:7c: 98:d0:bc:90:09:6c:59:13:40:f9:41:cd:c5:78:3c:a7:3b:75: d3:fc:d6:63:cb:bf:f3:66:fa:0d:a3:06:94:07:42:dc:2d:c0: 79:c6:9d:17:f5:ef:92:69:30:56:15:92:98:79:3e:00:67:1d: 7f:d9:9e:1b:10:83:81:32:61:03:f8:4f:66:9a:a1:7a:07:51: 60:66:dc:58 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIURujpzDRzjHuPT9VIkYch/Gp/x5IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzAxNTQxMVoX DTI3MDUwMjAxNTkxMVowMzExMC8GA1UEAxMoRUJBMUY0ODc0QzQ4NjdEMkNBQTIx NDg2NzA1MkU5NDEzMDg4Q0QyMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMRAa4yKU11eStx1jK/TdRquiBc/IerEQ3XhAcMqlHQyJo9Pz+QWpr52vdhJ yMR5i5aBdMtOAT0XcV59MqVEynpY/OFGKy+39QexEi2dTFr9FuYTKbXn/gmtS/qJ k2An0uFqX4VkUl6E0Dl949dFy4jnP2nbJwhFXtqRiBJO+w0v/QJDyYAw+2TXxYr5 OPaD3UILX/tg8sEMFmZgkBKonQzqtJxFbxIqYexQP324iLnJJq7iYnIP69YKBfGm sGidy60qlIbweo19GW34iVXL8q7mV8+UJ/sPXiBGw7UAQOZvOGtgvW1Ho4+Cp8sF hmcBY8hac58tq1fETa/Ncafpq68CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOuh9IdMSGfSyqIUhnBS6UEwiM0iMB8GA1UdIwQYMBaAFH30 NJU0RBrxGmXd01iPdNxZwtNiMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83 REY0MzQ5NTM0NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEw bFRSRUd2RWFaZDNUV0k5MDNGbkMwMkkuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2NiMmE5MTZhLWFkMjItNDk3OS1iZTQzLTk1MWM3NmYyZjkyMC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9jYjJhOTE2 YS1hZDIyLTQ5NzktYmU0My05NTFjNzZmMmY5MjAvMC9FQkExRjQ4NzRDNDg2N0Qy Q0FBMjE0ODY3MDUyRTk0MTMwODhDRDIyLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBoBPOMA0GCSqGSIb3DQEBCwUAA4IBAQCBn86m77fPgMDKw0xEmvQVgjmVgROE hr91vwaojHjbnLPgzJJ9/jA+1pi7f7JcDm0ZBVIUMNUNCD9k+enHU/GVa8Lz0fXn TI9tz+4zl5sroOVazCRSOYFY+5fqKPlUBxMtZKw7P1q9zCps71ox4Imi96JWEK+8 clDzLSH3LkFmUq86RlASvIcdWqnbP9fXhTtO9DRaDyaDRJA2WCf8iPGi2GYaooTt S+S6p5++gTNjDFxxwHyY0LyQCWxZE0D5Qc3FeDynO3XT/NZjy7/zZvoNowaUB0Lc LcB5xp0X9e+SaTBWFZKYeT4AZx1/2Z4bEIOBMmED+E9mmqF6B1FgZtxY -----END CERTIFICATE-----Generated at Tue May 12 22:45:58 2026 by rpki-client